Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, residential address, IP address, device identifiers, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, ks303.
• "Data Processor" means a third party that processes Personal Data on behalf of ks303 under a contractual arrangement (e.g., payment processors, KYC verification providers).
• "Platform" means the ks303 website at ks303.vip and all associated services, dashboards, and applications operated by ks303.
• "Player" means any individual who has registered an account on the Platform or is in the process of doing so.
• "KYC" means Know Your Customer — the identity and age verification process applied by ks303 before processing withdrawal requests.

Data Controller

2.1 ks303 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, ks303 is responsible for determining how and why your Personal Data is processed.

2.2 ks303 operates as an internationally licensed offshore online gaming platform. While our primary target market includes English-preference players across Indonesia — including major cities such as Jakarta, Surabaya, Bandung, Medan, Bali, and Yogyakarta — the Platform is accessible to eligible players in other jurisdictions as well.

2.3 For all data-related enquiries, including access requests, erasure requests, and complaints, contact the ks303 Data Protection team at [email protected].

Data We Collect

3.1 ks303 collects Personal Data from you in three principal ways: data you provide directly, data generated automatically by your use of the Platform, and data received from third-party service providers.

3.1 Data You Provide Directly

This includes information you submit when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion:

• Full legal name and date of birth;
• Residential address (city, province — e.g., DKI Jakarta, Jawa Barat, Bali);
• Email address and, where provided, mobile phone number;
• Government-issued identity document details (KTP number, passport number, or driver's licence number) submitted during KYC;
• Bank account or e-wallet details used for deposits and withdrawals (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja account numbers);
• Any additional documentation submitted in response to a ks303 compliance request.

3.2 Data Generated Automatically

When you access or use the Platform, certain technical data is collected automatically by our servers and analytics systems:

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and navigation paths within the Platform;
• Game sessions played, bet amounts, game outcomes, and wagering history;
• Deposit and withdrawal transaction logs;
• Cookie identifiers and similar tracking technology data (see Section 9).

3.3 Data Received from Third Parties

ks303 may receive Personal Data about you from trusted third-party service providers in the following circumstances:

• Identity verification providers who confirm the authenticity of KYC documents you submit;
• Payment processors who confirm the status and ownership of the IDR bank account or e-wallet used for a transaction;
• Fraud prevention and anti-money-laundering screening agencies that cross-reference your details against watch lists or sanctions databases;
• Responsible gaming databases, where a Player has registered a self-exclusion on a third-party platform and that exclusion is flagged to ks303.

Purpose & Legal Basis for Processing

4.1 ks303 processes your Personal Data only where there is a lawful basis for doing so. The table below summarises the primary purposes for which we process Personal Data and the corresponding legal basis for each:

4.2 Promotional Communications. ks303 will only send you direct marketing communications if you have actively opted in to receive them during registration or through your account dashboard settings. You may withdraw your consent and unsubscribe from marketing emails at any time by updating your notification preferences in the account dashboard or by contacting [email protected]. Withdrawal of consent for marketing does not affect your ability to use the Platform.

4.3 Legitimate Interest Assessments. Where ks303 relies on legitimate interest as the legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. Details of these assessments are available upon request.

Sharing Your Data

5.1 ks303 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. We share Personal Data only in the limited circumstances described below.

5.1 Service Providers (Data Processors)

ks303 engages carefully selected third-party service providers who process Personal Data on our behalf under binding data processing agreements. These providers may include:

• Payment processors and local IDR banking partners (BCA, BRI, BNI, Mandiri, and e-wallet providers including OVO, DANA, GoPay, ShopeePay, and LinkAja) — for deposit and withdrawal processing;
• KYC and identity verification providers — for document authentication and age verification;
• Fraud detection and anti-money-laundering screening services — for transaction monitoring and sanctions screening;
• Cloud infrastructure and data hosting providers — for secure storage and Platform operation;
• Customer support platform providers — for live chat and ticketing system operation;
• Game software studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, Spribe) — who may receive session tokens and anonymised player identifiers necessary to deliver game content.

All service providers are contractually required to process your data only for the specific purpose for which it was shared, to implement appropriate security measures, and to delete or return data upon termination of the service relationship.

5.2 Legal and Regulatory Authorities

ks303 may disclose Personal Data to governmental, regulatory, law enforcement, or judicial authorities where we are legally required or compelled to do so — for example, in response to a court order, regulatory investigation, or statutory reporting obligation related to anti-money-laundering or counter-terrorism financing compliance.

5.3 Business Transfers

In the event that ks303 undergoes a merger, acquisition, asset sale, or restructuring, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it, with a minimum of 14 days' advance notice.

5.4 With Your Consent

Outside of the categories above, ks303 will only share your Personal Data with third parties where you have given your explicit, informed consent for that specific sharing purpose.

International Transfers of Personal Data

6.1 ks303 operates as an internationally licensed offshore platform. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which ks303 holds its gaming licence and the locations of our cloud infrastructure providers.

6.2 Where Personal Data is transferred internationally, ks303 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual clauses with data processors that impose obligations equivalent to applicable data protection standards.

6.3 By registering an account and using the Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this section.

Retention Periods

7.1 ks303 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

7.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

7.3 Where you request deletion of your Personal Data before the end of a retention period, ks303 will honour that request to the extent permitted by law. Where legal obligations require us to retain specific data, we will inform you of the applicable retention obligation and the expected deletion date.

Security Measures

8.1 ks303 implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ks303 servers;
• Encryption at rest for all sensitive data fields stored in our databases, including identity document details and financial account numbers;
• Role-based access controls ensuring that only authorised ks303 personnel with a legitimate operational need can access Personal Data, and only to the extent necessary for their role;
• Two-factor authentication for all ks303 administrative accounts that have access to Player data systems;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• 24/7 intrusion detection and monitoring across all Platform infrastructure;
• Incident response procedures that include breach notification to affected Players within 72 hours of discovery of a data breach that poses a risk to their rights and freedoms.

8.2 Your Responsibilities. The security of your ks303 account also depends on you keeping your login credentials confidential. Use a strong, unique password for your ks303 account and enable two-factor authentication from your account security settings. Never share your password with anyone — ks303 support staff will never ask for your password through any channel.

8.3 Despite our best efforts, no data transmission over the internet and no data storage system can be guaranteed to be 100% secure. If you believe your account has been compromised, contact ks303 support immediately via live chat or at [email protected].

Cookies & Tracking Technologies

9.1 ks303 uses cookies and similar tracking technologies (including local storage and session tokens) on the Platform. This section explains what these technologies are, what we use them for, and how you can control them.

9.1 What Are Cookies?

A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to recognise your device on subsequent visits and to remember certain preferences or session information. Cookies cannot execute code or deliver viruses; they are passive data files.

9.2 Cookies Used by ks303

9.3 ks303 does not use third-party advertising cookies or retargeting pixels. We do not share cookie data with ad networks, social media platforms, or data brokers.

9.4 Managing Cookies. You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform — specifically, you will not be able to maintain a logged-in session or use the account dashboard. Functional and analytics cookies can be disabled without affecting core Platform access.

Your Rights Over Your Personal Data

10.1 Subject to applicable law and certain exceptions described below, you have the following rights in relation to the Personal Data ks303 holds about you:

• Right of Access: You may request a copy of all Personal Data ks303 holds about you, along with information about how it is processed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. For basic account information such as email address or phone number, you can update these directly in your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that ks303 delete your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. This right is subject to legal retention obligations — see Section 7.
• Right to Restrict Processing: You may request that ks303 limit the processing of your Personal Data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on ks303's legitimate interests at any time. You also have an absolute right to object to your data being used for direct marketing purposes.
• Rights Related to Automated Decision-Making: ks303 does not make fully automated decisions that produce legal or similarly significant effects about you without human review. Where automated processing is used for fraud or AML screening, a human review is applied before any material action is taken against your account.

10.2 How to Exercise Your Rights. To exercise any of the rights listed above, submit your request in writing to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. Complex requests may take up to 60 days; if so, we will notify you of the extended timeline and the reason for it.

10.3 Identity Verification for Rights Requests. To protect you against fraudulent data requests made by third parties, ks303 may ask you to verify your identity before fulfilling a data rights request. This may require you to log in to your account and confirm the request from within the account dashboard, or to provide a copy of your government-issued identity document.

Minors

11.1 The ks303 Platform is strictly for adults aged 21 and above. ks303 does not knowingly collect Personal Data from any person under the age of 21. The KYC verification process is specifically designed to confirm that all registered Players meet this age requirement before any real-money wagering or withdrawal activity is permitted.

11.2 If ks303 discovers, or has reason to believe, that a person under 21 has registered an account, we will immediately suspend that account, initiate an age verification investigation, void all wagers placed, and delete any Personal Data collected from that individual to the extent permitted by law.

11.3 If you are a parent or guardian and believe that a person under 21 in your care has accessed the ks303 Platform, please contact us immediately at [email protected]. We take underage access extremely seriously and will act promptly on any credible report.

Third-Party Links

12.1 The ks303 Platform does not contain links to third-party websites for advertising or affiliate purposes. The Platform is a self-contained environment. All navigation links on ks303.vip point to internal pages within the same domain.

12.2 Game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe) deliver game content through embedded iframes or APIs. These studios operate under their own privacy policies with respect to any data processed within the game environment itself. ks303 recommends reviewing the privacy policies of game providers if you have specific concerns about data processed within individual game titles.

Policy Amendments

13.1 ks303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

13.2 Where an amendment materially affects your rights or the way in which your Personal Data is processed, ks303 will provide at least 14 days' advance notice by displaying a prominent notice on the Platform and, where practicable, by sending an email notification to your registered email address.

13.3 Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must cease using the Platform and may request account closure by contacting [email protected].

13.4 We encourage you to review this Privacy Policy periodically to stay informed about how ks303 is protecting your data.

Contact & Complaints

14.1 For any question, concern, or request relating to this Privacy Policy or the processing of your Personal Data by ks303, please contact our Data Protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for data protection matters.
• Live Chat: Available 24/7 via your ks303 account dashboard. Average response time under 3 minutes. All times in WIB (UTC+7).

14.2 ks303 aims to resolve all privacy-related enquiries within 30 calendar days. Complex matters involving legal analysis or third-party coordination may take up to 60 days, in which case we will notify you of the extended timeframe.

14.3 Complaints. If you are not satisfied with ks303's response to a privacy enquiry or believe that your data rights have been violated, you have the right to escalate your complaint to the relevant supervisory authority in the jurisdiction in which ks303 holds its gaming licence. ks303 will cooperate fully with any investigation by a supervisory authority.