Privacy Policy

kso303 ("we", "us", "our", or "the Company") is committed to protecting the personal information of every player who registers on, visits, or otherwise interacts with the kso303 Platform at https://kso303.cam. This Privacy Policy sets out — in plain, accessible language — what personal data we collect, on what legal basis we process it, how we use and store it, with whom we may share it, and what rights you hold as a data subject.

This Policy applies to all Players, including individuals based in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, Palembang, and all other cities and regions across Indonesia. By creating an Account on the kso303 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the complete agreement between you and kso303 governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., information that can directly or indirectly identify you as an individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Platform" means the kso303 website and all associated digital services accessible at https://kso303.cam.
• "Player" or "User" means any individual who registers an Account or otherwise accesses the Platform.
• "KYC" means the Know Your Customer identity verification process kso303 is required to perform before processing withdrawals.
• "Cookies" means small data files placed on your device by the Platform that allow us to recognise your browser, maintain session state, and analyse Platform usage.
• "Third-Party Processors" means external service providers engaged by kso303 to perform specific data-processing functions on our behalf, such as payment processors (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) and fraud-prevention partners.

kso303 collects Personal Data through several channels: directly from you during registration and account management; automatically through your use of the Platform; and from trusted third-party sources where permitted. The categories of data we collect are set out below.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Indonesia, email address, and a chosen username and password.
• KYC verification documents: A copy of your Indonesian National ID Card (KTP) or passport, proof of residential address (e.g., a recent BCA, BRI, BNI, or Mandiri bank statement), and a selfie verification image as required under Clause 5 of our Terms & Conditions.
• Payment information: Bank account details (account holder name, bank name, account number) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) used to process deposits and withdrawals. kso303 does not store full card numbers or full bank credentials — payment data is tokenised and handled via third-party payment processors.
• Communications data: Any messages, support requests, complaints, or other correspondence you send to us via email at [email protected].
• Voluntary profile data: Any optional information you choose to add to your Account profile, such as a preferred display name or notification preferences.

3.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, features used, bets placed, games launched, session start and end times, and navigation paths through the Platform.
• Transaction logs: A complete record of all deposits, withdrawals, bonus claims, and wagers associated with your Account, including timestamps (recorded in WIB, UTC+7).
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Clause 7 of this Policy.

3.3 Data From Third Parties

• Payment verification: Confirmation of transaction status returned by Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Fraud and AML screening: Risk signals and identity verification results returned by third-party fraud-prevention and anti-money-laundering screening services that kso303 uses to maintain platform integrity.

kso303 uses your Personal Data only for clearly defined purposes. The table below summarises the primary purposes for which we process your data and the corresponding legal basis for each.

kso303 does not use your Personal Data to make fully automated decisions that produce significant legal effects concerning you without a human review process being available. Automated tools are used to flag suspicious activity, but any resulting account action is reviewed by a member of our compliance team before being applied.

kso303 processes your Personal Data only where a valid legal basis exists. The primary legal bases on which we rely are:

• Contractual necessity: Processing that is required to fulfil our obligations under the Terms & Conditions you accepted when registering your Account — for example, verifying your identity before processing a withdrawal, or crediting your Account after a confirmed deposit.
• Legal obligation: Processing that kso303 is required to carry out to comply with applicable laws and the requirements of our international gaming licence — including anti-money laundering (AML) checks, record-keeping obligations, and cooperation with lawful regulatory requests.
• Legitimate interest: Processing that serves kso303's genuine operational interests in a manner that does not override your fundamental rights — for example, analysing Platform usage patterns to improve our product, detecting fraud, or monitoring for problem gambling behaviour to fulfil our responsible gaming obligations.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — for example, sending you promotional emails or SMS notifications about new bonuses or Platform features. You may withdraw consent at any time without this affecting the lawfulness of any processing carried out prior to withdrawal.

kso303 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients where necessary and lawful:

• Payment processors and banking partners: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, and LinkAja receive only the minimum payment information necessary to process your specific transaction. These partners operate under their own privacy policies and applicable Indonesian financial regulations.
• Identity verification and KYC service providers: Specialist third-party KYC platforms may process your identity documents on kso303's behalf. These providers are bound by strict data-processing agreements and may not use your data for any purpose other than KYC verification for kso303.
• Fraud prevention and AML partners: Risk-screening service providers who assist kso303 in identifying and preventing fraudulent activity, money laundering, and other financial crimes. Data shared is limited to what is necessary for the screening function.
• IT and hosting infrastructure providers: Cloud hosting, server management, and cybersecurity service providers who maintain the technical infrastructure on which the Platform operates. Access to Personal Data by these providers is strictly controlled and governed by data-processing agreements.
• Regulatory and law enforcement authorities: Where kso303 is under a legal obligation to disclose Personal Data — for example, in response to a lawful court order, regulatory investigation, or anti-money laundering inquiry — we will comply with that obligation and, where legally permitted, notify you of the disclosure.
• Business successors: In the event of a merger, acquisition, or sale of all or part of kso303's business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

kso303 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your authenticated session, and understand how Players navigate our site. The categories of cookies we use are:

• Strictly necessary cookies: Essential to the basic functionality of the Platform — for example, maintaining your login session, remembering your language or currency preference, and enabling the secure checkout process for deposits. These cookies cannot be disabled without significantly impairing your experience on the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players use the Platform — which pages are most visited, where users navigate after landing on the homepage, and how long sessions typically last. This data helps kso303 improve the Platform experience. Analytics cookies are set only where you have consented to their use.
• Preference cookies: Allow the Platform to remember choices you have made — such as your preferred deposit method or notification settings — so you do not need to reconfigure them on every visit.
• Security cookies: Support kso303's fraud detection and account protection systems by identifying unusual access patterns or suspicious login activity on your Account.

Most web browsers allow you to control cookie settings through their built-in preferences panel. You can typically choose to block or delete cookies at the browser level; however, disabling strictly necessary cookies may prevent certain Platform features — including login and deposit functionality — from operating correctly.

kso303 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites for advertising purposes.

kso303 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. Our standard retention periods are:

• Active account data: Retained for the full duration of your Account being open and active on the Platform, plus a minimum of five (5) years after the Account is closed, to meet anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date the Account is closed, whichever is later, in accordance with applicable financial crime prevention regulations.
• Transaction records: All deposit, withdrawal, and wager records are retained for a minimum of five (5) years in accordance with our licensing obligations and for the resolution of any potential disputes.
• Support and communications data: Retained for three (3) years from the date of the last communication, to support ongoing dispute resolution and service quality management.
• Analytics and usage data: Anonymised or aggregated analytics data may be retained indefinitely, as it no longer constitutes Personal Data once it cannot be linked to an identifiable individual.
• Marketing consent records: Retained for as long as you remain opted-in, plus two (2) years after you withdraw consent, to maintain an auditable record of your marketing preferences.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.

kso303 implements a multi-layered approach to protecting the Personal Data of our Players. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kso303 Platform, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Sensitive Personal Data stored on our servers — including KYC documents and payment identifiers — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Role-based access control (RBAC) ensures that only authorised kso303 personnel with a clear operational need can access specific categories of Personal Data. All access events are logged.
• Two-factor authentication (2FA): Available and strongly recommended for all Player Accounts. 2FA adds a critical second layer of protection against unauthorised access.
• Regular security audits: kso303 conducts periodic internal security reviews and engages third-party penetration testing to identify and remediate potential vulnerabilities in our Platform infrastructure.
• Incident response: In the event of a data breach that poses a risk to the rights and freedoms of affected Players, kso303 will notify the relevant supervisory authority and the affected individuals within 72 hours of becoming aware of the breach, where required by applicable law.

As a data subject, you hold the following rights in relation to the Personal Data kso303 processes about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 calendar days.

• Right of access: You may request a copy of the Personal Data kso303 holds about you, together with information about how it is being used and on what legal basis.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. We may be unable to erase data that we are required to retain under our gaming licence or AML compliance obligations.
• Right to restriction of processing: In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that kso303 restricts the processing of your Personal Data rather than deleting it.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your Personal Data where kso303 relies on legitimate interest as its legal basis, unless kso303 can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The kso303 Platform is strictly for adults aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you believe that a minor has accessed the Platform and provided Personal Data, please contact us immediately at [email protected]. Upon verification, kso303 will take prompt steps to delete the relevant data and close any associated Account.

Parents and guardians in Indonesia are encouraged to make use of parental control tools available through their internet service providers and device operating systems to restrict access to online gambling platforms for minors in their household. Our Responsible Gaming page provides further guidance on protective measures.

kso303 operates under an international gaming licence, and some of the third-party service providers we engage — including hosting infrastructure and KYC verification platforms — may be located outside of Indonesia. When your Personal Data is transferred to, or processed in, a country outside Indonesia, kso303 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Indonesia.

Safeguards used for international transfers include:

• Contractual clauses that bind recipient organisations to data protection standards consistent with those described in this Privacy Policy.
• Restricting international transfers to jurisdictions with recognised adequacy decisions or equivalent data protection frameworks.
• Technical measures — including encryption in transit and at rest — that protect data regardless of where it is physically processed.

You may request further information about the specific safeguards in place for any particular international transfer by contacting our support team at [email protected].

kso303 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes to applicable law, or updates to our Platform services. The most current version of this Policy is always available at https://kso303.cam/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where a change to this Policy is material — meaning it meaningfully affects your rights or how your Personal Data is processed — kso303 will notify registered Players via the email address associated with their Account at least 14 days before the change takes effect. For minor or administrative updates that do not materially affect your rights, publication of the updated Policy on the Platform constitutes sufficient notice.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept the updated Policy, you must discontinue use of the Platform and contact [email protected] to initiate Account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please reach our support team through the following channel:

Please note that the email address above is presented as plain text only and is not a clickable link. Copy and paste the address directly into your email client when contacting us.

For further information about your rights and resp onsibilities as a kso303 player, please also review our Terms & Conditions and our Responsible Gaming policy.