Privacy Policy

1. Introduction

At xn303, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have regarding your information. This policy applies to all users of xn303 services, including visitors to our website and registered account holders.

xn303 operates as an online gaming platform serving the Indonesian market with English-language services. We collect and process personal data in accordance with international data protection standards and gaming industry regulations. We never sell or rent your personal information to third parties for marketing purposes.

By registering an account with xn303, accessing our website, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use xn303 services.

2. Information We Collect

xn303 collects various types of personal information to provide, maintain, and improve our services. The information we collect includes:

Registration and Account Information

When you register for an xn303 account, we collect:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address (street, city, postal code, province)
• Username and encrypted password
• Preferred language and currency settings

Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and ensure account security, we collect:

• Indonesian National Identity Card (KTP) or valid passport
• Proof of address documents (utility bills, bank statements, government correspondence)
• Selfie photographs holding identification documents
• Bank account details or e-wallet verification screenshots

Financial Transaction Data

When you deposit funds or request withdrawals, we collect:

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.)
• E-wallet account details (OVO, DANA, GoPay, ShopeePay)
• Transaction amounts, dates, and times
• Payment method preferences
• Transaction history and account balance information

Gaming Activity Data

We automatically collect information about your gaming activity, including:

• Games played, bet amounts, and outcomes
• Sports betting selections, stakes, odds, and results
• Lottery ticket purchases and draw results
• Session duration and frequency
• Bonus claims and wagering progress
• Win/loss statistics and payout history

Technical and Device Information

When you access xn303, we automatically collect:

• IP address and geographic location (city/region level)
• Device type, operating system, and browser information
• Screen resolution and device identifiers
• Referring website URLs and navigation paths
• Login timestamps and session data
• Cookies and similar tracking technologies (see Section 8)

Communications

We store records of communications between you and xn303, including:

• Customer support inquiries via live chat, email, or phone
• Marketing communications preferences
• Survey responses and feedback submissions
• Complaints and dispute resolution correspondence

3. How We Use Your Data

xn303 uses the personal information we collect for the following purposes:

Account Management and Service Delivery

• Creating and maintaining your xn303 account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, sports betting, lottery draws, and other gaming products
• Calculating and crediting winnings, bonuses, and loyalty rewards
• Maintaining accurate records of your account balance and transaction history

Legal Compliance and Verification

• Verifying your identity and age to ensure you meet eligibility requirements (21+ years)
• Complying with Know Your Customer (KYC) and anti-money laundering (AML) regulations
• Preventing fraud, money laundering, and other illegal activities
• Fulfilling legal obligations to gaming regulators and licensing authorities
• Responding to law enforcement requests and court orders when legally required

Security and Fraud Prevention

• Monitoring for suspicious activity, collusion, bonus abuse, and unauthorized account access
• Protecting against hacking, phishing, and other security threats
• Detecting duplicate accounts and terms violations
• Investigating disputes and resolving complaints

Responsible Gaming

• Monitoring gameplay patterns for signs of problem gambling
• Enforcing deposit limits, loss limits, and self-exclusion requests
• Providing reality check reminders and session time notifications
• Offering support resources and referrals when users show concerning behavior

Communication and Customer Support

• Responding to your inquiries, requests, and complaints
• Sending account notifications, transaction confirmations, and security alerts
• Providing updates about service changes, maintenance, and policy updates
• Delivering promotional offers and bonus notifications (with your consent)

Platform Improvement and Analytics

• Analyzing user behavior to improve website functionality and user experience
• Conducting statistical analysis and generating aggregated reports
• Testing new features, games, and services
• Optimizing performance, load times, and mobile compatibility

4. Data Sharing and Disclosure

xn303 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with trusted partners and service providers in the following circumstances:

Payment Processors

We share necessary financial information with banks and payment service providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, etc.) to process your deposits and withdrawals. These providers are bound by strict confidentiality and data protection requirements.

Game Providers

When you play games from third-party providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, etc.), we share limited data such as your username and session information to enable gameplay. Game providers process this data under their own privacy policies.

Identity Verification Services

We may use third-party identity verification services to validate your KYC documents and confirm your identity. These services access only the information necessary for verification and are contractually obligated to protect your data.

Legal and Regulatory Authorities

We disclose personal information when required by law, including:

• Compliance with court orders, subpoenas, or legal proceedings
• Responding to lawful requests from law enforcement agencies
• Reporting to gaming regulators and licensing authorities
• Fulfilling tax reporting obligations
• Protecting our legal rights and defending against legal claims

Business Transfers

In the event of a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you via email and website notice before your data is transferred and becomes subject to a different privacy policy.

5. Security Measures

xn303 employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

Encryption

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) technology—the same standard used by major financial institutions.
• Database Encryption: Personal information stored in our databases is encrypted at rest using advanced encryption algorithms.
• Password Hashing: Account passwords are hashed using industry-standard cryptographic functions and never stored in plain text.

Access Controls

• Personal data access is restricted to authorized personnel who require it to perform their job functions
• Multi-factor authentication (MFA) is required for all staff accessing sensitive systems
• Regular access audits ensure compliance with least-privilege principles
• All access to customer data is logged and monitored for suspicious activity

Infrastructure Security

• Firewalls and intrusion detection systems protect against external attacks
• Regular security audits and penetration testing by independent third parties
• Automated backups ensure data recovery in case of system failure
• DDoS protection safeguards against denial-of-service attacks

Employee Training

All xn303 employees receive regular training on data protection best practices, confidentiality obligations, and security protocols. Employees sign confidentiality agreements and are subject to disciplinary action for any privacy breaches.

Important Note: While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you of any data breach that may affect your personal information.

6. Data Retention

xn303 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, accounting, and tax obligations.

Active Accounts

For active xn303 accounts, we retain all account information, transaction records, and gaming history for the duration of your membership and for a minimum of five years after account closure, as required by gaming regulations and anti-money laundering laws.

Closed Accounts

When you close your account, we retain the following data:

• Financial records: Retained for 7 years for tax and audit purposes
• Identity documents: Retained for 5 years for regulatory compliance
• Transaction history: Retained for 7 years for legal and dispute resolution purposes
• Gaming activity logs: Retained for 5 years for regulatory reporting
• Communications: Retained for 3 years for legal protection and complaint resolution

Inactive Accounts

Accounts with no login activity for 24 consecutive months are classified as inactive. We may send reminders to the registered email address. If an account remains inactive for 36 months with zero balance, it may be closed subject to regulatory requirements.

Data Deletion

Once the retention period expires and there are no legal obligations requiring continued storage, we securely delete or anonymize your personal information. You may request early deletion of certain data categories (see Section 7: Your Privacy Rights), subject to our legal and regulatory obligations.

7. Your Privacy Rights

xn303 respects your privacy rights and provides you with control over your personal information. Depending on your jurisdiction, you may have the following rights:

Right to Access

You have the right to request a copy of the personal information we hold about you. You can view most of your account information by logging into your xn303 account. For a comprehensive data export, contact our support team.

Right to Rectification

If any personal information we hold is inaccurate or incomplete, you have the right to request corrections. You can update most account details directly through your account settings. For changes to verified information (name, date of birth), contact support with supporting documentation.

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to our legal and regulatory obligations. We must retain certain information for compliance with gaming regulations, tax laws, and anti-money laundering requirements. Data subject to retention requirements will be securely stored with restricted access until the retention period expires.

Right to Restriction of Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of your data or object to processing. During a restriction period, we will store your data but not actively process it except with your consent or for legal claims.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. This allows you to transfer your data to another service provider if desired. Contact our support team to request a data export in CSV or JSON format.

Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You can opt out of promotional emails by clicking the unsubscribe link in any marketing message or by adjusting your communication preferences in account settings.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal. Note that certain processing is necessary for us to provide services, and withdrawing consent may limit your ability to use xn303.

How to Exercise Your Rights

To exercise any of these rights, contact our Data Protection team at [email protected] with subject line "Privacy Rights Request." We will respond within 30 days and may require identity verification before processing your request.

8. Cookies and Tracking Technologies

xn303 uses cookies and similar tracking technologies to enhance your browsing experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps websites remember your preferences and activities.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for website functionality, login authentication, and session management	Session or up to 1 year
Performance Cookies	Collect anonymous data about how visitors use our site to improve performance	Up to 2 years
Functionality Cookies	Remember your preferences, language settings, and personalization choices	Up to 1 year
Analytics Cookies	Help us understand user behavior and measure campaign effectiveness	Up to 2 years

Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Note that disabling essential cookies may prevent you from using certain features of xn303. To manage cookies:

• Browser Settings: Adjust cookie preferences in your browser's privacy or security settings
• Third-Party Tools: Use browser extensions or privacy tools to block tracking cookies
• Mobile Devices: Adjust privacy settings in your device's system preferences

9. International Data Transfers

xn303 primarily serves Indonesian users but may store or process data on servers located outside Indonesia to ensure optimal performance, security, and redundancy. When we transfer your personal information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions confirming recipient countries provide sufficient data protection
• Binding corporate rules for transfers within our corporate group
• Your explicit consent where required by law

All international transfers comply with applicable data protection laws and regulations. Third-party processors handling your data are contractually obligated to maintain the same level of protection required under this Privacy Policy.

10. Children's Privacy

xn303 services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes age verification, and we require submission of government-issued identification to confirm age eligibility.

If we discover that we have inadvertently collected personal information from someone under 21, we will immediately delete that information from our systems and permanently close the associated account. Any deposits from underage accounts will be refunded, and any winnings will be forfeited.

Parents and guardians: If you believe your child has created an xn303 account or provided personal information to us, please contact our support team immediately at [email protected] so we can take appropriate action.

11. Policy Updates and Changes

xn303 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes through one or more of the following methods:

• Email notification to your registered email address
• Prominent notice on our website homepage
• Pop-up notification upon your next login
• Update to the "Last Updated" date at the top of this policy

Your continued use of xn303 services after changes to this Privacy Policy become effective constitutes your acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

For significant changes that materially affect your rights, we may require you to actively consent to the new terms before you can continue using our services.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how xn303 handles your personal information, please contact us through any of the following channels:

We take all privacy concerns seriously and are committed to resolving any issues promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority in your jurisdiction.