Privacy Policy

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, date of birth, identification number, contact details, financial account information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" refers to net303, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" refers to a third party that processes Personal Data on behalf of net303 under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.
• "KYC" (Know Your Customer) refers to the identity and address verification procedures mandated by net303's international gaming license and applicable anti-money-laundering obligations.
• "Cookies" means small text files placed on your device by the Platform for session management, preference storage, and analytics purposes.

For the purposes of this Privacy Policy, the Data Controller responsible for your Personal Data is net303, operating the online gaming platform at https://net303.beer under an internationally issued gaming license.

net303 acknowledges that a substantial portion of its registered user base is located in Indonesia, across cities including Jakarta, Surabaya, Medan, Bandung, Bali, Semarang, and Makassar. While net303 operates under international jurisdiction, we are committed to handling the Personal Data of Indonesian players with the care, transparency, and security that users of a globally operating platform are entitled to expect.

All inquiries, data subject requests, and privacy complaints may be directed to our Data Protection contact at [email protected]. We aim to acknowledge all privacy-related inquiries within 2 business days and to provide a substantive response within 14 calendar days.

net303 collects the following categories of Personal Data from registered users and, in limited circumstances, from visitors who have not yet completed registration:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, beyond what may be incidentally visible in identity documents submitted for KYC purposes. Identity documents are processed solely for age and identity verification and are not used for any other purpose.

net303 collects Personal Data through the following channels:

• Direct Submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team via live chat or email.
• Automated Technical Collection: Data collected automatically when you access the Platform, including your IP address, device identifiers, browser metadata, and session activity logs. This collection occurs regardless of whether you are logged in to an account.
• Transaction Records: Data generated when you initiate a financial transaction, including deposit confirmations from partner banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Third-Party Verification Partners: In certain cases, net303 may receive identity verification data from licensed third-party KYC service providers engaged to assist in fulfilling our compliance obligations. These providers operate under strict data processing agreements with net303.
• Cookies and Tracking Technologies: Session cookies and analytics tools collect aggregated usage data as described in Section 11 of this Policy.

net303 processes your Personal Data for the following defined purposes only:

1. Account Registration and Management: To create, maintain, and administer your net303 account, including verifying your identity, managing your balance, and processing your gaming activity.
2. KYC and Regulatory Compliance: To fulfill our obligations under applicable anti-money-laundering (AML) regulations and the conditions of our international gaming license, including verifying that all registered users are at least 21 years of age.
3. Financial Transactions: To process deposits and withdrawals via your nominated bank account or e-wallet, reconcile transaction records, and investigate disputed transactions.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, collusion, money laundering, and other violations of our Terms & Conditions.
5. Customer Support: To respond to inquiries, resolve complaints, and provide assistance through our 24/7 support channels.
6. Platform Improvement: To analyze aggregated usage data for the purpose of identifying technical issues, improving game performance, and enhancing the overall user experience.
7. Responsible Gaming: To monitor account activity for signs of problem gambling behavior and to facilitate the implementation of responsible gaming tools such as deposit limits and self-exclusion.
8. Legal Obligations: To retain records as required by applicable law, respond to lawful requests from regulatory or law enforcement authorities, and defend net303's legal interests in any dispute.

net303 does not process Personal Data for automated decision-making or profiling that produces legal or similarly significant effects on Users without human review.

Each processing activity conducted by net303 rests on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and net303 — specifically, to operate your account, process your bets, and execute financial transactions.
• Legal Obligation: Processing necessary to comply with applicable laws, including AML regulations, licensing conditions, and mandatory record-keeping requirements.
• Legitimate Interests: Processing carried out for net303's legitimate business interests, including fraud detection, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where net303 relies on your consent as a legal basis (for example, for optional marketing communications, where offered), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

net303 does not sell, rent, or trade your Personal Data to third parties. We may share your data only in the following limited and defined circumstances:

• KYC and Compliance Providers: Licensed identity verification and AML screening providers engaged under strict data processing agreements, solely for the purpose of fulfilling regulatory obligations.
• Payment Processing Partners: Banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) to the extent necessary to process deposits and withdrawals on your behalf.
• Game Software Providers: Studio partners such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft may receive anonymized session data necessary to deliver their game services. These providers do not receive your identity or financial data.
• Legal and Regulatory Authorities: Where required by law, court order, or the lawful request of a competent regulatory or law enforcement authority. net303 will, where legally permissible, notify affected Users of such disclosures.
• Business Successors: In the event of a merger, acquisition, or sale of assets, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected Users will be notified prior to any such transfer.

All third-party Data Processors engaged by net303 are contractually bound to process Personal Data only on our documented instructions, to maintain appropriate security measures, and to refrain from any use of Personal Data for their own independent purposes.

As an internationally operating platform, net303 may transfer your Personal Data to servers and Data Processors located outside of Indonesia. Where such transfers occur, net303 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards for international transfers may include:

• Standard contractual clauses or equivalent data transfer mechanisms recognized under applicable data protection law.
• Transfers exclusively to jurisdictions that provide an adequate level of data protection as assessed by net303's compliance function.
• Additional technical and organizational security measures applied to data in transit, including encryption and access controls.

You may request further information about the specific safeguards applied to your data by contacting us at [email protected].

net303 retains Personal Data for no longer than is necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual. Anonymized aggregate data may be retained indefinitely for statistical and analytical purposes.

net303 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Key security controls include:

• Encryption in Transit: All data exchanged between your browser or mobile device and our servers is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting net303.
• Encryption at Rest: Sensitive Personal Data stored on our servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data within net303's systems is restricted to staff members who require access for specific, authorized purposes. All staff access is logged, monitored, and subject to periodic audit.
• Multi-Factor Authentication: Administrative access to systems containing Personal Data requires multi-factor authentication. We also offer and strongly encourage Users to enable additional login security on their accounts.
• Penetration Testing: net303 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities in our systems.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, net303 will notify affected Users without undue delay and will take immediate steps to contain and remediate the incident.

While net303 takes all reasonable measures to secure your Personal Data, no internet-based service can guarantee absolute security. You are encouraged to use strong, unique passwords for your account and to never share your login credentials with any third party.

net303 uses cookies and similar client-side storage technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your account state between pages, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as preferred language display or previously selected game categories — to personalize your experience. They are set only after you interact with the relevant features.
• Analytics Cookies: net303 uses anonymized, first-party analytics to understand how Users navigate the Platform. This data is aggregated and cannot be used to identify individual users. We do not use third-party behavioral analytics platforms that track you across external websites.

net303 does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your account.

As a User of net303, you are entitled to exercise the following rights with respect to your Personal Data. Requests can be submitted at any time by contacting [email protected]:

net303 will respond to all data subject requests within 14 calendar days. In complex cases, this period may be extended by a further 14 days, of which you will be informed. We reserve the right to verify your identity before processing any data subject request to prevent unauthorized access to another person's information.

net303 enforces a strict 21+ age policy across all jurisdictions in which it operates. The Platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. This restriction reflects both our licensing obligations and our commitment to responsible gaming.

During the registration and KYC verification process, all Users are required to provide documentary evidence confirming that they meet the minimum age requirement. Where net303 discovers — through any means including KYC review, self-disclosure, or third-party report — that a registered User is under 21 years of age, the following actions will be taken immediately:

• The account will be permanently closed without notice.
• Any remaining balance will be returned to the funding payment method after deducting any bonuses received, which will be forfeited in their entirety.
• All Personal Data associated with the underage account will be deleted in accordance with applicable data retention requirements, except where retention is required by law.

If you are a parent or guardian and believe that a minor has registered on net303 without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

The net303 Platform integrates third-party game content and payment services. While net303 selects its partners carefully and requires all Data Processors to meet appropriate security and privacy standards, we are not responsible for the independent privacy practices of third-party service providers once data has been transmitted to them in accordance with the purposes described in this Policy.

Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft operate their own data practices in connection with the delivery of game software. These providers receive only the anonymized session data necessary for game functionality — they do not receive your identity, financial, or KYC data via net303.

Payment partners including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja process transaction data in accordance with their own published privacy policies and applicable Indonesian financial regulations. net303 provides these partners only with the data strictly necessary to process a specific transaction.

The net303 Platform does not contain links to external third-party websites for general browsing or promotional purposes. All links within the Platform navigate exclusively to net303-owned pages.

net303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations. The "Last Updated" date displayed at the top of this page will always indicate when the most recent revision was made.

Where changes to this Policy are material — meaning they significantly affect how we collect or use your Personal Data, or alter your rights as a data subject — net303 will notify you via the email address registered to your account at least 7 days before the revised Policy takes effect. For non-material amendments, the updated Policy will take effect immediately upon publication.

Your continued use of the Platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting our support team.

All privacy-related inquiries, data subject access requests, complaints, or questions about this Privacy Policy should be directed to the net303 Data Protection contact using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Subject Request" in the subject line of your email to ensure prompt routing to our privacy team.
• Response Time: We will acknowledge your request within 2 business days and provide a substantive response within 14 calendar days of receipt.
• Identity Verification: To protect your data, all data subject requests will require identity verification before processing. You may be asked to confirm your registered email address, account username, or provide a copy of your identity document.
• Live Chat: Available 24/7 via the net303 Platform for general privacy inquiries. Our support team includes native Indonesian-speaking agents operating across WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9) time zones.

For questions about our Terms & Conditions, please visit the Terms & Conditions page. For information about responsible gaming tools and self-exclusion, please visit our Responsible Gaming page.