Privacy Policy of amd303

The following terms carry the meanings set out below wherever they appear in this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, national identity number, date of birth, email address, phone number, IP address, payment details, and transaction history.
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is amd303, operating the Platform at https://amd303.cam.
• "Data Processor" — any third party that processes Personal Data on behalf of amd303 under a contractual data-processing agreement.
• "Platform" — the amd303 website, mobile interface, and all associated digital services accessible at https://amd303.cam.
• "User" / "You" — any individual who accesses the Platform, whether registered as an Account holder or as a visitor.
• "Cookies" — small text files placed on your device by the Platform to facilitate session management, analytics, and personalization.

amd303 is the Data Controller responsible for your Personal Data collected through the Platform. As Data Controller, amd303 determines how and why your data is processed and is accountable for ensuring that all processing activities comply with applicable data-protection legislation and internationally recognized privacy standards.

For all data-protection enquiries, including requests to exercise your rights under Clause 11, please contact our designated Data Protection contact using the details provided in Clause 15 of this Policy.

amd303 collects only the Personal Data that is necessary for the provision of our services, fulfilment of our legal obligations, and improvement of the Platform experience. The categories of data we collect include:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identity document (KTP or passport).
• Date of birth and nationality.
• Registered email address and Indonesian mobile phone number.
• Residential address (city and province level, consistent with Indonesian KTP data).

3.2 Financial Data

• Bank account details associated with deposits and withdrawals (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, or other supported banks).
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja.
• Transaction history including deposit amounts, withdrawal requests, and dates, denominated in Indonesian Rupiah (IDR/Rp).

3.3 Account and Gaming Activity Data

• Username, encrypted password hash, and account settings.
• Bet history, game session records, wager amounts, and game outcomes.
• Bonus claims, wagering requirement progress, and promotional participation history.
• Responsible gaming settings including deposit limits, session timers, and self-exclusion status.

3.4 Technical and Device Data

• IP address, device type, operating system, and browser version.
• Session timestamps, page-view data, click-stream data, and feature-usage logs.
• Cookies and similar tracking technologies as described in Clause 10.

3.5 Communications Data

• Records of all communications between you and our support team, including live chat tra nscripts, email correspondence, and phone call logs (if applicable).
• Feedback, complaints, and survey responses submitted to amd303.

3.6 Identity Verification Documents (KYC)

• Copies of your KTP (Kartu Tanda Penduduk) or Indonesian passport.
• Photographs or selfies submitted for facial-verification purposes.
• Proof-of-address documents such as utility bills or bank statements (where applicable).

amd303 collects your Personal Data through the following channels:

• Direct Provision: When you voluntarily submit information during account registration, KYC verification, deposit/withdrawal requests, customer support interactions, or when configuring responsible gaming tools.
• Automated Collection: Technical data such as IP addresses, device identifiers, session durations, and clickstream data are collected automatically via cookies and server logs when you access the Platform.
• Third-Party Sources: We may receive data from payment processors (banks and e-wallet providers) to verify transaction authenticity and from fraud-prevention services to detect suspicious activity. We do not purchase marketing lists or demographic data from data brokers.
• Public Sources: In rare cases where necessary for regulatory compliance or fraud investigation, we may cross-reference publicly available information such as government-maintained watchlists or exclusion databases.

amd303 processes your Personal Data for the purposes listed below, each supported by a recognized legal basis under international data-protection principles:

5.1 Contractual Necessity

We process your data to perform our obligations under the Terms & Conditions governing your use of the Platform. This includes:

• Creating and maintaining your Account.
• Processing deposits, withdrawals, and managing your Balance.
• Providing access to sports betting, casino games, and live dealer services.
• Crediting bonuses, tracking wagering requirements, and settling bets.
• Providing customer support and resolving disputes.

5.2 Legal Obligation

We process certain data to comply with legal and regulatory obligations, including:

• Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements to verify your identity and prevent financial crime.
• Maintaining transaction records for the statutory retention period (5 years in most jurisdictions).
• Responding to lawful requests from government authorities, regulatory bodies, or law enforcement agencies.
• Enforcing age restrictions (minimum 21 years) and self-exclusion orders.

5.3 Legitimate Interests

We process data where necessary to pursue legitimate business interests, provided your rights are not overridden. These interests include:

• Detecting and preventing fraud, cheating, collusion, and other prohibited conduct.
• Monitoring Platform security, investigating unauthorized access, and protecting against cyber-attacks.
• Improving the Platform's functionality, analyzing user behavior to optimize game offerings, and conducting A/B testing on features.
• Sending service-related communications such as deposit confirmations, withdrawal status updates, and important account notifications.

5.4 Consent

Where processing is based on your consent, such as for marketing communications or optional promotional notifications, you may withdraw consent at any time via your Account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

amd303 does not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf under strict contractual data-processing agreements:

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive only anonymized gameplay data and do not have access to your identity or financial details.
• KYC & Fraud Prevention Services: Identity verification specialists who confirm the authenticity of submitted documents and cross-reference data against fraud databases.
• Cloud Hosting & IT Infrastructure: Secure data-center operators who host our servers under ISO 27001-certified facilities with full encryption at rest and in transit.

6.2 Legal Obligations

We may disclose your data if required by law, regulation, court order, or government authority. This includes disclosures to:

• Regulatory bodies overseeing gaming licence compliance.
• Law enforcement agencies investigating financial crime, fraud, or illegal gambling activity.
• Tax authorities where required under Indonesian or international tax reporting obligations.

6.3 Business Transfers

In the event that amd303 undergoes a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the acquiring entity. You will be notified in advance of any such transfer, and the acquiring entity will remain bound by this Privacy Policy unless you are provided notice of a revised policy and given the opportunity to opt out.

amd303 operates internationally, and as such, your Personal Data may be transferred to, stored in, and processed in jurisdictions outside Indonesia. These transfers are necessary to provide the Platform services, including hosting infrastructure, payment processing, and customer support operations.

When transferring data internationally, amd303 ensures that adequate safeguards are in place, including:

• Data-processing agreements incorporating Standard Contractual Clauses (SCCs) recognized by international data-protection authorities.
• Selection of service providers that maintain certifications such as ISO 27001, SOC 2 Type II, or equivalent data-security standards.
• Encryption of data in transit (256-bit SSL/TLS) and at rest (AES-256) to protect against unauthorized access during international transmission.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data as described in this clause.

amd303 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes.

• Active Accounts: Data associated with active Accounts is retained for the duration of your membership and for a period of 5 years following account closure or your last login, whichever is later. This retention period aligns with international AML and financial-record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years post-account closure to satisfy regulatory audit requirements.
• Transaction Records: Deposit, withdrawal, and bet history are retained for 5 years in accordance with standard financial-compliance obligations.
• Marketing Consent Records: Records of consent and withdrawal are retained indefinitely to demonstrate compliance with data-protection legislation.
• Self-Exclusion Records: If you self-exclude from the Platform, your exclusion record is retained permanently to prevent future account re-activation and to honour your request.

After the retention period expires, Personal Data is securely deleted or anonymized such that it can no longer be attributed to you as an identifiable individual.

amd303 implements robust technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or damage. Our security framework includes:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorized personnel only, on a need-to-know basis. Multi-factor authentication (MFA) is enforced for all administrative accounts.
• Penetration Testing: The Platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Secure Data Centers: Our servers are hosted in ISO 27001-certified data centers with 24/7 physical security, redundant power supplies, and disaster-recovery systems.
• Incident Response: We maintain a documented incident-response plan. In the event of a data breach that poses a risk to your rights, we will notify you within 72 hours in accordance with best-practice data-breach-notification protocols.

While we employ industry-leading security measures, no system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your Account credentials and should immediately notify support if you suspect unauthorized access to your Account.

amd303 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device when you visit the Platform.

Types of Cookies We Use:

• Essential Cookies: Required for the Platform to function. These cookies enable you to navigate the site, access secure areas (your Account dashboard), and use essential features. They cannot be disabled.
• Performance Cookies: Collect anonymous data on how visitors use the Platform, including pages visited, time spent on each page, and error messages encountered. This helps us improve site performance.
• Functionality Cookies: Remember your preferences such as language settings, currency display (IDR/Rp), and previously entered information to provide a more personalized experience.
• Marketing Cookies: Track your activity across the Platform to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies are set only with your consent.

Managing Cookies:

You can control and delete cookies through your browser settings. Please note that disabling essential cookies may impair the functionality of the Platform, including the ability to log in to your Account. Instructions for managing cookies in popular browsers can be found in their respective help sections.

Under international data-protection principles, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact us using the details in Clause 15.

We will respond to all rights requests within 30 calendar days of receipt. If your request is complex or we receive multiple requests from you, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

The amd303 Platform is strictly intended for adults aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not register an Account, submit any Personal Data to us, or use the Platform in any capacity.

If we become aware that we have inadvertently collected Personal Data from a person under 21 years of age, we will take immediate steps to delete that data from our systems. Parents or guardians who believe their child has provided Personal Data to amd303 should contact us immediately using the details in Clause 15.

The Platform may contain links to third-party websites, such as payment-processor login portals or game-provider content-delivery networks. amd303 is not responsible for the privacy practices or content of these external sites. This Privacy Policy applies solely to data collected by amd303 through the Platform.

We recommend that you review the privacy policies of any third-party sites you visit. amd303 does not endorse, control, or assume liability for third-party data-handling practices.

amd303 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or Platform functionality. When material changes are made, we will notify you by:

• Posting a prominent notice on the Platform homepage for a minimum of 14 days.
• Sending an email notification to the email address registered on your Account.
• Updating the "Last Updated" date at the top of this Policy.

Your continued use of the Platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you must cease using the Platform and may request account closure.

If you have any questions about this Privacy Policy, wish to exercise your data-protection rights, or need to report a data-security concern, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Protection Enquiries: "Data Protection Request — [Your Username]"
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to fulfil formal Data Subject Access Requests within 30 calendar days.

For general customer support unrelated to data protection, please use the 24/7 live chat feature available on the Platform or email us at the same address with the subject line "Customer Support".