all303 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold over your own data.
all303 ("we", "us", "our") operates the online betting and casino platform accessible at https://all303.cam. We provide services to English-preference players across Indonesia, encompassing sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery), and a range of other gaming products.
This Privacy Policy describes our practices with respect to personal data — the information that identifies you or could reasonably be used to identify you — that we collect when you visit our website, register an account, transact with us, or interact with our customer support team. It applies to all players regardless of which city or province of Indonesia they are located in, and to all devices used to access the Platform, whether desktop, mobile browser, or tablet.
This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and all303. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall take precedence.
We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We do not sell your personal data to third parties, and we do not use your data for any purpose not described in this Policy without first obtaining your explicit consent.
For the purposes of applicable data protection law, all303 is the data controller in respect of personal data collected through the Platform. As data controller, all303 determines the purposes and means by which your personal data is processed.
If you have questions about how all303 processes your personal data, or if you wish to exercise any of the rights described in this Policy, please contact our Data Protection team using the contact details in Clause 15 of this Policy.
all303 is internationally licensed and regulated. While our primary market is Indonesia, the Platform and its data infrastructure operate under the legal framework of the jurisdiction in which all303 is incorporated. Indonesian users are advised that, while this Policy reflects internationally recognized data protection standards, specific provisions of Indonesian data protection law (including Law No. 27 of 2022 on Personal Data Protection) are relevant to their rights and we endeavor to comply with those requirements.
all303 collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy:
| Category | Examples of Data Collected | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP / passport / SIM) | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile phone number, residential address (city, province, postal code) | Account communications, transaction notifications, support |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit and withdrawal processing, AML compliance |
| Gaming Data | Bet history, wager amounts, game selections, win/loss records, session duration, responsible gaming tool settings | Service delivery, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Platform security, fraud detection, performance optimization |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support, dispute resolution, quality assurance |
| Marketing Preferences | Opt-in / opt-out status for promotional emails, preferred communication channel | Delivering relevant promotions in accordance with your stated preferences |
all303 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, biometric data, or health data) unless it is strictly necessary for identity verification and you have explicitly provided it as part of a KYC document.
all303 collects personal data through the following channels:
4.1 Direct Collection. The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotional communication.
4.2 Automated Collection. When you access the all303 Platform, our systems automatically collect Technical Data (as described in Clause 3) via server logs, cookies, and similar tracking technologies. This data is collected for security, fraud prevention, and performance purposes. Please refer to Clause 8 for a full description of our cookie practices.
4.3 Third-Party Sources. In limited circumstances, all303 may receive personal data from third-party sources, including:
Where all303 receives your data from a third-party source, we will inform you of this at the earliest practicable opportunity and ensure that the data is handled in accordance with this Policy.
all303 uses personal data collected from players for the following purposes:
5.1 Account Management. To create, maintain, and administer your Player Account, including processing your registration, verifying your identity and age (21+), managing your account balance in Indonesian Rupiah (Rp), and providing access to the full range of Platform services.
5.2 Transaction Processing. To process deposit and withdrawal requests via BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja. Your financial data is shared with the relevant payment processor only to the extent necessary to complete the transaction.
5.3 Legal and Regulatory Compliance. To fulfill our obligations under applicable anti-money laundering (AML) regulations, KYC requirements, responsible gaming mandates, and any other legal obligations imposed on all303 by its licensing authority or applicable law. This includes screening transactions against sanctions lists and reporting suspicious activity to relevant authorities where legally required.
5.4 Fraud Prevention and Platform Security. To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other conduct that violates our Terms & Conditions or applicable law. Technical Data, including IP addresses and device fingerprints, is an essential input for these security functions.
5.5 Customer Support. To respond to your queries, manage support tickets, resolve disputes, and generally provide the level of service you are entitled to expect from all303. All support communications are conducted by native Indonesian-speaking agents available 24 hours a day, 7 days a week.
5.6 Responsible Gaming Monitoring. To monitor gameplay patterns for indicators of problem gambling, apply any responsible gaming limits you have set (deposit limits, loss limits, session reminders, self-exclusion), and proactively contact you where our systems identify a potential concern about your gaming behavior.
5.7 Personalization and Marketing. To deliver promotional offers, bonus notifications, and platform updates that are relevant to you — but only where you have opted in to receive such communications or where we have a legitimate interest in keeping you informed about material changes to our services. You may update your marketing preferences at any time from within your Account dashboard or by contacting support.
5.8 Platform Improvement. To analyze aggregated, anonymized usage data for the purpose of improving Platform performance, user experience, and game selection. Individual players are not identifiable from this aggregated data.
all303 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
7.1 No Sale of Data. all303 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This commitment is absolute and unconditional.
7.2 Service Providers. all303 shares personal data with carefully selected third-party service providers who assist in the delivery of our services. These include:
All third-party service providers are subject to contractual data protection obligations and are permitted to use your personal data only for the specific purpose for which it was shared.
7.3 Legal Disclosures. all303 may disclose personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where required to do so by applicable law, a court order, or a valid regulatory request. In such cases, all303 will disclose only the minimum amount of data necessary to satisfy the legal requirement.
7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of all303's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and of any material changes to the Privacy Policy that result from it.
8.1 What Are Cookies. Cookies are small text files stored on your device by your browser when you visit a website. all303 uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate the Platform effectively, keep you logged in during a session, and understand how players interact with our site.
8.2 Types of Cookies We Use.
8.3 Managing Cookies. You may control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive notifications when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from using key features of the all303 Platform, including logging in and placing wagers.
8.4 No Third-Party Advertising Cookies. all303 does not use third-party advertising networks or retargeting cookies that track your browsing activity across other websites. Our cookie use is limited to the categories described above.
9.1 Retention Periods. all303 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
9.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized. Where anonymization is not technically feasible (e.g., for backup data), we implement appropriate access restrictions until deletion is possible.
10.1 Technical Measures. all303 employs industry-standard technical security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:
10.2 Organizational Measures. Access to personal data within all303 is restricted to staff who have a genuine operational need for that access. All staff with access to personal data are subject to confidentiality obligations and undergo data protection training. Access rights are reviewed and updated regularly.
10.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, all303 will notify you and relevant authorities within the timeframes required by applicable data protection law. We maintain a documented incident response procedure for this purpose.
10.4 Your Responsibility. The security of your Account also depends on you. You are responsible for keeping your password confidential and for ensuring that no unauthorized person has access to your device or Account. all303 will never ask for your password by email, phone, or Live Chat. If you believe your Account has been compromised, contact our support team immediately.
As a data subject, you hold the following rights with respect to your personal data held by all303. To exercise any of these rights, please contact us using the details in Clause 15. We will respond to all verified rights requests within 30 calendar days:
Request a copy of the personal data all303 holds about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you. Some corrections may require re-submission of KYC documents.
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations described in Clause 9.
Request that all303 restrict processing of your data while a dispute about its accuracy or our legal basis for processing is resolved.
Receive a structured, machine-readable copy of personal data you have provided to all303, for transfer to another service provider of your choice.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately; other objections are assessed on a case-by-case basis.
To submit a data rights request, please contact our Data Protection team at the email address listed in Clause 15. We will require you to verify your identity before processing any rights request to ensure the security of your personal data.
Where all303 discovers that a minor has provided personal data or registered an Account, we will immediately suspend the Account, delete the personal data as completely as permitted under legal retention obligations, and take steps to prevent future access by that individual.
Parents and guardians who believe that a minor in their care has accessed all303 should contact our support team immediately. We will investigate and take prompt remedial action. We also strongly recommend that parents and guardians make use of internet filtering tools to restrict minors' access to online gambling platforms.
13.1 Cross-Border Processing. Because all303 is an internationally operated platform, your personal data may be transferred to and processed in countries other than Indonesia. This may occur, for example, where our hosting infrastructure, game studio partners, or identity verification providers operate from servers located outside Indonesia.
13.2 Safeguards. Whenever personal data is transferred internationally, all303 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections afforded within Indonesia. These safeguards may include contractual clauses binding the recipient to data protection standards consistent with this Policy, or reliance on the recipient's certification under a recognized international data protection framework.
13.3 Indonesian Residents. Indonesian players should be aware that, by using all303, they consent to their personal data being transferred to and processed in the jurisdiction(s) in which all303 and its service providers operate. We will always inform you if we become aware of any material change to the international transfer arrangements that affects the level of protection your data receives.
14.1 Right to Update. all303 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. The date of the most recent revision is displayed at the top of this page.
14.2 Notification of Material Changes. Where a proposed change materially alters your rights or the way in which we process your personal data, we will notify you in advance by email (where you have provided a valid email address) and via an in-platform notification. The updated Policy will take effect 14 days after notification unless you object to the changes and request Account closure within that period.
14.3 Continued Use. Your continued use of the all303 Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you disagree with a revised Policy, you should discontinue use of the Platform and contact support to arrange Account closure in accordance with our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how all303 handles your personal data, please contact us through the following channels:
All data rights requests must be accompanied by sufficient identity verification to confirm that the request is being made by the Account holder. This protects your data from unauthorized access by third parties who may attempt to obtain it by impersonating you.
If you are not satisfied with all303's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Indonesia, data protection matters may be directed to the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital) in accordance with Law No. 27 of 2022 on Personal Data Protection.
Six principles that define how all303 approaches the privacy and security of your personal information.
all303 does not sell, rent, or trade your personal information to any third party for commercial purposes — ever. Your data is used exclusively to operate and improve your experience on our Platform.
All data transmitted between your device and all303 is protected by SSL/TLS encryption. Sensitive financial fields are additionally encrypted at rest, ensuring your banking details remain secure at every stage.
KYC verification protects both you and the Platform. Your identity documents are handled with the highest level of care, shared only with our licensed verification partner, and retained strictly in line with AML obligations.
all303 collects only the personal data that is genuinely necessary for the purposes described in this Policy. We do not build behavioral profiles for advertising, and we do not collect sensitive data beyond what KYC legally requires.
Marketing communications are strictly opt-in. You can update your preferences or withdraw consent at any time from within your Account dashboard. Opt-out requests are honored immediately, with no grace period.
all303 maintains clear records of all processing activities and responds to every formal data rights request within 30 days. We notify affected players promptly in the event of any data breach that could affect their rights.