Your privacy is a fundamental commitment at pop303, not an afterthought. This Privacy Policy explains precisely what personal data we collect from Indonesian players, why we collect it, how it is used and protected, and what rights you hold over your own information.
These six principles guide every decision we make about how your personal data is handled. Full details are set out in the policy document below.
pop303 collects only the personal data that is strictly required for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or build profiles beyond what our legitimate operational needs demand.
pop303 will never sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your information belongs to you. Data sharing is limited to trusted operational partners — payment processors, identity verifiers, and regulatory bodies — under strict contractual obligations.
All data transmitted between your browser or device and pop303's servers is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive data at rest — including payment details and KYC documents — is stored in encrypted form with access strictly limited to authorized personnel.
You have meaningful rights over your personal data at pop303 — including the right to access, correct, export, restrict processing of, and in certain circumstances delete the data we hold about you. These rights are not buried in fine print; they are explained clearly in Section 9 of this policy.
pop303 does not retain personal data indefinitely. Retention periods are determined by the purpose for which each data category was collected and by applicable regulatory obligations — for example, transaction records are retained for a minimum of five years to satisfy anti-money-laundering requirements.
When pop303 makes material changes to this Privacy Policy, we will notify registered players via email and display a prominent notice on the platform. Minor or administrative updates will be reflected in the "Last Updated" date at the top of this page. Continued use of the platform constitutes acceptance.
This Privacy Policy ("Policy") is issued by pop303 ("the Company", "we", "us", "our") and applies to all players, visitors, and users ("you", "your") of the pop303 platform at pop303.cam. This Policy should be read alongside our Terms & Conditions. Together, these documents form the complete legal framework governing your use of pop303.
pop303 is committed to protecting the privacy and personal data of everyone who uses its platform. This Policy explains how we handle personal information in connection with the operation of our online betting and gaming services, which are principally directed at English-preference players residing in Indonesia.
This Policy applies to personal data collected through:
This Policy does not apply to third-party websites, applications, or services that may be linked from or integrated within the pop303 platform. We encourage you to review the privacy policies of any third-party services you access independently.
pop303 acts as the data controller in respect of personal data collected through the Platform. As data controller, pop303 determines the purposes for which personal data is processed and the means by which that processing is carried out.
For all data protection inquiries, requests to exercise your rights, or complaints related to data handling, you may contact pop303's designated data protection point of contact at:
Email: [email protected]
Subject line: "Data Protection Request"
Response target: within 30 calendar days of receiving a complete and valid request.
The categories of personal data that pop303 collects vary depending on how you interact with the platform. The primary categories are set out below:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, KTP or passport number, photograph | Account registration & KYC verification |
| Contact Data | Email address, Indonesian mobile phone number, residential address (city, province, postal code) | Account registration & profile updates |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal amounts in IDR | Payment processing & AML compliance |
| Betting & Gaming Data | Wager history, game session logs, win/loss records, bonus redemption history, togel (Indonesia's traditional numbers lottery) selections | Ongoing platform use |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session timestamps, referral URL | Automatic collection on site visit |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support interactions |
| Behavioural Data | Pages visited, features used, click-path data, session duration, responsible gaming tool usage | Cookies & analytics (see Section 7) |
pop303 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data — except where health-related disclosures arise voluntarily in the context of a responsible gaming self-exclusion request, in which case that data is used solely to administer your protection tools.
pop303 collects personal data through the following channels and mechanisms:
Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to promotions. This includes all information entered into forms on the Platform.
Data collected automatically as you browse and use the Platform, including IP address, device identifiers, session data, and behavioural analytics gathered through cookies and similar technologies (see Section 7 for full details on our cookie practices).
Data obtained from third-party identity verification providers and fraud-prevention services used during the KYC process, as well as financial data relayed by payment processors when confirming deposit or withdrawal transactions.
In limited circumstances related to AML due diligence, pop303 may cross-reference publicly available information — such as government sanctions lists or politically exposed persons (PEP) registries — against the details you have provided during registration.
pop303 processes your personal data only where a valid legal basis exists. The table below sets out our primary processing purposes and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and authentication | Performance of a contract (the user agreement between you and pop303) |
| KYC identity and age verification (21+ compliance) | Legal obligation; legitimate interests (fraud prevention) |
| Processing deposits and withdrawals in IDR via local banks and e-wallets | Performance of a contract |
| Anti-money laundering (AML) and fraud detection monitoring | Legal obligation; legitimate interests |
| Customer support and complaint resolution | Performance of a contract; legitimate interests |
| Responsible gaming monitoring and self-exclusion administration | Legal obligation; protection of vital interests |
| Promotional communications and personalised offers | Consent (you may withdraw at any time) |
| Platform analytics, performance monitoring, and product improvement | Legitimate interests |
| Compliance with regulatory reporting and audit obligations | Legal obligation |
Where we rely on your consent as the legal basis for processing — for example, to send promotional emails about bonus offers or seasonal campaigns such as Idul Fitri and Imlek promotions — you may withdraw that consent at any time by contacting us at [email protected] or by using the opt-out mechanism in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
pop303 does not sell, rent, or commercially distribute your personal data to any third party. Data may be shared only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:
pop303 will never share your personal data with advertising networks, data brokers, social media platforms, or any other third party for commercial profiling or targeted advertising purposes without your explicit prior consent.
pop303 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and gather anonymized analytics data. The following cookie categories are in use:
These cookies are essential for the Platform to function correctly. They enable session authentication, maintain your login state, handle security tokens, and ensure that game sessions and financial transactions complete without error. These cookies cannot be disabled without breaking core platform functionality.
These cookies collect anonymized information about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where error events occur. This data helps pop303 identify areas for improvement and optimize the overall player experience. No personally identifiable information is included in analytics data.
These cookies remember your preferences — such as your preferred game lobby layout, notification settings, and responsible gaming tool configurations — so that you do not have to re-enter them on every visit.
You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the availability of some Platform features. Detailed browser-level cookie instructions are available from the support documentation of your respective browser provider.
pop303 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML / regulatory compliance |
| Financial Transaction Records | 5 years from the date of each transaction | Legal obligation (AML) |
| KYC Documents | 5 years after account closure or last transaction | Legal obligation |
| Betting & Gaming History | 3 years after account closure | Dispute resolution; regulatory audit |
| Customer Support Records | 2 years after the ticket is resolved | Legitimate interests (quality assurance) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Proof of consent; legal compliance |
| Technical & Log Data | 12 months from collection | Security monitoring; fraud prevention |
| Self-Exclusion Records | Minimum 6 years after the exclusion period ends | Responsible gaming obligations |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with our internal data disposal procedures. Anonymized aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.
As a player on the pop303 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise:
You may request a copy of all personal data pop303 holds about you, along with information about how it is being used.
You may request correction of any inaccurate or incomplete personal data held in your pop303 account profile.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected and no legal retention obligation applies.
You may request that pop303 temporarily suspends processing of your data while a dispute regarding its accuracy or lawful basis is being resolved.
You may request a structured, machine-readable export of the personal data you have provided to pop303, where technically feasible.
You may object to processing of your data based on legitimate interests, including profiling for marketing purposes. You may also withdraw consent for promotional communications at any time.
pop303 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.
pop303 employs a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:
No online platform can guarantee absolute security. While pop303 applies rigorous safeguards, you are responsible for keeping your login credentials confidential and for promptly reporting any suspected unauthorized account access to [email protected].
pop303 operates an online gambling platform that is strictly restricted to adults aged 21 and over. The Platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21.
If pop303 becomes aware that personal data has been collected from a person under the age of 21 — whether through a registration attempt, a KYC submission, or any other means — the relevant account will be immediately suspended, the data will be reviewed, and, where it is confirmed that the individual is underage, the data will be securely deleted and any deposited funds returned.
If you are a parent or guardian and believe that a person under 21 in your care may have registered on pop303, please contact us immediately at [email protected] with the subject line "Underage User Report". We treat all such reports as high-priority and will act within 24 hours of receiving a valid notification.
pop303 is an internationally operated platform. In the course of providing its services, personal data may be transferred to and stored on servers located outside of Indonesia. Where such transfers occur, pop303 ensures that appropriate safeguards are in place to protect the data in a manner consistent with this Privacy Policy.
Safeguards employed for international data transfers include:
pop303 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data practices, operational procedures, legal obligations, or regulatory requirements. The most current version of this Policy is always available at pop303.cam/privacy-policy.
Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — pop303 will notify registered players by email to their registered address and will display a prominent update notice on the Platform for a minimum of 30 days following the change taking effect.
Minor or administrative updates (such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact details) will be reflected by an updated "Last Updated" date at the top of this page without individual notification.
Your continued use of the pop303 Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with a material change, you may close your account by contacting [email protected] before the change takes effect.
For any questions, concerns, or formal complaints related to this Privacy Policy or pop303's data handling practices, please contact us using the details below. We are committed to resolving all privacy-related inquiries fairly, transparently, and within the stated response windows.
Email: [email protected]
Subject line: "Privacy Inquiry"
Response target: within 5 business days.
Email: [email protected]
Subject line: "Data Rights Request"
Response target: within 30 calendar days; up to 60 days for complex requests (with notification of extension).
If you are not satisfied with pop303's response to a privacy complaint, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction or to the dispute resolution body specified under pop303's operating license framework. pop303 will cooperate fully with any such authority in the course of a formal investigation.
Our Indonesian-speaking customer support team is available 24 hours a day, 7 days a week — including during Indonesian public holidays such as Idul Fitri, Nyepi, and Indonesian Independence Day (17 August) — to assist with privacy-related questions and account data requests.
For a complete picture of your rights and obligations as a pop303 player, we recommend reading our Terms & Conditions and Responsible Gaming pages alongside this Privacy Policy. Our FAQ also covers common account and security questions.
21+ Only Gambling involves financial risk. Please play responsibly. pop303 enforces a strict 21+ age policy.