Privacy Policy

pg303 operates the online gaming and sports betting platform accessible at https://pg303.app and all associated sub-domains and mobile applications (collectively, the "Platform"). This Privacy Policy explains how pg303 collects, uses, stores, shares, and protects the personal data of individuals who register an account on, visit, or otherwise interact with the Platform.

This Policy applies to all current and former Members of pg303, as well as to visitors who browse the Platform without registering. It covers personal data collected through the Platform itself, through our customer support channels, and through automated technologies such as cookies and session-tracking tools.

For the purposes of applicable data protection law, pg303 is the data controller in respect of all personal data collected from Members and Platform visitors. As data controller, pg303 determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, correction requests, and deletion requests should be directed to the pg303 Data Privacy team at [email protected] with the subject line "Data Privacy Enquiry". We are committed to acknowledging all privacy-related correspondence within 5 business days and providing a substantive response within 30 calendar days.

pg303 collects only the personal data that is necessary to deliver a safe, functional, and compliant gaming platform. The categories of data we collect are set out in the table below:

pg303 collects personal data through the following channels:

You provide data directly to pg303 when you complete the account registration form, submit KYC documentation, make a deposit or withdrawal request, contact the customer support team, respond to a survey or promotional campaign, or use any interactive feature on the Platform.

When you access the Platform, we automatically collect Technical Data through cookies, web beacons, server logs, and similar tracking technologies. This data is collected passively and does not require any action on your part. Full details of the cookies we use are set out in Section 11 of this Policy.

In certain circumstances, pg303 may receive personal data about you from third parties, including:

• Identity verification service providers engaged to assist with KYC document authentication.
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, LinkAja) confirming the status or ownership of payment accounts.
• Fraud prevention agencies and sanctions screening databases used to meet our AML obligations.
• Game studio providers (such as Evolution Gaming, Pragmatic Play, PG Soft, and Microgaming) where their platform logs feed into our gaming activity records for dispute resolution.

pg303 uses your personal data exclusively for the following purposes:

• Account Management: Creating, maintaining, and securing your pg303 account, including processing login requests, enforcing the single-account policy, and applying responsible gaming restrictions where requested.
• Transaction Processing: Facilitating deposits and withdrawals in Indonesian Rupiah (IDR) via your registered bank or e-wallet, reconciling transactions, and issuing correct account balance updates.
• Identity Verification (KYC): Verifying your identity, age (21+), and payment method ownership in compliance with anti-money-laundering regulations and our international gaming licence conditions.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct described in the pg303 Terms & Conditions.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and providing technical assistance through live chat and email channels.
• Responsible Gaming: Monitoring betting patterns for indicators of problem gambling behaviour, administering self-exclusion and deposit limit requests, and sending responsible gaming communications in accordance with our Responsible Gaming Policy.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and game selection of the pg303 Platform.
• Legal & Regulatory Compliance: Retaining transaction and identity records for the minimum periods required by anti-money-laundering law and our gaming licence obligations.
• Service Communications: Sending transactional emails and SMS notifications regarding deposits, withdrawals, security alerts, and account status changes. We do not send unsolicited marketing communications without your explicit prior consent.

pg303 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform the contract between pg303 and you as a Member — including account registration, transaction processing, KYC verification, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, sanctions screening obligations, and gaming licence conditions imposed by our international regulatory authority.
• Legitimate Interests: Processing necessary for pg303's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — provided those interests are not overridden by your privacy rights and interests.
• Consent: Where we rely on your consent as a legal basis — for example, sending optional promotional communications — you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

pg303 does not sell, rent, or commercially share your personal data with any third party for their own marketing purposes. We share your data only in the following limited circumstances:

pg303 engages carefully selected third-party service providers to assist with the operation of the Platform. These include identity verification providers, payment processors, cloud infrastructure operators, cybersecurity vendors, and customer support software providers. All service providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to pg303 and prohibit any independent use or further disclosure.

Where you play games provided by third-party studios — including Evolution Gaming, Pragmatic Play Live, PG Soft, Habanero, Spribe, Pocket Games Soft, Microgaming, and NetEnt — your game session data (session ID, wager amounts, outcomes) is shared with the relevant studio solely for the purposes of game delivery, RTP auditing, and dispute resolution. These studios do not receive your identity data or financial account details.

Transaction data — including the amount, currency, and your registered bank account or e-wallet details — is shared with your chosen payment institution (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, or LinkAja) solely to process your deposit or withdrawal instruction.

pg303 may disclose your personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. We will endeavour to notify you of any such disclosure request in advance, unless we are legally prohibited from doing so.

In the event of a merger, acquisition, or sale of all or substantially all of the assets of pg303, your personal data may be transferred to the acquiring entity, subject to that entity assuming the data protection obligations set out in this Policy. We will notify affected Members of any such transfer with reasonable advance notice.

pg303 operates from data centre infrastructure that may be located in jurisdictions outside of Indonesia. Where your personal data is transferred to, stored in, or processed in a jurisdiction other than Indonesia, pg303 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that which applies in Indonesia.

Safeguards used for international transfers include contractual clauses that bind the recipient to data protection standards consistent with this Policy, and — where applicable — transfers to jurisdictions that have been assessed as providing an adequate level of data protection by recognised international standards bodies.

pg303 takes the security of your personal data seriously and implements a multi-layered security framework to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit TLS encryption on all data in transit between your device and the pg303 Platform.
• AES-256 encryption at rest for all sensitive personal data and financial records stored in our database infrastructure.
• Strict access controls: Personal data is accessible only to pg303 staff who require it to perform their specific job function. Access is logged and audited regularly.
• Two-factor authentication (2FA) available to all Members and mandatory for all pg303 internal staff with access to production data systems.
• Regular penetration testing by independent cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems that monitor platform infrastructure 24 hours a day, 7 days a week for anomalous activity.
• Incident response plan: In the event of a confirmed data breach that is likely to result in a risk to Member rights and freedoms, pg303 will notify affected Members without undue delay and will take immediate steps to contain and investigate the breach.

While pg303 takes all reasonable measures to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying pg303 promptly if you suspect any unauthorised access to your account.

pg303 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

pg303 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your logged-in session, to detect fraud, and to understand how Members navigate and use the Platform. The cookies used on pg303 fall into the following categories:

These cookies are essential to the operation of the Platform. Without them, services such as account login, session management, and secure payment processing would not function. These cookies cannot be disabled without disrupting core Platform functionality.

These cookies collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently, how long sessions last, and which game categories are most popular. This data helps pg303 improve the Platform experience for all Members. The data collected is aggregated and not linked to your individual identity.

pg303 uses session-based security cookies to detect and prevent fraudulent login attempts, multi-accounting, and other prohibited activities. These cookies record Technical Data including IP address and device fingerprint and are retained only for the duration of your session plus a brief post-session window for fraud analysis.

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your pg303 account and using core Platform features. Disabling performance or security cookies may reduce your experience quality or trigger additional security verification steps. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a data subject, you hold the following rights with respect to your personal data held by pg303. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".

• Right of Access: You may request a copy of all personal data pg303 holds about you, along with information about the purposes for which it is processed, the categories of data held, and any third parties to whom it has been disclosed.
• Right to Rectification: If any personal data pg303 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to pg303's overriding legal obligation to retain certain data (such as AML transaction records) for the minimum statutory period.
• Right to Restriction of Processing: In certain circumstances — for example, while the accuracy of data is contested — you may request that pg303 restrict the processing of your personal data to storage only, pending resolution.
• Right to Data Portability: You may request a copy of the personal data you have provided to pg303 in a structured, commonly used, machine-readable format, and request that it be transferred directly to another service provider where technically feasible.
• Right to Object: Where pg303 processes your data on the basis of legitimate interests, you have the right to object to that processing. pg303 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The pg303 platform is strictly intended for adults aged 21 years and over. pg303 does not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. The Platform implements age-gate controls at registration and KYC verification specifically to enforce this restriction.

If pg303 discovers or is notified that personal data belonging to an individual under 21 has been collected, we will take immediate steps to verify the individual's age, suspend the associated account, reverse any transactions where technically possible, and permanently delete the underage individual's personal data from our systems within 30 days of the discovery, subject to any overriding legal obligation to retain records of the age-fraud incident.

If you have reason to believe that a minor has registered a pg303 account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We treat all such reports with the highest priority.

The pg303 Platform integrates third-party services to deliver games, process payments, and verify identity. While pg303 exercises due diligence in selecting and contracting with these service providers, each third-party service is governed by its own privacy policy. pg303 is not responsible for the privacy practices of third-party service providers beyond the scope of the data processing agreements in place between pg303 and those providers.

Members are encouraged to review the privacy policies of any payment institutions they use — including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — as well as the game studios whose content they access through the Platform, to understand how those organisations independently handle personal data.

The pg303 Platform does not contain links to external third-party websites for general browsing purposes. All navigation remains within the pg303 domain. Any third-party content displayed within game iframes is delivered directly by the relevant licensed game studio and is subject to that studio's own data handling practices.

pg303 reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services offered on the Platform. When material changes are made to this Policy, pg303 will notify registered Members via the email address held on their account and by displaying a prominent notice on the Platform at least 7 calendar days before the changes take effect.

The effective date displayed at the top of this document is updated each time a revision is published. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. We strongly encourage you to review this page periodically to stay informed of how pg303 protects your personal data. The most current version of this Privacy Policy is always available at https://pg303.app/privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which pg303 handles your personal data, please contact us through the following channel:

• Email: [email protected] — use the subject line "Data Privacy Enquiry" for privacy-specific matters
• Support Hours: 24 hours a day, 7 days a week, including all Indonesian public holidays (Idul Fitri, Idul Adha, Indonesian Independence Day, Nyepi, Waisak, Christmas, and others)
• Response Commitment: Acknowledgement within 5 business days; substantive response within 30 calendar days

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. pg303 will cooperate fully with any regulatory investigation arising from a Member privacy complaint.

For questions about your account, deposits, withdrawals, bonuses, or responsible gaming tools, please visit our FAQ page or our Responsible Gaming page for detailed guidance. Our customer support team is also available around the clock via the live chat feature on the Platform.