At gb0303, the privacy of every player is treated with the same seriousness as the security of their funds. This Privacy Policy explains precisely what personal data we collect, why we collect it, how it is used and protected, who it may be shared with, and what rights you hold in relation to that data. We encourage you to read it in full before registering.
gb0303 will never sell, rent, or trade your personal data to third parties for their own commercial purposes.
Your data is used solely to operate your account, process transactions, maintain legal compliance, and improve the platform experience for all players in Indonesia.
gb0303 collects only the personal data that is strictly necessary to deliver platform services, maintain regulatory compliance, and protect account security. We do not collect data speculatively or for purposes beyond those disclosed in this Policy.
Every category of personal data collected by gb0303 is linked to a specific, documented purpose. Data collected for account registration is not repurposed for marketing profiling without your explicit consent. Data collected for KYC is not used for any purpose other than identity verification and compliance.
gb0303 has never sold, rented, traded, or exchanged player personal data with any third party for that party's own commercial gain. This commitment is unconditional and permanent — it forms the bedrock of the trust relationship between gb0303 and its members.
All personal data stored by gb0303 is protected by AES-256 encryption at rest and TLS 1.3 in transit. Our infrastructure undergoes regular independent security audits. Payment method details are handled exclusively through certified PCI-compliant payment processors — gb0303 does not store full payment credentials internally.
Every gb0303 member has the right to access their personal data, request corrections, request deletion (subject to legal retention requirements), withdraw marketing consent, and object to certain processing activities. These rights are exercisable by contacting our support team at any time.
gb0303 does not retain personal data indefinitely. Specific retention periods apply to each data category, ranging from 90 days for session logs to seven years for financial transaction records (in compliance with standard AML requirements). Data is securely destroyed when its retention period expires.
From the moment you register to the point your data is securely deleted, here is exactly how gb0303 handles your personal information at each stage.
Data is collected at registration, during KYC, through platform interactions, and via technical tracking (cookies, device data). Only data necessary for stated purposes is collected.
Collected data is stored in encrypted, access-controlled servers. Strict internal access controls ensure only authorized personnel with a defined need can view personal data.
Data is processed only for the purposes disclosed in this Policy — account management, payment processing, KYC compliance, fraud prevention, and (with consent) marketing communications.
When data reaches the end of its defined retention period, it is permanently and securely deleted or anonymized using industry-standard data destruction protocols.
In this Privacy Po licy, the following terms carry the meanings defined below:
"gb0303" refers to the online betting and casino platform accessible at gb0303.cam, including all associated subdomains, mobile interfaces, and platform services operated thereunder.
"Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, device identifiers, IP address, payment account details, and wagering history.
"Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
"Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For users of the gb0303 platform, the Data Controller is the licensed operating entity behind gb0303.cam.
"Data Processor" means any third party that processes Personal Data on behalf of gb0303 under a written data processing agreement, such as payment service providers, KYC verification partners, and cloud hosting providers.
"User" / "You" / "Player" refers to any individual who accesses or registers on the gb0303 platform.
"Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose, which may be withdrawn at any time.
"KYC" refers to the Know Your Customer identity verification process required under gb0303's internal compliance framework prior to processing withdrawal requests or high-value transactions.
2.1 The Data Controller responsible for Personal Data collected through the gb0303 platform is the licensed operating entity behind gb0303.cam. gb0303 operates under an internationally recognized offshore gaming license and maintains its primary data processing infrastructure in a jurisdiction with robust data protection frameworks.
2.2 gb0303 has appointed an internal Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection standards. The DPO may be contacted at [email protected] with the subject line "Data Protection Officer" for any privacy-related queries, data rights requests, or complaints.
2.3 Where gb0303 engages third-party Data Processors to handle Personal Data on its behalf — such as KYC verification providers, payment processors, and cloud infrastructure partners — those processors are bound by written data processing agreements that restrict their use of Personal Data to the specific services they provide to gb0303 and prohibit any independent use of that data.
3.1 gb0303 collects the following categories of Personal Data from users of the platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, gender | Registration & KYC |
| Contact Data | Email address, phone number, city/region (e.g., Jakarta, Surabaya, Bali) | Registration |
| Identity Document Data | KTP number, passport number, SIM number, document images | KYC verification |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet account (OVO, DANA, GoPay, ShopeePay), transaction history | Deposit/Withdrawal |
| Wagering Data | Bet history, game sessions, win/loss records, bonus usage | Platform use |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatic collection |
| Usage Data | Pages visited, features accessed, referral source, time spent on platform | Automatic collection |
| Communications Data | Support chat transcripts, email correspondence content, complaint records | Support interactions |
| Marketing Preferences | Communication opt-in/opt-out status, preferred promotional categories | Account settings |
3.2 gb0303 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health records, except where health-related disclosures are voluntarily provided in the context of a responsible gaming self-exclusion request.
4.1 Directly from you: The majority of Personal Data gb0303 holds is provided directly by you during the account registration process, during KYC document submission, when making deposits or withdrawals, when contacting customer support, or when updating your account settings or communication preferences.
4.2 Automatically through platform interaction: When you access and use the gb0303 platform, certain Technical Data and Usage Data is collected automatically through server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you have a registered account, and begins from the moment you first load the gb0303 website.
4.3 From third-party service providers: gb0303 may receive supplementary verification data from licensed KYC and anti-fraud service providers as part of the identity verification process. This data is used solely to validate the identity information you have provided and is not retained beyond the purposes of the verification check.
4.4 From payment processors: When you initiate a deposit or withdrawal through an integrated payment method (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, or ShopeePay), the relevant processor may share transaction confirmation details — including masked account identifiers and transaction reference numbers — with gb0303 for the purpose of reconciling your account balance.
5.1 gb0303 processes Personal Data only where a valid lawful basis exists. The lawful bases relied upon are as follows:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of a contract (the Terms & Conditions agreement) |
| Processing deposits and withdrawals | Performance of a contract |
| KYC identity verification | Legal obligation (AML and compliance requirements) |
| Fraud detection and prevention | Legitimate interests of gb0303 and its players |
| Responsible gaming monitoring | Legitimate interests; legal obligation where applicable |
| Marketing communications | Consent (opt-in only; withdrawable at any time) |
| Customer support interactions | Performance of a contract; legitimate interests |
| Platform analytics and improvement | Legitimate interests of gb0303 |
5.2 Where gb0303 relies on Consent as its lawful basis — specifically for marketing communications — you retain the right to withdraw that consent at any time by updating your account preferences or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
6.1 gb0303 processes your Personal Data for the following specific and documented purposes:
6.2 gb0303 will not process your Personal Data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent.
Important: gb0303 does not sell, rent, trade, or otherwise transfer your Personal Data to any third party for that party's own commercial purposes. Data is shared only in the specific, limited circumstances described in this clause.
7.1 gb0303 may share your Personal Data with the following categories of third parties strictly for the purposes described:
| Third-Party Category | Purpose | Data Shared |
|---|---|---|
| Payment Processors (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay) | Processing deposits and withdrawals | Name, account number, transaction amount |
| KYC / Identity Verification Providers | Identity document verification | Name, DOB, document images |
| Cloud Infrastructure & Hosting Providers | Secure data storage and platform operation | All account data (encrypted) |
| Fraud Prevention & AML Screening Services | Detecting prohibited conduct and money laundering | Identity data, transaction patterns |
| Game Content Providers (e.g., Evolution Gaming, Pragmatic Play, Spribe) | Delivering live casino, slot, and sports content | Session tokens, bet data (anonymized where possible) |
| Regulatory Authorities / Law Enforcement | Legal obligations; responses to lawful orders | As required by the specific legal request |
7.2 All third-party Data Processors engaged by gb0303 are contractually bound to process Personal Data only on gb0303's documented instructions, to maintain appropriate technical and organizational security measures, and to delete or return Personal Data upon termination of their engagement with gb0303.
7.3 In the event of a corporate restructuring, merger, acquisition, or sale of all or part of gb0303's business assets, Personal Data held by gb0303 may be transferred to the successor entity. In such circumstances, gb0303 will provide reasonable advance notice to affected users and will ensure that the successor entity is bound by privacy obligations no less protective than those in this Policy.
8.1 gb0303 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and gather aggregated analytics data.
8.2 The following categories of cookies are used on the gb0303 platform:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Maintaining your login session, security tokens, fraud prevention signals | Session only |
| Functional | Remembering language preferences, display settings, and deposit method preferences | Up to 12 months |
| Analytics | Aggregated page view data, session duration, feature usage — used to improve the platform | Up to 24 months |
| Marketing (opt-in) | Tracking promotional campaign effectiveness for opted-in users only | Up to 12 months |
8.3 Strictly necessary cookies cannot be disabled as they are essential for the platform to function. All other cookie categories are optional. You may manage your cookie preferences through your browser settings at any time. Please note that disabling functional cookies may affect your platform experience (e.g., requiring you to re-enter preferences on each visit).
8.4 gb0303 does not use cookies to build advertising profiles for use by third-party ad networks. No third-party advertising cookies are deployed on the gb0303 platform.
9.1 gb0303 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any outstanding disputes or claims. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contract performance; regulatory compliance |
| KYC identity documents | Duration of account + 7 years after closure | AML legal obligation |
| Financial transaction records | 7 years from transaction date | AML and financial reporting obligations |
| Wagering and game history | Duration of account + 5 years after closure | Dispute resolution; responsible gaming monitoring |
| Customer support communications | 3 years from last interaction | Quality assurance; dispute resolution |
| Technical & session logs | 90 days | Security monitoring; fraud detection |
| Marketing consent records | Until consent is withdrawn + 3 years | Demonstrating lawful processing basis |
9.2 Upon expiry of the applicable retention period, Personal Data is permanently and securely deleted from all active and backup systems using industry-standard data destruction protocols. Where complete deletion is not technically feasible (e.g., certain backup media), gb0303 will isolate and protect the data from any further active use until deletion becomes possible.
Security Architecture: gb0303 employs AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication for internal systems access, and undergoes regular independent penetration testing and security audits.
10.1 gb0303 implements a comprehensive suite of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:
10.2 In the event of a Personal Data breach that poses a risk to your rights and freedoms, gb0303 will notify affected users within 72 hours of becoming aware of the breach, describing the nature of the incident, the categories and approximate number of records affected, the likely consequences, and the measures gb0303 is taking or proposes to take to address it.
10.3 While gb0303 takes all reasonable steps to secure your Personal Data, no internet transmission or data storage system can be guaranteed as completely secure. You are responsible for maintaining the security of your own account credentials and for notifying gb0303 immediately if you suspect any unauthorized use of your account.
11.1 As a gb0303 player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise. gb0303 will acknowledge your request within 2 business days (WIB) and respond substantively within 30 calendar days.
11.2 gb0303 will never charge a fee for legitimate data rights requests. If a request is manifestly unfounded or excessive, gb0303 reserves the right to either charge a reasonable fee or decline to respond, providing written justification in either case.
21+ Only: The gb0303 platform is strictly for adults aged 21 and over. gb0303 does not knowingly collect Personal Data from any person under the age of 21.
12.1 gb0303 enforces a strict minimum age requirement of 21 years for all registered players. Age verification is a mandatory component of the KYC process, and no withdrawal will be processed for any account that has not successfully completed age verification.
12.2 If gb0303 discovers or has reasonable grounds to believe that a registered account belongs to a person under the age of 21, that account will be immediately suspended, all Personal Data associated with the account will be flagged for expedited deletion, and any deposited funds will be returned to the originating payment method after deducting any processing fees incurred.
12.3 If you are a parent or legal guardian and believe that a minor in your care has registered on gb0303 without authorization, please contact [email protected] immediately with the subject line "Minor Account Report". gb0303 will investigate and act within 24 hours of receiving such a report.
13.1 The gb0303 platform may from time to time contain references to or integrations with third-party services — such as game studio platforms operated by Evolution Gaming, Pragmatic Play, Spribe, Pocket Games Soft, or Microgaming — that operate under their own separate privacy policies. gb0303 is not responsible for the privacy practices of those third-party services.
13.2 This Privacy Policy applies solely to Personal Data collected and processed by gb0303 through the gb0303.cam platform. When you interact directly with a third-party game studio interface or payment provider's platform, you are subject to that party's own privacy policy. gb0303 encourages you to review the privacy policies of any third-party services you interact with through or alongside the gb0303 platform.
14.1 gb0303 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform functionality. The effective date displayed at the top of this document will be updated whenever a revision is made.
14.2 Where changes to this Privacy Policy are material — meaning they meaningfully affect your rights or the way gb0303 processes your data — gb0303 will notify registered users by posting a prominent notice on the platform and, where practicable, by sending an email notification to your registered address. We aim to provide at least seven (7) days' notice before material changes take effect.
14.3 Your continued use of the gb0303 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must discontinue use of the platform and may request account closure by contacting [email protected].
14.4 Non-material amendments — such as typographic corrections, clarifications that do not alter the substance of the Policy, or updated contact details — may take effect immediately without prior notice.
15.1 If you have any questions, concerns, or complaints relating to this Privacy Policy, or if you wish to exercise any of the data rights described in Clause 11, please contact gb0303's Data Protection Officer using the details below.
Data Protection Officer / Privacy Queries:
Email: [email protected]
Subject line: "Data Rights Request" or "Privacy Query" or "Data Protection Officer"
Response target: Acknowledgment within 2 business days (WIB); substantive response within 30 calendar days.
Language: English and Indonesian-speaking agents available at all hours.
15.2 For general customer support inquiries unrelated to data privacy, you may also contact gb0303's 24/7 support team at [email protected] with your query. Our support team operates around the clock, with agents available in both English and Indonesian (Bahasa Indonesia) to assist players across Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, and all regions of Indonesia.
15.3 gb0303 is committed to resolving all privacy-related complaints internally in the first instance. If you are not satisfied with gb0303's response to your privacy complaint after following the internal resolution process, you may escalate the matter to the relevant data protection authority in your jurisdiction or to the arbitration process described in the Terms & Conditions.
As a gb0303 member, you hold these rights in relation to your personal data at all times. Contact [email protected] to exercise any of them.
Request a full copy of the personal data gb0303 holds about you, including how it is used and with whom it has been shared.
Request that any inaccurate or incomplete personal data be corrected promptly without undue delay.
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations for financial and KYC records.
Request that gb0303 limit how it processes your data in specific circumstances, such as while a data accuracy dispute is being resolved.
Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
Withdraw your marketing consent at any time through account settings or by emailing support. Withdrawal does not affect prior lawful processing.
Our 24/7 support team is here to help with any privacy-related queries, data rights requests, or general account questions. You can also review our Terms & Conditions or explore our FAQ for quick answers to common questions.