Privacy Policy

1. Introduction and Scope

This Privacy Policy explains how awa303 ("we", "us", "our") collects, uses, stores, protects, and discloses personal information from users ("you", "your") of our online gaming platform located at https://awa303.cam. This policy applies to all Indonesian residents aged 21 and over who access or use awa303 services, including our sportsbook, live casino, slot games, and related features.

awa303 is committed to protecting your privacy and maintaining the confidentiality of your personal information. We recognize that when you provide us with information about yourself, you trust us to handle it responsibly. This Privacy Policy describes what data we collect, why we collect it, how we use it, who we share it with (if at all), and what choices you have regarding your information.

By registering an account, depositing funds, or using any awa303 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with any provision of this policy, you must immediately cease using awa303 services and contact us to request account closure.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy. We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via email to your registered address and through prominent notice on the awa303 platform. Continued use of our services following notification of changes constitutes acceptance of the revised policy.

2. Data Controller and Contact Information

awa303 operates the gaming platform at https://awa303.cam and acts as the data controller responsible for your personal information. As data controller, we determine the purposes for which and the manner in which your personal data is processed. We are committed to handling your data in compliance with applicable data protection laws including GDPR principles and Indonesian data protection regulations.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, you may contact our Data Protection Officer through the following channels:

• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the awa303 platform (select "Privacy Inquiry" from the topic menu)
• Customer Support Hours: Indonesian-speaking representatives available 24 hours daily, 7 days per week (WIB timezone)

We aim to respond to all privacy-related inquiries within 72 hours during business days. For complex requests such as data deletion or access requests, we may require up to 30 days to fully process your request in compliance with legal requirements.

3. Information We Collect

To provide gaming services, process transactions, comply with legal obligations, and improve user experience, awa303 collects several categories of personal information. We collect only information necessary for legitimate business purposes and do not collect excessive or irrelevant data. The types of information we collect include:

3.1 Information You Provide Directly

During account registration, verification, and ongoing use of awa303 services, you provide the following information:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued ID number (KTP number, passport number, or driver's license number).
• Contact Information: Email address, mobile phone number, residential address (street, city, province, postal code).
• Account Credentials: Username, password (stored in hashed, encrypted format—we never see your actual password), security questions and answers.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet information (OVO, DANA, GoPay, ShopeePay account identifiers), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued photo ID (KTP, passport, driver's license), proof of address documents (utility bills, bank statements), selfie photographs holding ID for identity verification purposes.
• Communication Records: Customer support inquiries, live chat transcripts, email correspondence, feedback submissions, complaints, and dispute resolution documentation.

3.2 Information We Collect Automatically

When you access and use the awa303 platform, we automatically collect certain technical and usage information:

• Device Information: Device type (mobile, tablet, desktop), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution, device identifiers.
• Connection Information: IP address, internet service provider (ISP), connection type, approximate geographic location (city/province level based on IP), timezone settings.
• Usage Data: Login and logout timestamps, pages visited, features accessed, games played, bet history, time spent on platform, click patterns, navigation paths through the site.
• Cookies and Tracking Technologies: Session cookies for login persistence, preference cookies for language and display settings, analytics cookies to understand platform usage (see Cookie Policy section below).
• Gaming Activity: Bets placed (amount, game type, odds, outcome), winnings and losses, bonus usage, wagering progress, favorite games, play patterns, session duration.

3.3 Information from Third Parties

In limited circumstances, we may receive information about you from third-party sources:

• Payment Processors: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) to verify deposits and process withdrawals.
• Identity Verification Services: Verification results from third-party KYC/AML service providers to confirm identity authenticity and prevent fraud.
• Affiliate Partners: Referral source information if you registered through an affiliate link (affiliate ID only, no personal data shared by affiliates).

4. How We Use Your Information

awa303 uses the personal information we collect for the following legitimate business purposes:

Purpose	Legal Basis	Data Used
Account Management Create, maintain, and authenticate your account	Contractual necessity	Identity, contact, credentials
Transaction Processing Process deposits, withdrawals, bets, and payouts	Contractual necessity	Financial information, gaming activity
Legal Compliance Verify identity, prevent underage gambling, AML/KYC compliance	Legal obligation	Identity documents, verification photos, financial data
Fraud Prevention Detect and prevent fraud, money laundering, account abuse	Legitimate interest	All account data, usage patterns, device info, IP address
Customer Support Respond to inquiries, resolve disputes, provide assistance	Contractual necessity	Contact info, account details, communication records
Platform Improvement Analyze usage to enhance features and user experience	Legitimate interest	Usage data, gaming activity (aggregated and anonymized)
Marketing Communications Send promotional offers, bonuses, newsletters (opt-in)	Consent	Email address, gaming preferences
Responsible Gaming Monitor play patterns, enforce limits, identify problem gambling	Legal obligation & legitimate interest	Gaming activity, deposit patterns, time spent

We do not use your personal information for automated decision-making or profiling that produces legal effects or similarly significant impacts on you without human oversight. While we use automated systems to detect fraud and identify potential responsible gaming concerns, final decisions are always reviewed by trained staff members.

5. Data Sharing and Disclosure

awa303 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with trusted third-party service providers and in specific circumstances as described below:

5.1 Service Providers

We share limited personal information with third-party service providers who perform services on our behalf, including:

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay) receive your financial information (account number, name) to process deposits and withdrawals. These providers are bound by strict confidentiality obligations and may only use your data for payment processing.
• Identity Verification Providers: Third-party KYC/AML verification services receive identity documents and personal information to verify your identity and prevent fraud. They operate under data processing agreements prohibiting use beyond verification purposes.
• Hosting and Technology Providers: Cloud hosting services, database providers, and CDN (content delivery network) services store and deliver platform content. All providers are contractually obligated to maintain confidentiality and security standards equivalent to those described in this policy.
• Customer Support Tools: Live chat and email support platforms may store communication records for quality assurance and training purposes. These tools are access-controlled and subject to strict confidentiality requirements.
• Analytics Providers: We use analytics services to understand platform usage patterns. These services receive only aggregated, anonymized data that cannot identify individual users.

5.2 Legal Obligations

We may disclose your personal information when required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests from Indonesian or international authorities.
• Cooperate with law enforcement investigations into suspected criminal activity, including fraud, money laundering, or illegal gambling operations.
• Enforce our Terms & Conditions, prevent terms violations, or protect the rights, property, and safety of awa303, our users, or the public.
• Respond to claims that your use of awa303 services violates third-party rights or applicable laws.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving awa303, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent platform notice before your information is transferred and becomes subject to a different privacy policy. You will have the option to request account closure and data deletion before the transfer occurs.

5.4 Consent-Based Sharing

With your explicit consent, we may share your information for purposes not described in this policy. For example, if you consent to participate in joint promotions with partners, we may share limited information (username, participation status) with those partners. We will always request separate consent before sharing data for new purposes.

6. Data Security Measures

awa303 implements comprehensive technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 encryption.
• Access Controls: Personal information is accessible only to authorized awa303 staff who require it to perform their job functions. Access is granted on a need-to-know basis and is logged for audit purposes.
• Authentication: Staff access to systems containing personal data requires multi-factor authentication (MFA). Password policies enforce strong credentials with regular rotation requirements.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection/prevention systems (IDS/IPS) that monitor for suspicious activity 24/7.
• Regular Security Audits: We conduct quarterly internal security audits and annual third-party penetration testing to identify and remediate vulnerabilities.
• Data Segregation: Financial transaction data and identity documents are stored in segregated, access-controlled databases separate from general account data.
• Employee Training: All awa303 staff undergo mandatory data protection and security training, including confidentiality agreements prohibiting unauthorized disclosure.
• Incident Response Plan: We maintain a formal data breach response plan. In the unlikely event of a security breach affecting personal data, we will notify affected users within 72 hours and provide guidance on protective measures.

While we implement industry-leading security measures, no system is completely invulnerable. You also play a critical role in protecting your information by maintaining password confidentiality, using strong unique passwords, enabling two-factor authentication (if available), and logging out after sessions on shared devices.

7. Data Retention

awa303 retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your account plus 7 years following account closure to comply with Indonesian financial record-keeping requirements and potential legal claims.
• Transaction Records: Deposit, withdrawal, and betting history retained for 7 years following the transaction date to comply with anti-money-laundering (AML) regulations and tax reporting obligations.
• Identity Verification Documents: KYC documents (ID copies, proof of address, verification photos) retained for 7 years following account closure as required by AML/KYC regulations.
• Communication Records: Customer support inquiries, live chat transcripts, and dispute resolution records retained for 3 years to resolve potential disputes and improve service quality.
• Marketing Consents: Records of marketing consent/withdrawal retained for 3 years to demonstrate compliance with marketing regulations.
• Usage and Analytics Data: Aggregated, anonymized usage data may be retained indefinitely for statistical analysis and platform improvement. This data cannot identify individual users.

After retention periods expire, we securely delete or anonymize personal information in accordance with our data destruction procedures. Deletion involves overwriting data multiple times to prevent recovery. You may request early deletion of your data subject to applicable legal retention requirements (see Your Rights section below).

8. Your Privacy Rights

Under applicable data protection laws including GDPR principles, you have the following rights regarding your personal information:

• Right of Access: Request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, machine-readable format (typically JSON or CSV) within 30 days of your request.
• Right to Rectification: Request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings, or contact support for assistance.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information. We will comply unless retention is required by law (e.g., financial records, AML compliance). Account closure is required for data deletion.
• Right to Restriction of Processing: Request that we limit how we use your information while disputes are resolved or accuracy is verified.
• Right to Data Portability: Receive your personal information in a portable format and transmit it to another service provider (where technically feasible).
• Right to Object: Object to processing of your information for direct marketing purposes. You can opt out of marketing emails via the unsubscribe link or account settings.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe we have violated data protection laws.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request. We may require verification of your identity before processing requests to prevent unauthorized access. There is no fee for exercising these rights, though we may charge a reasonable administrative fee for excessive or repetitive requests.

9. Cookies and Tracking Technologies

awa303 uses cookies, web beacons, and similar tracking technologies to enhance user experience, maintain session security, and analyze platform usage. Cookies are small text files stored on your device that allow us to recognize you on return visits. Types of cookies we use include:

• Essential Cookies: Necessary for platform functionality including login authentication, session management, and security features. These cannot be disabled without affecting platform usability.
• Preference Cookies: Remember your settings such as language preference, timezone, and display options.
• Analytics Cookies: Collect aggregated usage statistics to understand how users navigate the platform, which features are most popular, and where improvements are needed. These cookies do not identify you personally.
• Performance Cookies: Monitor platform performance, loading times, and error rates to ensure optimal user experience.

You can control cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain platform features. Most browsers allow you to refuse third-party cookies while accepting first-party cookies from awa303.

10. International Data Transfers

While awa303 primarily serves Indonesian residents and stores data on servers located within Indonesia or nearby regions, some service providers (cloud hosting, payment processors) may operate infrastructure in other countries. When personal information is transferred internationally, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities.
• Service provider certifications demonstrating compliance with international data protection standards.
• Encryption of data in transit and at rest during international transfers.

We take all reasonable measures to ensure that your personal information receives equivalent protection regardless of where it is processed.

11. Children's Privacy

awa303 services are strictly intended for adults aged 21 and over. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process requires date of birth verification, and our KYC procedures include government ID verification to prevent underage access.

If we become aware that we have inadvertently collected information from someone under 21, we will immediately delete that information, suspend the account, void all wagers, and forfeit any funds in accordance with our Terms & Conditions. Parents and guardians are encouraged to monitor internet usage and use parental control software to prevent minors from accessing gambling websites.

12. Changes to This Privacy Policy

awa303 may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email to your registered address at least 30 days before the changes take effect, and through prominent notice on the platform. The "Last Updated" date at the top of this document indicates when revisions were made.

Continued use of awa303 services following notification of changes constitutes acceptance of the revised policy. If you do not agree with the changes, you may request account closure and data deletion (subject to legal retention requirements) before the new policy takes effect by contacting [email protected].

13. Contact Information for Privacy Matters

For questions, concerns, or requests related to this Privacy Policy or how awa303 handles your personal information, please contact:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: 24/7 via awa303 platform (select "Privacy Inquiry")

We are committed to addressing your privacy concerns promptly and transparently. Response times: privacy inquiries within 72 hours; data access/deletion requests within 30 days; general support inquiries within 24 hours.