This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data by mk303 ("mk303", "we", "us", "our") in connection with the online betting and gaming platform operated at mk303.pro and all associated subdomains, mobile interfaces, and APIs (collectively, the "Platform"). This Policy applies to all registered members, prospective members, and visitors who access the Platform from anywhere in Indonesia or beyond.
mk303 is committed to protecting your privacy and handling your personal data with transparency, integrity, and appropriate technical safeguards. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and accepted the practices described in this Policy. This Policy is incorporated by reference into the mk303 Terms & Conditions.
Key Commitment: mk303 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. Data shared with third parties is strictly limited to what is necessary to provide Platform services, comply with legal obligations, or protect the safety and integrity of our platform.
If you have questions about how your data is handled, or wish to exercise any of the rights described in this Policy, you may contact our Data Protection team at any time — see Section 13 for full contact details.
1Definitions
The following definitions apply throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, bank account details, IP address, device identifiers, and behavioral data. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | mk303, as the entity that determines the purposes and means of processing your Personal Data. |
| "Data Processor" | Any third-party service provider that processes Personal Data on behalf of mk303, subject to binding contractual obligations. |
| "Member" | Any individual who has registered and maintains an active account on the mk303 Platform. |
| "KYC" | Know Your Customer — the identity and age verification process applied to Members before withdrawal of funds is permitted. |
| "Sensitive Data" | A subset of Personal Data warranting heightened protection, including government-issued ID numbers, financial account details, and health-related disclosures made in the context of responsible gaming. |
2Data We Collect
2.1 Registration Data
When you create a mk303 account, we collect the following information to establish your identity, confirm your eligibility, and set up your account:
- Full legal name (as it appears on your government-issued ID)
- Date of birth (to confirm you are at least 21 years of age)
- Residential address in Indonesia (province, city/regency, postal code)
- Valid email address
- Mobile phone number (Indonesian format)
- Chosen username and encrypted password (passwords are hashed using bcrypt; we never store plain-text passwords)
2.2 Identity Verification (KYC) Data
Before processing withdrawal requests, mk303 requires the following Sensitive Data for KYC verification purposes:
- Scanned or photographed copy of a government-issued photo ID (Indonesian National ID Card / KTP, Passport, or SIM driving licence)
- Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
- Proof of ownership of the bank account or e-wallet used for transactions (e.g., screenshot confirming account holder name)
- In certain high-value or risk-flagged cases, a selfie photograph holding your ID document
2.3 Financial Transaction Data
We record details of all deposits and withdrawals processed through supported Indonesian payment channels, including local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). Transaction records include the amount in IDR, payment method reference, timestamp, and transaction status.
2.4 Behavioral and Gaming Data
mk303 automatically records your activity on the Platform to deliver services, detect fraud, and support responsible gaming monitoring. This includes:
- Bet history, game session data, and wagering patterns across all product verticals (sports betting, live dealer casino, slots, togel (Indonesia's traditional numbers lottery), esports markets)
- Deposit and withdrawal frequency and amounts
- Login timestamps, session durations, and account dashboard interactions
- Responsible gaming tool usage (deposit limit settings, session reminders, cooling-off requests)
2.5 Technical and Device Data
When you access the Platform, our servers automatically collect standard technical data including your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, referring URL, and pages visited within the Platform. This data is used for security monitoring, fraud prevention, and service optimisation.
2.6 Communications Data
When you contact mk303 customer support via live chat or email, we retain records of those communications — including timestamps, the content of messages, and the resolution outcome — for quality assurance, training, and dispute resolution purposes.
3How We Collect Data
mk303 collects Personal Data through the following channels:
- Directly from you: During account registration, KYC submission, deposit/withdrawal requests, support interactions, and when you voluntarily update your account profile.
- Automatically through the Platform: Via server logs, session tracking technology, and first-party cookies that operate whenever you access mk303.pro.
- From regulated third-party service providers: Our KYC verification partners may return identity-match scores and document authenticity signals; our payment processors provide transaction confirmation data. These providers are contractually restricted to sharing only the minimum data necessary for verification purposes.
- From licensed game studios: When you play games provided by partners such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft, session result data is transmitted to mk303 to update your account balance and bet history.
No Unsolicited Data Collection: mk303 does not purchase data lists, scrape social media profiles, or obtain Personal Data from sources other than those described above. If you contact us from a social media account or third-party platform, only the content of that specific communication is processed; we do not access or store your broader social media profile data.
4Purpose & Legal Basis
mk303 processes Personal Data only for specified, legitimate purposes. The table below sets out our key processing activities, the purposes served, and the legal basis relied upon for each:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration | Creating and managing your member account; verifying eligibility (21+ age, Indonesia residency) | Contract performance; Consent |
| KYC verification | Confirming identity before withdrawals; anti-money laundering compliance | Legal obligation; Legitimate interest |
| Payment processing | Processing IDR deposits and withdrawals via local banks and e-wallets | Contract performance |
| Gaming activity logging | Calculating balances, bet results, and bonus wagering progress | Contract performance |
| Fraud and security monitoring | Detecting suspicious activity, multiple account abuse, and platform integrity threats | Legitimate interest |
| Responsible gaming monitoring | Identifying at-risk behavioral patterns and enforcing member-set limits | Legal obligation; Member protection |
| Customer support | Responding to enquiries, resolving disputes, and maintaining communication records | Contract performance; Legitimate interest |
| Platform analytics | Understanding usage patterns to improve product features and user experience | Legitimate interest |
| Marketing communications | Sending promotional offers, seasonal bonuses (e.g., Idul Fitri, BRI Liga 1 specials), and platform news to opted-in members | Consent (opt-in required; opt-out available at any time) |
Marketing Opt-Out: If you have opted in to marketing communications and subsequently wish to stop receiving them, you may withdraw consent at any time by updating your communication preferences in your account dashboard, or by contacting support via live chat or email. Opt-out requests are processed within 5 business days.
5Data Sharing
5.1 Regulated Third-Party Service Providers
mk303 shares Personal Data with the following categories of regulated third-party Data Processors solely to deliver Platform services. Each processor is bound by a Data Processing Agreement requiring equivalent standards of data protection and restricting use of the data to the agreed purpose only:
- KYC and Identity Verification Partners: Receive copies of ID documents and return verification outcomes. Data is not retained beyond the verification transaction.
- Payment Processors: Handle IDR transaction data for local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). Payment processors receive only the minimum data required to authenticate and route transactions.
- Licensed Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session tokens and game result data to operate their games within the Platform environment. These studios are licensed operators with their own data protection obligations.
- Cloud Infrastructure Providers: mk303's Platform is hosted on enterprise-grade cloud infrastructure. Our hosting providers process server log data as part of standard infrastructure operations and are bound by strict data processing terms.
5.2 Law Enforcement and Regulatory Authorities
mk303 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or in response to a formally issued legal process. Where permitted by law, mk303 will notify the affected Member of such a disclosure request before complying. mk303 will cooperate fully with investigations involving fraud, money laundering, or other criminal conduct connected to Platform use.
5.3 Business Transfers
In the event that mk303 undergoes a corporate restructuring, merger, acquisition, or sale of assets, Personal Data held in member accounts may form part of the transferred assets. In such cases, mk303 will provide notice to affected Members via their registered email address and will ensure that the successor entity is bound by data protection obligations no less protective than those set out in this Policy.
5.4 No Sale of Data
mk303 does not, and will not, sell, rent, lease, or otherwise transfer Personal Data to any third party for that party's own independent marketing, advertising, or commercial purposes. This prohibition is absolute and applies regardless of any consideration offered.
6International Transfers
mk303 is an internationally operated platform and some of our regulated service providers — including certain KYC partners and licensed game studios — are headquartered or operate data infrastructure outside of Indonesia. Where Personal Data is transferred outside Indonesia for processing, mk303 ensures that appropriate safeguards are in place prior to the transfer, including:
- Binding contractual clauses that impose equivalent data protection obligations on the receiving entity.
- Restricting transfers to jurisdictions that maintain an adequate level of data protection regulation as determined by internationally recognised standards.
- Applying additional technical controls (encryption in transit and at rest) when data crosses jurisdictional boundaries.
Members who wish to obtain details of the specific safeguards applied to international transfers of their Personal Data may submit a written request to our Data Protection team — see Section 13 for contact details.
7Data Retention
mk303 retains Personal Data only for as long as it is necessary for the purposes described in this Policy, or as required to meet legal, regulatory, or contractual obligations. The following retention schedule applies as a general reference:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of active account + 5 years after closure | Legal obligation (AML compliance) |
| KYC identity documents | 5 years from date of submission or account closure | Regulatory requirement |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligation |
| Gaming and bet history | 5 years from account closure | Dispute resolution; regulatory audit |
| Customer support communications | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Server log and device data | 90 days from collection | Security monitoring; then deleted |
| Marketing preferences | Until opt-out, then records of opt-out retained for 3 years | Consent management |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures. Anonymised or aggregated data that no longer identifies any individual may be retained indefinitely for statistical and research purposes.
8Security Measures
mk303 maintains a comprehensive information security programme designed to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our current technical and organisational security measures include:
- Transport Layer Security: All data in transit between your browser and mk303 servers is encrypted using TLS 1.3, the current industry-standard protocol for secure web communications.
- At-Rest Encryption: Personal Data, KYC documents, and financial records stored on mk303 infrastructure are encrypted using AES-256, a symmetric encryption standard used by financial institutions and government agencies worldwide.
- Password Security: Member passwords are hashed using the bcrypt algorithm before storage. mk303 never stores or transmits plain-text passwords.
- Access Controls: Access to member Personal Data within mk303's internal systems is granted on a strictly need-to-know basis. All staff with data access privileges are subject to confidentiality agreements and regular security training.
- Intrusion Detection: mk303's platform infrastructure is monitored 24/7 by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts and investigation.
- Penetration Testing: mk303 commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
- Data Breach Response: In the event of a confirmed personal data breach, mk303 will notify affected Members and, where legally required, relevant regulatory authorities, within the timeframes prescribed by applicable law.
SSL Encrypted & Provably Fair: The mk303 Platform operates on a fully SSL-encrypted infrastructure. Game outcomes for eligible products are generated by certified random number generators (RNGs) and are provably fair, ensuring no party — including mk303 — can manipulate results.
While mk303 employs robust security measures, no digital system can be guaranteed to be entirely immune from determined external threats. You also play an important role in keeping your data secure by maintaining a strong, unique password for your mk303 account and never sharing your login credentials with any third party.
9Cookies & Tracking
9.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. mk303 uses first-party cookies — cookies set directly by mk303.pro — to manage authenticated sessions, maintain your platform preferences, and monitor security signals during your visit.
9.2 Types of Cookies Used by mk303
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your logged-in session, prevent CSRF attacks, and ensure secure authenticated access after mk303 login | Session (deleted on browser close) |
| Functional | Remember your language preference, display settings, and last-visited game category | 30 days |
| Performance / Analytics | Collect anonymised data on page load times, error rates, and feature usage to improve Platform performance | 90 days |
9.3 What mk303 Does Not Use
mk303 does not deploy third-party advertising cookies, cross-site tracking pixels, social media tracking tags, or any technology designed to build a profile of your browsing activity across websites other than mk303.pro. You will not see mk303 retargeting advertisements on other websites as a result of visiting the Platform.
9.4 Cookie Management
You may manage or delete cookies at any time through your browser's privacy settings. Disabling strictly necessary cookies will prevent you from logging into your mk303 account. Disabling functional or performance cookies will not affect account access but may reduce the quality of your Platform experience. Most modern browsers provide clear instructions for managing cookies in their help or settings sections.
10Your Rights
As a mk303 member, you hold the following rights with respect to your Personal Data. mk303 is committed to facilitating the exercise of these rights promptly and without undue barriers:
- Right of Access: You may request a copy of the Personal Data mk303 holds about you, including the categories of data held, the purposes for which it is processed, and the parties with whom it has been shared.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Minor profile details (email address, phone number, delivery preferences) can be updated directly in your account dashboard after mk303 login. Changes to KYC-verified identity data require a formal request to our Data Protection team.
- Right to Erasure: You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you believe it has been processed unlawfully. This right is subject to overriding legal retention obligations — for example, financial records may need to be retained for up to 7 years regardless of an erasure request.
- Right to Restrict Processing: You may request that mk303 restrict the processing of your Personal Data in certain circumstances, for example while a disputed accuracy claim is under investigation.
- Right to Data Portability: For data processed on the basis of consent or contract performance, you may request a copy of your Personal Data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing carried out on the basis of mk303's legitimate interests — including profiling for responsible gaming monitoring — where you believe your individual rights and interests override those legitimate interests. You may also object to marketing communications at any time (see Section 4).
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
To exercise any of the above rights, please contact our Data Protection team via live chat or email at support@mk303.pro with the subject line "Data Rights Request". We aim to respond to all rights requests within 30 calendar days. Complex requests may require up to 60 days, in which case we will notify you of the extension before the initial 30-day deadline.
Identity Verification for Rights Requests: To protect your data, mk303 must verify your identity before processing any data rights request. We may ask you to confirm details that match your registered account information. We will not process rights requests received from unverified or anonymous sources.
11Minors & Age Policy
The mk303 Platform is strictly intended for adults aged 21 years or older. mk303 does not knowingly collect Personal Data from individuals under the age of 21. If mk303 becomes aware that a registered account belongs to a person under 21, the account will be immediately terminated, all balances will be forfeited, and any Personal Data collected in connection with that account will be deleted from our systems as soon as possible, subject only to retention obligations imposed by applicable law.
If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered an account on the mk303 Platform, please contact our support team immediately via live chat or by emailing support@mk303.pro. We will investigate and take appropriate action as a matter of priority.
21+ Only: Gambling can be addictive. The mk303 Platform is for adults only. We take our responsibility to prevent underage gambling extremely seriously and actively cooperate with responsible gaming initiatives to enforce this restriction.
12Changes to This Policy
mk303 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, mk303 will notify Members through one or more of the following channels:
- A prominent notice displayed on the mk303.pro homepage and within the Platform dashboard.
- A notification banner displayed upon your next mk303 login after the change takes effect.
- An email notification to your registered email address, where the change materially affects your rights or the way we process Sensitive Data.
The revised Policy will be effective from the date stated in the "Effective Date" field at the top of this document. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy. If you do not accept the revised terms, you must discontinue Platform use and may request account closure in accordance with the mk303 Terms & Conditions.
Stay Up to Date: We recommend bookmarking this page and reviewing it periodically. The "Last Revised" date at the top of this document is updated each time a meaningful change is made, making it easy to check whether the Policy has changed since your last review.
13Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data rights described in Section 10, please contact mk303 through the following channels:
- Live Chat: Available 24/7 directly within your mk303 account dashboard — the fastest way to reach a privacy-trained support agent.
- Email (plain text — not a clickable link): support@mk303.pro — use subject line "Privacy Policy Enquiry" or "Data Rights Request" to ensure prompt routing.
- Response Times: We aim to acknowledge all written privacy enquiries within 24 hours (WIB, UTC+7) and to provide a substantive response within 5 business days for standard enquiries and within 30 calendar days for formal data rights requests.
- Support Hours: 24 hours a day, 7 days a week. Native Indonesian-speaking agents are available at all times for members who prefer to communicate in Bahasa Indonesia, even though the Platform itself is operated in English.
mk303 is committed to resolving all privacy-related concerns fairly and transparently. If, after contacting us, you remain dissatisfied with the resolution of a privacy concern, you may escalate the matter to the appropriate data protection authority or regulatory body in your jurisdiction.