Our Privacy Commitments
These highlights summarize the most important aspects of how gtr303 handles your data. They supplement — but do not replace — the full policy below.
256-Bit SSL Encryption
Every data transmission between your device and the gtr303 platform is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal information are secured end-to-end at all times.
No Sale of Personal Data
gtr303 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used exclusively to provide and improve our services, fulfill legal obligations, and protect account security.
Minimal Data Collection
We collect only the data that is strictly necessary to operate your account, verify your identity, process your payments, and comply with our legal and regulatory obligations. We do not collect data speculatively or in excess of what each purpose requires.
Defined Retention Periods
Your personal data is retained only for as long as it is needed for the purposes described in this policy or as required by applicable law. When data is no longer necessary, it is securely deleted or anonymized in accordance with our data retention schedule.
Your Rights, Clearly Stated
You have the right to access, correct, or request deletion of your personal data at any time. You may also object to certain types of processing or request that we restrict the use of your data while a dispute is being resolved. See Section 9 for the full list.
Local Payment Data Handled Carefully
When you deposit or withdraw via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, or ShopeePay, your payment details are processed securely and retained only as needed for transaction records, fraud prevention, and regulatory compliance.
This Privacy Policy ("Policy") describes how gtr303 ("the Platform", "we", "our", "us") collects, uses, stores, and protects the personal data of users ("Player", "you", "your") who access or use services available at gtr303.cam. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. This Policy forms an integral part of our Terms & Conditions.
1. Definitions
Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data. This includes your name, KTP number, email address, phone number, bank account details, IP address, and device identifiers.
Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, transmission, or deletion.
gtr303, the entity that determines the purposes and means of processing your Personal Data.
A third-party service provider that processes Personal Data on behalf of gtr303 strictly under our documented instructions (e.g., identity verification providers, payment processors).
Small text files placed on your device by websites to store session information, preferences, and analytical data. See Section 7 for full details on the cookies gtr303 uses.
2. Data We Collect
gtr303 collects personal data across several categories depending on the nature of your interaction with the Platform:
2.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identity document (KTP for Indonesian residents)
- Date of birth
- Nationality and country of residence
- Registered email address
- Mobile phone number
- Residential address
2.2 Financial and Payment Data
- Bank account name, number, and bank code (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga)
- E-wallet identifiers (OVO, DANA, GoPay, ShopeePay phone numbers or account IDs)
- Deposit and withdrawal transaction history
- Account balance history
We do not store full card numbers or CVV/CVC data. Payment card processing, where applicable, is handled by PCI-DSS-compliant third-party processors.
2.3 KYC and Verification Data
- Copies of government-issued identity documents (KTP, passport)
- Proof of address documents (utility bills, bank statements)
- Selfie or liveness verification images where required
- Source-of-funds declarations where applicable
2.4 Technical and Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Device fingerprint identifiers
- Session timestamps, login history, and access logs
2.5 Behavioral and Usage Data
- Pages visited, features accessed, and time spent on platform sections
- Game play history, wager amounts, and session duration
- Responsible gaming tool usage (deposit limit settings, self-exclusion requests)
- Support ticket and live chat interaction history
2.6 Marketing Preference Data
- Your stated preferences regarding promotional communications
- Email open rates and click-through data where marketing emails are sent
- Bonus offer redemption history
3. How We Collect Your Data
gtr303 collects your personal data through the following channels:
- Account Registration: Data you provide directly when creating your gtr303 account, including your name, date of birth, email, and phone number.
- KYC Verification: Documents you submit during the identity verification process, either directly through the platform upload tool or via our third-party identity verification partner.
- Deposits and Withdrawals: Payment information entered or confirmed when conducting financial transactions through supported Indonesian banks or e-wallets.
- Platform Usage: Data collected automatically as you browse and interact with the platform, including device identifiers, IP addresses, session logs, and gameplay records.
- Customer Support: Information you provide when you contact our support team by email or live chat, including the content of your communications and any attachments you submit.
- Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 7 of this Policy.
- Third-Party Sources: In limited circumstances, we may receive data about you from third-party identity verification providers, fraud-prevention databases, or payment processors to supplement the information you have provided directly.
4. How We Use Your Data
gtr303 processes your personal data only for specific, documented purposes. The table below maps each processing purpose to the categories of data involved:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, contact, technical |
| Identity verification (KYC) | Identity, KYC documents, financial |
| Processing deposits and withdrawals | Financial, identity, technical |
| Fraud prevention and security monitoring | Technical, behavioral, financial, identity |
| Responsible gaming monitoring | Behavioral, usage, identity |
| Customer support delivery | Identity, contact, behavioral |
| Regulatory and legal compliance | Identity, KYC, financial, technical |
| Platform performance and analytics | Technical, behavioral, usage |
| Marketing communications (where consented) | Contact, marketing preference, behavioral |
5. Legal Basis for Processing
gtr303 processes your personal data on one or more of the following legal grounds:
- Contractual Necessity: Processing required to fulfill the contract between you and gtr303, including account management, game delivery, and payment processing.
- Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, counter-terrorism financing rules, and tax reporting obligations.
- Legitimate Interests: Processing carried out in pursuit of gtr303's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and product improvement, where these interests are not overridden by your rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — for example, the sending of marketing communications. You may withdraw your consent at any time by contacting us at [email protected] or updating your notification preferences in your account settings.
6. Sharing Your Data
gtr303 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients only where necessary and under appropriate contractual safeguards:
6.1 Service Providers (Data Processors)
We engage carefully selected third-party service providers who process personal data solely on our behalf and under our documented instructions. These include:
- Identity verification and KYC technology providers
- Payment processors and banking infrastructure partners
- Cloud hosting and infrastructure providers
- Customer support platform providers
- Analytics and platform performance monitoring tools
All Data Processors are contractually required to implement appropriate security measures and to process personal data only as instructed by gtr303.
6.2 Game Content Providers
Game studios whose content is available on the gtr303 platform (such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft) may receive limited technical data — such as anonymized session identifiers — as required to deliver their game content. These studios do not receive your identity, payment, or contact data.
6.3 Legal and Regulatory Authorities
We may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of gtr303, its users, or others.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of gtr303's business, personal data held by us may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy protections that apply before it takes effect.
7. Cookies & Tracking Technologies
gtr303 uses cookies and similar tracking technologies to ensure the platform functions correctly, to analyze usage patterns, and to tailor certain features to your preferences. The categories of cookies we use are as follows:
7.1 Essential Cookies
These cookies are strictly necessary for the platform to operate. They manage your login session, maintain security tokens, and enable core features such as account access and game loading. You cannot opt out of essential cookies without disabling your ability to use the platform.
7.2 Analytics Cookies
We use analytics cookies to understand how users interact with the platform — for example, which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is aggregated and anonymized where possible and is used to improve the platform experience.
7.3 Marketing and Preference Cookies
Where you have provided consent, we may use preference cookies to remember your settings and marketing cookies to deliver relevant promotional content. You may withdraw this consent at any time by adjusting your browser settings or contacting our support team.
7.4 Managing Your Cookie Preferences
Most modern web browsers allow you to control which cookies are accepted, stored, or deleted. You may also clear existing cookies at any time through your browser settings. Please note that disabling non-essential cookies may affect the functionality of certain platform features.
8. Data Retention
gtr303 retains your personal data only for as long as it is necessary to fulfill the purposes described in this Policy, to maintain our contractual obligations to you, or as required by applicable law. The key retention periods are summarized below:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC documents | Duration of account + 5 years post-closure | Legal obligation / regulatory requirement |
| Financial transaction records | Duration of account + 5 years post-closure | Legal obligation / tax and AML compliance |
| Technical and device logs | Up to 12 months from collection | Legitimate interest / security monitoring |
| Customer support records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing preference data | Until consent is withdrawn or account closed | Consent |
When data reaches the end of its retention period, it is securely deleted from our systems or irreversibly anonymized so that it can no longer be associated with any individual.
9. Your Rights
As a user of the gtr303 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.
10. Security Measures
gtr303 applies a layered security architecture to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our key security measures include:
- 256-bit SSL/TLS encryption for all data in transit between your browser or device and our servers.
- Encryption at rest for sensitive stored data, including KYC documents and payment identifiers.
- Access controls limiting staff access to personal data on a strict need-to-know basis, enforced through role-based permissions and multi-factor authentication for administrative systems.
- Continuous security monitoring including intrusion detection systems, anomaly alerts, and regular vulnerability assessments.
- Third-party security audits conducted periodically to validate the integrity of our technical and organizational controls.
- Incident response procedures to detect, contain, and notify affected users of any personal data breach in a timely manner.
While gtr303 implements all reasonable and industry-standard security measures, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.
11. Children's Privacy
The gtr303 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not register an account or use any of our services.
If gtr303 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has provided personal data to gtr303, please contact us immediately at [email protected] so that we may investigate and take appropriate action.
12. Changes to This Policy
gtr303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify you by sending an email to your registered address and by posting a prominent notice on the platform at least 14 days before the changes take effect.
The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised Policy.
13. Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way gtr303 processes your personal data, please contact our Data Protection team:
Data Protection Contact: [email protected]
Subject Line: Privacy Request — [Your Registered Email]
Response Time: We aim to acknowledge all privacy-related requests within 3 business days and to resolve them within 30 calendar days (WIB).
If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. gtr303 is committed to cooperating fully with any such investigation.
Questions About Your Privacy?
Our team is ready to help with any data-related questions, access requests, or concerns. You can also explore our other policy pages to understand your full rights and obligations as a gtr303 player.