At gbk303, we treat your personal data with the same care and security we apply to your account funds. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold as a data subject.
These six principles summarize how gbk303 approaches data protection. They are not a substitute for the full policy below — please read all sections carefully.
gbk303 applies the principle of data minimization. We only collect personal information that is genuinely necessary to provide our services, comply with legal obligations, and protect the integrity of the platform.
All data transmitted between your device and our servers is protected by industry-standard SSL/TLS encryption. Sensitive data at rest is stored in encrypted form with strict access controls limiting who can view it.
gbk303 does not sell, rent, or trade your personal data to third-party marketers. Data shared with third parties is limited to what is strictly necessary for service delivery, legal compliance, and fraud prevention.
You have the right to access, correct, restrict, and — where applicable — request deletion of your personal data. You can also opt out of marketing communications at any time through your account preferences.
We do not hold your data indefinitely. Retention periods are defined by the purpose for which data was collected and applicable legal requirements. Data no longer needed is securely deleted or anonymized.
In the unlikely event of a data breach that affects your personal information, gbk303 will notify impacted players promptly and take immediate remedial action to contain the incident and prevent recurrence.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
gbk303 acts as the Data Controller for all personal data collected through the platform. As Data Controller, gbk303 is responsible for determining the purposes for which personal data is processed and ensuring that processing is carried out lawfully, fairly, and transparently.
For all data protection inquiries, requests to exercise your rights, or concerns about how your personal data is handled, please contact our designated Data Protection contact at the address provided in Section 16 of this Policy.
gbk303 collects the following categories of personal data, depending on the nature of your interaction with the platform:
3.1 Registration & Identity Data
3.2 Contact Data
3.3 Identity Verification (KYC) Data
3.4 Financial & Transaction Data
3.5 Gaming & Behavioral Data
3.6 Technical & Device Data
3.7 Communications & Support Data
gbk303 collects personal data through the following channels:
gbk303 processes personal data only where we have a lawful basis to do so. The legal grounds we rely on include:
You have the right to withdraw consent at any time where consent is the legal basis for processing. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.
Personal data collected by gbk303 is used exclusively for the following purposes:
gbk303 does not sell personal data to third parties. We share data only with trusted service providers and under the following limited circumstances:
All third-party processors are bound by strict data processing agreements requiring them to protect your data with the same standard of care applied by gbk303 and to use data only for the specified purpose.
gbk303 uses cookies and similar tracking technologies to enhance platform functionality, personalize your experience, and analyze usage patterns. The following types of cookies are employed:
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality. Most browsers accept cookies by default; consult your browser's help documentation for instructions on blocking or deleting cookies.
gbk303 retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Registration & Identity Data | Duration of account + 7 years post-closure |
| KYC Documents | 7 years from date of collection (AML compliance) |
| Transaction History | 7 years from date of transaction (tax & audit requirements) |
| Gaming Activity Logs | 3 years from date of activity |
| Support Communications | 3 years from date of inquiry |
| Marketing Preferences | Until opt-out or account closure |
| Device & Technical Data | 12 months from collection |
Once the retention period expires, personal data is either securely deleted or anonymized such that it can no longer identify you. Data may be retained beyond these periods where required by ongoing legal proceedings or regulatory investigations.
gbk303 employs comprehensive technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction:
As a data subject, you hold the following rights in relation to your personal data processed by gbk303:
You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.
If personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
You may request deletion of your personal data where there is no compelling legal reason for continued processing. Note that certain data must be retained for legal compliance (KYC, transaction records).
You may request that we limit how we use your data, for example while a dispute over data accuracy is being resolved.
You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
To exercise any of these rights, please contact our Data Protection team using the contact details in Section 16. We will respond to verified requests within 30 days. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
gbk303 does not knowingly collect personal data from individuals under 21 years of age. The platform is intended exclusively for adults who meet the legal gambling age requirement in Indonesia (21+).
If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that data and close the associated account. Any winnings from underage play will be voided, and deposits will be returned to the source account where possible.
Parents and guardians are encouraged to monitor their children's internet usage and to implement parental controls to prevent minors from accessing age-restricted content, including online gambling platforms.
gbk303 primarily serves players in Indonesia. However, certain third-party service providers (game studios, payment processors, security vendors) may be located in jurisdictions outside Indonesia, including the European Union, United States, and other countries with data protection frameworks.
When personal data is transferred internationally, we ensure that appropriate safeguards are in place, including:
You have the right to request further information about the safeguards we apply to international data transfers by contacting our Data Protection team.
The gbk303 platform may contain links to third-party websites or services, such as payment gateways and game provider portals. This Privacy Policy applies only to data collected by gbk303 directly. We are not responsible for the privacy practices of third-party websites.
When you navigate to a third-party service, that service's own privacy policy governs how your data is collected and used. We encourage you to review the privacy policies of any third-party services you interact with.
gbk303 does not endorse or assume liability for the content, services, or data practices of linked third-party sites.
gbk303 reserves the right to update or amend this Privacy Policy to reflect changes in our data processing practices, legal requirements, or platform features. Material changes will be communicated to registered members via email or prominent platform notification at least 14 days before the updated policy takes effect.
Continued use of the gbk303 platform after the effective date of the updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you may request account closure and deletion of your personal data, subject to applicable retention obligations.
The date of the most recent revision is displayed at the top of this page. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data.
If you have questions, concerns, or requests relating to this Privacy Policy or how gbk303 processes your personal data, please contact our Data Protection team:
When submitting a data protection request (access, rectification, erasure, etc.), please include your registered account username and sufficient information to verify your identity. We may request additional verification to protect your data from unauthorized access.
Our team is here to help you understand how your data is collected, used, and protected. You can also explore our FAQ, read the full Terms & Conditions, or learn about our Responsible Gaming commitments.