Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "lso303", "we", "us", or "our" refers to the lso303 platform operated at lso303.cam and all affiliated services.
• "User", "Player", "you", or "your" refers to any individual who accesses, registers on, or uses the lso303 platform.
• "Personal Data" means any information that identifies or can identify you as an individual, including your name, date of birth, address, email address, phone number, payment details, and device identifiers.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion.
• "Cookies" refers to small text files placed on your device by our platform to enhance your browsing experience and collect usage analytics.
• "Third-Party Service Providers" refers to companies engaged by lso303 to perform specific functions on our behalf, such as payment processing, fraud detection, and customer support technology, who are contractually bound to protect your data.

2. Information We Collect

lso303 collects Personal Data through several channels. The following table summarizes the categories of data collected, the specific data points within each category, and the lawful basis for collecting them.

2.1 Data Collected Automatically

When you access lso303, certain technical information is collected automatically through cookies, pixel tags, and similar tracking technologies. This includes your IP address, browser and device characteristics, pages visited, time spent on pages, and actions taken on the platform. This data helps us improve platform performance, detect suspicious activity, and personalize your experience.

2.2 Data Collected from Third Parties

In limited circumstances, lso303 may receive Personal Data about you from third parties, including:

• Payment processors and banking partners who provide transaction confirmation and fraud screening signals
• Identity verification service providers who assist with KYC document authentication
• Fraud detection agencies and sanctions screening databases
• Affiliate partners who referred you to lso303 (limited to referral tracking data only)

3. How We Use Your Information

lso303 uses your Personal Data for the following specific purposes, all of which are necessary to provide our services or are based on legitimate interests that do not override your rights:

3.1 Service Delivery

• Creating and maintaining your lso303 account
• Processing deposits and withdrawals through your nominated pay ment methods (BCA, BRI, BNI, Mandiri, and supported e-wallets)
• Providing access to all gaming products including slots, live dealer games, sports betting markets, and specialty games
• Administering bonuses, promotions, and loyalty rewards
• Delivering customer support through live chat, email, and WhatsApp

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) in accordance with KYC obligations
• Screening transactions for money laundering, fraud, and other financial crimes under AML regulations
• Maintaining transaction records as required by applicable law
• Responding to lawful requests from regulatory or law enforcement authorities

3.3 Platform Security and Fraud Prevention

• Detecting and investigating suspicious login attempts, unusual betting patterns, or unauthorized account access
• Enforcing our one-account-per-player policy and identifying duplicate accounts
• Monitoring for bonus abuse, collusion, or other violations of our Terms & Conditions

3.4 Service Improvement and Personalization

• Analyzing gaming behavior and platform usage patterns to improve product offerings
• Personalizing game recommendations, promotional offers, and platform interface based on your preferences
• Conducting internal research and analytics to optimize user experience

3.5 Marketing Communications

Where you have provided consent, lso303 may send you promotional emails, SMS notifications, or in-app messages about new games, seasonal offers (such as Idul Fitri or Chinese New Year promotions), and platform updates. You may withdraw your marketing consent at any time by updating your account notification preferences or by contacting our support team.

4. Cookies and Tracking Technologies

lso303 uses cookies and similar technologies to operate the platform effectively, remember your preferences, and understand how users interact with our services. The types of cookies we use are as follows:

You can manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies may impair your ability to log in or use certain platform features.

5. Sharing and Disclosure of Your Data

lso303 does not sell your Personal Data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

5.1 Payment and Banking Partners

To process deposits and withdrawals through local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), we share the minimum financial data necessary with certified payment processors. These partners are contractually bound to process your data only for the specific transaction purpose and are prohibited from using it for any other purpose.

5.2 Identity Verification Providers

We engage accredited third-party KYC providers to verify identity documents (such as the Indonesian KTP) and conduct liveness checks. These providers receive only the data required to complete the verification and are prohibited from retaining it beyond the verification process.

5.3 Fraud Prevention and Security Services

We share certain technical identifiers (IP addresses, device fingerprints, transaction metadata) with fraud detection agencies and sanctions screening databases to prevent money laundering, unauthorized account access, and other financial crimes.

5.4 Legal and Regulatory Authorities

lso303 will disclose Personal Data to government bodies, regulators, or law enforcement agencies where we are legally required to do so, where we believe disclosure is necessary to protect the rights and safety of our users or the public, or where required to enforce our Terms & Conditions.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of substantially all of lso303's assets, your Personal Data may be transferred to the acquiring entity. We will notify registered users of any such transaction and the choices available to them before any transfer occurs.

6. Data Retention

lso303 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Communication records: Support chat transcripts and email correspondence are retained for three (3) years.
• Gaming activity logs: Retained for three (3) years from the date of each session.
• Marketing consent records: Retained until you withdraw consent plus one (1) additional year for audit purposes.
• Technical and security logs: Retained for up to twelve (12) months.

When Personal Data is no longer required, it is securely deleted or anonymized in accordance with industry best practices so that it can no longer be used to identify you.

7. Your Rights and Choices

As a user of lso303, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified requests within thirty (30) days.

7.1 Right of Access

You have the right to request a copy of the Personal Data lso303 holds about you, along with information about how it is being used and shared.

7.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update certain account information (such as your email address or phone number) directly through your account settings panel.

7.3 Right to Erasure

In certain circumstances, you have the right to request that lso303 delete your Personal Data. Please note that this right is subject to legal retention obligations — data we are legally required to retain (such as transaction records under AML law) cannot be erased on request.

7.4 Right to Restrict Processing

You may request that lso303 restrict the processing of your Personal Data in specific circumstances, such as while a dispute about its accuracy is being resolved.

7.5 Right to Withdraw Consent

Where processing is based on your consent (for example, receiving marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7.6 Right to Lodge a Complaint

If you believe lso303 has mishandled your Personal Data, you have the right to contact our compliance team directly. We take all privacy complaints seriously and will investigate and respond promptly.

8. Data Security Measures

lso303 implements a comprehensive, layered security framework to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction:

• Transport Layer Security (TLS/SSL): All data in transit between your device and lso303 servers is encrypted using a minimum of 256-bit TLS encryption.
• Data Encryption at Rest: Sensitive data fields (including identity documents and financial records) are encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration Testing: Our platform and infrastructure undergo regular third-party security audits and penetration tests to identify and remediate vulnerabilities.
• Intrusion Detection: Real-time intrusion detection and monitoring systems alert our security team to anomalous activity around the clock.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within seventy-two (72) hours of becoming aware of the breach.

While lso303 takes all reasonable steps to protect your data, no digital platform can guarantee absolute security. We encourage you to use a strong, unique password for your lso303 account and to enable two-factor authentication where available.

9. Children's Privacy

lso303 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access. If we become aware that a user under 21 years of age has registered an account, we will immediately suspend the account, void any associated transactions, and delete the associated Personal Data in accordance with our data retention policy.

If you believe a minor has registered on lso303, please contact us immediately at [email protected] so we can take appropriate action.

10. International Data Transfers

lso303 primarily processes and stores data on servers located in jurisdictions with recognized data protection standards. Where it is necessary to transfer Personal Data to service providers located in other countries, we ensure that adequate safeguards are in place, including:

• Contractual clauses requiring the recipient to protect your data to the same standard as this Privacy Policy
• Transfers only to countries recognized as providing an adequate level of data protection
• Use of accredited, internationally certified service providers subject to binding corporate rules

11. Amendments to This Privacy Policy

lso303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our services, business practices, or applicable legal requirements. When material changes are made, we will notify registered users via email or a prominent platform notification at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the bottom of this page indicates when this policy was most recently revised. We encourage you to review this page periodically to stay informed of how lso303 protects your information. Your continued use of the platform following notification of any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way lso303 handles your Personal Data, please reach out to us through the following channels. Our privacy team and Indonesian-speaking customer support staff are available 24/7.

• Email: [email protected]
• Live Chat: Available 24/7 directly on the lso303 platform — average response time 2–5 minutes during peak hours (12:00–23:00 WIB)
• WhatsApp Support: +62-812-3456-7890

For formal data subject requests (access, rectification, erasure, or restriction), please include your registered account email address and a clear description of your request. We will verify your identity before processing any data subject request to protect against unauthorized disclosure.