Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "jin303," "we," "us," or "our" refers to the operator of the Platform at https://jin303.cam.
• "Platform" refers to the jin303 website, any mobile-optimized interface, and all associated digital services.
• "User," "you," or "your" refers to any individual who visits, registers on, or uses the Platform.
• "Personal Data" refers to any information that identifies or could reasonably identify a living individual, including name, date of birth, address, phone number, email address, financial information, and device identifiers.
• "Processing" refers to any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" (Know Your Customer) refers to identity and age verification procedures required before withdrawals are processed.
• "Cookies" refers to small text files placed on your device by the Platform to enable functionality and collect usage data.

2. Data We Collect

jin303 collects Personal Data in the following categories depending on how you interact with our Platform:

2.1 Identity and Contact Information

• Full legal name as it appears on your government-issued identification
• Date of birth (to confirm you are at least 21 years of age)
• Residential address in Indonesia
• Indonesian mobile phone number
• Email address
• Copies of government-issued photo ID (KTP — Kartu Tanda Penduduk — or passport) submitted for KYC verification

2.2 Financial Information

• Indonesian bank account details (bank name such as BCA, BRI, BNI, or Mandiri; account number; account holder name) registered for deposits and withdrawals
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja where used
• Transaction history: deposits, withdrawals, bet placements, bonus credits, and balance movements
• Payment verification screenshots or bank statements submitted during KYC

2.3 Account and Gaming Data

• Account username and encrypted password hash
• Betting history, game session logs, wagering patterns, and win/loss records
• Responsible gaming settings, including deposit limits, session time preferences, and self-exclusion status
• Bonus claims, wagering progress, and promotional participation records
• Customer support interactions, chat transcripts, and email correspondence

2.4 Technical and Device Data

• IP address and approximate geographic location derived from IP (city-level only)
• Device type, operating system, and browser version
• Device fingerprint identifiers used for fraud detection and duplicate account prevention
• Session timestamps, pages visited, features accessed, and navigation flow
• Referring URL (the page that linked you to jin303)

3. How We Collect Data

We collect your Personal Data through the following channels:

3.1 Direct Provision

You provide Personal Data directly when you complete our registration form, submit KYC documents, make or request a deposit or withdrawal, contact customer support, respond to a survey or promotion, or update your Account settings.

3.2 Automated Technical Collection

We automatically collect certain Technical and Device Data when you visit or use the Platform, including data transmitted by your browser or device to our servers as part of normal internet communication (IP address, browser headers), data collected through cookies and similar tracking technologies (see Section 7), and server log files recording access requests, error responses, and system events.

3.3 Third-Party Sources

We may receive limited Personal Data from trusted third-party partners including:

• Payment processors and Indonesian banks (BCA, BRI, BNI, Mandiri, and e-wallet providers) confirming transaction status and verifying payment method ownership
• Identity verification service providers who cross-reference KTP data against government databases for age and identity confirmation
• Fraud detection and anti-money laundering screening services
• Game providers (such as Evolution Gaming and Pragmatic Play) who may share session-level technical data for game integrity and dispute resolution purposes

4. Purposes of Processing

jin303 processes your Personal Data for the following clearly defined purposes:

5. Legal Basis for Processing

Where applicable international data protection frameworks govern our operations, we process Personal Data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under our Terms & Conditions, including Account management, payment processing, and gaming service delivery.
• Legal Obligation: Processing required by applicable law, including anti-money laundering regulations, KYC requirements, age verification mandates, and tax reporting obligations.
• Legitimate Interests: Processing in jin303's legitimate business interests, including fraud prevention, security monitoring, duplicate account detection, and platform analytics, where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as personalized promotional communications, where we have obtained your explicit, informed, and freely given consent. You may withdraw consent at any time through your Account settings without affecting prior processing.

6. Data Sharing and Disclosure

jin303 does not sell your Personal Data to third parties. We share data only in the specific, limited circumstances described below:

6.1 Payment Service Providers

We share the minimum financial information necessary with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your deposits and withdrawals. These providers receive only the data required to complete transactions and are contractually prohibited from using your data for any other purpose.

6.2 Identity Verification Partners

We share identity documents with KYC verification service providers who cross-reference your information against g overnment databases to confirm your age and identity. These partners operate under strict data processing agreements and international security standards.

6.3 Game Technology Providers

Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive session-level technical data necessary to deliver their games and resolve any game-related disputes. They do not receive your financial or full identity information beyond what is required for game integrity purposes.

6.4 Fraud Prevention and Security Services

We share behavioral and technical data with fraud detection and anti-money laundering screening services to protect the integrity of the Platform and all its users. These services analyze patterns to identify suspicious activity and potential security threats.

6.5 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or a legitimate regulatory request. We will notify you of any such disclosure unless prohibited from doing so by law.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your Personal Data may be transferred to the acquiring entity. We will notify you in advance of any such transfer and ensure that your data remains protected under terms no less stringent than this Privacy Policy.

7. Cookies and Tracking Technologies

jin303 uses cookies and similar technologies to ensure the Platform functions correctly, to protect your account session, and to understand how users interact with our services. Below is a breakdown of the types of cookies we use:

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to operate and cannot be disabled. They enable core functions such as maintaining your login session, preserving your language and currency preferences, securing your account against cross-site request forgery (CSRF) attacks, and remembering items in your betting slip. No consent is required for strictly necessary cookies as they are functionally indispensable.

7.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymized data about how users navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This information helps us improve Platform performance and user experience. We use analytics data only in aggregate form and do not link it to identifiable individuals without your consent.

7.3 Functional Cookies

Functional cookies remember choices you make to personalize your experience, such as your preferred sports leagues, default stake amounts, and notification preferences. Disabling these cookies may result in a less personalized experience but will not prevent you from using core Platform features.

7.4 Security and Fraud Detection Cookies

These cookies support our fraud prevention and account security systems by helping identify unusual login patterns, detecting automated bot activity, and verifying that connection requests originate from legitimate user devices. They are classified as strictly necessary because they protect both jin303 and its users from fraudulent activity.

7.5 Managing Cookies

You can control most cookies through your browser settings. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling certain cookies may affect your ability to use some features of the jin303 Platform. Strictly necessary and security cookies cannot be disabled without impacting core Platform functionality.

8. Data Retention

jin303 retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention schedule:

• Active Account Data: Retained for the lifetime of your Account and for a minimum of five years following Account closure, to comply with anti-money laundering regulations and potential dispute resolution requirements.
• Transaction Records: Retained for a minimum of seven years following the date of the transaction, in accordance with financial record-keeping obligations applicable to international gaming operators.
• KYC Documents: Retained for five years following Account closure or the completion of the business relationship, as required by applicable AML compliance frameworks.
• Customer Support Records: Chat transcripts and email correspondence are retained for three years from the date of the interaction, unless the interaction relates to an ongoing dispute or legal matter.
• Technical and Device Data: Server logs are retained for up to 12 months. Aggregated analytics data may be retained indefinitely in anonymized form.
• Marketing Consent Records: Records of consent and opt-out preferences are retained for the duration of your Account and for three years following Account closure.

When Personal Data is no longer required and retention obligations have expired, we securely delete or irreversibly anonymize it so that it can no longer be linked to any individual.

9. Security Measures

Protecting your Personal Data is a core operational priority at jin303. We implement a layered security architecture comprising technical, organizational, and procedural controls designed to prevent unauthorized access, disclosure, alteration, or destruction of your information.

9.1 Technical Controls

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same standard employed by major Indonesian banks and international financial institutions.
• Encrypted Data Storage: Sensitive data including passwords (stored as salted cryptographic hashes), financial account numbers, and identity document copies are encrypted at rest using AES-256 encryption.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for and alert on suspicious access patterns.
• Access Control: Access to production systems and Personal Data is restricted on a strict need-to-know basis using role-based access controls, multi-factor authentication for administrative access, and comprehensive access logging.

9.2 Organizational Controls

• Regular security awareness training for all staff with access to Personal Data
• Confidentiality agreements with all employees, contractors, and third-party partners
• Periodic independent security audits and vulnerability assessments
• Documented data breach response procedures with defined escalation timelines

9.3 Incident Response

In the event of a data security incident that is likely to result in risk to your rights, jin303 will notify affected users promptly with information about the nature of the incident, what data was involved, and what steps we are taking to address it. We will also notify relevant authorities as required by applicable law.

10. Your Privacy Rights

As a user of the jin303 Platform, you hold the following rights over your Personal Data. To exercise any of these rights, contact our support team using the details in Section 14. We will respond to all valid requests within 30 calendar days.

10.1 Right of Access

You have the right to request a copy of all Personal Data we hold about you, along with information about how it is processed, the legal basis for processing, and the categories of third parties with whom it is shared. We will provide this information in a structured, commonly used format.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update most Account information directly through your Account settings. For information that requires verification before update (such as your legal name or date of birth), please contact our support team.

10.3 Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests and that objection is upheld. Please note that we cannot erase data we are legally required to retain, such as transaction records and KYC documents subject to AML retention obligations.

10.4 Right to Restriction of Processing

You may request that we restrict processing of your Personal Data — meaning we retain it but do not actively use it — while you contest the accuracy of that data, while an objection is being assessed, or where processing is unlawful but you prefer restriction over erasure.

10.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, machine-readable format and to have it transmitted to another service provider where technically feasible.

10.6 Right to Object

You have the right to object to processing of your Personal Data where that processing is based on legitimate interests, including profiling for personalized promotional offers. Upon receiving a valid objection, we will cease that specific processing unless we can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time through your Account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Minors and Age Verification

jin303 strictly prohibits use of our Platform by anyone under the age of 21 years. We do not knowingly collect Personal Data from individuals under this age threshold. Age verification is a mandatory step in our KYC process, and we deploy automated checks during registration to flag accounts where the declared age appears inconsistent with other provided information.

If we discover that Personal Data has been collected from a user who is under 21 years of age, we will immediately suspend that Account, delete the associated Personal Data to the extent permitted by law, and report the incident to relevant authorities if required. We encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms.

12. International Data Transfers

jin303 operates internationally, and your Personal Data may be processed by our technical infrastructure or by trusted third-party service providers located outside Indonesia. Where data is transferred outside Indonesia, we ensure that appropriate safeguards are in place to maintain a level of data protection equivalent to the standards described in this Policy. These safeguards may include contractual data processing agreements incorporating internationally recognized data protection clauses, and requirements for recipient organizations to implement security measures at least as stringent as our own.

We will not transfer your Personal Data to countries or organizations that cannot provide adequate protection for that data. If you have questions about specific international transfers involving your Personal Data, contact us using the details in Section 14.

13. Changes to This Policy

jin303 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes — that is, changes that meaningfully affect how we collect, use, or share your Personal Data — we will notify you via email to your registered address and display a prominent notice on the Platform for a minimum of 30 days before the changes take effect.

Your continued use of the Platform following the effective date of updated terms constitutes your acknowledgment of those changes. We recommend reviewing this Policy periodically. The "Last Updated" date at the top of this document always reflects the most recent revision.

14. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how your Personal Data is handled, please reach out to our dedicated privacy support team:

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing
• Live Chat: Available 24/7 through your Account dashboard with Indonesian-speaking agents
• Response Time: We acknowledge all privacy requests within 48 hours and provide a substantive response within 30 calendar days

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to an appropriate supervisory or data protection authority in your jurisdiction.