Privacy Policy

1. Introduction

Welcome to the sir303 Privacy Policy. This document outlines our commitment to protecting your personal information and explains our practices concerning data collection, processing, storage, and security. By using sir303, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

sir303 operates as an online betting and gaming platform serving customers in Indonesia and other permitted jurisdictions. We are committed to transparency in our data handling practices and compliance with applicable data protection laws and regulations. This Privacy Policy applies to all users who access our website, mobile applications, and related services.

2. Data Controller Information

For the purposes of applicable data protection laws, sir303 acts as the data controller in respect of your personal information collected through our platform. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection regulations.

If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact our Data Protection Officer using the contact information provided in Section 14 below.

3. Information We Collect

sir303 collects various types of personal information necessary to provide our services, verify your identity, process transactions, maintain security, and comply with legal obligations. The information we collect falls into the following categories:

3.1 Account Registration Information

When you create an account on sir303, we collect the following personal information:

• Full name as it appears on your government-issued identification
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Phone number (mobile number preferred for account security)
• Residential address including city, province, and postal code
• Username and password (passwords are encrypted and never stored in plain text)
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification (KYC) Information

To comply with Know Your Customer (KYC) regulations and prevent fraud, money laundering, and underage gambling, we may request additional documentation including:

• Government-issued photo identification (KTP, passport, or driver's license)
• Proof of address (utility bill, bank statement, or government correspondence dated within the last three months)
• Proof of payment method ownership (bank statement or screenshot showing your name and account details)
• Selfie photograph holding your ID document (for enhanced verification in certain cases)

3.3 Financial and Transaction Information

When you make deposits or withdrawals, we collect and process:

• Bank account details (bank name, account number, account holder name) for Indonesian banks including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and others
• E-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Transaction history (deposits, withdrawals, wagers, winnings, bonuses claimed)
• Payment method verification documents as required

3.4 Usage and Activity Information

We automatically collect information about how you interact with our platform:

• Betting history (sports bets placed, casino games played, lottery tickets purchased)
• Game preferences and play patterns
• Bonus claims and wagering progress
• Login times and session durations
• Responsible gaming tool settings (deposit limits, loss limits, session time limits, self-exclusion status)
• Customer support interactions (live chat transcripts, email correspondence)

3.5 Technical and Device Information

When you access sir303, we automatically collect technical data including:

• IP address and geolocation data (to verify you are accessing from a permitted jurisdiction)
• Device type, model, and operating system (desktop, mobile, tablet; Windows, Android, iOS, etc.)
• Browser type and version
• Screen resolution and display settings
• Referring website or source (how you found sir303)
• Cookies and similar tracking technologies (see Section 10 for details)

4. How We Use Your Information

sir303 uses your personal information for the following legitimate purposes:

4.1 Account Management and Service Provision

• Creating and maintaining your user account
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place bets, play casino games, participate in togel draws, and use other platform features
• Managing bonuses, promotions, and loyalty programs
• Providing customer support and responding to inquiries

4.2 Identity Verification and Fraud Prevention

• Verifying your age (ensuring you are 21 years or older)
• Confirming your identity to prevent account takeover and identity theft
• Detecting and preventing fraudulent activity, money laundering, and other illegal conduct
• Enforcing our Terms & Conditions and preventing abuse of bonuses or platform features
• Complying with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations

4.3 Legal and Regulatory Compliance

• Complying with applicable laws, regulations, and licensing requirements
• Responding to legal requests, court orders, or regulatory inquiries
• Maintaining records required by gambling regulators and financial authorities
• Reporting suspicious activity to relevant authorities when required by law

4.4 Platform Improvement and Analytics

• Analyzing user behavior to improve platform functionality and user experience
• Identifying technical issues and optimizing performance
• Conducting market research and developing new features and services
• Generating aggregated, anonymized statistics for internal business purposes

4.5 Marketing and Communications

• Sending promotional emails about bonuses, new games, and special offers (only if you have opted in)
• Providing personalized game recommendations based on your preferences
• Notifying you of account-related updates, security alerts, and policy changes
• Conducting customer satisfaction surveys (participation is voluntary)

5. Legal Basis for Processing

sir303 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and sir303 when you register an account and use our services.
• Legal Obligation: Processing is required to comply with applicable laws, regulations, and licensing requirements including age verification, KYC, AML, and CTF obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests including fraud prevention, security, platform improvement, and customer support, provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent, which you may withdraw at any time.

6. Information Sharing and Disclosure

sir303 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for legitimate business purposes:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist with platform operations, including:

• Payment processors (banks, e-wallet providers, payment gateways) to facilitate deposits and withdrawals
• Identity verification services to conduct KYC checks
• Game providers (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, Spribe) to deliver casino games and slots
• Cloud hosting and data storage providers to securely store your information
• Customer support platforms to manage live chat and email communications
• Analytics and marketing platforms (only with your consent for marketing purposes)

All third-party service providers are contractually obligated to protect your information, use it only for specified purposes, and maintain confidentiality.

6.2 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, courts, or government agencies when:

• Required by applicable law, regulation, legal process, or court order
• Necessary to investigate or prevent fraud, illegal activity, or violations of our Terms & Conditions
• Required to comply with gambling licensing conditions or regulatory reporting obligations
• Necessary to protect the rights, property, or safety of sir303, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization, subject to the same privacy protections outlined in this Privacy Policy.

7. Data Security Measures

sir303 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Secure Data Storage: Personal information is stored on secure servers with restricted access controls, firewalls, and intrusion detection systems.
• Password Protection: Passwords are hashed using strong cryptographic algorithms and are never stored in plain text.
• Two-Factor Authentication: Available as an optional security feature to protect your account from unauthorized access.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and address vulnerabilities.
• Employee Training: Staff members with access to personal information receive data protection training and are bound by confidentiality obligations.
• Access Controls: Personal information is accessible only to authorized personnel who require it to perform their job functions.

8. Data Retention

sir303 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on data type and legal requirements:

• Active Accounts: We retain your account information and transaction history for the duration of your active account plus a minimum of 5 years after account closure to comply with regulatory and tax obligations.
• Identity Verification Documents: KYC documents are retained for at least 5 years after account closure or the end of the business relationship as required by anti-money laundering regulations.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, payouts) is retained for a minimum of 7 years to comply with accounting and tax laws.
• Marketing Consent Records: Records of marketing consents and opt-outs are retained to demonstrate compliance with consent requirements.
• Self-Exclusion Records: Self-exclusion data is retained indefinitely to prevent reopening of self-excluded accounts.

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with our data retention and destruction policies.

9. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you. You can view much of this information directly in your account dashboard. For additional data, please contact our support team.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update many details (email address, phone number, address) directly in your account settings. For other corrections, contact customer support.

9.3 Right to Erasure (Right to be Forgotten)

In certain circumstances, you have the right to request deletion of your personal information. However, this right is not absolute—we may be legally required to retain certain information for regulatory compliance, fraud prevention, or legal claims. Account closure requests should be submitted to customer support.

9.4 Right to Restrict Processing

You have the right to request restriction of processing your personal information in specific circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by clicking unsubscribe in our emails.

9.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 14. We will respond to your request within 30 days. We may request additional information to verify your identity before processing requests involving access to or deletion of personal information.

10. Cookies and Tracking Technologies

sir303 uses cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize you on subsequent visits.

10.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for platform functionality, account login, session management, and security. These cookies cannot be disabled.	Session or up to 1 year
Performance Cookies	Collect anonymous data about how users interact with our platform to improve performance and user experience.	Up to 2 years
Functional Cookies	Remember your preferences (language, currency, display settings) to provide a personalized experience.	Up to 1 year
Marketing Cookies	Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. Require your consent.	Up to 2 years

10.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from using certain platform features. For marketing cookies, you can manage preferences through our cookie consent banner when you first visit the site.

11. International Data Transfers

sir303 operates internationally, and your personal information may be transferred to, stored, or processed in countries outside Indonesia. These countries may have different data protection laws than those in Indonesia. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Other legally recognized transfer mechanisms

By using sir303, you acknowledge and consent to the transfer of your personal information to countries outside Indonesia where our service providers and infrastructure are located.

12. Protection of Minors

sir303 strictly prohibits use of our services by individuals under 21 years of age. We do not knowingly collect personal information from minors. Our age verification processes are designed to prevent underage access. If we become aware that we have inadvertently collected information from a person under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to sir303 should contact us immediately.

13. Changes to This Privacy Policy

sir303 reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. We will publish the updated Privacy Policy on this page with a revised "Last Updated" date. Material changes that significantly affect your rights will be communicated via email or prominent notice on the platform. Your continued use of sir303 after publication of the revised Privacy Policy constitutes acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

We aim to respond to all privacy inquiries within 30 days. For urgent security matters, please indicate this in your subject line for expedited handling.