This Privacy Policy explains how kos303 collects, uses, discloses, and safeguards personal information provided by users of our Platform. By registering an account or continuing to use kos303, you acknowledge that you have read this policy and consent to our data practices as described herein. We encourage you to read it in full.
All data exchanged between your device and the kos303 Platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by international banks and financial institutions.
kos303 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data exists to serve your account — nothing more.
You retain rights to access, correct, restrict, and request deletion of your personal data. Submit a data request at any time by contacting kos303 customer support.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
kos303 collects Personal Data in two broad categories: data you provide directly and data we collect automatically when you use the Platform.
2.1 Data You Provide Directly
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (KTP / passport) | Registration & KYC verification |
| Contact Data | Email address, WhatsApp or phone number, residential address | Registration & account management |
| Financial Data | Bank account number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history | Transaction processing & KYC |
| Verification Documents | Scanned / photographed ID cards, utility bills, bank statements, selfies with ID | KYC compliance checks |
| Communications | Messages sent to customer support via live chat, email, or WhatsApp | Ongoing support interactions |
2.2 Data Collected Automatically
kos303 collects Personal Data through the following channels and mechanisms:
kos303 processes your Personal Data only for the purposes listed below. We do not process your data for any purpose that is incompatible with these stated purposes without obtaining your prior consent.
kos303 processes your Personal Data on the following legal grounds, consistent with internationally recognized data protection principles:
Where we rely on consent as the legal basis, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact our support team.
kos303 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipients solely as necessary to fulfil the purposes described in Section 4:
All third parties who receive Personal Data from kos303 are required to implement appropriate technical and organizational security measures and are prohibited from using your data for any purpose beyond the specific task they have been engaged to perform.
kos303 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing jurisdiction's regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML/KYC regulatory obligations |
| Transaction Records | 7 years from transaction date | Financial record-keeping requirements |
| KYC Documents | 5 years post-account closure | Regulatory and audit compliance |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Game Activity Logs | 2 years from session date | Fraud prevention and responsible gaming monitoring |
| Marketing Preferences | Until opt-out or account closure | Consent management |
| Cookie / Session Data | Session cookies: deleted on browser close. Persistent cookies: up to 12 months | Platform functionality and analytics |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to any identifiable individual. Where anonymization is applied, the resulting data may be retained indefinitely for statistical and analytical purposes.
kos303 implements a layered security architecture designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:
While kos303 takes all reasonable technical measures to protect your data, no security system is completely impenetrable. You are responsible for keeping your account credentials confidential and for notifying kos303 support immediately if you suspect unauthorized access to your account.
kos303 uses cookies and similar local storage technologies to operate core Platform features, remember your preferences, and understand how the Platform is used. The following cookie categories are in use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Login session maintenance, CSRF protection, load balancing. Cannot be disabled without breaking core Platform functionality. | Session |
| Functional | Storing user preferences such as display language, notification settings, and last-visited game category. | Up to 12 months |
| Analytics | Aggregated, anonymized data on page views, session depth, and feature engagement — used to improve Platform design and content. No personally identifiable data is shared with analytics providers. | Up to 12 months |
| Fraud Prevention | Device fingerprinting and behavioral signals used to detect multi-accounting, bot activity, and suspicious login patterns. | Up to 24 months |
kos303 does not use third-party advertising or retargeting cookies. You can control cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform. Instructions for managing cookies are available in the help documentation of all major browsers.
Subject to applicable law and our regulatory obligations, you have the following rights in relation to the Personal Data kos303 holds about you. To exercise any of these rights, contact our customer support team using the details in Section 15.
kos303 will respond to all verified data rights requests within 30 calendar days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your data.
kos303 is strictly an adults-only platform. Access is limited to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from, or provide services to, anyone under the age of 21.
Age verification is a mandatory component of our KYC process. Any account that cannot be verified as belonging to a person aged 21 or over will be immediately suspended. All funds held in unverified accounts will remain frozen until verification is successfully completed, after which — where the account holder is confirmed to be under 21 — the funds will be returned to the original deposit source and the account will be permanently closed.
If you have reason to believe that a person under the age of 21 has registered on the Platform or has accessed your account, please contact kos303 support immediately. We take underage access extremely seriously and will act on any such reports as a matter of priority.
Parents and guardians who share devices with minors are encouraged to use parental control software to restrict access to online gambling websites, including kos303. A list of recognized parental control tools is available on our Responsible Gaming page.
kos303 operates as an internationally licensed platform, and your Personal Data may be transferred to, stored, and processed in countries outside of Indonesia — including the country in which our servers, KYC providers, or game studio partners are hosted. These jurisdictions may have data protection laws that differ from those in Indonesia.
Where such transfers occur, kos303 ensures that adequate safeguards are in place to protect your Personal Data, including:
By using the kos303 Platform, you acknowledge and consent to the transfer of your Personal Data outside of Indonesia for the purposes described in this Privacy Policy.
The kos303 Platform integrates with third-party services including game software providers, payment gateways, and customer support tools. While we select third parties with care and require them to maintain appropriate data security standards, kos303 is not responsible for the independent data practices of those third parties.
This Privacy Policy applies solely to Personal Data collected and processed by kos303 in connection with the Platform. It does not govern the data practices of:
We encourage you to review the privacy policies of any third-party services you interact with directly. kos303 cannot accept responsibility for the content or privacy practices of external entities.
kos303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory obligations, or operational requirements. Where changes are material — for example, a new category of data being collected, a new third-party recipient, or a change in retention periods — we will notify registered members via their registered email address at least seven (7) calendar days before the changes take effect.
For minor, non-material updates (such as typographical corrections or clarifications that do not alter the substance of our data practices), we will update this page with a revised "Last Updated" date without individual notification. We recommend reviewing this Privacy Policy periodically to remain informed of how your data is handled.
Your continued use of the kos303 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the Platform and contact support to arrange account closure.
This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all previous versions of the kos303 Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which kos303 handles your Personal Data, please reach out to our support team through the following channels:
For data rights requests (access, correction, erasure, restriction, portability, or objection), please include your full registered name, account email address, and a clear description of your request. We may ask you to verify your identity before processing any data rights request. All verified requests will be acknowledged within 5 business days and fulfilled within 30 calendar days.
For responsible gaming-related concerns — including self-exclusion requests, deposit limit adjustments, or referrals to professional support services — please visit our Responsible Gaming page or contact support directly. Self-exclusion requests are processed as an immediate priority.
kos303 treats your data as a responsibility, not a commodity. Here is a summary of the privacy principles we commit to upholding every day.
We use data analytics only to improve your experience and protect account security. We do not build or sell behavioral profiles of our members.
We collect only the data that is genuinely necessary for the services you use. Requests for excessive or irrelevant data are never made.
You will always be notified of material changes to our privacy practices before they take effect — no silent policy rewrites.
Marketing communications are strictly opt-in. You can update or withdraw your consent preferences at any time by contacting our support team.
Review our complementary policy pages or browse the FAQ for answers to common questions about how kos303 handles accounts, payments, and player protection.