Privacy Policy

1. Introduction

Welcome to the sms303 Privacy Policy. This document explains how sms303 ("we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you" or "your") who access and use our online gaming platform at https://sms303.cam and related mobile applications.

We recognize that privacy is a fundamental right, and we are committed to protecting your personal data in compliance with international data protection standards and industry best practices. By using the sms303 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy applies to all users of sms303 services, including residents of Indonesia and players accessing our platform from permitted jurisdictions. If you do not agree with this Privacy Policy, please do not use our services.

2. Data Controller

For the purposes of data protection law, sms303 is the data controller responsible for your personal information. We determine how and why your personal data is processed in connection with your use of our platform.

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact our Data Protection Officer via the contact details provided in Section 14 of this document.

3. Information We Collect

sms303 collects several categories of personal information to provide, maintain, and improve our services. The types of data we collect include:

3.1 Account Registration Information

When you create an account with sms303, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are at least 21 years of age)
• Email address
• Mobile phone number
• Residential address in Indonesia (city, province, postal code)
• Username and encrypted password
• Currency preference (IDR)

3.2 Identity Verification (KYC) Documents

To comply with international licensing requirements and anti-money laundering (AML) regulations, we collect identity verification documents, including:

• KTP (Kartu Tanda Penduduk): National Identity Card showing your photo, name, date of birth, NIK (identification number), and address
• Selfie Verification: A photograph of you holding your KTP next to your face
• Proof of Address: Utility bills, bank statements, or government correspondence (when additional verification is required)

3.3 Financial and Transaction Data

We collect information related to your deposits, withdrawals, and gaming activity, including:

• Payment method details (bank account name, account number, e-wallet phone number)
• Transaction amounts, dates, and times
• Payment processor transaction IDs
• Deposit and withdrawal history
• Bonus claims and wagering activity
• Betting history, game outcomes, and account balance changes

3.4 Technical and Usage Data

When you access sms303, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Device identifiers and mobile advertising IDs
• Pages visited, features used, and time spent on the platform
• Clickstream data and navigation patterns
• Session duration and login/logout times

3.5 Communications and Support Data

If you contact sms303 customer support via live chat, email, or WhatsApp, we collect:

• The content of your messages and inquiries
• Support ticket numbers and case histories
• Call recordings or chat transcripts (with your consent where required by law)
• Any documents or screenshots you provide to support your inquiry

4. How We Use Your Information

sms303 uses your personal information for the following purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Processing deposits, withdrawals, and payment transactions
• Providing access to games, betting markets, and platform features
• Managing bonuses, promotions, and loyalty rewards
• Communicating important account updates, security alerts, and service notifications

4.2 Identity Verification and Compliance

• Verifying your age (21+ requirement) and identity
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Preventing underage gambling and fraudulent account creation
• Fulfilling legal and regulatory obligations under international gaming licenses
• Responding to requests from law enforcement or regulatory authorities

4.3 Fraud Prevention and Security

• Detecting and preventing fraud, cheating, collusion, and money laundering
• Identifying duplicate accounts and multi-accounting violations
• Monitoring for suspicious betting patterns and bonus abuse
• Protecting the platform from hacking, DDoS attacks, and unauthorized access
• Investigating security incidents and account compromise

4.4 Customer Support

• Responding to your inquiries, complaints, and support requests
• Troubleshooting technical issues with your account or payments
• Resolving disputes related to bets, bonuses, or account activity
• Providing responsible gaming support and self-exclusion assistance

4.5 Marketing and Communications (With Your Consent)

• Sending promotional emails about new games, bonuses, and special offers
• Delivering personalized recommendations based on your gaming preferences
• Notifying you about tournaments, jackpots, and seasonal promotions
• Conducting surveys to improve our services

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your account preferences. Opting out will not affect transactional or account-related communications.

4.6 Platform Improvement and Analytics

• Analyzing user behavior to improve website performance and user experience
• Conducting A/B testing on features, layouts, and promotional offers
• Identifying popular games and optimizing our game catalogue
• Generating aggregated, anonymized statistics for internal reporting

5. Legal Basis for Processing

Under international data protection laws, sms303 processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (creating your account, processing payments, providing gaming services).
• Legal Obligation: Processing is required to comply with legal and regulatory requirements, including KYC, AML, age verification, and licensing obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and customer support (provided these interests do not override your privacy rights).
• Consent: For marketing communications and certain optional data collection (e.g., cookies), we rely on your explicit consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

sms303 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

6.1 Payment Processors

We share necessary financial information with payment service providers (banks, e-wallet operators) to process your deposits and withdrawals securely.

6.2 Game Providers and Platform Partners

When you play games on sms303, certain anonymized or pseudonymized gameplay data may be shared with game developers (Pragmatic Play, Evolution Gaming, NetEnt, etc.) for game performance monitoring and RNG auditing.

6.3 Identity Verification Services

We may use third-party identity verification and KYC service providers to authenticate your documents and prevent fraud.

6.4 Legal and Regulatory Authorities

We may disclose your information to law enforcement, regulatory bodies, or courts when required by law, court order, or to comply with legal process. This includes responding to anti-money laundering investigations, tax authorities, or licensing regulators.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change in ownership.

6.6 Fraud Prevention and Security Partners

We may share data with cybersecurity firms and fraud detection services to protect the platform and users from malicious activity.

7. Data Retention

sms303 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal and regulatory requirements.

Data Category	Retention Period
Account Registration Data	Duration of account activity + 5 years after closure (for regulatory compliance)
KYC Documents	5 years after account closure (AML legal requirement)
Transaction and Betting History	5 years (for audit, tax, and dispute resolution purposes)
Customer Support Records	3 years after case closure
Marketing Consent Records	Until consent is withdrawn + 1 year for compliance records
Technical Logs and IP Data	12 months (for security and fraud prevention)

After the retention period expires, your data is securely deleted or anonymized so that it can no longer identify you. If you close your account and request data deletion, we will comply with your request subject to our legal retention obligations.

8. Data Security Measures

sms303 employs industry-standard technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, or alteration. Our security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) 1.3.
• Secure Data Storage: Personal data is stored on encrypted servers in secure data centers with physical access controls and 24/7 monitoring.
• Access Controls: Only authorized personnel with legitimate business needs can access your personal data, and all access is logged and audited.
• Two-Factor Authentication (2FA): Account security is enhanced by optional 2FA for logins and withdrawals.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and third-party security audits to identify and address potential risks.
• Employee Training: All sms303 staff receive regular training on data protection best practices and confidentiality obligations.

While we implement robust security measures, no system is entirely immune to cyber threats. You are responsible for maintaining the confidentiality of your login credentials and should immediately notify us if you suspect unauthorized account access.

9. Cookies and Tracking Technologies

sms303 uses cookies and similar tracking technologies (web beacons, pixels, local storage) to enhance your user experience, analyze platform usage, and deliver personalized content.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, such as maintaining your login session and remembering your preferences. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how users interact with sms303 so we can improve performance and identify popular features.
• Marketing Cookies: Track your browsing activity to deliver targeted promotions and personalized game recommendations (used only with your consent).

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. Most browsers allow you to block third-party cookies while retaining first-party cookies necessary for site operation.

10. Your Privacy Rights

Under international data protection laws, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of all personal data sms303 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of your data to transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: You may withdraw consent for marketing communications or optional data collection at any time.

To exercise any of these rights, contact our Data Protection Officer via the email address provided in Section 14. We will respond to your request within 30 days. You also have the right to lodge a complaint with a data protection authority if you believe your rights have been violated.

11. International Data Transfers

sms303 operates internationally and may transfer your personal data to servers and service providers located outside Indonesia. When we transfer data to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards such as standard contractual clauses, encryption, and binding corporate rules to ensure your data remains protected.

By using sms303, you consent to the transfer of your personal information to international jurisdictions for the purposes described in this Privacy Policy.

12. Children's Privacy

sms303 strictly prohibits use by individuals under 21 years of age. We do not knowingly collect personal information from minors. If we become aware that a user is under 21, we will immediately terminate the account, void all transactions, and delete all associated personal data.

Parents or guardians who believe their child has provided personal information to sms303 should contact us immediately so we can take appropriate action.

13. Changes to This Policy

sms303 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated via email notification and/or prominent notice on the platform homepage. The "Last Updated" date at the top of this document indicates the most recent revision.

Your continued use of sms303 after changes have been posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how sms303 handles your personal data, please contact us:

• Data Protection Officer Email: [email protected] (not a clickable link per requirements)
• Customer Support (24/7): Live chat available via the sms303 platform dashboard
• WhatsApp Support: Contact details available in your account settings after login

Our Indonesian-speaking support team is available around the clock to assist with privacy-related inquiries. For formal data subject access requests or complaints, please use the email address above with the subject line "Privacy Request" for priority handling.