Privacy Policy

1. Introduction

max303 ("we," "us," or "our") operates an online gaming platform at https://max303.cam serving Indonesian players. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what personal data we collect when you visit our website, register an account, make deposits or withdrawals, play games, or interact with our customer support team. It also describes how we use, store, protect, and share that information, and outlines your rights regarding your personal data.

By creating an account with max303, accessing our website, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of max303 services. If you do not agree with any aspect of this Privacy Policy, you must not use our services.

2. Information We Collect

max303 collects several categories of personal information to provide, maintain, and improve our services, comply with legal obligations, and ensure platform security. The types of information we collect include:

2.1 Account Registration Information

When you register an account with max303, we collect personal information necessary to create and verify your account, including your full legal name (as it appears on your government-issued identification document), date of birth (to verify you are at least 21 years old), gender, residential address (street address, city, province, postal code), email address, mobile phone number, and your chosen username and password. This information is mandatory for account creation and cannot be omitted.

2.2 Identity Verification (KYC) Documents

To comply with anti-money laundering regulations and responsible gaming requirements, max303 implements mandatory Know Your Customer (KYC) verification procedures. As part of this process, we collect copies of identity documents including your government-issued photo identification (KTP Nasional, Indonesian passport, or driver's license), proof of residential address (utility bill, bank statement, or government correspondence dated within the last three months), and selfie photographs holding your identification document. These documents are reviewed manually by our compliance team and stored securely to verify your identity, confirm your age, and prevent fraud.

2.3 Financial Transaction Information

When you make deposits or request withdrawals, we collect financial information including your bank account details (bank name, account number, account holder name), transaction amounts, transaction dates and times, and transaction reference numbers. We collect this information to process your financial transactions, prevent money laundering, detect fraud, and maintain transaction records as required by law. Please note that max303 does not store full credit card numbers or CVV codes; all card payments are processed through secure third-party payment processors compliant with PCI DSS standards.

2.4 Gaming Activity Data

We automatically collect information about your gaming activity on the max303 platform, including games played (slots, live casino, sports betting, etc.), bet amounts and frequencies, win/loss records, bonus usage and wagering progress, deposit and withdrawal history, account balance fluctuations, and session durations. This data helps us provide personalized game recommendations, calculate bonuses and VIP tier eligibility, detect problem gambling patterns, identify fraudulent activity, and improve our services.

2.5 Technical and Usage Information

When you access the max303 website, we automatically collect technical information including your IP address, device type and operating system (Windows, macOS, Android, iOS), browser type and version (Chrome, Firefox, Safari, Edge), screen resolution, preferred language settings, pages visited and time spent on each page, clickstream data showing your navigation path through our website, and referral source (how you found max303). We use cookies, web beacons, and similar tracking technologies to collect this information. You can control cookie settings through your browser preferences, though disabling certain cookies may limit functionality.

2.6 Communications and Support Interactions

When you contact max303 customer support via live chat, email, WhatsApp, or other communication channels, we collect and store the content of your messages, support ticket history, call recordings (if you contact us by phone), and any attachments or screenshots you provide. This information helps us respond to your inquiries, resolve disputes, improve customer service quality, and maintain records of our communications as required by regulatory obligations.

3. How We Use Your Information

max303 uses the personal information we collect for the following specific purposes, all of which are necessary to provide our services, comply with legal obligations, or pursue legitimate business interests:

3.1 Account Management and Service Provision

We use your registration information to create and maintain your gaming account, authenticate your identity when you log in, process your deposits and withdrawals through Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon), enable you to play casino games and place sports bets, calculate your available balance, track your gaming activity and transaction history, determine your VIP tier and associated benefits, and provide personalized account dashboard information. Without this information, we cannot provide max303 services to you.

3.2 Regulatory Compliance and Age Verification

We use your date of birth and identity documents to verify that you are at least 21 years old, as required by Indonesian regulations and our own responsible gaming policies. We are legally prohibited from allowing underage individuals to gamble on our platform. KYC verification also helps us comply with anti-money laundering (AML) laws, counter-terrorism financing regulations, and licensing requirements imposed by gaming regulators. Failure to complete KYC verification will prevent you from withdrawing funds from your account.

3.3 Fraud Prevention and Security

We analyze your gaming activity, transaction patterns, IP addresses, device information, and behavioral data to detect and prevent fraudulent activity including identity theft, multiple account creation (bonus abuse), payment fraud and chargebacks, collusion between players, use of bots or automated betting software, money laundering attempts, and unauthorized account access. If we detect suspicious activity, we may suspend your account pending investigation, request additional verification documents, limit transaction amounts, or terminate your account if fraud is confirmed.

3.4 Customer Support and Communication

We use your contact information (email address, phone number) and communication history to respond to your inquiries and support requests, notify you of account-related updates (deposit confirmations, withdrawal processing, KYC status changes), send important service announcements, resolve disputes or complaints, and provide updates on new games, promotions, or features (marketing communications, which you can opt out of at any time). All communications are conducted in English with Indonesian-speaking support staff available 24/7.

3.5 Responsible Gaming and Player Protection

We monitor your gaming activity to identify patterns that may indicate problem gambling, such as rapidly increasing bet sizes, extended session durations, frequent deposit-loss cycles without withdrawals, or violation of self-imposed limits. If we detect concerning patterns, we may contact you to offer responsible gaming resources, suggest voluntary limits or self-exclusion, or implement mandatory cooling-off periods. This monitoring helps us fulfill our commitment to responsible gaming and protect vulnerable players.

3.6 Service Improvement and Analytics

We analyze aggregated and anonymized data (data that does not identify you personally) to understand how players use max303, identify popular games and features, optimize website performance and load times, improve user interface design, develop new games and betting markets, measure the effectiveness of marketing campaigns, and make data-driven business decisions. This analysis helps us enhance the overall player experience on max303.

4. Information Sharing and Disclosure

max303 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with carefully selected third parties in the following limited circumstances:

4.1 Service Providers and Business Partners

We share necessary information with trusted third-party service providers who assist us in operating max303, including payment processors who handle bank transfers (BCA, BRI, BNI, Mandiri, etc.), game providers who supply casino games and live dealer experiences, identity verification services that conduct KYC checks, cloud hosting providers who store data on secure servers, customer support software platforms, email and SMS communication services, and analytics providers who help us understand player behavior. All service providers are contractually obligated to protect your information, use it only for the purposes we specify, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to law enforcement agencies, regulatory bodies, or government authorities if required by law, court order, or legal process; to comply with anti-money laundering (AML) or counter-terrorism financing (CTF) investigations; to respond to valid legal requests for information; to protect max303's legal rights or defend against legal claims; to investigate or prevent illegal activity, fraud, or security threats; or to comply with gaming license requirements and regulatory audits. We will notify you of such disclosures unless prohibited by law or court order.

4.3 Business Transfers

In the event that max303 is involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. In such cases, we will notify you via email and prominent website notice before your information is transferred and becomes subject to a different privacy policy. You will have the opportunity to close your account and withdraw your funds before the transfer if you do not agree to the new privacy terms.

4.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy if we obtain your explicit consent to do so. For example, if you participate in a tournament sponsored by a third-party brand, we may share your username and tournament results with the sponsor after obtaining your permission.

5. Data Security and Protection Measures

max303 takes data security extremely seriously and implements multiple layers of protection to safeguard your personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

5.1 Encryption Technologies

All data transmitted between your device and max303 servers is encrypted using industry-standard 256-bit SSL (Secure Socket Layer) encryption. This means that even if data is intercepted during transmission, it cannot be read without the encryption key. You can verify SSL encryption by looking for the padlock icon in your browser's address bar and "https://" at the beginning of our website URL. Sensitive data stored on our servers (passwords, financial information, identity documents) is also encrypted at rest using AES-256 encryption algorithms.

5.2 Access Controls and Authentication

Access to player data is restricted on a need-to-know basis. Only authorized max303 employees who require access to perform their job functions (customer support, compliance, finance) can view personal information, and all access is logged and monitored. We implement strong password policies, require multi-factor authentication for internal systems, conduct background checks on employees with data access, and immediately revoke access when employees leave the company or change roles.

5.3 Network Security and Monitoring

Our servers are protected by firewalls, intrusion detection systems, and anti-malware software that continuously monitor for suspicious activity. We conduct regular security audits and penetration testing to identify vulnerabilities before they can be exploited. Our infrastructure is hosted in secure data centers with physical security measures including 24/7 surveillance, biometric access controls, and redundant power supplies to prevent data loss.

5.4 Data Retention and Secure Disposal

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations (typically 5-7 years for financial records and KYC documents as required by anti-money laundering laws), or resolve disputes. Once retention periods expire, we securely delete or anonymize your information using industry-standard data destruction methods. However, some information may remain in backup systems for a limited period before permanent deletion.

6. Cookies and Tracking Technologies

max303 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, remember your preferences, analyze website traffic, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you when you return to our website.

6.1 Types of Cookies We Use

Essential Cookies: Required for website functionality, including login authentication, session management, and security features. These cannot be disabled without preventing you from using max303 services.

Performance Cookies: Collect anonymous information about how you use our website (pages visited, time spent, errors encountered) to help us improve performance and user experience.

Functionality Cookies: Remember your preferences such as language selection, preferred game filters, and display settings to provide a personalized experience.

Advertising Cookies: Track your browsing activity across websites to display relevant advertisements (if we implement affiliate marketing or retargeting campaigns in the future).

6.2 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling certain cookies may limit your ability to use some features of max303, such as staying logged in or saving game preferences. To manage cookies in popular browsers: Chrome (Settings > Privacy and Security > Cookies), Firefox (Options > Privacy & Security), Safari (Preferences > Privacy), Edge (Settings > Cookies and site permissions).

7. Your Privacy Rights

Under international data protection principles, you have certain rights regarding your personal information held by max303. These rights include:

7.1 Right to Access

You have the right to request a copy of all personal information max303 holds about you. This includes your account details, transaction history, gaming activity records, KYC documents, and communication history. To request access, contact our support team at [email protected]. We will provide the information within 30 days in a structured, commonly used, and machine-readable format (typically PDF or CSV).

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings (email address, phone number, residential address). For changes to your legal name or date of birth, you must contact customer support and provide updated identity documents for verification purposes.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes it was collected, you withdraw consent, or you object to processing and we have no overriding legitimate grounds to continue. However, we may retain information if required by law (e.g., financial records must be kept for 5-7 years under anti-money laundering regulations) or to defend against legal claims. To request deletion, you must first close your account and withdraw all funds.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain situations, such as while we verify the accuracy of disputed information, or if you object to processing and we are determining whether our legitimate interests override your rights. During restriction, we will store the information but not actively process it without your consent.

7.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider. This applies to information you provided to us with consent or for contract performance, and that is processed by automated means. max303 will provide your data in CSV or JSON format upon request.

7.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time. If you receive promotional emails from max303, you can unsubscribe by clicking the "Unsubscribe" link at the bottom of the email or by contacting customer support. Please note that you cannot opt out of essential service communications (transaction confirmations, security alerts, legal notices).

7.7 Exercising Your Rights

To exercise any of these rights, please contact max303 customer support via email at [email protected] or through live chat. We will respond to your request within 30 days and may request additional identification documents to verify your identity before disclosing or modifying personal information. There is no fee for making a request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

8. International Data Transfers

max303 primarily serves Indonesian players and stores data on servers located in secure data centers. However, some of our service providers (game providers, payment processors, cloud hosting companies) may be located outside Indonesia, which means your personal information may be transferred to, stored in, or processed in countries with different data protection laws than Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by data protection authorities, or certification under recognized data protection frameworks. We only work with service providers who commit to protecting your information to standards equivalent to those described in this Privacy Policy.

9. Children's Privacy

max303 services are strictly intended for adults aged 21 years and older. We do not knowingly collect, use, or disclose personal information from individuals under 21 years of age. If we discover that we have inadvertently collected information from someone under 21, we will immediately delete that information, close the account, and refund any deposited funds (minus processing fees). Parents or guardians who believe their child has provided information to max303 should contact us immediately at [email protected] so we can take appropriate action.

10. Changes to This Privacy Policy

max303 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address registered in your account), display a prominent notice on our website homepage, or require you to acknowledge the updated policy when you next log in. The "Last Updated" date at the top of this Privacy Policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of max303 services after policy changes constitutes your acceptance of the updated terms.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or complaints about this Privacy Policy, our data handling practices, or wish to exercise your privacy rights, please contact max303 through the following channels:

• Email: [email protected] (responses within 24 hours)
• Live Chat: Available 24/7 through our website
• Subject Line: Mark emails as "Privacy Inquiry" for priority handling

Our customer support team includes staff trained in data protection issues and capable of responding in English. For complex privacy matters or formal complaints, you may request escalation to our Data Protection Officer who oversees compliance with data protection regulations and investigates privacy concerns. We take all privacy inquiries seriously and will respond promptly to address your concerns.