Privacy Policy

The following terms carry the meanings set out below throughout this Privacy Policy:

cnn303, operating at https://cnn303.cam, is the Data Controller responsible for the Personal Data collected through this platform. All enquiries, data access requests, and complaints regarding the processing of your Personal Data should be addressed to our Data Protection contact as described in Section 15 of this Policy.

cnn303 collects the following categories of Personal Data in the course of providing its services to Indonesian players:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where age-related health data is voluntarily provided in the context of a responsible gaming self-exclusion request.

4.1 Directly From You

The majority of the Personal Data we hold is provided directly by you when you:

• Complete the account registration form on cnn303;
• Submit KYC identity verification documents, including your KTP;
• Make a deposit or request a withdrawal via a linked bank account or e-wallet;
• Contact our customer support team via email or live chat;
• Opt in to receive promotional communications or participate in surveys.

4.2 Automatically

Certain Technical Data and Usage Data is collected automatically when you access the platform, using cookies, web beacons, server log files, and similar tracking technologies. This data helps us maintain platform security, diagnose technical issues, and optimise your experience. See Section 10 for full details on our cookie practices.

4.3 From Third Parties

In limited circumstances, cnn303 may receive Personal Data about you from:

• Payment processors and banking partners — to confirm transaction status and detect fraudulent payment activity;
• Identity verification service providers — to cross-reference KTP data and confirm your eligibility to play;
• Fraud prevention and AML screening services — to fulfil our regulatory obligations and protect all players on the platform.

cnn303 processes your Personal Data for the following clearly defined purposes:

1. Account Management: Creating and maintaining your player account, authenticating your identity at login, and enabling you to access all platform features;
2. Service Delivery: Processing bets, settling game outcomes, crediting winnings, and providing access to all sports betting and casino gaming products;
3. Financial Transactions: Processing deposits from and withdrawals to your linked Indonesian bank accounts (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja);
4. KYC & Age Verification: Confirming that you are at least 21 years of age and a genuine account holder, in accordance with our Terms & Conditions;
5. Fraud Prevention & Security: Detecting and preventing unauthorised access, bonus abuse, multi-accounting, money laundering, and other fraudulent or criminal activity;
6. Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML) and know-your-customer (KYC) requirements;
7. Customer Support: Responding to your enquiries, resolving disputes, and managing complaints fairly and efficiently;
8. Responsible Gaming: Monitoring gameplay patterns to identify at-risk behaviour, administering deposit limits, time-out requests, and self-exclusion programmes;
9. Platform Improvement: Analysing aggregated Usage Data to improve platform features, fix bugs, and enhance the overall player experience;
10. Marketing Communications: Sending you promotional offers, bonus notifications, and event updates — but only where you have opted in to receive such communications and in accordance with your stated preferences.

cnn303 relies on the following legal bases when processing your Personal Data:

Where we rely on legitimate interests as a legal basis, we have carried out a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request details of this assessment by contacting us at the address in Section 15.

cnn303 does not sell, rent, or trade your Personal Data to any third party for commercial marketing purposes. We share your Personal Data only in the following limited circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers (Data Processors)

We engage trusted third-party Data Processors to support platform operations. These include:

• Payment gateway and banking partners — to facilitate IDR deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, and Indonesian e-wallet providers;
• Identity verification providers — to verify KTP authenticity and confirm player eligibility;
• Cloud hosting and infrastructure providers — to store data securely and maintain platform availability;
• Customer support software providers — to manage and log support interactions;
• Anti-fraud and AML screening services — to detect suspicious transaction patterns and meet regulatory requirements.

All Data Processors are contractually bound to process your Personal Data only on our documented instructions, to apply appropriate security measures, and to delete or return data upon termination of their engagement.

7.2 Law Enforcement & Regulatory Bodies

cnn303 may disclose Personal Data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law or where we have a good-faith belief that such disclosure is necessary to investigate, prevent, or respond to illegal activity, fraud, or a threat to the safety of any person.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of cnn303's assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected players prior to any such transfer taking effect and will ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this Policy.

cnn303's primary platform infrastructure and player data are hosted on servers located within data centres that maintain internationally recognised security certifications. In certain circumstances, Personal Data may be transferred to or accessed from locations outside Indonesia — for example, where a Data Processor's technical team is based in another country.

Where such international transfers occur, cnn303 ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection standards equivalent to those applied within Indonesia;
• Technical security controls including encryption of data in transit and at rest;
• Access controls limiting which personnel can view identifiable player data.

You may request information about the specific safeguards in place for any international transfer of your Personal Data by contacting our support team.

cnn303 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any identifiable individual.

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function correctly, operate more efficiently, and provide reporting information to site operators. cnn303 uses cookies and similar technologies including web beacons and local storage objects.

10.2 Types of Cookies We Use

10.3 Managing Cookies

You may control cookie settings through your browser preferences. Most browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your cnn303 account and using core platform features. Disabling other cookie types may reduce the quality of your experience but will not prevent platform access.

As a player on cnn303, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will verify your identity before processing any request and will respond within 30 calendar days.

cnn303 applies a layered set of technical and organisational security measures designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for all stored Personal Data and financial records;
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis;
• Multi-factor authentication for all internal administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Intrusion detection and prevention systems monitoring platform traffic in real time;
• Incident response procedures to ensure timely detection, containment, and notification in the event of a data breach.

In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, cnn303 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

Age verification is a mandatory step in the cnn303 registration and KYC process. If cnn303 discovers — at any point — that a player is under 21 years of age, the following actions will be taken immediately:

• The Account will be permanently closed;
• All deposits and any winnings will be refunded to the originating payment method after deduction of any amounts already withdrawn;
• All Personal Data associated with the underage Account will be securely deleted, except where retention is required by law.

If you believe that a minor has registered on cnn303, please notify us immediately at [email protected] so that we can investigate and take prompt corrective action.

cnn303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, platform functionality, or our internal practices. All updates will be published on this page with a revised "Last Updated" date prominently displayed at the top of the document.

Where changes are material — meaning they significantly alter the way we process your Personal Data or the rights available to you — we will provide advance notice via the email address registered to your Account at least 14 days before the changes take effect. For non-material updates, continued use of the platform after the revised Policy is published constitutes your acceptance of the updated terms.

We encourage you to review this Policy periodically to stay informed about how cnn303 protects your information.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the cnn303 data protection team. Our support agents — including Indonesian-speaking staff available during WIB business hours (08:00–21:00 WIB) — will handle all privacy enquiries with care and confidentiality.

We are committed to resolving all privacy complaints fairly and promptly. If you submit a complaint, we will acknowledge receipt within 3 business days and provide a substantive response within 30 calendar days. Where a complaint cannot be resolved within that period, we will inform you of the reason for the delay and provide a revised resolution timeline.

For broader privacy guidance and resources relevant to Indonesian residents, we encourage you to review the current data protection guidance published by Kominfo (the Indonesian Ministry of Communication and Information Technology), which provides useful context on personal data rights in Indonesia.