coin303Privacy Policy
We at coin303 keep your personal data encrypted and secure throughout every transaction on our platform. This privacy policy describes what information we collect when you use coin303, how we protect it, and what choices you have over your data. We collect only the information necessary to operate our service: account details for signup, payment information for deposits and withdrawals, identity documents for verification, and transaction records for compliance and dispute resolution.
Our commitment to data privacy is inseparable from our commitment to payment security. When you deposit via DANAe-walletmobile bankingor a bank transfer through local paymentwe do not store your wallet credentials or bank login details. We receive only confirmation that the payment was processed; your actual payment credentials are held by the payment provider. This separation of payment data from our systems is a foundational design principle on coin303.
We respect that your privacy expectations differ based on your location and the services you use. Our servers may sit outside your jurisdiction; however, we follow Indonesian data-protection principles as our primary compliance framework. This page explains our practices in plain language. If you have questions about how we handle your data, our support team can clarify any section below.
What Data We Collect on coin303
We collect account data when you create a coin303 account. This includes your email address, phone number, username, password (hashed and encrypted), and account-recovery information. We ask for this data to create your login, send notifications, and process account recovery if you forget your password. We do not share your email or phone number with game providers, live dealers, or third-party marketers.
During identity verification, we collect your national identity document (KTP) and proof of address. We store these documents encrypted in a secure vault separate from your account login. We use them solely to verify your identity before large withdrawals and to comply with Indonesian anti-money-laundering regulations. These documents are never shared with payment providers, game providers, or external marketing partners. We retain them for the duration of your account plus one year after closure, then delete them.
When you make a deposit or withdrawal, we collect transaction data: the amount, payment method, timestamp, and confirmation status. We keep this record in your account ledger so you can review your transaction history anytime. We do not store full payment credentials—only the last four digits of your card or wallet for reference. Our payment processor (the bank or e-wallet provider) holds the actual payment data; we receive only a confirmation message.
- Encrypted Storage
- We encrypt sensitive data (passwords, KYC documents, payment details) using industry-standard encryption at rest and in transit.
- Data Retention
- We keep account data for the life of your account. Payment records and transaction history are retained for seven years for compliance purposes.
- Third-Party Processor
- We use payment gateways, hosting providers, and email services. These processors sign data-protection agreements and may not use your data for other purposes.
- Cookies
- We use session cookies to keep you logged in and analytics cookies to understand how you navigate coin303. You can disable cookies in your browser settings.
How We Use Your Data on coin303
We use your personal data to operate our platform and fulfill our obligations to you. Your email is used for login, password recovery, and transaction confirmations—nothing more. Your phone number is optional and used only if you request SMS notifications about withdrawals or account changes. Your payment data is used exclusively to process deposits and withdrawals; we never use your payment method to charge you for services beyond what you authorize.
Your transaction history is used to generate account statements and to resolve disputes. If you place a sports prediction or slot-game session and it settles or expires, we keep the record so you can review the outcome. We do not sell this data to third parties, and we do not use it for marketing purposes.
During the holidays (Idul Fitri, Idul Adha, Imlek, Nyepi), your account data remains accessible and protected identically to any other period. We do not suspend, delete, or downgrade privacy protections for any account regardless of season or local observance.
Your data is yours. We collect it, protect it, and delete it when you request or when our retention period expires—nothing stays indefinitely.
Third-Party Processors and Subcontractors
We at coin303 use external service providers to operate our platform. Our payment gateway processes deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, and e-wallet. These providers sign data-protection agreements with us and may not use your data for their own marketing or purposes beyond payment processing. Our cloud hosting provider stores our database and serves our website; they sign a data-protection addendum and maintain security certifications. Our email provider sends transactional messages (login links, confirmations) on our behalf.
We conduct annual audits of our processors to ensure they maintain the same security standards we uphold. If we change processors, we notify you before the transition and ensure your data is encrypted during transfer. We never sell your data to data brokers, advertisers, or analytics firms.
Your Rights on coin303
You have the right to request a copy of all personal data we hold about you. You can request that we delete or correct inaccurate data. You can withdraw consent to use your data for non-essential purposes (e.g., marketing notifications). To exercise these rights, email our privacy team at [email protected]We will respond within 30 days. You also have the right to lodge a complaint with the relevant data-protection authority in your jurisdiction.
Our Commitment and Policy Updates
We at coin303 take data protection seriously because it is foundational to trust. Your financial data is sensitive; your identity documents are irreplaceable. We invest in encryption, secure infrastructure, and regular security audits to protect both. We do not monetize your data, and we do not share it with partners who would. If a security breach occurs, we notify affected account holders within 72 hours, as required by law, with clear guidance on what data was compromised and what steps you should take.
We may update this privacy policy to reflect changes in our practices or legal requirements. If we make material changes—such as introducing a new data processor or expanding our data collection—we will notify you via email and display a notice on coin303 when you log in. Your continued use of coin303 after a policy update indicates your acceptance of the new policy. If you disagree with the updated policy, you can close your account and request deletion of your data (subject to legal retention obligations).
This privacy policy is governed by the laws applicable in Indonesia. If you have questions about how we handle your data on coin303, or if you wish to exercise your rights, contact our privacy team at [email protected] or use the contact form in your coin303 account settings. We acknowledge all inquiries within three business days and provide substantive responses within 30 days.