Privacy Policy — sw303

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — the Player — including name, date of birth, contact details, payment information, device identifiers, and behavioral data generated through use of the sw303 platform.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means sw303, the entity that determines the purposes and means of processing Personal Data collected through the sw303 platform.
• "Data Processor" means any third party that processes Personal Data on behalf of sw303, strictly under sw303's instructions and subject to a data processing agreement.
• "Player" or "you" means any individual who registers an account on or otherwise uses the sw303 platform.
• "Platform" means the sw303 website at sw303.pro and all associated services, games, and tools accessible through that domain.
• "KYC" (Know Your Customer) means the identity verification process sw303 is required to conduct for all Players as a condition of its international gaming license.

The Data Controller responsible for your Personal Data is sw303, the operator of the sw303 platform accessible at sw303.pro. sw303 operates under an international gaming license and is responsible for ensuring that all Personal Data collected through the platform is processed lawfully, fairly, and transparently in accordance with applicable data protection standards.

For all data protection inquiries, requests to exercise your rights, or complaints regarding the handling of your Personal Data, please contact the sw303 Data Protection team using the contact details provided in Clause 16 of this Policy.

sw303 collects the following categories of Personal Data from Players:

sw303 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If any such data is inadvertently received, it will be deleted promptly.

sw303 collects Personal Data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to promotions.
• Automated technologies: Technical and Usage Data collected automatically when you access the sw303 platform, using cookies, server logs, and similar tracking technologies (see Clause 10 for full cookie details).
• Third-party sources: Identity verification agencies that assist sw303 in confirming the accuracy of KYC documents; payment processors that confirm transaction status; fraud prevention services that flag suspicious activity patterns.

sw303 does not purchase Personal Data from data brokers or any third-party commercial data providers.

sw303 processes your Personal Data only for specific, legitimate purposes and only where a lawful basis for processing exists. The table below sets out the primary purposes for which sw303 processes Personal Data and the corresponding legal basis:

Where sw303 relies on legitimate interest as a legal basis, sw303 has assessed that such interests are not overridden by the rights and freedoms of the Player. Where processing is based on consent, you may withdraw that consent at any time by contacting sw303 support, without affecting the lawfulness of processing carried out prior to withdrawal.

sw303 does not sell, rent, or trade your Personal Data. sw303 shares Personal Data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive financial data necessary to process deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and AML compliance services that assist sw303 in verifying player identity, age, and the authenticity of submitted documents.
• Game studio providers: Software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymous player identifier and session data necessary to operate their games within the sw303 platform.
• Fraud prevention and security services: Providers that help sw303 detect account takeover attempts, bonus abuse, and coordinated fraudulent activity.
• IT infrastructure and hosting providers: Cloud hosting and data center operators that store sw303 platform data under strict data processing agreements.
• Regulatory and law enforcement authorities: Where sw303 is legally required to disclose Personal Data to its licensing authority, a court, or a law enforcement body pursuant to a valid legal order.

All third-party Data Processors engaged by sw303 are bound by contractual data processing agreements that require them to process Personal Data solely for the purposes instructed by sw303, to implement appropriate security measures, and to comply with applicable data protection standards.

sw303 operates as an internationally licensed platform and may transfer Personal Data to servers, service providers, or licensing authority systems located outside the Republic of Indonesia. Where such transfers occur, sw303 ensures that appropriate safeguards are in place to protect the Personal Data, including:

• Contractual clauses in data processing agreements with third-party processors that impose data protection obligations equivalent to those applied within the sw303 platform.
• Transfer of data only to jurisdictions or service providers that offer an adequate level of data protection as assessed by sw303's compliance function.

By registering an sw303 account, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Indonesia where sw303 or its service providers operate, subject always to the protections described in this Policy.

sw303 retains Personal Data for the minimum period necessary to fulfill the purposes for which it was collected, subject to any longer retention period required by law or our licensing authority. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, as required for financial audit and regulatory compliance purposes.
• KYC documents: Retained for a minimum of 5 years following the submission date or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the communication is connected to an ongoing dispute or regulatory inquiry.
• Technical and usage data (logs): Retained for up to 12 months, after which they are anonymized or deleted.
• Marketing consent records: Retained for the duration of your account plus 3 years following account closure, to provide an audit trail of consent.

When Personal Data is no longer required, it is securely deleted using industry-standard methods or permanently anonymized so that it can no longer be linked to an identifiable individual.

sw303 implements a comprehensive set of technical and organizational security measures designed to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all platform pages and data transmission channels.
• Encrypted storage for all Personal Data and financial records at rest, using industry-standard encryption algorithms.
• Role-based access controls that restrict internal access to Personal Data to employees and contractors who have a demonstrable business need for that access.
• Multi-factor authentication (MFA) for all internal systems used to manage Player data.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident response procedures that define sw303's obligations in the event of a data breach, including prompt notification to affected Players and relevant authorities.

sw303 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and support security functions. The types of cookies used are described below:

• Strictly necessary cookies: Essential for the platform to function correctly. These cookies maintain your login session, store your language and currency preferences, and support security features. They cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymized data about how Players navigate the sw303 platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data helps sw303 improve platform performance and user experience.
• Functional cookies: Remember your display preferences, game lobby filters, and other customization settings so that you do not need to re-configure them each time you log in.
• Security cookies: Help sw303 detect and prevent fraudulent login attempts, account takeover, and session hijacking.

sw303 does not use third-party advertising cookies or track your activity across other websites for advertising retargeting purposes. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the sw303 platform.

Subject to applicable data protection law and sw303's obligations under its gaming license, you have the following rights in respect of the Personal Data sw303 holds about you:

• Right of access: You may request a copy of all Personal Data sw303 holds about you, along with information about how it is processed.
• Right to rectification: You may request the correction of any inaccurate or incomplete Personal Data held in your sw303 account.
• Right to erasure ("right to be forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to sw303's legal retention obligations (see Clause 8).
• Right to restriction of processing: You may request that sw303 restrict the processing of your Personal Data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: You may request that sw303 provide your Personal Data in a structured, commonly used, machine-readable format so that you can transfer it to another service.
• Right to object: You may object to sw303 processing your Personal Data on the basis of legitimate interest, including for direct marketing purposes. Where you object to marketing, sw303 will cease marketing communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the sw303 Data Protection team (see Clause 16). sw303 will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notification to you of the extension and the reasons for it.

Please note that certain rights may be limited where sw303 has a legal obligation to retain or process your data, for example under AML regulations or our licensing authority's record-keeping requirements.

The sw303 platform is strictly for adults aged 21 years or older. sw303 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the sw303 KYC process, and any account found to belong to a person under 21 will be closed immediately, with all balances returned to the registered payment method.

If you are a parent or guardian and believe that a minor has registered an sw303 account or accessed the platform, please contact sw303 support immediately. sw303 will investigate and, if confirmed, close the account and securely delete all associated Personal Data to the extent not required for legal record-keeping purposes.

sw303 may send you promotional communications about bonuses, tournaments, new game releases, and seasonal offers by email or SMS, subject to your communication preferences. You may opt in to marketing communications during registration or at any time via your Account settings.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email sw303 sends.
• Updating your communication preferences in the Notifications section of your Account dashboard.
• Contacting sw303 customer support and requesting removal from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional communications that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, and security alerts.

The sw303 platform integrates games and tools developed and operated by third-party studios and service providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. When you launch a game from one of these studios within the sw303 platform, a pseudonymous session token and the minimum data necessary to operate the game are passed to that studio's systems.

sw303 is not responsible for the privacy practices of third-party game studios or payment providers beyond the contractual obligations imposed through our data processing agreements. Players who have concerns about how a specific third-party provider handles data should consult that provider's own privacy policy directly.

The sw303 platform does not contain links to external websites. All content accessible through sw303.pro is either operated by sw303 directly or by an integrated third-party provider under a formal agreement.

sw303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered Players via the email address associated with their Account at least 7 days before the changes take effect.

The most recent version of this Privacy Policy is always available on this page. The effective date at the top of the page indicates when the current version was last updated. Continued use of the sw303 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how sw303 handles your Personal Data, please contact the sw303 Data Protection team through one of the following channels:

• Live Chat: Available 24/7 directly from the sw303 platform — average first response time under 90 seconds.
• Email: [email protected] — please include "Privacy Request" or "Data Protection" in your subject line.

sw303 aims to acknowledge all written privacy requests within 24 hours of receipt and to provide a substantive response within 30 days. If you are not satisfied with sw303's response to your privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which sw303 holds its gaming license.