This Privacy Policy explains what personal data md303 collects from you, why we collect it, how we use and protect it, and the rights you hold over your information. We are committed to transparency and to handling your data with the care it deserves.
Last Updated: 1 January 2026This Privacy Policy ("Policy") is issued by md303 ("we", "us", "our", "the Platform") and applies to all personal data collected from individuals ("you", "the Member", "the User") who access or use the md303 website at https://md303.cam and any associated services, features, or communications.
md303 is an international online betting and gaming platform serving English-preference users across Indonesia. As part of providing our services, we collect and process certain categories of personal data. This Policy explains what data we collect, the purposes for which we use it, the parties with whom we may share it, and the rights available to you under applicable data-protection principles.
By registering an Account on md303, making a deposit, placing a Wager, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
The Data Controller responsible for the personal data collected through the md303 Platform is md303, operating under international licensing standards at https://md303.cam. All data-related inquiries, access requests, and complaints should be directed to:
md303 takes its responsibilities as a Data Controller seriously and has implemented appropriate technical and organisational measures to protect the Personal Data under its control in accordance with the data-protection principles described in this Policy.
md303 collects the following categories of Personal Data from Members and users of the Platform:
4.1 Registration & Identity Data
4.2 Financial Data
4.3 Wagering & Activity Data
4.4 Technical & Device Data
4.5 Communications Data
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Name, DOB, KTP / NIK | KYC / Age verification |
| Financial | Bank account, e-wallet ID | Payments processing |
| Wagering | Bet history, session logs | Service delivery, RG monitoring |
| Technical | IP address, browser type | Security, fraud prevention |
| Communications | Support chat transcripts | Customer service quality |
md303 collects Personal Data through the following means:
md303 processes your Personal Data for the following purposes:
md303 processes your Personal Data on one or more of the following legal bases:
md303 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We share your data only in the following circumstances:
8.1 Payment Processors
We share the minimum necessary financial and identity data with Indonesian banks and e-wallet operators (including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja) to process deposit and withdrawal transactions on your behalf.
8.2 KYC and AML Verification Providers
We share identity document data and selfie photographs with vetted third-party identity verification service providers for the purpose of completing the KYC process. These providers operate under contractual data-processing agreements and are prohibited from using your data for any other purpose.
8.3 Fraud Prevention Services
We may share technical and behavioural data (such as device fingerprints and IP addresses) with fraud-detection and cybersecurity service providers to protect the integrity of the Platform and all its Members.
8.4 Legal and Regulatory Authorities
We may disclose Personal Data to law-enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of md303, its Members, or the public.
8.5 Business Transfers
In the event that md303 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data-protection commitments. You will be notified of such a transfer in advance where reasonably practicable.
As an internationally operated platform, md303 may transfer your Personal Data to servers and service providers located outside Indonesia. Where such transfers occur, md303 implements appropriate safeguards to ensure that your data receives a level of protection consistent with internationally recognised data-protection standards, including the use of contractual data-processing agreements with all third-party processors.
By using the md303 Platform, you acknowledge and consent to the transfer of your Personal Data to our servers and authorised service providers in jurisdictions outside Indonesia where this is necessary for the purposes described in this Policy.
md303 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your Account's active status and for a minimum period thereafter as required by applicable legal, regulatory, and anti-money-laundering obligations.
Specifically:
Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders re-identification impossible.
md303 implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our measures include:
While md303 employs robust technical and organisational safeguards, no data transmission over the internet or electronic storage system can be guaranteed to be entirely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, md303 will notify affected Members as promptly as practicable in accordance with applicable breach-notification standards.
md303 uses cookies and similar tracking technologies on the Platform for the following purposes:
12.1 Essential Cookies
Required for core Platform functionality, including maintaining your login session, remembering your language preference, and ensuring security features function correctly. These cookies cannot be disabled without impairing the Platform's basic operation.
12.2 Analytics Cookies
Used to collect aggregated, anonymised data about how Members navigate the Platform — including pages visited, time spent, and error events. This data is used exclusively to improve Platform performance and the user experience. Analytics data is not linked to individual Member profiles.
12.3 Preference Cookies
Used to remember your display preferences and previously selected settings, so that you do not need to reconfigure them each session.
12.4 Managing Cookies
Most web browsers provide tools to view, block, or delete cookies. Note that disabling essential cookies will impair your ability to use the Platform. For details on managing cookies in your specific browser, please refer to your browser's help documentation. md303 does not respond to browser "Do Not Track" signals at this time, as no universally accepted standard for such signals currently exists.
Subject to applicable law and the legitimate interests of md303 (including legal-retention obligations and the prevention of fraud), you hold the following rights in relation to your Personal Data:
To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 calendar days of receipt. We may request additional information to verify your identity before processing data-rights requests.
The md303 Platform is strictly intended for adults aged 21 and over. md303 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account.
If you believe a person under the age of 21 has registered an Account on md303, please notify us immediately at [email protected]. We will investigate the report and take appropriate action without delay.
The md303 Platform does not contain outbound links to external third-party websites. However, where third-party services are integrated into the Platform (such as payment gateways and KYC verification providers), these services operate under their own privacy policies. md303 is not responsible for the privacy practices of any third-party service provider. We recommend that you review the privacy policies of any third-party services you interact with in connection with your md303 Account.
md303 reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or the services offered through the Platform. Material changes will be communicated to Members via email notification to the address on record, and/or via a prominent notice on the Platform, no less than 7 days prior to the revised Policy taking effect.
The "Last Updated" date at the top of this Policy reflects the date on which the most recent revision was published. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must cease using the Platform and contact support to arrange the closure of your Account.
For all privacy-related inquiries, data-rights requests, or complaints regarding the handling of your Personal Data, please contact the md303 Data Protection team using the following details:
If you are not satisfied with the outcome of a privacy complaint submitted to md303, you have the right to escalate the matter to the relevant data-protection supervisory authority in the jurisdiction applicable to your dispute.
These rights are yours by default. Submit any request to [email protected] and we will respond within 30 days.
Request a full copy of the personal data we hold about you and a summary of how it is being used.
Request correction of any inaccurate or outdated data we hold in your Account or KYC records.
Request deletion of your data where it is no longer required for the purpose it was collected, subject to retention obligations.
Ask us to pause certain processing activities while a rectification or objection request is being assessed.
Receive a structured, machine-readable copy of data you directly provided to us, suitable for transfer to another service.
Object to processing based on legitimate interests, or withdraw consent for marketing communications at any time.
Privacy commitments are only meaningful when they are backed by concrete technical and operational measures. Here is what md303 actually does.
Every connection between your browser and md303 is secured by 256-bit TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
Sensitive data — including identity documents and financial records — is stored in encrypted form on hardened servers. Access is restricted to authorised personnel only, under strict internal access controls.
md303 does not sell, rent, or trade your Personal Data to advertisers or data brokers under any circumstances. Data sharing is limited strictly to payment processors, KYC providers, and legal authorities as required.
Internal access to Member data is granted on a need-to-know basis only. Every access event is logged, and anomalous access patterns are flagged automatically for security review.
Independent third-party cybersecurity specialists conduct regular penetration tests and security audits of the md303 infrastructure. Findings are acted upon promptly and documented internally.
In the event of a confirmed data breach affecting your Personal Data, md303 will notify affected Members and relevant authorities as promptly as practicable in accordance with applicable breach-notification standards.
If anything in this Policy is unclear, our support team is available 24/7. You can also review our Terms & Conditions or visit our FAQ for more general guidance.