Privacy Policy

nx303 ("we", "us", "our") operates an online gambling platform accessible at nx303.bio, offering sports betting, live casino, slot games, togel (Indonesia's traditional numbers lottery) markets, and Bola Tangkas to registered members. In the course of providing these Services, we collect and process certain personal data about the individuals who register accounts, make financial transactions, and interact with our platform.

This Privacy Policy applies to all personal data processed by nx303 in connection with the Platform — whether you are an active member, a visitor to our website who has not yet registered, or a former member whose account has been closed. It covers data collected through the nx303 website, our live chat support system, our payment processing workflows, and any other direct communications you have with our team.

By creating an account on nx303 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, you should not create or continue to use an nx303 account.

The following terms are used throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, either directly (such as a full name or national identity number) or indirectly (such as a device identifier combined with other data points).
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Data Controller" means nx303 in its capacity as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of nx303 under a written agreement — for example, a KYC verification provider or a payment gateway.
• "Member" means any individual who has successfully registered an account on the nx303 Platform.
• "Visitor" means any individual who accesses the nx303 website without having registered an account, or who has not yet logged in.
• "KYC" means Know Your Customer — the identity verification process that nx303 uses to confirm a Member's identity before processing withdrawals or at the point of account review.
• "Cookies" means small text files placed on a user's device by the nx303 website for the purpose of session management, analytics, and personalisation.
• "Services" refers to all products, features, and functions available on the nx303 Platform.

nx303 collects the following categories of Personal Data, depending on how you interact with the Platform:

We do not collect sensitive categories of personal data (such as health, religious, or political data) unless you voluntarily disclose such information in a support communication, in which case we handle it with strict confidentiality and do not use it for profiling or marketing purposes.

nx303 collects Personal Data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing a deposit or withdrawal request, submitting KYC documents, or contacting our support team via live chat, email, or WhatsApp.
• Automated collection: Technical and behavioural data collected automatically when you visit the Platform, through server-side logging, session cookies, and analytics scripts. This collection occurs whether or not you are logged in to an account.
• Payment processors: Financial transaction data received from third-party payment gateways and Indonesian banking networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or request a withdrawal.
• KYC verification partners: Identity verification data returned by our third-party KYC service providers following document review.
• Fraud and security systems: Risk signals and anomaly flags generated by our internal fraud detection systems when unusual account activity is detected.

nx303 uses your Personal Data for the following purposes. In each case, we rely on a lawful basis for processing, which is detailed in Section 6.

• Account creation and management: To register your account, authenticate your login sessions, and maintain accurate account records.
• Service delivery: To enable you to access the full range of Services on the Platform, including placing bets, playing casino games, participating in togel draws, and making use of promotional offers.
• Payment processing: To execute deposits to your account and process withdrawal requests to your nominated bank account or e-wallet.
• Identity verification (KYC): To verify your identity before releasing withdrawals above specified thresholds, and to comply with our licensing and anti-money laundering obligations.
• Customer support: To respond to your queries, resolve account issues, and maintain records of support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming: To monitor gambling patterns that may indicate problematic behaviour, and to action self-exclusion or cooling-off requests submitted by Members.
• Promotions and marketing: To send you promotional communications about bonuses, new games, and seasonal offers — but only where you have opted in to receive such communications. You may unsubscribe at any time by contacting support.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, design, and game offering of the Platform.
• Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from law enforcement or regulatory authorities.

nx303 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions that govern your membership — including account management, payment processing, and service delivery.
• Legitimate interests: Processing carried out in pursuit of nx303's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud detection, platform security, and analytics for service improvement.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC verification, anti-money laundering checks, and responding to lawful requests from authorities.
• Consent: Where we rely on your consent as the basis for processing — specifically for sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

nx303 may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and banking partners: To execute deposit and withdrawal transactions. Relevant financial data is shared with the applicable provider (e.g., BCA, BRI, OVO, DANA) solely to complete your transaction.
• KYC verification service providers: To verify identity documents submitted as part of the KYC process. These providers act as Data Processors under a contractual agreement with nx303.
• Game studios and content providers: Limited technical data (such as player identifier and session token) may be shared with studios like Pragmatic Play, Evolution Gaming, or PG Soft solely to enable game functionality and RNG integrity verification.
• Customer support platforms: Support interaction data is processed within our live chat and ticketing infrastructure. Support platform providers are bound by data processing agreements that restrict their use of your data.
• Fraud detection and security vendors: Aggregated technical and behavioural data may be processed by third-party risk management systems to identify suspicious activity patterns.
• Regulatory and law enforcement authorities: nx303 will disclose Personal Data to competent authorities where required to do so by law, regulation, court order, or in connection with an investigation into suspected criminal activity related to our platform.
• Professional advisors: In limited circumstances, Personal Data may be disclosed to legal counsel, auditors, or compliance consultants under strict confidentiality obligations.

All third parties with whom Personal Data is shared are required by contract to implement appropriate technical and organisational security measures and to process your data only for the specific purpose for which it was shared.

The nx303 Platform uses cookies and similar tracking technologies to support essential site functionality, maintain your login session, and collect anonymous analytics data. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a visit. They cannot be disabled without breaking core functionality.
• Functional cookies: Used to remember your preferences — such as display settings or the last game category you browsed — to personalise your experience on return visits.
• Analytics cookies: Used to collect anonymised data about how visitors navigate the Platform, which pages are most visited, and how long sessions last. This data is used in aggregate to improve the Platform and does not identify you personally.
• Security cookies: Used by our fraud detection systems to identify suspicious access patterns and protect against account takeover attempts.

You may control cookie settings through your browser's privacy settings. Disabling cookies beyond the strictly necessary category may affect certain features of the Platform. Note that clearing your cookies will log you out of any active session.

nx303 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data (identity, contact, financial, account activity): Retained for the duration of your membership and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a minimum of two years from the date of the interaction.
• Technical and analytics logs: Typically retained for 12 months in identifiable form; aggregated and anonymised data may be retained indefinitely.
• Marketing consent records: Retained until consent is withdrawn, plus a further 12 months as evidence of the consent record.

Where Personal Data is no longer required for any lawful purpose, nx303 will securely delete or irreversibly anonymise it. Secure deletion involves overwriting stored data to prevent reconstruction.

nx303 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and our servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage for sensitive data fields — including passwords (which are stored as salted cryptographic hashes and never in plain text) and financial identifiers.
• Access controls: Internal access to Personal Data is restricted to staff who require it to perform their job functions. Access is governed by role-based permissions and is logged for audit purposes.
• Two-step account verification: Members may enable SMS-based two-step verification to prevent unauthorised access to their accounts from unrecognised devices.
• Intrusion detection systems: Automated monitoring for anomalous login attempts, brute-force attacks, and other suspicious access patterns, with real-time alerting to the security team.
• Regular security reviews: The Platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

As a Member or Visitor whose Personal Data is processed by nx303, you have the following rights with respect to your information. To exercise any of these rights, contact our support team using the details in Section 15.

• Right of access: You may request a copy of the Personal Data that nx303 holds about you, together with information about how it is being used.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that we delete your Personal Data. This right is subject to limitations where we are required by law to retain data for a specified period (for example, transaction records retained for anti-money laundering purposes).
• Right to restriction of processing: You may request that we limit the processing of your Personal Data in certain circumstances — for example, while we investigate a dispute about the accuracy of data we hold.
• Right to object: Where we process your data on the basis of legitimate interests, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting support or updating your account preferences.
• Right to data portability: Where technically feasible and where processing is carried out by automated means on the basis of your consent or a contract, you may request that we provide your Personal Data in a structured, machine-readable format.

nx303 will respond to all valid data rights requests within 30 days. In cases of particular complexity or where multiple requests have been received simultaneously, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

The nx303 Platform is strictly for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a Member has provided false age information during registration and is in fact under 21 years of age, we will:

• Immediately suspend and permanently close the Account.
• Forfeit any balance remaining in the Account in accordance with the Terms & Conditions.
• Securely delete the personal data of the underage individual to the extent permitted by applicable law and record-keeping obligations.

The nx303 Platform serves members primarily based in Indonesia. Some of our Data Processors — including KYC verification providers, game studios such as Pragmatic Play and Evolution Gaming, and certain support infrastructure providers — operate servers outside of Indonesia. Where your Personal Data is transferred to servers or processing facilities in other countries, nx303 ensures that appropriate safeguards are in place to protect that data, including:

• Contractual clauses in data processing agreements requiring the recipient to maintain data protection standards equivalent to those applied by nx303.
• Transfer to recipients in jurisdictions that maintain adequate data protection frameworks recognised under internationally accepted standards.

By using the Platform and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your Personal Data as described above, subject to the safeguards outlined in this section.

nx303 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post a prominent notice on the Platform and update the "Last updated" date at the top of this document. Where the change significantly affects how we use your Personal Data, we will also notify you through your registered contact method where practicable.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how nx303 protects your personal information. The current version of this Policy is always accessible at nx303.bio/privacy-policy.

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to raise a concern about how nx303 handles your personal information, please contact our support team through any of the following channels:

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. Live chat is the fastest channel for urgent account security matters.
• Email: [email protected] — for formal data subject access requests, please include "Data Request" in your subject line and provide your registered username and the email address associated with your account.
• WhatsApp: +62 811 0000 303 — available 08:00–24:00 WIB for general support enquiries.

nx303 will acknowledge receipt of a formal data rights request within five business days and will provide a full response within 30 days as described in Section 11. We may request proof of identity before processing a data access or erasure request to ensure we are disclosing or deleting the correct individual's data.