Last Updated: January 2026  |  Effective Date: January 1, 2026

1. Overview

cgk303 (accessible at cgk303.cam) is Indonesia's premier Black Diamond VIP online gaming platform. We are committed to protecting the privacy and personal data of every member who uses our services. This Privacy Policy explains, in plain and precise language, exactly what personal information cgk303 collects, why we collect it, how we use it, with whom we share it, how long we keep it, and what rights you have over your own data.

This Policy applies to all personal data processed by cgk303 in connection with our website, mobile interfaces, customer support channels (live chat, WhatsApp, email at [email protected], in-app messaging), and any other touchpoint through which you interact with us. It covers all members regardless of location within Indonesia — whether you are based in Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, Makassar, or any other city across the archipelago.

By creating an account on cgk303 or by continuing to use our platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to arrange account closure.

Your Privacy Matters

cgk303 will never sell your personal data to third-party advertisers or data brokers. Your information is used solely to provide, secure, and improve our gaming services for you and other Indonesian members.

2. Definitions

Throughout this Privacy Policy, the following terms carry the meanings defined below:

  • "cgk303", "we", "us", "our" — the cgk303 gaming platform and its licensed operators.
  • "User", "you", "your", "member" — any individual who registers for or uses the cgk303 platform.
  • "Personal Data" — any information that identifies or can be used to identify you directly or indirectly, including name, email address, phone number, date of birth, financial details, and device identifiers.
  • "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
  • "Controller" — the entity that determines the purposes and means of processing Personal Data. cgk303 acts as the Controller for data collected from members.
  • "Processor" — a third party that processes Personal Data on our behalf under our instruction (e.g., payment processors, cloud hosting providers).
  • "KYC" — Know Your Customer: the identity verification process cgk303 applies in accordance with Anti-Money Laundering (AML) obligations.
  • "Cookies" — small text files placed on your device by our website that help us provide and improve our services.

3. Personal Data We Collect

cgk303 collects the minimum data necessary to deliver a secure and personalized gaming experience. The categories of personal data we collect are set out in the table below.

Category Examples Required?
Identity Data Full legal name, date of birth, KTP (Indonesian Identity Card) number and scan, selfie photo for liveness verification Yes (KYC)
Contact Data Email address, mobile phone number, WhatsApp number, residential address Yes
Financial Data Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history, deposit and withdrawal records Yes
Gaming Data Wager history, game preferences, bet amounts, togel (lottery) ticket records, sports betting selections, session durations, VIP tier status Yes
Technical Data IP address, device type and model, operating system, browser type and version, screen resolution, time-zone (WIB/WITA/WIT), session tokens Automatic
Usage Data Pages visited, features clicked, referral source, marketing campaign attribution, error logs Automatic
Communications Data Live chat transcripts, email correspondence, WhatsApp messages with our support team, in-app message history When contacting us
Responsible Gaming Data Self-imposed deposit limits, session time reminders, self-exclusion period, cool-off activations, problem-gambling self-assessment responses When you use these tools

We do not collect or process any special category personal data (health, biometric, racial, religious, or political data) beyond what is strictly required for identity verification (i.e., the photo on your KTP). We do not collect payment card numbers — all card-based payments are processed directly by PCI DSS-compliant third-party payment gateways, and we only receive a transaction reference and status.

4. How We Collect Your Data

4.1 Directly from You

The majority of your Personal Data is provided directly by you when you: register a cgk303 account; complete KYC identity verification; make a deposit or withdrawal via a local Indonesian bank (BCA, BRI, BNI, Mandiri, and others) or an e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja); contact our customer support team; respond to promotions or surveys; or activate responsible gaming tools such as deposit limits or self-exclusion.

4.2 Automatically

When you visit or interact with cgk303, our servers and analytics tools automatically record Technical Data and Usage Data, including your IP address, device fingerprint, browser metadata, clickstream data, and session logs. This collection occurs through server logs, cookies, web beacons, and similar tracking technologies described in Section 11.

4.3 From Third Parties

We may receive limited Personal Data from trusted third-party sources, including: identity verification service providers who validate KTP authenticity; payment processors who confirm transaction status; fraud-prevention and AML screening databases; and marketing analytics platforms that attribute how you discovered cgk303 (e.g., search engine referral, affiliate link). In all cases, we rely only on third parties that maintain appropriate data protection standards.

5. Purposes of Processing

cgk303 processes your Personal Data for the following specific, explicit, and legitimate purposes:

  • Account creation and management: registering your account, verifying your identity, maintaining your profile, and administering your VIP tier status.
  • Providing gaming services: operating all platform features including sports betting (bandar bola, mix parlay, voor bola), slot gacor games, live casino, and togel lottery draws.
  • Payment processing: facilitating deposits and withdrawals through your chosen Indonesian bank or e-wallet, maintaining transaction records, and preventing chargebacks.
  • KYC and AML compliance: verifying your identity, age, and source of funds in line with international anti-money laundering obligations.
  • Fraud detection and security: identifying and preventing fraudulent activity, multi-account abuse, bonus abuse, and unauthorized access attempts.
  • Customer support: responding to your enquiries, resolving disputes, and improving our support quality through communication record review.
  • Responsible gaming: monitoring for problem-gambling indicators, enforcing limits you have set, processing self-exclusion requests, and proactively reaching out if we identify concerning patterns.
  • Marketing communications: sending promotional offers and VIP program updates where you have provided consent. You may opt out at any time.
  • Platform improvement: analysing usage patterns, conducting A/B testing, and developing new features that enhance your gaming experience.
  • Legal obligations: retaining records required by applicable regulations and responding to lawful requests from competent authorities.

7. Data Sharing and Disclosure

7.1 Third-Party Service Providers

cgk303 engages carefully vetted third-party processors to support our operations. These providers access only the minimum data necessary for their specific function and are contractually bound to process data solely on our instructions, maintain appropriate security standards, and not use your data for their own purposes. Categories of processors include:

  • Payment processors: facilitate bank transfer settlements with BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja).
  • Identity verification providers: perform automated KTP validation and liveness checks as part of our KYC process.
  • Cloud hosting and infrastructure providers: store platform data on servers secured with bank-grade encryption.
  • Game content providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Pocket Games Soft, and other studios may receive pseudonymised session data to settle game rounds and detect irregular play.
  • Fraud prevention and AML screening providers: cross-reference account and transaction data against watchlists to prevent financial crime.
  • Customer communication platforms: deliver live chat, WhatsApp Business API, and email interactions on our behalf.

7.2 Legal and Regulatory Disclosure

cgk303 may disclose your Personal Data to competent governmental authorities, law enforcement agencies, or regulators where we are legally required to do so, where disclosure is necessary to establish, exercise, or defend legal claims, or where we have a good-faith belief that disclosure is required to prevent imminent harm or criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the successor entity. We will notify affected members via email and prominent platform notice before any such transfer occurs, and the successor will be bound by a privacy policy at least as protective as this one.

7.4 What We Will Never Do

cgk303 will never sell, rent, or otherwise commercially transfer your Personal Data to third-party advertisers, data brokers, or marketing networks. Your data exists to serve your account and protect our platform — not to generate advertising revenue.

8. Data Retention

cgk303 retains your Personal Data only for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations. Our standard retention periods are as follows:

Data Category Retention Period Basis
Identity and KYC documents 5 years after account closure AML / legal obligation
Financial transaction records 5 years after transaction date AML / legal obligation
Gaming history and bet records 3 years after account closure Contractual / dispute resolution
Customer support communications 2 years after last interaction Legitimate interests
Marketing consent records Until consent is withdrawn + 1 year Legal obligation (proof of consent)
Technical and usage logs 12 months from collection Legitimate interests (security)
Responsible gaming records 5 years after account closure Regulatory compliance

When Personal Data is no longer required, cgk303 securely deletes or anonymizes it so it can no longer be linked to any individual. Anonymized, aggregated data (e.g., platform-wide betting statistics) may be retained indefinitely for analytical purposes.

9. Data Security

cgk303 implements a comprehensive, layered security framework to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

  • Transport Layer Security (TLS 1.3): all data transmitted between your device and our servers is encrypted in transit using industry-standard TLS protocols.
  • AES-256 encryption at rest: sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256 bit encryption.
  • Multi-factor authentication (MFA): members are strongly encouraged to enable MFA on their accounts; our administrative staff are required to use MFA for all system access.
  • Access controls: Personal Data is accessible only to authorized cgk303 personnel on a strict need-to-know basis, enforced through role-based access control systems.
  • Regular security audits: independent third-party security firms conduct periodic penetration testing and vulnerability assessments of our platform infrastructure.
  • Intrusion detection and DDoS protection: real-time monitoring systems detect and mitigate unauthorized access attempts and distributed denial-of-service attacks.
  • Incident response plan: in the unlikely event of a data breach affecting your Personal Data, cgk303 will notify you without undue delay and within legally required timeframes, describing the nature of the breach and the steps we are taking to address it.

Your Security Responsibilities

While cgk303 takes all reasonable technical measures to protect your account, the security of your login credentials is ultimately your responsibility. Never share your password with anyone — including individuals claiming to be cgk303 staff. Our team will never ask for your full password. If you suspect unauthorized account access, contact our 24/7 support team immediately via live chat or email at [email protected].

10. Your Privacy Rights

As a cgk303 member, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days; complex requests may require up to 60 days with notice.

Right of Access

Request a copy of all Personal Data we hold about you, including the categories, sources, and purposes of processing.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data held in your cgk303 account profile.

Right to Erasure

Request deletion of your Personal Data where it is no longer necessary, subject to our legal retention obligations.

Right to Restriction

Request that we restrict processing of your data in certain circumstances, such as while an accuracy dispute is being resolved.

Right to Portability

Receive your Personal Data in a structured, machine-readable format for transfer to another service provider.

Right to Object

Object to processing based on legitimate interests, including direct marketing and certain analytical profiling activities.

Please note that certain rights are subject to limitations. For example, we cannot erase data that we are legally required to retain for AML and KYC compliance. Where we are unable to fulfill a request in full, we will explain the reasons clearly and in writing.

11. Cookies and Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files stored on your device when you visit cgk303. They allow our platform to remember your preferences, maintain your login session, and collect analytical data to improve the service. Similar technologies — including web beacons, pixel tags, and local storage objects — serve comparable functions.

11.2 Types of Cookies We Use

Cookie Type Purpose Duration
Essential Maintain your login session, enforce security tokens, remember responsible gaming settings, and enable core platform functionality. Cannot be disabled without breaking the service. Session / up to 30 days
Functional Remember your language preferences, display settings, time-zone (WIB/WITA/WIT), and game lobby layout so you don't have to reconfigure them each visit. Up to 1 year
Analytical Measure how members navigate the platform, identify usability issues, and understand feature adoption to guide product improvements. Data is aggregated and pseudonymised. Up to 2 years
Marketing / Attribution Track which marketing channel brought you to cgk303 so we can measure campaign effectiveness. No data is passed to advertisers for third-party targeting. Up to 90 days

11.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely, though doing so may impair certain cgk303 features such as saved preferences and seamless re-login. For instructions on managing cookies, consult your browser's help documentation. Essential cookies cannot be disabled without rendering the platform non-functional.

12. Minors and Age Restriction

cgk303 services are strictly for individuals aged 21 years or older. We do not knowingly collect Personal Data from anyone under the age of 21. During account registration, all users must declare their date of birth and consent to an age verification check. If cgk303 becomes aware that a minor has registered an account or provided Personal Data, we will immediately suspend the account, delete the associated data, and, where required, notify relevant authorities.

Parents and guardians who believe a minor may have created a cgk303 account should contact our support team at [email protected] immediately. We will investigate and take appropriate action within 24 hours of a verified report.

Strict 21+ Policy

cgk303 enforces a zero-tolerance policy on underage gambling. All accounts are subject to age verification at any time. Accounts where the member cannot confirm they are 21 or older will be suspended and any remaining balance refunded to the verified payment method on record.

13. International Data Transfers

cgk303 operates globally and may store or process your Personal Data on servers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under this Privacy Policy. Safeguards may include standard contractual clauses, binding corporate rules, or transfers to countries recognized as providing an adequate level of data protection.

Our primary data hosting infrastructure uses reputable cloud providers with data centers across the Asia-Pacific region, minimizing latency for Indonesian players while maintaining rigorous security standards. All data-sharing arrangements with international third-party processors are governed by data processing agreements that impose the obligations described in Section 7.1.

14. Changes to This Privacy Policy

cgk303 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will notify you through one or more of the following methods: a prominent notice on the cgk303 platform, an email to the address registered on your account, or an in-app notification.

Non-material changes (such as typographical corrections or minor clarifications that do not affect your rights) will take effect immediately upon posting, with the "Last Updated" date at the top of this page revised accordingly. Your continued use of cgk303 services after a material change has been notified constitutes acceptance of the updated Policy. If you disagree with any changes, you should contact our support team to close your account before the updated Policy takes effect.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cgk303 handles your Personal Data, please reach out to our dedicated support and data team through the following channels:

  • Email: [email protected] — for data access requests, erasure requests, and privacy-related complaints. Expected response time: 2-4 business hours.
  • Live Chat: available 24/7 through your cgk303 account dashboard. Average response time: 2-5 minutes during WIB business hours.
  • WhatsApp: contact details available through your account dashboard. Our Indonesian-speaking agents are available around the clock.
  • In-App Messaging: send a message directly through your account interface with full conversation history for easy follow-up.

We are committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Our Privacy Commitments at a Glance

Six principles that underpin every data decision we make at cgk303

Data Minimization

We collect only the Personal Data genuinely necessary to operate your account, process payments through BCA, BRI, BNI, Mandiri, and e-wallets, and keep your account secure. Nothing superfluous is gathered.

Bank-Grade Encryption

All data in transit is protected by TLS 1.3, and sensitive data at rest is secured with AES-256 encryption — the same standards used by Indonesia's leading financial institutions.

No Data Selling

cgk303 will never sell, rent, or trade your Personal Data to advertisers, data brokers, or third-party marketing networks — period. Your data serves you and your account exclusively.

Full Transparency

We document every category of data we hold, every purpose for processing, and every third party we share it with. You always know precisely what cgk303 knows about you and why.

Your Rights, Respected

Access, correct, delete, port, or restrict your data — all requests are handled within 30 days. We honor your privacy rights as a fundamental part of our relationship with every Indonesian member.

Defined Retention Limits

We never hold your data longer than necessary. Clear, documented retention schedules govern every data category, with secure deletion or anonymization applied as soon as retention periods expire.

Questions About Your Privacy?

Our dedicated support team is available 24/7 to answer any questions about how cgk303 handles your Personal Data. You can also explore our related policy pages for a complete picture of your rights and our commitments.

Back to Home Terms & Conditions Visit FAQ