Privacy Policy — bank303

This Privacy Policy ("Policy") describes how bank303 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access, register, or use the bank303 online gambling platform available at https://bank303.lat ("the Platform").

bank303 is committed to protecting the privacy and personal data of all its users. We comply with applicable international data protection principles and have implemented appropriate technical and organisational measures to safeguard personal information in our care.

By registering an account or using the bank303 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

bank303 collects only the personal data that is necessary for the operation of our services, regulatory compliance, and improvement of the user experience. The categories of personal data we collect include:

3.1 Identity & Account Data

• Full legal name as it appears on your official identification document.
• Date of birth (to verify that you meet the minimum age requirement of 21 years).
• Malaysian National Identity Card (MyKad) number, passport number, or other government-issued identification number where required for KYC.
• Username and encrypted account password.
• Profile photo or selfie submitted for KYC identity verification purposes.

3.2 Contact Data

• Email address (used for account management, transaction notifications, and support communications).
• Residential address (collected as part of proof-of-address KYC verification).
• Phone number (optional, used for account security and support purposes).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers.
• E-wallet account references (Touch 'n Go eWallet, Boost, GrabPay) and bank account details where provided for withdrawal processing.
• Cryptocurrency wallet addresses where USDT TRC20 deposits are used.
• Wagering history, game activity records, and promotional bonus usage.

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, pages visited, and navigation patterns within the Platform.
• Log files generated during normal platform interaction.

3.5 Communications Data

• Records of communications between you and bank303 support, including live chat transcripts and email correspondence.
• Feedback, complaints, and dispute records.

bank303 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotional activities.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you interact with the Platform.
• From third-party payment providers — such as confirmation data received when processing transactions via DuitNow, FPX, Maybank, CIMB, or other supported Malaysian payment channels.
• From identity verification providers — during the KYC process, we may use third-party services to assist with document verification and fraud detection.

bank303 processes personal data for the following purposes, each underpinned by an applicable legal basis:

bank303 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. Personal data may be shared only in the following limited circumstances:

• Payment Service Providers: We share transaction data with Malaysian payment processors (including FPX network members, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong Bank) strictly as required to process your financial transactions.
• Identity Verification Partners: Personal data and KYC documents may be shared with regulated third-party identity verification services engaged to assist with document authentication and fraud prevention.
• Regulatory Authorities: We may be required to disclose personal data to government agencies, law enforcement authorities, or financial intelligence units in response to lawful requests, court orders, or to fulfil our AML reporting obligations.
• Legal Advisors & Auditors: Personal data may be disclosed to professional advisors, legal counsel, or external auditors on a strictly need-to-know basis and subject to confidentiality obligations.
• Platform Technology Partners: Infrastructure providers (such as cloud hosting and security services) may have access to encrypted personal data solely in their capacity as data processors under binding data processing agreements.

All third parties with whom we share personal data are required to maintain appropriate data protection standards consistent with this Policy.

bank303 retains personal data only for as long as is necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required by applicable law.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

bank303 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the bank303 Platform is encrypted using TLS 1.2 or higher with 256-bit SSL encryption.
• Encryption at Rest: Sensitive personal data and financial records are stored in encrypted form on secured infrastructure.
• Access Controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging.
• Password Security: Account passwords are hashed using industry-standard cryptographic algorithms. bank303 staff cannot view or retrieve your password in plaintext.
• Fraud Monitoring: Automated systems continuously monitor account activity for patterns indicative of unauthorised access, account takeover attempts, or fraudulent behaviour.
• Incident Response: In the event of a personal data breach that poses a risk to individuals, bank303 will notify affected users and relevant authorities in accordance with applicable data protection requirements.

bank303 uses cookies and similar tracking technologies to support the operation of the Platform, improve performance, and understand how users interact with our services. The types of cookies we use are:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, CSRF protection tokens, and preference storage. These cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated and anonymised information about how players navigate and use the Platform, helping us identify areas for improvement. No personally identifiable information is collected through analytics cookies.
• Functional Cookies: Store your preferences such as language settings, currency display, and game lobby filters to provide a more personalised experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot behaviour and account takeover attempts.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect certain personalisation features. Note that disabling essential cookies will prevent normal Platform operation.

bank303's primary operational infrastructure is designed to process Malaysian player data within secure, controlled environments. In limited cases, personal data may be processed by our technology partners or service providers whose infrastructure is located outside Malaysia.

Where personal data is transferred internationally, bank303 ensures that appropriate safeguards are in place to protect your information to a standard consistent with applicable data protection principles, including the use of contractual data protection clauses with all relevant third-party processors.

The bank303 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from persons under the age of 21.

Age verification is a mandatory component of our KYC process. Any account found to be registered by or on behalf of a person under 21 years of age will be immediately suspended, all associated data will be deleted, and any funds held will be returned to the deposit source.

If you have reason to believe that a minor has registered on the bank303 Platform, please contact us immediately at [email protected] and we will investigate and act without delay.

Subject to applicable law, you hold the following rights in respect of your personal data held by bank303. To exercise any of these rights, please submit a written request to [email protected]. We will respond within thirty (30) days of receiving a valid request.

Please note that certain rights may be limited where bank303 has a legal obligation to retain data (for example, AML-mandated KYC records) or where exercising a right would prejudice an ongoing fraud investigation. We will explain any applicable limitations when responding to your request.

bank303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The date of the most recent revision is displayed at the top of this page.

Where amendments are material — meaning they significantly affect your rights or how we use your data — we will provide prior notice via email to your registered address or via a prominent notice on the Platform, at least 14 days before the changes take effect.

Your continued use of the bank303 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the amended terms, you should cease use of the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bank303 processes your personal data, please contact our player support team through the following channels:

• Email: [email protected] — Please include "Privacy Enquiry" in the subject line for prioritised handling. We aim to respond within 4–8 business hours for general queries.
• Live Chat: Available 24 hours a day, 7 days a week, directly through the bank303 Platform dashboard.

For formal data subject requests (access, erasure, portability, etc.), please submit your request in writing via email, clearly identifying yourself with the details associated with your bank303 account. We will acknowledge receipt within 5 business days and provide a full response within 30 days.

For concerns specifically relating to responsible gambling or self-exclusion, please refer to our Responsible Gambling page, or contact our support team directly and your request will be given immediate priority.