Privacy Policy

evo303 ("we", "us", "our") is committed to protecting the privacy and security of personal data provided by our users ("you", "Player"). This Privacy Policy describes the types of information we collect when you access or use our online gaming platform at https://evo303.cam, how we use that information, the measures we take to protect it, and your rights as a data subject.

By registering an account, making a deposit, placing a bet, or otherwise using evo303, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection, use, and disclosure of your personal data as described herein.

If you do not agree with any provision of this Privacy Policy, you must immediately cease using evo303 and, if you have an account, contact our support team to request account closure and data deletion in accordance with Clause 11 (Your Data Rights).

The data controller responsible for your personal data is the evo303 operating entity, which determines the purposes and means of processing your personal information. For questions regarding data processing, data subject requests, or any privacy-related concern, please contact us at:

We will respond to all data protection inquiries within 5 business days. For urgent matters, our 24/7 live chat support team can escalate your request to the data protection officer immediately.

evo303 collects the following categories of personal data in order to operate your account, process transactions, verify your identity, and comply with legal obligations:

We do not intentionally collect sensitive personal data such as religious beliefs, political opinions, health information, or biometric data beyond the selfie photograph used solely for identity verification purposes during KYC.

evo303 collects personal data through the following methods:

• Direct Data Provision: When you register an account, you provide your name, date of birth, email address, phone number, and residential address directly through our registration form. When you submit KYC documents, you upload identity documents directly to our secure verification system. When you add a payment method, you provide your bank or e-wallet account details.
• Automated Data Collection: When you access evo303, our servers automatically log your IP address, browser type, device information, and session data. We use cookies and similar tracking technologies to enhance your user experience and monitor platform performance.
• Third-Party Sources: We may receive data from payment service providers (BCA, BRI, BNI, Mandiri, OVO, GoPay, DANA) confirming transaction completion, from fraud prevention services that flag suspicious activity, and from game providers (Pragmatic Play, Evolution Gaming, PG Soft, Microgaming) that report your game play activity for fairness and audit purposes.
• Customer Support Interactions: When you contact our 24/7 support team via live chat, email, or WhatsApp, we record the conversation content to maintain service quality, resolve disputes, and improve training.

evo303 uses your personal data for the following legitimate purposes:

• Account Management: To create and maintain your evo303 account, authenticate your login credentials, process your deposits and withdrawals, maintain accurate account balances, and provide customer support.
• Identity Verification (KYC): To verify that you are at least 21 years of age and a resident of Indonesia, to confirm that the payment methods used belong to you, to prevent fraudulent account creation, and to comply with international anti-money laundering (AML) and counter-terrorist financing (CTF) regulations.
• Payment Processing: To process deposits via BCA, BRI, BNI, Mandiri, OVO, GoPay, DANA, and other verified Indonesian payment channels; to process withdrawals back to your registered payment method; to maintain transaction records for audit and reconciliation purposes.
• Platform Security & Fraud Prevention: To detect and prevent fraudulent activity, collusion, bonus abuse, multiple account creation, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions.
• Compliance with Legal Obligations: To comply with applicable gaming regulations, financial reporting requirements, court orders, and lawful requests from law enforcement authorities.
• Marketing & Communications: To send you promotional offers, bonus notifications, tournament announcements, and platform updates — but only if you have opted in to receive marketing communications. You may withdraw consent at any time via your Account Settings.
• Platform Improvement: To analyze aggregate user behavior, identify popular games and betting markets, optimize user experience, fix technical bugs, and develop new features based on player feedback.
• Responsible Gaming: To monitor your play patterns and intervene if we identify behavior indicative of problem gambling, to enforce deposit limits and self-exclusion requests you have set, and to provide access to responsible gaming tools and support resources.

Under applicable data protection law, evo303 relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and evo303 (the Terms & Conditions you agreed to when registering). This includes creating your account, processing transactions, and delivering the gaming services you requested.
• Legal Obligation: Processing is necessary to comply with legal and regulatory obligations, including age verification, KYC/AML requirements, tax reporting, and responding to lawful requests from authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests — fraud prevention, security monitoring, platform improvement, customer support quality assurance — provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

evo303 employs comprehensive technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data using industry best practices, we cannot guarantee absolute security. If you become aware of any security vulnerability or breach, please contact us immediately at [email protected].

evo303 does not sell, rent, or lease your personal data to third parties for marketing purposes. We only share your data with trusted third parties in the following limited circumstances:

• Payment Processors: When you deposit or withdraw funds, we share necessary transaction data with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet providers (OVO, GoPay, DANA, ShopeePay, LinkAja) to complete the transaction. These processors handle your financial data in accordance with their own privacy policies and applicable Indonesian banking regulations.
• Game Providers: When you play games from Pragmatic Play, Evolution Gaming, PG Soft, Microgaming, NetEnt, or Spribe, limited session data is shared with those providers to deliver the game experience, calculate odds, and ensure fair play. Game providers do not receive your identity documents or financial data.
• KYC Verification Services: evo303 may use specialized third-party identity verification services to cross-check your KYC documents against government databases or fraud prevention databases. These services operate under strict confidentiality agreements and use data solely for verification purposes.
• Legal & Regulatory Authorities: We may disclose personal data when required by law, court order, subpoena, or lawful request from Indonesian or international law enforcement agencies investigating illegal activity, money laundering, or terrorism financing.
• Service Providers: We engage trusted third-party service providers for hosting infrastructure, customer support ticketing systems, email delivery, analytics, and fraud prevention. These providers are bound by data processing agreements that require them to protect your data with the same rigor as evo303.

All third parties with whom we share data are contractually required to process personal data only for the specific purposes we authorize and to implement appropriate security measures. We conduct regular audits of third-party data handling practices.

evo303's primary infrastructure is hosted in secure data centers that meet international standards for data protection. Some of our third-party service providers (game studios, payment processors, cloud hosting providers) may store or process data outside Indonesia. When personal data is transferred internationally, we ensure that:

• The receiving jurisdiction provides an adequate level of data protection as determined by recognized international standards, OR
• The transfer is governed by Standard Contractual Clauses (SCCs) approved by data protection authorities, OR
• The recipient has implemented Binding Corporate Rules (BCRs) or other legally recognized safeguards.

In all cases, we require third-party recipients to maintain the same level of data protection as evo303 itself and to notify us immediately of any data breach or security incident.

evo303 uses cookies, web beacons, and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device when you visit evo303. We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of evo303. They enable core functionality such as user authentication, session management, and security features. You cannot disable these cookies without affecting the platform's functionality.
• Performance Cookies: These cookies collect anonymous data about how visitors use evo303 — which pages are visited most, how long users stay, which features are most popular. This helps us optimize the platform and identify technical issues. Data is aggregated and anonymized.
• Functional Cookies: These cookies remember your preferences (language, timezone, currency display) so you don't have to re-enter them on every visit. They enhance convenience but are not strictly necessary.
• Marketing Cookies: These cookies track your activity across evo303 to deliver personalized promotional offers and to measure the effectiveness of marketing campaigns. These cookies require your consent and may be disabled via your Account Settings or browser settings.

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling essential cookies may impair your ability to use certain features of evo303. For more information on managing cookies, consult your browser's help documentation.

Under applicable data protection law, you have the following rights regarding your personal data held by evo303:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON) within 30 days of your request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly via your Account Settings. For changes requiring verification (e.g., name change, address change), contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent for marketing communications. However, we may be legally required to retain certain data for compliance, fraud prevention, or dispute resolution purposes even after account closure.
• Right to Restriction of Processing: You may request that we temporarily suspend processing of your personal data in certain situations, such as when you contest the accuracy of the data or when you need the data preserved for legal claims.
• Right to Data Portability: You have the right to receive your personal data in a portable format and, where technically feasible, to have it transmitted directly to another service provider.
• Right to Object: You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by clicking "Unsubscribe" in any promotional email or by adjusting preferences in your Account Settings.

To exercise any of these rights, please contact our support team at [email protected] with "Data Subject Request" in the subject line. We will respond within 5 business days and complete your request within 30 days, or notify you if an extension is necessary due to request complexity.

evo303 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and business obligations:

• Active Accounts: While your account remains active, we retain all personal data, transaction history, and account activity to operate your account and provide customer support.
• Closed Accounts: When you close your account, we retain core identity data (name, date of birth, ID number, transaction history) for a minimum of 5 years from the date of closure to comply with anti-money laundering regulations and to resolve any post-closure disputes.
• KYC Documents: Identity verification documents are retained for 5 years after account closure, after which they are securely deleted unless a longer retention period is required by law (e.g., ongoing legal proceedings).
• Marketing Data: If you opt out of marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not inadvertently re-contact you.
• Technical Logs: Server logs, IP addresses, and device identifiers are typically retained for 90 days for security monitoring and troubleshooting purposes, then automatically purged unless needed for ongoing fraud investigations.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be attributed to you as an individual. Anonymized data may be retained indefinitely for statistical and research purposes.

evo303 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21 years. Our Terms & Conditions explicitly prohibit account registration by anyone under 21, and we verify age during the KYC process.

If we discover that an individual under 21 has created an account and provided personal data, we will immediately suspend the account, notify the registered email address, return any deposited funds to the payment source, and delete all personal data associated with the account in accordance with our data deletion procedures.

If you are a parent or guardian and believe your child has registered an account on evo303, please contact us immediately at [email protected] with "Underage Account" in the subject line. We will investigate and take appropriate action within 24 hours.

evo303 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations. When we make material changes to this policy, we will notify registered players via email at least 7 days in advance of the changes taking effect, and we will update the "Last Updated" date at the top of this page.

Your continued use of evo303 after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you must stop using evo303 and request account closure and data deletion as described in Clause 11.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact evo303's Data Protection Team: