Privacy Policy SW303
— Indonesia User Data Protection

To deliver the best service, sw303 needs to collect certain types of information from users. We are committed to ensuring that no data is collected without a clear and proportionate purpose. Below are the categories of data we collect along with specific examples:

In addition to data you actively provide during registration or use of the service, sw303 also automatically collects technical data via cookies and similar technologies when you access our platform. More details are available in the Cookie & Tracking section.

The data we collect is used responsibly and only for legitimate purposes. Here is how sw303 uses user data:

• Service provision and improvement — Processing registrations, managing accounts, handling deposit and withdrawal transactions, and operating all features of the sw303 platform.
• Verification and compliance — Conducting the KYC (Know Your Customer) process to verify users' identity and age in accordance with applicable regulatory requirements.
• Security and fraud prevention — Detecting, investigating, and preventing suspicious activity, fraud, or violations of sw303's Terms and Conditions.
• Communications — Sending transaction confirmations, security updates, promotional notifications (with your consent), and other important service information.
• Personalization — Personalizing your gaming experience, game recommendations, and relevant offers based on your preferences and activity history.
• Analytics and development — Analyzing usage patterns in aggregate and anonymous form to improve the performance, features, and user experience of the sw303 platform.

Every data processing activity carried out by sw303 is based on at least one of the following legal grounds, in accordance with applicable data protection regulations:

• Contract performance — Data processing required to fulfill sw303's obligations to you as agreed in the Terms and Conditions, including processing transactions and managing accounts.
• Consent — For certain processing activities such as sending marketing materials or promotional notifications, sw303 will first request your explicit consent. This consent can be withdrawn at any time through your account settings.
• Legitimate interests — Processing required for legitimate business interests, such as fraud prevention, platform security improvements, and internal analytics — provided it does not infringe upon your privacy rights.
• Legal obligations — Processing required to fulfill sw303's legal obligations, including reporting requirements to relevant authorities in cases mandated by applicable laws and regulations.

Sw303 does not sell users' personal data. However, in certain limited situations, sharing data with specific parties is necessary for service operations. The following are conditions under which data may be shared:

• Technical service providers — Partners who help sw303 operate the platform, process payments, or provide technical infrastructure. All such partners are bound by strict confidentiality agreements and may only use data for the specific purposes assigned to them.
• Legal authority — SW303 may be required to disclose certain data to law enforcement authorities, courts, or regulatory bodies if ordered by applicable law.
• Fraud prevention — In certain situations, sw303 may share information with financial institutions or other platforms to prevent or investigate fraudulent activity that harms users.

Protecting user data from unauthorized access, breaches, or misuse is the top priority of the sw303 security team. We implement multi-layered technical and organizational measures that are continuously updated to address the latest cybersecurity threats.

Security layers we apply to protect your data:

• Encryption of data in transit and at rest — All data is encrypted both in transit and at rest on sw303 servers using industry-standard encryption algorithms.
• Role-based access control — Only personnel who specifically require access to certain data are permitted to access it, with strict oversight and activity logging.
• Real-time security monitoring — Intrusion detection systems operate around the clock to identify and respond to anomalies or potential security threats in real time.
• Regular security testing — The sw303 security team regularly conducts penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication — Available and recommended for all users to add an extra layer of protection to their sw303 account.

Sw303 does not retain user data longer than necessary. Data retention periods are determined based on the purpose of collection and applicable legal obligations:

• Active account data — Retained for as long as the account remains active and in use.
• Closed account data — Some identity and transaction data is retained for a minimum of 5 years after account closure to fulfill legal and regulatory obligations related to financial reporting and anti-money laundering.
• Technical and log data — Generally deleted after 12 months, unless required for an ongoing security investigation.
• Marketing data — Promptly deleted once you withdraw consent for marketing communications.

Once the retention period expires, data is permanently deleted or anonymized so that it can no longer be linked to your identity.

SW303 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small files stored on your device that help us recognize your session and save your preferences.

Types of cookies used by sw303:

• Essential cookies — Required for the sw303 platform to function correctly. Without these cookies, certain features such as login and session management will not work. This type of cookie cannot be disabled.
• Functional cookies — Storing your preferences such as language, display settings, and favorite game selections to deliver a more personalized experience.
• Analytics cookies — Collecting anonymous information about how users interact with the platform to help sw303 improve service design and functionality.
• Security cookies — Helps detect suspicious activity and protect your account from unauthorized access.

As a sw303 user, you have a number of guaranteed rights regarding your personal data. sw303 is committed to facilitating the exercise of these rights easily and without unnecessary barriers:

• Right to AccessYou have the right to request a copy of your personal data held by sw303, including details on how that data is used.
• Right to CorrectionYou have the right to request correction of any inaccurate or incomplete data. Most information can be updated directly through your sw303 account profile settings.
• Right to ErasureUnder certain conditions, you have the right to request deletion of your personal data — subject to sw303's legal obligations to retain specific data.
• Right to ObjectYou have the right to opt out of data processing for direct marketing at any time. Opt-out options are available in your account settings and our communication emails.
• Right to Data PortabilityYou have the right to receive the data you provided to sw303 in a structured, commonly readable format for transfer to another service.
• Right to Restriction of ProcessingIn certain situations, you have the right to request that sw303 restrict how your data is processed while a dispute is being resolved or verification is pending.

To submit a request regarding any of the above rights, please contact the sw303 privacy team via live chat or email at [email protected]. We are committed to responding to every request within a reasonable timeframe.

Sw303 services are strictly intended for individuals aged 18 and above. SW303 does not knowingly collect or process personal data from individuals under the age of 18.

If sw303 discovers that data from users below that age has been collected without our knowledge — for example through registration using false information — we will immediately take the following steps:

• Permanently freezing the account in question.
• Deleting all related data from our systems as soon as possible.
• Canceling all transactions that occurred and returning any identifiable funds.

SW303 may update this Privacy Policy from time to time to reflect changes in our privacy practices, regulatory updates, or service improvements. Any changes will be published on this page with a clearly updated revision date.

For changes that are material and significantly affect your rights or how your data is processed, sw303 will provide proactive notification via:

• In-app notifications on sw303 that appear upon your next login.
• Email sent to the address registered on your account, no later than 14 days before the changes take effect.
• Announcement banners displayed on the sw303 platform homepage.

If you have any questions, concerns, or requests regarding this Privacy Policy or how sw303 manages your personal data, please do not hesitate to reach out. The sw303 privacy team is ready to provide the clarification and assistance you need.

• Live Chat 24/7 — The fastest way, directly through the sw303 platform. Responses are typically within minutes.
• Email — [email protected] with the subject "Privacy Request" for priority handling.
• FAQ — Visit the FAQ for answers to the most common privacy questions.

This Privacy Policy document is effective from January 1, 2026 and last updated on January 15, 2026. For related legal documents, please also read Terms and Conditions and page Responsible Gaming sw303.