Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which net303 ("we", "us", "our", "the Operator", "the Platform") collects, uses, stores, shares, and protects personal data provided by or obtained about users ("you", "your", "Member") of the net303 website at https://net303.buzz and all associated services.

We are committed to protecting your privacy in manner consistent with the principles of the General Data Protection Regulation (GDPR) and international data protection best practices. Although Malaysia's Personal Data Protection Act 2010 (PDPA) governs data processing activities by entities operating within Malaysia, net303, as an offshore-licensed operator, applies equivalent standards of care to all personal data we handle, irespective of the jurisdiction of the data subject.

By registering an Account on net303 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, please discontinue use of the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

net303 collects Personal Data across several categories, depending on your level of interaction with the Platform:

3.1 Registration Data

When you create an Account, we collect: full legal name, date of birth, email address, residential address, contact number, and the username and encrypted password you choose. This information is mandatory — without it, we cannot create or maintain your Account.

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, we may collect copies of government-issued identity documents (MyKad, passport, or equivalent), proof of address (utility bill or bank statement), and proof of payment method ownership. These documents are stored securely and used exclusively for age verification, fraud prevention, and Anti-Money Laundering / Countering the Financing of Terrorism (AML/CFT) compliance purposes.

3.3 Financial Data

When you make deposits or request withdrawals, we collect transaction records including payment method details, amounts, timestamps, and reference numbers. For Malaysian bank transfers via Maybank, CIMB, Public Bank, Hong Leong, and FPX, we process the bank account details you provide. For eWallet transactions via Touch'n Go eWallet, Boost, and GrabPay, we process the registered eWallet identifiers. We do not store full card numbers or banking credentials — these are handled exclusively by our PCI-compliant payment processor partners.

3.4 Usage and Activity Data

We automatically collect data about how you use the Platform, including: games played and bet history, session durations and login timestamps, pages visited and features accessed, device type, operating system, browser type and version, IP address, and approximate geolocation (country/city level). This data is used to improve platform performance, detect fraud, and personalise your experience.

3.5 Communications Data

If you contact our customer support team via live chat, email, or WhatsApp (available to verified members), we retain records of those communications. This helps us provide consistent service, train our support staff, and resolve any disputes that may arise.

3.6 Marketing Preference Data

We record your opt-in and opt-out preferences for marketing communications. If you have consented to receive promotional emails, bonus notifications, and platform updates, we store that consent record along with the timestamp and method of consent.

We collect Personal Data through the following channels and mechanisms:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support, complete surveys, or participate in promotions.
• Automatically through the Platform: Via server logs, cookies, web beacons, and similar tracking technologies that capture usage data when you access and navigate the Platform.
• From payment providers: Transaction confirmation data received from payment processors (FPX, DuitNow, Touch 'n Go, Boost, GrabPay, CIMB, Maybank, Public Bank, Hong Leong, and cryptocurrency processors) when you conduct financial transactions.
• From third-party identity verification services: If we engage a third-party KYC verification provider, that provider may return data to us confirming the validity of your identity documents.
• From fraud detection and security services: We may receive risk signals and device intelligence from fraud prevention technology providers, which we use to protect the Platform and its members.

We process your Personal Data only where we have a legitimate legal basis for doing so. The following table summarises our primary processing activities, their purposes, and the applicable legal basis:

net303 processes Personal Data in accordance with the following principles:

• Lawfulness, fairness, and transparency: We process data only for the purposes stated in this Policy and communicate those purposes clearly.
• Purpose limitation: Data collected for one purpose is not repurposed for unrelated activities without your consent or a legitimate legal basis.
• Data minimisation: We collect only the Personal Data that is necessary and proportionate to the stated processing purpose.
• Accuracy: We take reasonable steps to ensure Personal Data we hold is accurate and up to date. You can update your account information at any time.
• Storage limitation: Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing obligations.
• Integrity and confidentiality: We implement appropriate technical and organisational security measures to protect Personal Data against unauthorised access, loss, or destruction.

net303 does not sell your Personal Data to third parties. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processing partners: FPX operators, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and cryptocurrency payment processors — to process your financial transactions. These parties receive only the minimum information required to complete and verify your transaction.
• Identity verification providers: Third-party KYC service providers engaged to assist with document verification and age confirmation. These providers are bound by strict data processing agreements.
• Fraud prevention and security services: Specialised technology providers that assist in detecting fraudulent activity, collusion, and prohibited conduct on the Platform.
• IT infrastructure and cloud hosting providers: Vendors that host the Platform's servers and data infrastructure. All such vendors are subject to data processing agreements and are required to maintain equivalent security standards.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, we may be obliged to disclose your Personal Data to law enforcement agencies, regulatory bodies, or licensing authorities. Such disclosures are made only to the extent strictly required.
• Professional advisors: Legal counsel, auditors, and compliance consultants acting in a professional capacity, all of whom are bound by confidentiality obligations.

net303 operates under an international gaming licence from Curaçao. Our servers and operational infrastructure are hosted in data centres within our licensing jurisdiction and may involve the transfer of Personal Data across international borders, including transfers outside of Malaysia.

Where Personal Data is transferred internationally, we take appropriate measures to ensure that the transfer is subject to suitable safeguards, including:

• Standard contractual clauses incorporated into agreements with data processors and sub-processors
• Data processing agreements requiring recipients to implement equivalent technical and organisational security measures
• Transfer to jurisdictions that maintain adequate data protection standards assessed by our compliance team

By using net303 and providing your Personal Data, you consent to the transfer, storage, and processing of your data in jurisdictions outside Malaysia for the purposes described in this Policy.

We retain your Personal Data for as long as your Account remains active and for a period thereafter as required by our licensing obligations and applicable law. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be associated with an individual. Where deletion is not immediately feasible due to backup or archival processes, data will be isolated and protected from further processing until deletion is completed.

net303 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and support our security and fraud prevention functions. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a notification before cookie is stored. Please note that disabling non-essential cookies may affect your experience on the Platform — for example, you may need to re-enter preferences on each visit.

As a data subject, you have the following rights with respect to your Personal Data held by net303. To exercise any of these rights, please contact our support team at [email protected]. We will acknowledge your request within 5 business days and respond fully within 30 calendar days.

net303 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment method details
• Bcrypt password hashing — passwords are never stored in plain text
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis
• Two-factor authentication options for member accounts and mandatory for all internal administrative access
• Regular penetration testing and security audits conducted by independent third-party security specialists
• 24/7 security monitoring with automated alerting for suspicious access patterns
• Data breach response protocol — in the event of a confirmed data breach affecting your Personal Data, we will notify affected Members and relevant authorities within the timeframes required by applicable law

While we take all reasonable precautions, no online service can guarantee absolute security. You are also responsible for maintaining the security of your Account credentials. If you suspect your Account has been compromised, contact our support team immediately.

net303 is strictly an adults-only platform. We do not knowingly collect Personal Data from any person under the age of 21. Our registration process, KYC verification procedures, and ongoing account monitoring are specifically designed to prevent access by minors.

If we become aware that we have inadvertently collected Personal Data from an individual under the age of 21, we will immediately suspend the associated Account, delete the relevant Personal Data, and return any deposited funds to the originating payment method. Where required, we will report such incidents to relevant authorities.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered Members via email or in-platform notification at least 7 days before material changes take effect, where reasonably practicable
• In the case of significant changes to how we use your Personal Data, seek your renewed consent where required

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. The current version is always available at https://net303.buzz/privacy-policy and is identified by the "Last Updated" date at the top of this document.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or would like to raise a privacy-related concern or complaint, please contact the net303 Privacy Team through the following channels: