Privacy & Data Security

Policy Privacy
KSO303 — Your Data Protection

At KSO303, your privacy is more than a promise — it is a commitment we uphold. This document transparently explains how we manage and protect the personal data of every member in accordance with Malaysia's Personal Data Protection Act (PDPA).

Last updated: 1 January 2026
Commitment Privacy We

High-Level Encryption

All data transmitted between your device and kso303 servers is protected using 256-bit SSL encryption. No third party can intercept your sensitive information while in transit.

Secure Data Storage

Your personal data is stored on servers protected by firewalls and intrusion detection systems. Only authorised staff may access member information for legitimate purposes.

No Sharing Without Consent

KSO303 does not sell, rent, or share your personal data with any third party for marketing purposes without your consent. Your data is used solely for the purposes stated in this policy.

Manage Your Notification Preferences

You are free to manage your communication preferences at any time. Unsubscribe from promotional emails or notifications via your account settings — quick and instant.

KYC Identity Verification

Our KYC process is designed to protect you from identity fraud. Documents you submit are stored securely and used solely for identity verification and legal compliance purposes.

Malaysia PDPA Compliance

The KSO303 privacy policy is built in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that your rights as a data subject are always respected and fully protected.

01 Information We Collect

When you register and use the KSO303 platform, we collect various categories of personal information to provide each member with a secure, seamless, and personalised experience. This information is grouped into three main categories:

Information You Provide Directly

  • Full name, national identity card or passport number, and date of birth.
  • Email address, mobile phone number, and residential address.
  • Bank account and e-wallet details for deposit and withdrawal purposes.
  • KYC supporting documents — copies of identity card, bank statements, and others.
  • Communications you send to our customer support team.

Automatically Collected Information

  • IP address, device type, operating system, and web browser used.
  • Session data including login times, pages visited, and session duration.
  • Gaming information — game type, wagering amounts, and transaction history.
  • Location data based on IP address for compliance and security purposes.

Information From Third Parties

In certain cases, we may receive additional information about you from payment service providers, identity verification agencies, or our technical partners. This information is used solely for verification and legal compliance purposes.

We only collect information that is strictly necessary to provide our services. We do not collect sensitive information such as biometric data, political views, or religious beliefs.

02 How We Use Your Data

KSO303 uses your personal data responsibly and only for legitimate purposes. The following is an overview of our data usage and the associated legal bases:

Purpose of Use Data Types Basic
Account management & identity verification Registration data, KYC Contract
Deposit & withdrawal processing Financial data Contract
Fraud prevention & security Session data, IP, transactions Legitimate Interests
Legal compliance & AML All relevant data Legal Obligations
Platform improvement & analytics Usage data, cookies Legitimate Interests
Marketing & promotional communications Email, phone number Consent
Customer support Communication data Contract

We do not use your data to make automated decisions that negatively affect you without human intervention. Any significant decisions relating to your account will involve a review by our team.

03 Information Sharing

KSO303 is committed to not selling or renting your personal data. However, in operating a safe and legally compliant platform, we may share your information with certain parties under limited circumstances:

Trusted Service Providers

We work with trusted third-party service providers, including payment processors, licensed game software providers, and cloud computing services. All such providers are bound by strict data protection agreements and are only permitted to use your data for the stated purposes.

Regulatory Authority

We may be required to disclose certain information to government authorities, regulatory bodies, or law enforcement agencies when mandated by applicable law, including requirements under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

In the event of an ownership transfer or merger with another entity, your data may be transferred to the new entity. You will be notified in advance, and the same privacy policy will continue to apply to your data.

With Your Consent

Outside of the situations above, we will only share your data with third parties upon receiving your explicit consent. You may withdraw this consent at any time through your account settings.

04 Cookies & Tracking Technologies

KSO303 uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and understand how members interact with our platform. The following are the types of cookies we use:

  • Essential Cookies — Required for core platform operations such as login, session management, and security. These cookies cannot be disabled.
  • Functional Cookies — Stores your preferences such as language, theme, and account settings to provide a more personalised experience.
  • Analytics Cookies — Helps us understand platform usage patterns for improvement purposes. This data is collected in aggregate and is not used to identify individuals.
  • Marketing Cookies — Used to display relevant promotions based on your activity. You may opt out of this type of cookie.

You can manage cookie settings through your web browser. Disabling certain cookies may affect platform functionality, but you can still access most key features of KSO303.

Session cookies expire automatically when you close your browser. Persistent cookies are stored for the duration specified in their respective cookie settings, or until you delete them manually.

05 Data Security

Protecting your personal data is an absolute priority for KSO303. We continuously invest in the latest security infrastructure to ensure your information remains protected against cyber threats, unauthorized access, and data breaches.

Technical Security Measures

  • 256-bit SSL/TLS encryption for all data transmitted over the network.
  • AES-256 encryption for sensitive data stored in the database.
  • Two-factor authentication (2FA) is available for all member accounts.
  • Round-the-clock monitoring by our cybersecurity team for threats and suspicious activity.
  • Regular penetration testing conducted by independent security experts.

Internal Access Controls

Access to members' personal data within our internal systems is strictly restricted based on the principle of need-to-know. All access is logged and audited regularly. Staff handling sensitive data are required to undergo data protection training and sign confidentiality agreements.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a security incident affecting your data, we will notify you within 72 hours as required by law.

06 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold. KSO303 respects and facilitates the exercise of these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete information.

Right to Erasure

Under certain circumstances, you may request that we delete your data, subject to legal obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service.

Right to Restrict Processing

Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact our data protection team via email at [email protected]. We will process your request within 30 business days.

07 Data Retention & Deletion

KSO303 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. The following are our data retention guidelines:

  • Active account data — Retained for as long as your account is active and for 7 years after account closure for AML and tax compliance purposes.
  • Financial transaction history — Retained for a minimum of 7 years in accordance with Malaysian legal requirements.
  • KYC Documents — Retained for 5 years after the end of the business relationship.
  • Support communication logs — Retained for 2 years for quality control and dispute resolution purposes.
  • Analytics data & cookies — Deleted or anonymised after a 13-month period of inactivity.

Once the retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to your identity. The deletion process is carried out automatically by our systems according to a set schedule.

08 Minors & Child Protection

The kso303 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of children under 18. Should we discover that a child's data has been collected without our knowledge, we will take immediate steps to delete that information.

If you are a parent or guardian who believes that a minor under your care has registered an account at KSO303, please contact our support team immediately. We will investigate and close the account in question, and delete all related data without delay.

KSO303 also employs age verification tools during registration and reserves the right to request supporting documents if there is any doubt about a member's age. Protecting minors from gambling is a responsibility we take seriously.

09 Privacy Policy Amendments

KSO303 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. Any material amendments will be communicated to you via:

  • In-platform notification upon your next login.
  • Email to the address registered in your account.
  • Update of the "Last Updated" date displayed at the top of this page.

Continued use of the KSO303 platform after any amendments are published will be deemed acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we manage your personal data.

If you disagree with any amendments to this Privacy Policy, you have the right to close your account and discontinue use of the platform. Contact our customer support team to process your account closure request.

10 Contact Us

If you have any questions, concerns, or complaints regarding how KSO303 handles your personal data, our data protection team is available to assist you 24 hours a day, 7 days a week.

You may contact our Data Protection Officer (DPO) via:

  • Email: [email protected]
  • Live Chat: Available at the bottom-right corner of the platform
  • Response Time: Within 2 hours for urgent issues; 24 hours for general enquiries

For data subject rights requests (access, correction, deletion), include your full name, account number, and request type in your email. Complete requests will be processed more promptly.

Question General — Privacy Policy

Absolutely not. kso303 has never and will never sell, rent, or trade your personal data to any third party for commercial purposes. Your data is only shared with service providers directly involved in the operation of our platform, and only when required by law.

You may submit a data access request by emailing [email protected] with your full name, account number, and a statement that you are making a request under your PDPA access rights. We will process your request and provide a copy of your data within 30 business days.

After account closure, your personal data will be retained for the period required by Malaysian law — typically 7 years for financial records. After that period, your data will be securely deleted or fully anonymised from our systems.

All financial transactions at kso303 are handled through trusted payment gateways integrated with 256-bit SSL encryption. We do not directly store your credit or debit card information in our systems — all sensitive payment data is handled exclusively by licensed payment processors that comply with PCI-DSS standards.

Yes, you can opt out of receiving promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any promotional email, or by updating your communication preferences in your account settings. Unsubscribe requests will be processed within 5 business days.

In some cases, your data may be processed by service providers operating in other countries for purposes such as cloud computing or technical support. When this occurs, we ensure that a level of data protection equivalent to Malaysia's standards is maintained through appropriate data transfer agreements.
Privacy Guaranteed, Safer Gaming

Ready to Play with Confidence?

At KSO303, your security and privacy are always our priority. Register now and enjoy a safe, fair, and responsible online gaming experience — protected by the latest encryption technology.

Bahasa Melayu