Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ult300 ("we", "us", "our", "ult300") collects, uses, processes, stores, shares, and protects your personal information when you access and use our online gaming platform, website, mobile applications, and related services (collectively, the "Platform"). This Policy applies to all users who create an account, browse our Platform, or interact with our services, regardless of whether you are actively placing bets or engaging in gaming activities.

At ult300, we recognize that privacy is a fundamental right and that the protection of your personal data is essential to maintaining trust in our services. We are committed to handling your information with the highest standards of security, transparency, and compliance with applicable data protection laws and regulations. By using the ult300 Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

2. Information We Collect

ult300 collects various categories of personal information necessary to provide our gaming services, maintain account security, comply with legal obligations, and improve user experience. The specific types of information we collect include:

2.1 Information You Provide Directly

When you register an account with ult300, you voluntarily provide us with the following personal information:

• Identity Information: Full legal name as it appears on your government-issued identification document, date of birth, place of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number with Indonesian country code (+62), and residential address including street, city, postal code, and province.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery purposes.
• Financial Information: Bank account details including bank name (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP), account number, account holder name, and e-wallet information (OVO, DANA, GoPay account identifiers).
• Verification Documents: Copies of government-issued identification documents (Indonesian national identity card / KTP or passport), proof of address documents (utility bills, bank statements), and selfie photographs submitted for Know Your Customer (KYC) verification purposes.
• Communication Records: Content of communications you send to our customer support team via email, live chat, WhatsApp, or in-app messaging, including inquiries, complaints, feedback, and support requests.

2.2 Information We Collect Automatically

When you access and use the ult300 Platform, we automatically collect certain technical and behavioral information through various technologies:

• Device Information: Device type (smartphone, tablet, desktop computer), operating system and version (Android, iOS, Windows, macOS), browser type and version, screen resolution, device language settings, and unique device identifiers.
• Connection Information: IP address, Internet Service Provider (ISP), geographic location data (country, city, approximate coordinates based on IP address), time zone, and connection timestamp.
• Usage Data: Pages visited, features accessed, games played, bet history, deposit and withdrawal transactions, session duration, click patterns, navigation paths, referral sources, and search queries entered on our Platform.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, and similar technologies to track user preferences, maintain login sessions, analyze Platform performance, and deliver personalized content. See Section 8 for detailed information about cookies.
• Gaming Activity: Detailed records of all gaming activities including bet types, stake amounts, odds selected, game outcomes, winnings, losses, bonus usage, and gaming patterns across sports betting, casino games, slots, and togel (lottery) markets.

2.3 Information from Third-Party Sources

ult300 may receive information about you from external sources, including:

• Payment Processors: Transaction verification data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay) confirming deposit and withdrawal processing.
• Identity Verification Services: Results from third-party identity verification and fraud prevention services used to authenticate submitted documents and prevent duplicate accounts.
• Fraud Detection Systems: Risk scores, fraud alerts, and behavioral analytics from specialized security providers that help us detect suspicious activity and protect user accounts.
• Publicly Available Sources: Information from public records and databases used to verify identity and comply with anti-money laundering (AML) regulations.

3. How We Use Your Information

ult300 uses your personal information for the following purposes, all of which are necessary to provide our gaming services, maintain platform security, and comply with legal obligations:

3.1 Account Management and Service Delivery

• Creating, maintaining, and managing your ult300 user account
• Verifying your identity through KYC procedures to prevent underage gambling and fraud
• Processing deposits, withdrawals, and other financial transactions
• Providing access to sports betting markets (BRI Liga 1, EPL, La Liga, Champions League), live casino games, slot machines, and togel draws
• Calculating and crediting winnings, bonuses, and promotional rewards
• Maintaining accurate transaction history and account balance records
• Facilitating communication between you and our customer support team

3.2 Security, Fraud Prevention, and Compliance

• Detecting and preventing fraudulent activities, money laundering, identity theft, and unauthorized account access
• Monitoring gaming patterns to identify problem gambling behaviors and enforce responsible gaming limits
• Detecting duplicate accounts and bonus abuse violations
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Verifying the authenticity of payment methods and preventing payment fraud
• Conducting internal audits and investigations in response to suspected Terms violations
• Cooperating with law enforcement agencies and regulatory authorities when legally required

3.3 Platform Improvement and Analytics

• Analyzing user behavior to improve Platform functionality, navigation, and user experience
• Conducting A/B testing to optimize features and interface design
• Identifying technical issues, bugs, and performance bottlenecks
• Developing new features, games, and services based on user preferences
• Generating aggregated, anonymized statistical reports for business intelligence purposes

3.4 Marketing and Communications

• Sending account-related notifications including deposit confirmations, withdrawal status updates, and KYC verification results
• Delivering promotional offers, bonus notifications, and special event announcements (subject to your communication preferences)
• Providing customer support responses to inquiries submitted via email, live chat, or WhatsApp
• Conducting customer satisfaction surveys to improve service quality
• Sending important Platform updates, policy changes, and security alerts

4. How We Share Your Information

ult300 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information with trusted third-party service providers and partners in the following limited circumstances:

4.1 Service Providers and Business Partners

• Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) require your financial information to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification services receive your identification documents to authenticate your identity and detect fraudulent accounts.
• Game Providers: Gaming software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe) receive limited information necessary to deliver game content and process bets.
• Customer Support Tools: Live chat and customer relationship management (CRM) platforms store communication records to facilitate support ticket resolution.
• Cloud Infrastructure Providers: Hosting and data storage services maintain secure servers where your account information is stored with encryption.
• Analytics and Security Services: Fraud detection, analytics, and cybersecurity providers receive anonymized or pseudonymized data to protect the Platform and improve services.

All third-party service providers are contractually obligated to maintain the confidentiality and security of your information and are prohibited from using your data for purposes beyond those specified in their service agreements with ult300.

4.2 Legal and Regulatory Obligations

ult300 may disclose your personal information to government authorities, law enforcement agencies, or regulatory bodies when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory inquiries
• Enforce our Terms and Conditions or other applicable policies
• Protect the rights, property, or safety of ult300, our users, or the public
• Detect, prevent, or investigate fraud, security breaches, or other illegal activities
• Respond to claims that user-generated content violates third-party rights

4.3 Business Transfers

In the event that ult300 undergoes a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. You will be notified via email and Platform announcement of any such change in ownership or control of your personal data.

5. Data Security Measures

ult300 implements comprehensive technical, organizational, and administrative security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption: All sensitive data, including passwords and financial information, is encrypted using industry-standard SSL/TLS encryption protocols during transmission and AES-256 encryption at rest.
• Secure Authentication: Multi-factor authentication (MFA) options are available for account access, and passwords are stored using one-way cryptographic hashing algorithms.
• Access Controls: Strict role-based access controls ensure that only authorized personnel with legitimate business needs can access user data, and all access is logged for audit purposes.
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our infrastructure from external attacks and unauthorized access attempts.
• Regular Security Audits: Independent third-party security assessments and penetration testing are conducted regularly to identify and remediate vulnerabilities.
• Employee Training: All ult300 staff undergo mandatory data protection and security training to ensure proper handling of user information.
• Data Minimization: We collect and retain only the minimum amount of personal information necessary to provide our services and comply with legal requirements.

While we employ robust security measures, no method of electronic storage or transmission over the Internet is 100% secure. ult300 cannot guarantee absolute security of your information, and you acknowledge that you provide information at your own risk. You are responsible for maintaining the confidentiality of your account credentials and must notify us immediately if you suspect unauthorized access to your account.

6. Data Retention

ult300 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with applicable legal, regulatory, accounting, and reporting requirements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status and for a reasonable period thereafter to facilitate account reactivation if requested.
• Transaction Records: Financial transaction history, including deposits, withdrawals, bets, and winnings, is retained for a minimum of seven (7) years as required by anti-money laundering regulations and tax reporting obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure to comply with regulatory record-keeping requirements.
• Communication Records: Customer support interactions and communications are retained for three (3) years to facilitate dispute resolution and service improvement.
• Closed or Inactive Accounts: Accounts inactive for more than twelve (12) consecutive months may be archived, and non-essential data may be deleted while maintaining core records for compliance purposes.

Upon expiration of the applicable retention period, personal information is securely deleted or anonymized in accordance with data protection best practices. You may request deletion of your account and personal information at any time, subject to our legal obligations to retain certain records.

7. Your Privacy Rights

As a user of ult300 services, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request access to the personal information we hold about you. You may request a copy of your data by contacting our customer support team at [email protected]. We will provide the requested information in a structured, commonly used, and machine-readable format within 30 days of receiving your request.

7.2 Right to Rectification

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most account information directly through your account settings or by contacting customer support for assistance.

7.3 Right to Erasure

You may request deletion of your personal information under certain circumstances, including when the information is no longer necessary for the purposes for which it was collected or when you withdraw consent. Please note that we may be required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

7.4 Right to Restrict Processing

You have the right to request restriction of processing of your personal information in certain situations, such as when you contest the accuracy of the data or when processing is unlawful but you prefer restriction over deletion.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

7.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time by adjusting your communication preferences in your account settings or by contacting customer support.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with a clear description of your request. We will respond within 30 days and may request additional information to verify your identity before processing your request.

8. Cookies and Tracking Technologies

ult300 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience, analyze Platform performance, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information about your preferences and activities.

8.1 Types of Cookies We Use

8.2 Managing Cookie Preferences

Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling certain cookies may limit your ability to use some Platform features. To manage cookies, access your browser's settings menu and adjust privacy preferences according to your desired level of tracking.

9. Third-Party Links and Services

The ult300 Platform may contain links to third-party websites, services, or resources that are not owned or controlled by ult300. This Privacy Policy applies only to information collected by ult300 and does not govern the privacy practices of third-party sites. We are not responsible for the privacy policies or data handling practices of external websites. We encourage you to review the privacy policies of any third-party sites you visit before providing personal information.

10. Children's Privacy

ult300 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and terminate the associated account. Parents or guardians who believe their child has provided personal information to ult300 should contact us immediately at [email protected].

11. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside of Indonesia where our servers, service providers, or business partners are located. These jurisdictions may have data protection laws that differ from those in Indonesia. When we transfer your information internationally, we implement appropriate safeguards to ensure that your data receives an adequate level of protection, including standard contractual clauses, data processing agreements, and security measures consistent with this Privacy Policy.

12. Changes to This Privacy Policy

ult300 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to users via email notification and by posting a revised version on the Platform with an updated "Last Updated" date. Your continued use of ult300 services following notification of changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the ult300 Platform
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"

We are committed to responding to all privacy-related inquiries within 30 days and will work diligently to address your concerns in a transparent and timely manner. Your privacy is important to us, and we value your trust in ult300 as your online gaming platform.