Your privacy matters to mim303. This Privacy Policy explains precisely what personal information we collect, how we use and protect it, who we may share it with, and the rights you hold as a registered member. We are committed to handling your data with the care, transparency, and security it deserves.
These six principles shape every decision we make about collecting, processing, and storing member information on the mim303 platform.
mim303 collects only the personal information that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data for its own sake, and we do not build behavioral profiles beyond what is required to deliver and improve our services.
All data transmitted between your device and the mim303 platform is protected by industry-standard 256-bit SSL (Secure Sockets Layer) encryption. Data stored on our servers is encrypted at rest using AES-256 encryption. Your personal and financial information is never transmitted in plain text under any circumstances.
mim303 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Data is shared only with trusted operational partners (such as payment processors and game studios) under strict confidentiality agreements, or when required by applicable law or regulatory obligation.
You have the right to access, correct, restrict, or request deletion of the personal data mim303 holds about you. Requests are handled by our support team via email and are typically processed within fourteen (14) business days. We will confirm receipt of all data requests within 48 hours of submission.
This Privacy Policy is written in clear, plain English — not obfuscated legal language — so that every mim303 member can understand exactly how their data is used. We will notify you promptly of any material changes to this policy and will never alter our data practices without clearly communicating those changes in advance.
mim303 operates in compliance with internationally recognized data protection standards and applicable anti-money laundering (AML) requirements. Our KYC procedures and data handling practices are designed to meet the obligations expected of a responsible, internationally operated online gaming platform serving members in Indonesia.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
When you register an account, complete KYC verification, contact support, or interact with the mim303 platform in any way that requires you to submit information, we may collect:
When you access or use the mim303 Platform, we automatically collect certain technical info rmation, including:
In certain circumstances, mim303 may receive Personal Data about you from third parties, including:
All third-party data sources used by mim303 are bound by confidentiality obligations and are selected on the basis of their compliance with recognized data protection standards.
mim303 processes Personal Data only for specific, legitimate purposes. The table below summarizes our primary processing activities and the legal basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, date of birth, address | Contractual necessity |
| Identity verification (KYC) | KTP/passport, proof of address | Legal obligation / contractual necessity |
| Payment processing (deposits & withdrawals) | Bank/e-wallet account details, transaction records | Contractual necessity |
| Fraud prevention and AML compliance | Identity data, transaction history, IP address | Legal obligation / legitimate interest |
| Customer support communications | Name, email, account activity relevant to the query | Contractual necessity / legitimate interest |
| Responsible gaming monitoring | Betting activity, session duration, loss patterns | Legal obligation / legitimate interest |
| Platform security and abuse prevention | IP address, device fingerprint, session logs | Legitimate interest |
| Service improvement and analytics | Aggregated, anonymized usage data | Legitimate interest |
| Promotional communications (where opted in) | Email address, game preferences | Consent |
mim303 does not use Personal Data for automated decision-making that produces significant legal effects without human review. Where automated systems flag an account for investigation (for example, through fraud detection algorithms), a qualified member of our team will review the case before any action is taken.
mim303 engages a limited number of carefully selected third-party service providers to assist in the delivery of our platform and services. These providers act as data processors on our behalf and are permitted to use your Personal Data only for the specific purposes for which they are engaged. Current categories of third-party processors include:
mim303 may disclose Personal Data to regulatory authorities, law enforcement agencies, or other government bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, mim303 will disclose only the minimum Personal Data necessary to comply with the legal obligation and, where legally permissible, will notify the affected Member of the disclosure request.
In the event that mim303 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, Personal Data held by mim303 may form part of the transferred assets. In such a scenario, mim303 will take reasonable steps to ensure that the acquiring entity adopts data protection practices consistent with this Privacy Policy and will notify affected Members of the change in control via their registered email address.
mim303 does not and will not sell, rent, lease, or otherwise transfer Personal Data to any third party for that party's own commercial or marketing purposes. This prohibition applies unconditionally and is not subject to any opt-out mechanism — it is a core principle of how mim303 operates.
mim303 retains Personal Data for as long as is necessary to fulfill the purposes for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:
Where a Member exercises their right to erasure (as described in Section 8), mim303 will delete or anonymize Personal Data that is no longer required for any active legal or contractual purpose. Data subject to mandatory retention obligations under applicable law (such as AML record-keeping requirements) cannot be deleted until the relevant retention period has expired, and mim303 will inform the Member of any such limitations when processing a deletion request.
The mim303 Platform uses the following categories of cookies and similar tracking technologies:
You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your mim303 account and will impair core platform functions. Instructions for managing cookies are available in the help documentation of all major browsers. mim303 does not currently respond to "Do Not Track" browser signals, as there is no internationally accepted standard for how such signals should be interpreted.
mim303 implements a comprehensive set of technical and organizational security measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction. Our current security infrastructure includes:
In the event of a confirmed or suspected data breach that is likely to result in a risk to Member rights or interests, mim303 will take immediate containment action and will notify affected Members via their registered email address as promptly as reasonably possible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps mim303 has taken or intends to take to address it.
As a Member of the mim303 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your account.
You have the right to request a copy of all Personal Data that mim303 holds about you, along with information about the purposes for which it is processed, the categories of data involved, and any third parties with whom it has been shared. mim303 will provide this information within fourteen (14) business days of receiving a verified request.
If any Personal Data mim303 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. Where a correction affects your KYC verification status, you may be required to provide updated documentation.
You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the legal basis for processing), or where you object to processing and there is no overriding legitimate interest. Deletion requests are subject to mandatory retention obligations as described in Section 5.2.
You have the right to request that mim303 restrict the processing of your Personal Data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing pending verification of whether mim303's legitimate interests override your rights.
Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your Personal Data in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another controller where technically feasible.
You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. You also have the right to object to processing based on mim303's legitimate interests, on grounds relating to your particular situation. mim303 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.
The mim303 Platform is strictly restricted to individuals aged 21 years and older. mim303 does not knowingly collect, process, or store Personal Data relating to any person under the age of 21. If mim303 discovers or is notified that it has inadvertently collected Personal Data from a person under 21, we will immediately suspend the relevant account, delete the associated Personal Data, and refund any real-money balance in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that your child under the age of 21 has registered an account on mim303, please contact us immediately at [email protected]. We take underage access extremely seriously and will act on all such notifications without delay.
For any questions, concerns, or requests relating to this Privacy Policy or to the Personal Data mim303 holds about you, please contact our Data Protection team using the details below:
mim303 reviews this Privacy Policy periodically and reserves the right to update it at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, we will notify registered Members via their registered email address at least seven (7) days before the changes take effect. The updated Policy will be published at https://mim303.cam/privacy-policy with a revised effective date. Your continued use of the Platform following notification of material changes constitutes acceptance of the revised Privacy Policy.
This Privacy Policy was last reviewed and updated in January 2026. The current version supersedes all prior versions of the mim303 Privacy Policy.
Our support team is available around the clock to address any privacy-related questions or data requests. You can also explore our full Terms & Conditions for details on account rules, or visit our FAQ page for quick answers to common questions about how mim303 operates.