Privacy Policy

1. Introduction

This Privacy Policy describes how 3prize ("we", "us", "our") collects, uses, shares, and protects personal information when you use our online betting platform at https://3prize.cam. This policy applies to all users who register an account, visit our website, or interact with our services.

By creating an account and using 3prize, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with our data practices, please discontinue use of the platform immediately. This Privacy Policy should be read in conjunction with our Terms & Conditions.

3prize is committed to protecting your privacy and handling your personal data transparently and responsibly. We recognize that Indonesian players trust us with sensitive personal and financial information, and we take this responsibility seriously. This policy explains your privacy rights and how we fulfill our obligations under international data protection standards.

2. Data Controller

3prize acts as the data controller for the personal information collected through our platform. We determine the purposes and means of processing your personal data. For data protection inquiries or to exercise your privacy rights, please contact us at [email protected] or through the contact methods listed in Section 12 of this policy.

3. Information We Collect

3prize collects several types of information to provide, maintain, improve, and secure our services. The categories of personal data we collect include:

3.1 Account Registration Information

When you register an account on 3prize, we collect:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify you are at least 21 years old)
• Email address (for account notifications and communications)
• Mobile phone number (for account security and support)
• Residential address (city, province, postal code)
• Username and password (password is stored in encrypted form only)
• Preferred currency (Indonesian Rupiah / IDR)

3.2 Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and prevent fraud, we collect identity verification documents including:

• Government-issued photo ID (KTP, passport, or driver's license)
• Proof of address documents (utility bill, bank statement, or government correspondence issued within the last 3 months)
• Proof of payment method ownership (bank account statement or e-wallet screenshot showing your name and account details)
• Selfie photograph holding your ID (for enhanced verification when required)

These documents are securely stored and accessed only by authorized compliance personnel. Original documents are never retained; we store only verified copies necessary for regulatory compliance.

3.3 Financial and Transaction Data

To process deposits, withdrawals, and betting transactions, we collect:

• Bank account details (bank name, account number, account holder name) for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and other Indonesian banks
• E-wallet account information (OVO, DANA, GoPay, ShopeePay, LinkAja phone numbers or account IDs)
• Transaction history (deposits, withdrawals, bets placed, winnings, bonus claims)
• Payment processor transaction IDs and timestamps

We do not store full credit or debit card numbers. Payment card processing is handled by certified third-party payment processors who maintain PCI-DSS compliance.

3.4 Betting and Gaming Activity

To provide our services, maintain game integrity, and comply with responsible gaming obligations, we collect:

• Betting history (sports bets, casino wagers, togel entries, game selections)
• Game play patterns and preferences
• Win/loss records and account balance changes
• Bonus and promotion participation
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests, session timers)

3.5 Technical and Usage Data

When you access 3prize, we automatically collect certain technical information:

• IP address and approximate geographic location (city/region level, not precise GPS)
• Device information (device type, operating system, browser type and version)
• Connection information (internet service provider, connection speed, device identifiers)
• Website usage data (pages visited, time spent on pages, navigation paths, referring URLs)
• Cookies and similar tracking technologies (see Section 10 for details)
• Error logs and diagnostic information (for troubleshooting technical issues)

3.6 Communication Records

We retain records of communications between you and 3prize, including:

• Customer support inquiries via live chat, email, or WhatsApp
• Marketing communication preferences and opt-out requests
• Feedback, complaints, and dispute resolution correspondence
• Survey responses and promotional participation

4. How We Use Your Information

3prize uses the personal information we collect for the following legitimate business purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Authenticating your identity when you log in
• Processing your betting transactions and maintaining accurate balance records
• Providing customer support and responding to your inquiries
• Delivering platform features, games, and services you request

4.2 Compliance and Legal Obligations

• Verifying that you are at least 21 years of age
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks
• Preventing fraud, money laundering, and other illegal activities
• Complying with regulatory requirements and responding to lawful requests from authorities
• Maintaining records for audit and regulatory reporting purposes

4.3 Payment Processing

• Processing deposits via BCA, BRI, BNI, Mandiri, and other Indonesian banks and e-wallets
• Executing withdrawal requests to your verified payment methods
• Reconciling payment accounts and investigating transaction disputes
• Detecting and preventing payment fraud

4.4 Platform Security and Integrity

• Detecting and preventing fraudulent betting patterns and collusion
• Identifying duplicate or unauthorized accounts
• Protecting against technical attacks, malware, and unauthorized access
• Monitoring for bonus abuse and violation of terms
• Ensuring fair play and game integrity across all offerings

4.5 Responsible Gaming

• Monitoring betting patterns that may indicate problem gambling behavior
• Implementing deposit limits, session timers, and self-exclusion tools you request
• Providing access to responsible gaming resources and support
• Intervening proactively when we observe concerning gambling patterns

4.6 Product Improvement and Personalization

• Analyzing website usage to improve navigation, design, and user experience
• Understanding game preferences to offer relevant content and features
• Testing new features and optimizing platform performance
• Customizing your experience based on your betting history and preferences

4.7 Marketing and Communications

• Sending you promotional offers, bonuses, and updates about 3prize services (only if you have opted in)
• Notifying you of important account changes, security alerts, and policy updates
• Conducting customer satisfaction surveys and gathering feedback
• Informing you of new games, features, and product launches

You can opt out of marketing communications at any time by adjusting your preferences in your account settings or by clicking the "unsubscribe" link in any promotional email.

5. Legal Basis for Processing (GDPR Compliance)

While 3prize operates internationally and primarily serves Indonesian players, we align our data practices with GDPR principles to ensure robust privacy protection. Our legal bases for processing your personal data include:

• Contractual Necessity: Processing your data is necessary to fulfill our contract with you (providing betting services, processing transactions, maintaining your account).
• Legal Obligation: We process data to comply with legal requirements such as KYC/AML regulations, age verification, tax reporting, and responding to lawful authority requests.
• Legitimate Interests: We process data based on our legitimate business interests in preventing fraud, ensuring platform security, improving services, and maintaining game integrity, provided these interests do not override your fundamental privacy rights.
• Consent: For marketing communications and certain optional data processing activities, we rely on your explicit consent, which you may withdraw at any time.

6. Information Sharing and Disclosure

3prize does not sell your personal data to third parties. We share your information only in the limited circumstances described below:

6.1 Service Providers and Business Partners

We share personal data with trusted third-party service providers who assist us in operating the platform, including:

• Payment Processors: Banks and payment gateway providers that facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, and other Indonesian payment methods.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others that deliver casino games, live dealer tables, and slots.
• Identity Verification Services: KYC and AML compliance vendors that help verify your identity and screen for fraud.
• Customer Support Tools: Live chat platforms, email systems, and CRM software used to manage support inquiries.
• Cloud Hosting Providers: Infrastructure providers that host our servers and databases securely.
• Analytics Providers: Services that help us understand website usage patterns and improve user experience.

All third-party service providers are contractually obligated to handle your data securely, use it only for the specified purposes, and comply with applicable data protection laws.

6.2 Legal and Regulatory Authorities

We may disclose your personal information when required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from law enforcement, regulatory bodies, or government agencies
• Compliance with anti-money laundering and counter-terrorism financing obligations
• Tax reporting requirements

6.3 Business Transfers

In the event that 3prize is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal data may be transferred to the acquiring entity. You will be notified of any such change in ownership or control, and your data will remain subject to the protections of this Privacy Policy unless you consent to a new policy.

6.4 Fraud Prevention and Security

We may share information with fraud detection agencies, security vendors, and other online gaming operators to prevent fraud, collusion, and abuse across the industry. This sharing is limited to the data necessary to identify and prevent fraudulent activity.

7. Data Retention

3prize retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and contractual obligations.

Data Type	Retention Period	Reason
Account Information	Duration of account + 5 years after closure	Regulatory compliance, dispute resolution
KYC Documents	5 years after account closure	AML/KYC legal requirements
Transaction Records	7 years after transaction	Financial audit, tax reporting, dispute resolution
Betting History	5 years after bet settlement	Regulatory compliance, dispute resolution
Communication Records	3 years after communication	Customer service quality, dispute resolution
Marketing Consent	Until consent is withdrawn	GDPR compliance, user preference
Website Usage Data	24 months	Analytics, platform improvement

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical and research purposes.

8. Data Security

3prize employs industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

8.1 Encryption

• 256-bit SSL/TLS encryption protects all data transmitted between your device and our servers
• Passwords are hashed using strong cryptographic algorithms (bcrypt with salt) and are never stored in plain text
• Sensitive data at rest (KYC documents, financial information) is encrypted using AES-256 encryption

8.2 Access Controls

• Personal data is accessible only to authorized employees who require it to perform their duties
• Multi-factor authentication is required for administrative access to sensitive systems
• Role-based access controls ensure personnel see only the data necessary for their function
• All access to personal data is logged and monitored for suspicious activity

8.3 Infrastructure Security

• Servers are hosted in secure data centers with physical security controls, redundant power, and 24/7 monitoring
• Firewalls, intrusion detection systems, and DDoS mitigation protect against external attacks
• Regular security audits, penetration testing, and vulnerability assessments are conducted
• Automated backups ensure data can be recovered in the event of hardware failure or disaster

8.4 Employee Training

• All 3prize employees receive training on data protection principles and security best practices
• Confidentiality agreements are signed by all personnel with access to personal data
• Security awareness programs educate staff on phishing, social engineering, and emerging threats

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any unauthorized access to your account.

9. Your Privacy Rights

3prize respects your privacy rights and provides mechanisms for you to control your personal data. Depending on your jurisdiction, you may have the following rights:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access most of your account information directly through your account dashboard. For a comprehensive data export, contact our support team at [email protected].

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update your email address, phone number, and communication preferences through your account settings. For changes to registered name or address, contact support with appropriate verification documents.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data by closing your account. Note that we may retain certain data for legal compliance purposes (see Section 7) even after account closure. To request account closure and data deletion, contact [email protected].

9.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify data accuracy or assess the legitimacy of a processing activity.

9.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) and to transmit that data to another service provider.

9.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" in promotional emails.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights or mishandled your personal data, you have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. For security purposes, we may ask you to verify your identity before fulfilling your request.

10. Cookies and Tracking Technologies

3prize uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly (authentication, session management, security). These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use the website (pages visited, time on site) to help us improve performance.
• Functional Cookies: Remember your preferences (language, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (only used with your consent).

10.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse all cookies or accept only certain types. Note that disabling essential cookies may impair platform functionality. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

11. International Data Transfers

3prize operates internationally and may transfer your personal data to servers located outside Indonesia. When we transfer data to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards such as:

• Standard contractual clauses approved by data protection authorities
• Ensuring the recipient is certified under recognized privacy frameworks
• Implementing technical and organizational security measures equivalent to those used within Indonesia

By using 3prize, you consent to the transfer of your personal data as described in this section.

12. Children's Privacy

3prize is intended exclusively for adults aged 21 and over. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected data from a minor, we will delete that information immediately. If you believe a minor has provided personal data to 3prize, please contact us at [email protected].

13. Changes to This Privacy Policy

3prize reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to you via email or through a prominent notice on the website at least 30 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of the 3prize platform after changes take effect constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team: