Privacy Policy

rans303 ("we", "us", "our", "the Platform") operates the online sportsbook and live casino platform accessible at https://rans303.cam. In the course of providing our services — including account registration, payment processing, KYC verification, sports betting, live casino, responsible gambling administration, and customer support — we collect and process personal data relating to our Members and Platform visitors.

This Privacy Policy applies to all personal data collected by rans303 through the Platform, including data submitted during registration, KYC verification, payment transactions, customer support interactions, and ordinary use of Platform features. It also covers data collected automatically through cookies and usage analytics.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By creating a rans303 account or using any part of the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree to the terms of this Privacy Policy, you should not register for or continue to use the Platform.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., a person who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, email address, or one or more factors specific to that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, or deletion.
• "Controller" means rans303, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Subject" means the individual whose Personal Data is being processed — i.e., you, the Member or Platform visitor.
• "Member" means an individual who has created a registered account on the rans303 Platform.
• "KYC" means Know Your Customer — the identity and age verification process applied to all Members prior to withdrawal processing and at other compliance-related checkpoints.
• "Third Party" means any natural or legal person other than rans303 and the Data Subject, including but not limited to payment processors, fraud prevention service providers, and regulatory authorities.

rans303 collects only the Personal Data that is necessary for the purposes described in this Policy. We do not collect data beyond what is required for legitimate operational and compliance purposes. The categories of Personal Data we collect are set out in the table below.

rans303 does not collect or process special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) except where strictly required by applicable law or with your explicit consent.

rans303 collects Personal Data through the following means:

4.1 Direct Submission

You provide data directly to us when you: complete the registration form to create a Member account; submit KYC verification documents; make a deposit or initiate a withdrawal; contact customer support via live chat or email; subscribe to promotional communications; or interact with any feature of the Platform that requires data input.

4.2 Automated Collection

When you access and use the Platform, certain data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser type and version, operating system, session duration, pages viewed, and in-session activity patterns. For full details, see Section 9 (Cookies & Tracking).

4.3 Third-Party Sources

In certain circumstances, rans303 may receive data about you from third parties, including: payment processors such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank; fraud prevention and identity verification service providers; and cryptocurrency network data (for crypto transactions via BTC, ETH, USDT TRC20, LTC). Data received from third parties is used exclusively for the purposes described in Section 6 and is handled with the same level of care as data collected directly.

rans303 processes your Personal Data only where we have a lawful basis for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform our obligations under the agreement formed when you accept the Terms & Conditions — including account management, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required for compliance with applicable legal requirements, including anti-money laundering (AML) obligations, age verification mandates, and cooperation with regulatory or law enforcement authorities.
• Legitimate Interests: Processing necessary for our legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gambling monitoring, and service analytics.
• Consent: Where we rely on your consent to process your data — in particular for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

rans303 uses collected Personal Data for the following specific purposes:

• To create, manage, and maintain your Member account on the Platform.
• To verify your identity and age as part of mandatory KYC procedures (minimum age: 21 years).
• To process deposits and withdrawals via your chosen payment method, including Malaysian banking methods (Maybank, CIMB, Public Bank, Hong Leong), e-wallets (Touch 'n Go eWallet, Boost, GrabPay), instant transfer (DuitNow, FPX), and cryptocurrencies (BTC, ETH, USDT, LTC).
• To detect, prevent, and investigate fraudulent activity, money laundering, multi-accounting, and other breaches of our Terms & Conditions.
• To monitor gaming and betting activity for responsible gambling purposes, including identifying patterns consistent with problem gambling behaviour, and to administer self-exclusion and deposit limit requests.
• To provide customer support, resolve disputes, and respond to enquiries submitted via live chat, email, or other support channels.
• To send you transactional communications relating to your account (e.g., deposit confirmations, withdrawal notifications, KYC status updates).
• To send you marketing and promotional communications, where you have opted in to receive such communications. You may opt out at any time by contacting support or adjusting your account notification preferences.
• To analyse Platform usage patterns for the purposes of service improvement, product development, and performance optimisation.
• To comply with applicable legal, regulatory, and licensing obligations.

rans303 does not share your Personal Data with third parties except in the following limited and specific circumstances:

7.1 Payment Processors

When you make a deposit or initiate a withdrawal, transaction data (including your name and payment reference) is shared with the relevant payment processor as necessary to complete the transaction. This applies to all supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as cryptocurrency network participants.

7.2 Identity Verification & Fraud Prevention

rans303 may engage third-party identity verification and fraud prevention service providers who process Personal Data on our behalf, subject to strict data processing agreements. These providers assist with KYC document validation, IP risk scoring, and anti-fraud analysis.

7.3 Legal & Regulatory Compliance

rans303 may disclose Personal Data to regulatory authorities, law enforcement agencies, or judicial bodies where required to do so by applicable law, court order, or in connection with investigations into suspected criminal activity (including money laundering and fraud). Any such disclosure will be limited to the minimum data necessary and will be made in accordance with applicable legal requirements.

7.4 Corporate Transactions

In the event of a merger, acquisition, asset sale, or restructuring of rans303's operating entity, Personal Data may be transferred to the acquiring or successor entity as part of the transaction, subject to the same or equivalent privacy protections as described in this Policy.

7.5 No Disclosure Without Basis

Beyond the circumstances described above, rans303 will not disclose your Personal Data to any third party without your explicit prior consent.

rans303 retains Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal Data associated with an active Member account is retained for the full duration of the membership relationship and for a period of at least five (5) years following account closure.
• Financial Transaction Records: Records of deposits, withdrawals, and betting transactions are retained for a minimum of seven (7) years in accordance with standard AML and financial record-keeping obligations.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years following account closure, or longer where required by applicable law.
• Customer Support Records: Communications and support ticket records are retained for three (3) years following resolution of the relevant matter.
• Marketing Preferences: Consent records and preference data are retained for as long as you remain a Member and for one (1) year following account closure, or until you withdraw consent.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data destruction procedures.

rans303 uses cookies and similar tracking technologies to operate the Platform effectively, improve the user experience, and support security and fraud detection functions. A cookie is a small data file placed on your device when you visit the Platform.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, account session state, and preferred display options. These improve the consistency of your experience across sessions.
• Analytics Cookies: Collect anonymised usage data to help us understand how Members interact with the Platform — which pages are visited most, where errors occur, and how navigation flows are used. This data is used solely for internal service improvement purposes.
• Security Cookies: Support fraud detection, IP monitoring, and rate-limiting functions that protect your account and the Platform from unauthorised access.

9.2 Managing Cookies

You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies may impair your ability to log in to and use the Platform. Disabling analytics cookies does not affect your access to any Platform feature. Browser-level cookie controls vary by browser type — please consult your browser's help documentation for specific instructions.

rans303 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that staff have access only to the Personal Data necessary for their specific function.
• Regular security audits and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, reporting, and managing any data security incidents.
• Two-factor authentication availability for Member accounts to reduce the risk of unauthorised access.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. While we take all reasonable precautions, rans303 cannot warrant the absolute security of data transmitted to or stored on the Platform. You use the Platform and transmit data to it at your own risk, and you are responsible for maintaining the confidentiality of your own account credentials.

Subject to applicable law, you have the following rights in respect of your Personal Data held by rans303. To exercise any of these rights, please contact us at [email protected], clearly marking your request "Data Subject Request." We will respond within 30 days of receipt of a valid request.

The rans303 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Account registration requires explicit confirmation of age eligibility, and KYC verification is required before any withdrawal is processed.

If rans303 becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to suspend the relevant account, delete the associated Personal Data, and return any deposited funds to the payment source. If you believe a person under 21 has registered on the Platform, please notify us immediately at [email protected].

rans303 operates under international licensing and may process or store Personal Data on servers located outside Malaysia. Where Personal Data is transferred internationally, we take appropriate steps to ensure that such transfers are conducted lawfully and that the receiving jurisdiction or entity provides an adequate level of data protection. This may include standard contractual clauses or equivalent safeguards.

By creating an account and using the Platform, you acknowledge and consent to the transfer of your Personal Data to servers and processing infrastructure that may be located outside your country of residence, subject to the protections described in this Policy.

The rans303 Platform may contain references to third-party services, including payment processor interfaces that redirect to external portals. rans303 is not responsible for the privacy practices of any third-party website or service. When you leave the rans303 Platform to interact with a third-party service — such as your bank's online portal or an e-wallet app — the privacy policy of that third party governs the collection and handling of data in that context.

We encourage you to review the privacy policies of any third-party services you use in connection with your rans303 account, including your chosen payment providers.

rans303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use or share your Personal Data — we will notify active Members via email to their registered address or via a prominent notice on the Platform. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

If you do not agree to the amended Privacy Policy, you should stop using the Platform and contact support to request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to report a potential data security issue, please contact the rans303 data team through the following channels:

• Email: [email protected] — mark your subject line "Privacy / Data Subject Request" for priority routing.
• Live Chat: Available 24/7 within your rans303 account dashboard. Please identify your enquiry as a data privacy matter so it is routed to the appropriate team.
• Response Time: Data subject requests are acknowledged within 5 business days and substantively responded to within 30 calendar days of receipt of a valid, verified request.

For enquiries relating to responsible gambling, self-exclusion, or deposit limits, please visit our Responsible Gambling page or contact support directly via live chat.