main300 Casino & Sportsbook Data Care
Account creation on main300 requires email verification, identity documents for Know Your Customer (KYC) verification, and at least one payment method. This page describes what we collect when you use main300, how we protect that data, which third parties process it, and what rights you hold over your information. We do not sell your data to marketing companies, and we do not use it for purposes unrelated to account management, payment processing, fraud prevention, and regulatory compliance.
We at main300 take data protection seriously because your account holds real money and personal details. Our servers encrypt data in transit and at rest. Access to your account is restricted by password, two-factor authentication, and session timeouts. If you suspect unauthorised access or data breach, contact our support team immediately. We treat data protection as foundational to our platform, not an afterthought.
This policy applies to all main300 account holders and visitors to our platform. If you do not agree with how we handle data, you should not create an account. By using main300, you consent to the collection and use of data as described here. We reserve the right to update this policy—any material changes will be announced to existing account holders via email or in-app notification.
What Data We Collect on main300
We collect data in three categories: account creation data, transactional data, and behavioural data. During account setup, we request your email address, full name, date of birth, national ID number, residential address, and contact phone number. This information is mandatory for KYC compliance. We also collect your payment method details (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank account credentials) when you make your first deposit.
Transactional data includes every wager you place, every bet result, every deposit and withdrawal, and the time/date/amount of each action. We also log your balance history—this creates a complete audit trail that protects you in case of account disputes or fraudulent activity. When you access main300 from a city like Jakarta, Surabaya, Bandung, Medan, or Semarang, we may log your approximate location based on IP address for fraud detection and to confirm you are in a supported jurisdiction.
Behavioural data includes which games you play, how long you stay on each page, which sportsbook markets you view (Liga 1, Piala AFF, esports tournaments), and when you are active. We use this data to understand platform performance and fix technical issues—not to target you with aggressive marketing. We do not sell this behavioural data to third parties.
- Device information. We log the type of device you use (iOS, Android, desktop), your browser version, and unique device identifiers. This helps us optimise our mobile app and detect suspicious login patterns.
- Communication logs. If you contact our support team via email or in-app chat, we keep a record of that correspondence. This includes any documents you submit to verify your identity or dispute a settlement.
- Cookies and tracking. Our platform uses session cookies to keep you logged in. We do not use tracking cookies to follow you across other websites. Your browser can disable cookies, though this may affect login persistence.
We at main300 collect data only to provide our service safely and comply with law. We do not monetise your data through sale or rental.
How We Use Your Data
Primary use: account verification and payment processing. Your KYC documents are verified against government records to confirm your identity. Your payment method is linked to your account so we can process deposits and withdrawals correctly. We do not use your identity documents for any other purpose.
Secondary use: fraud and abuse prevention. We monitor accounts for suspicious activity—for example, rapid withdrawals after large deposits, or logins from multiple countries in short timeframes. These checks protect you and our platform. They may occasionally flag legitimate activity (e.g., travelling during Idul Fitri or Idul Adha holidays), in which case we contact you to confirm the action.
Tertiary use: regulatory compliance. We retain your account history, settlement records, and payment details for a period mandated by financial regulators. If a legal authority requests your account data with a valid warrant, we will provide it. We do not disclose your information to authorities without legal process.
Third-Party Data Processors
We use third-party services for specific functions. Payment processors (your bank or mobile banking, local payment, online payment, e-wallet, etc.) handle deposit and withdrawal transactions. These processors see your payment method, transaction amount, and account ID—they do not see your full KYC documents or gaming history. Sportsbook data providers supply match results and odds for Liga 1, Piala AFF, and other tournaments. These providers do not see your personal data.
Live-dealer game providers stream table sessions and manage game logic. They see your account ID and wager amounts but not your identity or banking details. Cloud infrastructure providers host our servers and may store encrypted backups of our database in multiple geographic regions. All third-party contracts include strict confidentiality and data-protection clauses.
We do not share your data with marketing agencies, data brokers, or affiliate networks. If we ever need to change these relationships, we will update this policy and notify you.
Your Rights and Our Practices
You have the right to request correction of inaccurate data. If your address or phone number is outdated, you can update it in account settings or contact support. You have the right to request deletion of your account and associated data, subject to regulatory retention periods (typically 7 years for financial records). You have the right to opt out of non-essential communications (e.g., promotional emails), though transactional emails (deposit confirmations, withdrawal status) cannot be disabled.
We do not grant you the right to withdraw data and use it on competing platforms—your game history and settlement records belong to main300's compliance archive, not to you personally. However, you can export your own transaction history for tax planning or personal record-keeping purposes through your account settings.
Data Retention and Deletion
We retain account and transactional data indefinitely—this is standard for online gaming platforms and serves fraud prevention and regulatory compliance. If your account is closed, your data remains in our systems in a restricted state. You cannot access it, but we maintain it for dispute resolution and legal requirements. After a defined period (typically 7-10 years depending on your jurisdiction), we may delete dormant account records.
If you violate our terms of service (e.g., fraud, collusion, underage access), we may close your account immediately and retain data for investigation and law-enforcement cooperation. We do not delete data in these circumstances.
Data Security Measures
We employ industry-standard encryption (AES-256 for data at rest, TLS 1.2+ for data in transit). Our servers are located in secure data centres with redundancy and failover systems. We use salted, hashed passwords so that even our administrators cannot view your plaintext password. We conduct regular security audits and penetration testing to identify and patch vulnerabilities.
However, no system is perfectly secure. If a data breach occurs—if an unauthorised party gains access to our systems—we will notify affected account holders within a reasonable timeframe and cooperate with relevant authorities. We maintain cyber-liability insurance and have incident-response procedures in place.
Jurisdiction and International Data Transfers
Our servers may be located outside your country of residence. By using main300, you consent to your data being transferred, stored, and processed outside your home jurisdiction. We comply with applicable data-protection laws where we operate. If your local jurisdiction has specific data-residency requirements, you should verify that our infrastructure complies before creating an account.
main300 services are available only in jurisdictions where online gaming is legally permitted. Your use of main300 confirms you are in such a jurisdiction. We implement geographic checks and may suspend accounts that access main300 from restricted regions.
Our approach to data on main300 centres on transparency and restraint. We collect what is necessary to operate our platform safely and lawfully. We do not monetise your personal information or sell it to third parties. We protect what we collect with industry-standard security. You have rights to access, correct, and delete your data subject to legal and compliance constraints. If you have questions about this policy or how we handle your data, contact our support team—we will provide a clear, direct answer without legal jargon.