cr99 Privacy Policy

This Privacy Policy applies to all personal data collected by cr99 through our website (https://cr99.cam), mobile-optimized interface, and any related services or communications. By registering an account and using the cr99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal information as described herein.

Data Controller: cr99 operates under an international gaming license and serves as the data controller for all personal information collected through the platform. We are committed to complying with applicable data protection laws and international privacy standards, including principles aligned with GDPR (General Data Protection Regulation) where applicable to international users.

Indonesia Market Context: cr99 primarily serves users who are residents of Indonesia. While Indonesian law does not currently have a comprehensive national data protection regulation equivalent to GDPR, cr99 voluntarily adopts best-practice privacy standards to protect the personal data of all our Indonesian users.

cr99 collects several categories of personal information to provide our services, ensure platform security, and comply with legal and regulatory obligations. The information we collect includes:

2.1 Mandatory vs. Optional Information: Information marked as mandatory during registration (name, date of birth, email, phone number, address) is required to create an account and use cr99 services. KYC documentation is mandatory before you can process any withdrawal. Optional information may be requested for marketing preferences or platform personalization but is not required to use core services.

2.2 Automatic Data Collection: When you access the cr99 platform, certain technical data is collected automatically through cookies and similar tracking technologies (see Section 6 for details). This includes IP address, device identifiers, and browsing behavior.

cr99 uses your personal information for the following purposes:

• Account Management: To create and maintain your cr99 account, authenticate your identity when you log in, and manage your account settings and preferences.
• Service Provision: To process deposits and withdrawals, settle bets, credit winnings to your account, and provide access to sports betting, live casino, slot games, and other gaming products offered on the platform.
• Identity Verification and KYC Compliance: To verify that you are at least 21 years of age, confirm your residential address, and fulfill our legal obligations under anti-money laundering (AML) and Know Your Customer (KYC) regulations.
• Payment Processing: To facilitate secure transactions with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja), and to detect and prevent fraudulent financial activity.
• Security and Fraud Prevention: To monitor for suspicious activity, prevent unauthorized access to accounts, detect patterns consistent with bonus abuse or collusion, and protect the platform from cyber threats and attacks.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide support resources to users who may need assistance managing their gaming activity.
• Customer Support: To respond to your inquiries, resolve technical issues, assist with account verification, and handle disputes related to bets, bonuses, or withdrawals.
• Platform Improvement: To analyze user behavior, identify areas for improvement, test new features, optimize user experience, and ensure platform stability and performance.
• Marketing Communications (with consent): To send promotional offers, bonus announcements, and platform updates via email or SMS, where you have provided explicit consent to receive such communications. You may opt out at any time.
• Legal Compliance: To comply with applicable laws, regulations, and licensing requirements, respond to legal requests from authorities, and enforce our Terms and Conditions.

cr99 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your data with trusted third-party service providers and partners in the following limited circumstances:

4.1 Payment Processors: To process deposits and withdrawals, we share necessary financial information (bank account details, e-wallet identifiers, transaction amounts) with payment gateway providers and financial institutions including Indonesian banks and e-wallet platforms. These partners are contractually obligated to handle your data securely and only for the purpose of facilitating transactions.

4.2 Identity Verification Services: To complete KYC verification, we may share copies of your government-issued identification and other verification documents with third-party identity verification service providers. These providers use your information solely to confirm your identity and return the verification result to cr99.

4.3 Game Providers: When you play games from third-party suppliers (such as live casino games or slots from providers like Pragmatic Play, Evolution Gaming, or Pocket Games Soft), certain technical data (user ID, bet amounts, session data) is shared with those providers to enable gameplay. Game providers do not have access to your full personal details such as name, address, or identification documents.

4.4 Customer Support Tools: We use third-party live chat and support ticketing platforms to deliver customer service. Support agents may access your account information, communication history, and transaction records to resolve your inquiries effectively.

4.5 Analytics and Performance Monitoring: We use analytics services to monitor platform performance, understand user behavior, and identify technical issues. These services may collect aggregated or anonymized data about how users interact with the cr99 platform.

4.6 Legal Obligations: We may disclose your personal information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that such disclosure is necessary to comply with legal obligations, protect our rights and property, investigate fraud, or ensure user safety.

4.7 Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of cr99's assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

5.1 Security Measures: cr99 employs industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive personal data, including passwords (hashed using bcrypt or equivalent algorithms) and financial information
• Firewalls, intrusion detection systems, and DDoS protection to safeguard platform infrastructure
• Restricted access controls ensuring that only authorized personnel can access personal data on a need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent third parties
• Multi-factor authentication (MFA) available for user accounts to add an extra layer of security

5.2 Data Storage Location: Your personal data is stored on secure servers located in data centers with physical security controls, redundant power supplies, and 24/7 monitoring. While cr99 operates internationally, we ensure that all data storage complies with industry best practices regardless of geographic location.

5.3 User Responsibility: While cr99 takes extensive measures to secure your data, you are also responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone, use a strong and unique password, and enable multi-factor authentication if available. If you suspect unauthorized access to your account, contact our support team immediately.

6.1 What Are Cookies: Cookies are small text files placed on your device when you visit the cr99 platform. They allow us to recognize your device, remember your preferences, and provide a more personalized and efficient user experience.

6.2 Types of Cookies We Use:

• Essential Cookies: These cookies are necessary for the platform to function correctly. They enable core features such as logging into your account, maintaining your session while you navigate the site, and processing transactions. You cannot opt out of essential cookies.
• Performance and Analytics Cookies: These cookies collect information about how users interact with the cr99 platform, such as which pages are visited most frequently and whether users encounter error messages. This data helps us improve platform performance and user experience.
• Functional Cookies: These cookies allow the platform to remember your preferences (such as language settings, timezone, or preferred betting markets) and provide enhanced, personalized features.
• Marketing and Advertising Cookies: These cookies track your browsing behavior across the cr99 platform and may be used to deliver targeted promotional content. You can opt out of marketing cookies through your browser settings or account preferences.

6.3 Managing Cookies: Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies or alert you when a cookie is being sent. Note that disabling essential cookies may impair platform functionality and prevent you from accessing certain features. Instructions for managing cookies can be found in your browser's help section.

6.4 Third-Party Cookies: Some cookies on the cr99 platform are set by third-party service providers (such as analytics tools or game providers). We do not control these third-party cookies, and you should refer to the respective third party's privacy policy for more information.

As a cr99 user, you have the following rights regarding your personal information:

• Right to Access: You have the right to request a copy of the personal data we hold about you. You can access much of this information directly through your account dashboard. For a comprehensive data export, contact our support team.
• Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You can update most account information directly in your account settings.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to certain legal exceptions. For example, we are required to retain certain records for compliance with AML/KYC regulations and may retain data necessary to resolve disputes or enforce our Terms and Conditions.
• Right to Restriction of Processing: You have the right to request that we limit how we use your personal information in certain circumstances, such as while we verify the accuracy of your data or assess your deletion request.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit this data to another service provider where technically feasible.
• Right to Object: You have the right to object to our processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails or adjusting your preferences in account settings.
• Right to Withdraw Consent: Where our processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Exercising Your Rights: To exercise any of these rights, please contact our support team at the email address provided in Section 10 of this policy. We will respond to your request within 30 days and may require verification of your identity before processing your request.

8.1 Retention Period: cr99 retains your personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data category:

• Account Information: Retained for the duration of your account's active status and for up to 7 years following account closure to comply with financial record-keeping and AML regulations.
• KYC Documentation: Retained for at least 5 years following your last transaction or account closure, as required by anti-money laundering regulations.
• Transaction Records: Retained for 7 years following the transaction date to comply with financial and tax record-keeping requirements.
• Communication Records: Support tickets, live chat transcripts, and email correspondence are retained for 3 years to facilitate dispute resolution and platform improvement.
• Technical and Behavioral Data: Anonymized or aggregated technical data may be retained indefinitely for analytics and platform improvement purposes. Individual session logs are typically retained for 90 days.

8.2 Account Closure and Data Deletion: If you close your cr99 account, we will cease active use of your personal data for service provision but will retain necessary records as outlined above to comply with legal obligations. After the applicable retention period expires, your data will be securely deleted or anonymized so that it can no longer be associated with you as an individual.

8.3 Requesting Data Deletion: You may request early deletion of your personal data by contacting our support team. We will honor such requests where legally permissible, but we may be required to retain certain data to comply with regulatory obligations or to resolve pending disputes.

cr99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this policy, we will notify you by email (to the address associated with your account) and by posting a prominent notice on the cr99 platform.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of the cr99 platform following the publication of changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how cr99 handles your personal information, please contact us:

• Email: [email protected] (displayed as plain text only)
• Live Chat: Available 24/7 through your account dashboard once logged in
• Data Protection Inquiries: For specific data protection questions or to exercise your privacy rights, clearly mark your communication as "Privacy Request" or "Data Protection Inquiry" to ensure it is routed to the appropriate team.

Our dedicated support team is available around the clock to assist you with privacy-related questions, data access requests, or any concerns about how your information is being used. We aim to respond to all privacy inquiries within 48 hours and to fulfill data access or deletion requests within 30 days.