Privacy Policy

crz88 ("we", "us", "our") operates the online betting platform accessible at https://crz88.cam. We understand that the privacy of your personal data is important, and we take our obligations as a data controller seriously.

This Privacy Policy describes the personal data we collect from players who register and use the crz88 platform, the lawful bases on which we process that data, how we use and protect it, how long we keep it, and the rights you hold as a data subject. This Policy applies to all users of the crz88 platform, including players registered from Indonesia and other eligible jurisdictions.

By creating a crz88 Account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the crz88 platform and contact us to request Account closure.

For the purposes of this Privacy Policy, the following definitions apply:

crz88 collects Personal Data across the following categories:

3.1 Registration Data

When you create a crz88 Account, we collect your legal full name, date of birth, Indonesian National Identity Card number (KTP Nasional), residential address, email address, and mobile telephone number. This data is required to create and authenticate your Account and to fulfil our KYC obligations.

3.2 Identity Verification (KYC) Data

To comply with our international licensing obligations, crz88 collects copies of government-issued identity documents (including your KTP Nasional), proof-of-address documents, and selfie verification photographs when you submit a KYC request or when our systems trigger a verification review.

3.3 Financial Data

crz88 records the details of all deposit and withdrawal transactions associated with your Account, including transaction amounts (in IDR), timestamps, payment method types (e.g., BCA, BRI, OVO, DANA), and transaction reference numbers. crz88 does not store full bank account numbers; only masked references are retained post-transaction.

3.4 Betting Activity Data

We record all wagers placed through your Account, including the market type (sportsbook, live casino, slot games, togel — Indonesia's traditional numbers lottery), stake amounts, odds, outcomes, and session timestamps. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Device & Technical Data

When you access the crz88 platform, we automatically collect technical data including your IP address, device type and model, operating system, browser type and version, session duration, pages visited, and referring URL. This data is used for security purposes, fraud detection, and platform performance optimization.

3.6 Communications Data

We retain records of all communications between you and the crz88 support team, including live chat transcripts, email correspondence, and any documentation submitted in connection with a complaint or dispute. These records are kept for quality assurance, staff training, and regulatory compliance purposes.

3.7 Voluntary Data

If you choose to participate in crz88 surveys, provide feedback, or submit promotional claim requests, we collect the information you voluntarily provide in those interactions.

crz88 collects Personal Data through the following means:

• Direct collection: Data you actively provide during Account registration, KYC submission, deposit/withdrawal requests, support interactions, and survey participation.
• Automated collection: Technical and usage data collected automatically when you access the crz88 platform, via server logs, cookies, and session tracking technologies.
• Third-party sources: Identity verification and fraud-screening data obtained from licensed KYC providers and financial crime databases when processing your verification request. crz88 selects third-party data sources that are compliant with applicable data protection standards.
• Payment processors: Transaction confirmation data provided by Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay) when processing your deposits and withdrawals.

crz88 processes your Personal Data under one or more of the following lawful bases, consistent with internationally recognized data protection principles:

crz88 uses the Personal Data we collect for the following purposes:

• Account creation and authentication: To set up, verify, and maintain your crz88 Account and to authenticate your identity on each login.
• Payment processing: To process deposits via Indonesian banks and e-wallets, to verify withdrawal requests, and to maintain accurate financial records.
• KYC and compliance: To verify your identity in accordance with our international licensing conditions and to comply with applicable AML and counter-terrorism financing (CTF) obligations.
• Customer support: To respond to your queries, investigate disputes, and resolve complaints in a timely and informed manner.
• Responsible gaming: To monitor betting activity for indicators of problem gambling behavior, to enforce self-exclusion and deposit-limit settings, and to proactively reach out to players who may be at risk.
• Security and fraud prevention: To detect, investigate, and prevent unauthorized Account access, bonus abuse, money laundering, and other forms of platform fraud.
• Platform improvement: To analyze aggregated and anonymized usage data for the purpose of improving platform performance, user experience, and product development.
• Marketing communications: To send you promotional offers and platform updates where you have provided explicit consent to receive such communications. You may unsubscribe at any time.
• Legal and regulatory: To maintain records required by our international operating license and to respond to lawful requests from regulatory or law-enforcement authorities.

crz88 does not sell, rent, or trade your Personal Data. We share your data with third parties only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

7.1 Payment Processors

Transaction data is shared with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay) to process deposits and withdrawals. These processors receive only the information necessary to complete the specific transaction.

7.2 KYC and Identity Verification Providers

Identity documents submitted for KYC verification are processed by crz88's licensed third-party verification partner. This partner is bound by strict confidentiality obligations and data processing agreements and is prohibited from using your data for any purpose other than identity verification on crz88's behalf.

7.3 Fraud Detection and Security

Device fingerprint data, IP addresses, and anonymized behavioral patterns may be shared with specialized fraud-detection service providers to protect the platform and its players from financial crime and unauthorized access.

7.4 Legal and Regulatory Disclosure

crz88 may disclose Personal Data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required by law, valid legal process, or where crz88 reasonably believes disclosure is necessary to prevent fraud, criminal activity, or harm to any person.

7.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of crz88's assets, player Personal Data may be transferred to the acquiring entity as part of the transaction. crz88 will notify affected players of any such transfer and of any material changes to data processing practices that result from it.

crz88 uses cookies and similar technologies (local storage, session tokens) to enable core platform functionality, maintain session security, and understand how players interact with the platform.

crz88 does not deploy third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings; however, disabling essential cookies will prevent the crz88 platform from functioning correctly.

crz88 retains Personal Data for no longer than is necessary for the purposes for which it was collected, or as required by our international operating license. The following retention periods apply as a general guide:

• Active Account data: Retained for the duration of your Account relationship with crz88 plus a minimum of 5 years following Account closure, in accordance with standard AML record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years from the date of the last transaction on the Account, consistent with international AML/CTF standards.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 3 years from the date of the interaction or until resolution of any related dispute, whichever is later.
• Device and technical logs: Retained for 12 months from the date of collection, unless a specific security incident investigation requires longer retention.
• Marketing consent records: Retained for the duration of your consent plus 3 years, for the purpose of demonstrating compliance with consent obligations.

When data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual.

crz88 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:

• Transport security: All data in transit is encrypted using TLS 1.2 or higher. crz88 enforces HTTPS across all platform pages and API endpoints.
• Storage encryption: Sensitive data at rest — including KYC documents and financial records — is stored in encrypted form using AES-256 encryption.
• Access controls: Access to player Personal Data is restricted to authorized crz88 personnel on a strict need-to-know basis. All access events are logged and subject to periodic review.
• Two-factor authentication: crz88 offers two-factor authentication (2FA) to all players and requires it for all internal administrative access.
• Penetration testing: The crz88 platform undergoes periodic security assessments and penetration tests conducted by independent security professionals.
• Incident response: crz88 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights and interests, crz88 will notify affected players as promptly as operationally feasible.

As a Data Subject, you hold the following rights with respect to the Personal Data crz88 holds about you. To exercise any of these rights, please contact the crz88 data team at [email protected] with the subject line "Data Rights Request".

crz88 will respond to all Data Rights Requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with written notification provided to you within the initial 30-day window.

The crz88 platform is strictly intended for adults aged 21 years and above. crz88 does not knowingly collect Personal Data from individuals under the age of 21. Any Account found to belong to an underage individual will be immediately suspended and all associated Personal Data deleted from our active systems, subject to any retention obligations imposed by our licensing requirements.

If you believe that crz88 has inadvertently collected data from an individual under the age of 21, please contact us immediately at [email protected] so that we may investigate and take appropriate remedial action without delay.

crz88 operates as an international platform. Your Personal Data may be transferred to, stored on, or processed by systems located in jurisdictions outside Indonesia. Where such transfers occur, crz88 applies appropriate safeguards to ensure that your data receives a standard of protection consistent with the commitments made in this Privacy Policy.

These safeguards may include contractual data-processing agreements with service providers that include standard privacy protection clauses, and selection of service providers located in jurisdictions that maintain adequate data protection frameworks.

The crz88 platform does not include outbound links to third-party websites or services. However, should you navigate to any external site referenced in promotional materials or support communications, crz88 is not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policy of any third-party site before providing your personal information.

crz88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, crz88 will update the "Last Updated" date at the top of this page. Where changes materially affect how we use your Personal Data, crz88 will provide additional notice via email or in-platform notification prior to the changes taking effect.

Your continued use of the crz88 platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should cease using the platform and contact us to request Account closure and data deletion where applicable.

If you have any questions about this Privacy Policy, wish to exercise a Data Rights Request, or wish to lodge a privacy complaint, please contact the crz88 data team using the details below:

Please use the subject line "Privacy Policy — Data Rights Request" or "Privacy Policy — Complaint" as appropriate, to ensure your message is directed to the correct team.

crz88 is committed to resolving all privacy complaints promptly and in good faith. We will acknowledge receipt of any privacy complaint within 5 business days and provide a substantive response within 30 calendar days. If you remain unsatisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.