Privacy Policy

1. Introduction

Welcome to the cr77 Privacy Policy. This document explains how cr77 ("we," "us," "our," or the "Company") collects, uses, stores, protects, and shares your personal information when you access or use our online gaming platform at https://cr77.cam (the "Platform"). We are committed to protecting your privacy and handling your personal data in accordance with international data protection standards and best practices in the online gaming industry.

This Privacy Policy applies to all users of the cr77 Platform, including residents of Indonesia and other jurisdictions where we operate. By creating an account, accessing our services, or using our Platform in any way, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this policy, you should immediately discontinue use of the Platform and close any existing account.

This Privacy Policy should be read in conjunction with our Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with cr77.

2. Information We Collect

cr77 collects several categories of personal information to provide our services, ensure platform security, comply with legal obligations, and improve user experience. The information we collect falls into the following categories:

2.1 Account Registration Information

When you create an account on cr77, we collect the following personal details:

• Full legal name as it appears on your KTP (Indonesian National Identity Card)
• Date of birth to verify you meet the minimum age requirement of 21 years
• Email address for account communications and password recovery
• Mobile phone number for account verification and customer support
• Residential address including city, province, and postal code
• Username and password for account access (passwords are encrypted and never stored in plain text)
• Preferred currency (Indonesian Rupiah / IDR) and language preferences

2.2 Identity Verification Documents (KYC)

To comply with anti-money laundering regulations and verify your identity, we collect:

• KTP (Indonesian National Identity Card) photograph or scan showing your photo, name, date of birth, and NIK (identity number)
• Proof of address documents such as utility bills or bank statements (if additional verification is required)
• Selfie holding your KTP for enhanced verification in certain cases
• Bank account information including account holder name, bank name, and account number for deposits and withdrawals

2.3 Financial Transaction Data

We collect and maintain records of all financial transactions on the Platform:

• Deposit amounts, dates, times, and payment methods (BCA, BRI, BNI, Mandiri, etc.)
• Withdrawal requests, amounts, processing times, and destination accounts
• Bonus claims, wagering activity, and bonus fulfillment status
• Account balance history and transaction ledgers
• Payment processor transaction IDs for reconciliation and dispute resolution

2.4 Gameplay and Betting Activity

To provide gaming services and detect fraudulent activity, we log:

• All bets placed, including game type, stake amount, odds, and outcomes
• Session durations, game preferences, and playing patterns
• Winnings and losses over time for responsible gaming monitoring
• Participation in tournaments, promotions, and VIP programs
• Live casino interactions and sports betting selections

2.5 Technical and Device Information

We automatically collect technical data when you access the Platform:

• IP address and geolocation data to verify you are accessing from permitted jurisdictions
• Device information including device type (mobile/desktop), operating system, browser type and version
• Login timestamps and session activity logs for security monitoring
• Cookies and tracking identifiers (see Section 6 for detailed information)
• Error logs and crash reports to diagnose technical issues

2.6 Communications and Customer Support

When you contact our customer support team, we collect:

• Live chat transcripts and email correspondence
• WhatsApp message history (if you contact us via WhatsApp)
• Complaint details and resolution records
• Feedback, suggestions, and survey responses

3. How We Use Your Information

cr77 uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your user account on the Platform
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and internal fund transfers
• Facilitating gameplay across sports betting, casino games, slots, togel, and other offerings
• Managing bonus claims, wagering requirements, and promotional participation
• Providing customer support and responding to inquiries

3.2 Security and Fraud Prevention

• Verifying your age to enforce the 21+ age restriction
• Detecting and preventing fraudulent activity, money laundering, and bonus abuse
• Monitoring for multiple accounts and identity theft
• Investigating suspicious betting patterns or collusion
• Protecting the Platform from cyberattacks, unauthorized access, and technical exploits

3.3 Legal and Regulatory Compliance

• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Maintaining transaction records as required by financial regulations
• Responding to legal requests from law enforcement or regulatory authorities
• Enforcing our Terms and Conditions and investigating violations

3.4 Responsible Gaming and Player Protection

• Monitoring gameplay patterns to identify potential problem gambling behaviors
• Implementing deposit limits, session time alerts, and self-exclusion requests
• Providing resources and support for responsible gaming (see our Responsible Gaming page)
• Ensuring compliance with age restrictions and player eligibility requirements

3.5 Platform Improvement and Personalization

• Analyzing user behavior to improve website functionality and mobile app performance
• Customizing game recommendations based on your preferences and playing history
• Optimizing payment processing and reducing transaction failures
• Testing new features and conducting A/B testing for user experience enhancements

3.6 Marketing and Communications

• Sending promotional offers, bonus notifications, and exclusive VIP rewards (you can opt out at any time)
• Announcing new game releases, sports betting markets, and platform updates
• Conducting customer satisfaction surveys to gather feedback
• Celebrating milestones such as birthdays and membership anniversaries with special bonuses

Important Note: You have the right to opt out of marketing communications at any time by adjusting your account preferences or contacting customer support. Opting out of marketing will not affect transactional communications such as withdrawal confirmations, security alerts, or customer support responses.

4. Data Sharing and Disclosure

cr77 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:

4.1 Service Providers and Business Partners

We share limited personal information with trusted third-party service providers who assist in operating the Platform:

• Payment processors that facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, and other Indonesian banks
• Game providers and software developers that supply slots, live casino, and other gaming content
• Identity verification services that assist with KYC document validation
• Cloud hosting providers that store data securely on our behalf
• Customer support platforms that enable live chat and ticketing systems
• Analytics providers that help us understand user behavior and improve services

All third-party service providers are contractually bound to protect your data and may only use it for the specific purposes we authorize. They are prohibited from selling or using your information for their own marketing.

4.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, or regulatory bodies when:

• Required by applicable law, regulation, or legal process
• Necessary to investigate or prevent fraud, money laundering, or other illegal activities
• Responding to valid subpoenas, court orders, or official requests for information
• Protecting the rights, property, or safety of cr77, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change via email, and the new entity will be bound by this Privacy Policy unless you are provided with a new policy and given the opportunity to consent.

4.4 With Your Consent

We may share your information with third parties when you explicitly provide consent, such as participating in third-party promotions, entering contests sponsored by partners, or opting into data sharing for research purposes.

5. Data Security Measures

cr77 employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

5.1 Technical Security Controls

• Firewall protection and intrusion detection systems to prevent unauthorized server access
• Encrypted password storage using one-way hashing algorithms (we never store passwords in plain text)
• Secure payment gateways that tokenize financial data to minimize exposure of bank account details
• Regular security audits and penetration testing by independent cybersecurity firms
• Automated backup systems to protect against data loss
• Two-factor authentication options for enhanced account security

5.2 Organizational Security Measures

• Access controls limiting employee access to personal data on a need-to-know basis
• Employee training on data protection best practices and privacy compliance
• Confidentiality agreements binding all staff members to protect user information
• Incident response procedures to quickly address any security breaches
• Regular policy reviews to adapt to evolving security threats

5.3 Your Responsibility

While we implement robust security measures, you also play a crucial role in protecting your account:

• Choose a strong, unique password and never share it with anyone
• Log out of your account when using shared or public computers
• Never click on suspicious links in emails claiming to be from cr77 (we never ask for passwords via email)
• Enable two-factor authentication if available
• Immediately report any unauthorized account activity to customer support

Note: Despite our best efforts, no method of data transmission or storage is 100% secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee absolute security. You acknowledge and accept this inherent risk when using the Platform.

6. Cookies and Tracking Technologies

cr77 uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. This section explains what these technologies are and how you can control them.

6.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit a website. They allow the website to recognize your device and remember certain information about your preferences or past actions.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These enable core features like account login, secure transactions, and navigation. You cannot opt out of essential cookies if you wish to use the Platform.
• Performance Cookies: Collect anonymous data about how users interact with the Platform, which pages are visited most, and where errors occur. This helps us optimize performance and fix technical issues.
• Functionality Cookies: Remember your preferences such as language selection, game favorites, and display settings to provide a more personalized experience.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant promotional offers and measure the effectiveness of marketing campaigns.

6.3 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being sent. Please note that disabling cookies may limit your ability to use certain features of the Platform, such as staying logged in or saving preferences.

For instructions on managing cookies in popular browsers, visit the help sections of Chrome, Firefox, Safari, Edge, or your mobile browser.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings, or contact customer support for assistance.

7.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may retain certain information as required by law or for legitimate business purposes (e.g., transaction records for tax compliance).

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in specific situations, such as when you contest the accuracy of the data or object to our processing.

7.5 Right to Data Portability

You have the right to receive your personal information in a portable format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You can object to our processing of your personal information for direct marketing purposes at any time. We will cease such processing upon receiving your objection.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days.

8. Data Retention

cr77 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

• Active accounts: Personal information is retained for the duration of your account's active status.
• Closed accounts: After voluntary account closure, we retain core identification data and transaction records for 7 years to comply with financial regulations and tax laws.
• Marketing data: If you opt out of marketing communications, we retain your email address on a suppression list to ensure we don't contact you again.
• Support communications: Customer support transcripts are retained for 3 years for quality assurance and dispute resolution.
• Technical logs: IP addresses and session logs are typically retained for 90 days unless required longer for security investigations.

8.2 Anonymization

Where possible, we anonymize personal information after the retention period expires, allowing us to use aggregated data for analytical purposes without identifying individuals.

9. International Data Transfers

cr77 operates internationally, and your personal information may be transferred to and processed in countries outside Indonesia, including jurisdictions that may not offer the same level of data protection as Indonesian law. When we transfer data internationally, we implement appropriate safeguards to protect your information, including:

• Standard contractual clauses approved by international data protection authorities
• Ensuring third-party processors adhere to international data protection standards
• Conducting regular audits of cross-border data flows

By using the cr77 Platform, you acknowledge and consent to the international transfer of your personal information as described in this policy.

10. Children's Privacy

cr77 strictly prohibits use of the Platform by anyone under the age of 21. We do not knowingly collect personal information from minors. Our age verification procedures, including KYC document checks, are designed to prevent underage access.

If we become aware that we have inadvertently collected personal information from someone under 21, we will take immediate steps to delete that information and close the account. Parents or guardians who believe a minor has accessed the Platform should contact us immediately at [email protected].

We strongly encourage parents to use parental control software to prevent minors from accessing gambling websites.

11. Changes to This Privacy Policy

cr77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the Platform homepage

Your continued use of the Platform after such notification constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how cr77 handles your personal information, please contact us:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 through the Platform (click the support icon)
• WhatsApp Support: Available 24/7 for text-based inquiries

We aim to respond to all privacy-related inquiries within 72 hours, with most requests resolved within 30 days. For urgent security concerns, please indicate "URGENT" in your subject line for priority handling.

For additional information about your rights and our practices, please also review our Terms & Conditions and FAQ page.