Privacy Policy

crz88 ("we", "our", "the Platform") operates an online gaming platform serving Players primarily located in Indonesia, accessible at https://crz88.pro. We offer live casino games, sportsbook betting, online slots, and togel (Indonesia's traditional numbers lottery) products to registered adult Members.

This Privacy Policy explains how crz88 handles personal data in connection with these Services. It should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated into the overall crz88 member agreement.

By registering a crz88 account or continuing to use the Platform after the effective date stated above, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request account closure by contacting us at [email protected].

The following definitions apply throughout this Privacy Policy:

crz88 collects the minimum Personal Data necessary to operate the Platform, comply with applicable regulatory obligations, and deliver a secure, personalized gaming experience. The categories of data we collect are set out below:

crz88 collects Personal Data through the following channels:

• Registration Form: When you create a crz88 account, you provide Identity Data and Contact Data directly through the registration interface.
• KYC Submission: When you submit identity documents to complete verification prior to your first withdrawal, we collect Identity Document Data and additional Identity Data.
• Deposit and Withdrawal Transactions: When you initiate a deposit or withdrawal via local Indonesian banks or e-wallets, Financial Data is transmitted to crz88's payments infrastructure and recorded in your account transaction history.
• Platform Interaction: As you browse and play on crz88, our systems automatically record Technical Data and Usage Data via server logs, session tracking, and game event telemetry.
• Customer Support: When you contact crz88 via live chat or email, the content of those communications is recorded as Communications Data.
• Cookies and Similar Technologies: crz88 places cookies and uses similar tracking technologies on your device as described in Section 9 of this Policy.
• Third-Party Verification Services: When required for enhanced KYC or fraud checks, crz88 may receive supplementary identity verification data from licensed third-party verification providers. In all such cases, the provider is contractually bound to supply only data relevant to the verification purpose.

crz88 does not purchase Personal Data from data brokers or obtain personal information from social media platforms without your explicit consent.

crz88 processes your Personal Data only for clearly defined, legitimate purposes. The specific uses of each data category are as follows:

• Account Administration: Creating and managing your crz88 account, authenticating your identity at login, and maintaining your account preferences and balance records.
• Service Delivery: Enabling you to place bets, play games, claim bonuses, and access all features of the crz88 platform including sportsbook markets covering BRI Liga 1, EPL, La Liga, Serie A, Bundesliga, Champions League, and major international tournaments.
• Payment Processing: Executing deposit and withdrawal transactions via your nominated Indonesian bank account or e-wallet in IDR, and maintaining a complete, auditable financial transaction record for each Member.
• Regulatory Compliance: Fulfilling our KYC and AML obligations, verifying that all Members are aged 21 or above, and maintaining records required by our international licensing authority and applicable financial regulations.
• Fraud Prevention and Security: Detecting, investigating, and preventing unauthorized account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring gaming patterns to identify potential signs of problematic gambling behavior, enforcing self-exclusion requests, and administering deposit and loss limits set by Members.
• Customer Support: Responding to inquiries, resolving complaints, and maintaining a record of support interactions for quality assurance and dispute resolution purposes.
• Service Improvement: Analyzing aggregated, anonymized Usage Data to identify areas for product improvement, optimize platform performance, and prioritize new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and seasonal promotions (including those tied to Idul Fitri, Ramadhan, Imlek, and Indonesian Independence Day) exclusively to Members who have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].

crz88 relies on the following legal grounds to process your Personal Data:

• Contractual Necessity: Processing your Identity Data, Contact Data, and Financial Data is necessary to perform our contractual obligations to you under the crz88 Terms & Conditions — specifically to create and administer your account and to process your deposits and withdrawals.
• Legal Obligation: Processing Identity Document Data, Financial Data, and transaction records is required to comply with our KYC, AML, and data retention obligations under the regulatory framework governing our international gaming license.
• Legitimate Interests: Processing Technical Data and Usage Data for fraud prevention, security monitoring, platform optimization, and responsible gaming risk identification is carried out on the basis of crz88's legitimate interest in maintaining a safe, fair, and commercially viable gaming platform — provided this interest is not overridden by your data protection rights.
• Consent: Processing your Contact Data for marketing communications and placing non-essential analytics cookies on your device is conducted only where you have provided clear, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

crz88 does not sell, rent, or trade your Personal Data. We disclose Personal Data only to the categories of recipient listed below, and only to the extent necessary for the stated purpose:

• Payment Partners: Indonesian bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata) and e-wallet providers (GoPay, OVO, DANA, ShopeePay, LinkAja) receive the minimum Financial Data necessary to execute your deposit and withdrawal transactions. These partners are subject to their own regulatory frameworks and privacy obligations.
• KYC Verification Providers: Licensed third-party identity verification services receive Identity Document Data solely for the purpose of confirming your age and identity. These providers operate under strict data processing agreements with crz88 and are prohibited from using your data for any other purpose.
• Game Content Studios: Game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive anonymized session and bet data necessary to deliver and certify their games. These studios do not receive your name, contact details, or financial information.
• Cloud Infrastructure and IT Service Providers: crz88 uses internationally reputable cloud infrastructure services to host the Platform. These providers process Technical Data and stored Personal Data as Data Processors under contractual data protection terms and do not have independent access to your data beyond what is required for infrastructure provision.
• Regulatory and Law Enforcement Authorities: crz88 will disclose Personal Data to competent regulatory, law enforcement, or judicial authorities where required by applicable law, a valid court order, or where crz88 has a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of any person, or protect crz88's legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of crz88's business assets, Personal Data held by crz88 may be transferred to the acquiring entity, subject to the acquirer assuming equivalent data protection obligations. Members will be notified of any such transfer that materially affects their data rights.

crz88 retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable regulatory and legal obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analytics purposes.

crz88 uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain your account balance display, and support security features such as CSRF protection. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language display, game lobby layout settings, and notification preferences — so that you do not need to re-configure them on each visit.
• Analytics Cookies: crz88 uses privacy-respecting, first-party analytics tools to understand how Members navigate the Platform, which game categories are most visited, and where usability improvements are needed. Analytics cookies collect data in aggregated, anonymized form only. No personally identifiable information is shared with external analytics services.
• Security Cookies: These cookies support bot detection, brute-force login prevention, and suspicious activity flagging. They are part of crz88's fraud prevention infrastructure and operate alongside server-side security monitoring.

crz88 does not use third-party advertising cookies, social media tracking pixels, or fingerprinting technologies that profile your behavior across other websites.

crz88 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data exchanged between your browser or app and crz88 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login sessions, deposit/withdrawal requests, and all API calls between the Platform and payment partners.
• Encryption at Rest: Sensitive Data categories — including Identity Document Data and Financial Data — are stored in encrypted database fields. Encryption keys are managed via a dedicated key management service with access logging and regular rotation.
• Access Controls: Access to Personal Data within crz88's internal systems is governed by role-based access controls (RBAC). Staff access is granted on a strict need-to-know basis, and all access to Sensitive Data is logged and subject to periodic audit.
• Network Security: crz88's hosting infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) mitigation services. Regular penetration testing is conducted by independent security professionals.
• Two-Factor Authentication: crz88 offers and strongly encourages two-factor authentication (2FA) via your registered Indonesian mobile number for all Member accounts. Internal staff accounts with access to Personal Data require 2FA without exception.
• Incident Response: crz88 maintains a documented data breach response plan. In the event of a confirmed data breach that poses a material risk to affected Members, crz88 will notify impacted Members via their registered email address and take immediate remedial action as required by applicable regulatory obligations.

As a registered Member or website visitor, you have the following rights regarding your Personal Data held by crz88. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Full Name] — [Account ID]". crz88 will acknowledge your request within 5 business days and provide a substantive response within 30 days.

• Right of Access: You may request a copy of the Personal Data crz88 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If you believe any Personal Data crz88 holds about you is inaccurate or incomplete, you may request that it be corrected or updated. You may update basic contact information directly through your account settings.
• Right to Erasure: You may request the deletion of your Personal Data. We will comply where no legal obligation requires continued retention. Note that data subject to KYC and AML retention obligations (see Section 8) cannot be deleted until the applicable retention period expires.
• Right to Restriction of Processing: You may request that crz88 limit the processing of your Personal Data in specific circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is under review.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that crz88 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on crz88's legitimate interests (including profiling for responsible gaming purposes) where you believe your individual rights and freedoms override those interests. You may also object at any time to processing of your data for direct marketing purposes, which will be honored immediately.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to the withdrawal.

crz88 is an adult gaming platform strictly intended for individuals aged 21 years and above. crz88 does not knowingly collect Personal Data from any individual under the age of 21. The Platform employs age verification controls at the point of registration and during the KYC process to identify and exclude underage users.

If crz88 discovers — through our verification processes, a third-party report, or any other means — that a Member is under 21 years of age, the account will be immediately suspended, all pending transactions will be halted, deposited funds will be returned to the originating payment method (net of any bonuses claimed), and all Personal Data associated with the account will be scheduled for deletion in accordance with our data retention obligations.

If you believe that an individual under the age of 21 has registered a crz88 account or has otherwise provided Personal Data to the Platform, please notify us immediately at [email protected]. crz88 takes all credible underage access reports seriously and will investigate promptly.

crz88's primary platform infrastructure is hosted in secure data centers serving the Asia-Pacific region. Some operational functions — including certain KYC verification services, cloud backup systems, and game content delivery — may involve the transfer of Personal Data to servers or service providers located outside Indonesia.

Where Personal Data is transferred internationally, crz88 ensures that adequate safeguards are in place to protect the data to a standard equivalent to or higher than the protections described in this Privacy Policy. Such safeguards include:

• Contractual data processing agreements incorporating internationally recognized standard contractual clauses for cross-border data transfers.
• Transfer only to processors that maintain equivalent technical and organizational security measures as required under this Policy.
• Restriction of transferred data to the minimum scope necessary for the specific processing purpose.

By using the crz88 platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Indonesia in the manner described above.

crz88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. The following process governs all amendments:

• Material changes — those that significantly affect your rights or how we use your Personal Data — will be communicated to registered Members via email to the address on record at least 7 days before the revised Policy takes effect.
• Minor or non-material changes (such as typographical corrections, clarifications that do not alter data rights, or updates to contact details) may be published without advance notice and take effect immediately upon publication.
• The "Last Updated" date at the top of this page will be revised upon every update, including minor changes. Players are encouraged to review this Policy periodically.
• Continued use of the crz88 platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the Platform and request account closure before the effective date.

Prior versions of this Privacy Policy are available upon request by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your Personal Data by crz88, please contact our Data Protection team through the following channel:

• Email: [email protected] — Subject line: "Privacy Inquiry — [Your Name] — [Account ID]"
• Live Chat: Available 24/7 on any page of the crz88 platform. Live chat is the fastest channel for general account queries; data rights requests should be submitted via email for a documented audit trail.
• Response Time: Privacy-related email inquiries will receive an acknowledgment within 24 hours (WIB, UTC+7) and a substantive response within 10 business days. Complex data rights requests may require up to 30 days.
• Language: crz88's support team includes native Indonesian-speaking agents available on every shift, 24 hours a day, including during Idul Fitri, Ramadhan, and all Indonesian public holidays. Privacy inquiries may be submitted in English or Indonesian.