Our Privacy Commitments to You

Six core principles that govern every decision cr88 makes about your personal information

Data Minimization

We collect only the data strictly necessary to operate your account, process transactions, and comply with legal obligations. Nothing extraneous is gathered.

Bank-Grade Encryption

All personal data transmitted between your device and cr88 servers is protected by TLS/SSL encryption. Data at rest is encrypted using AES-256 standards.

No Data Selling

cr88 will never sell, rent, or trade your personal data to third parties for marketing purposes. Your information is not a commodity.

Your Data Rights

You have the right to access, correct, port, restrict processing of, or request deletion of your data at any time by contacting our support team.

Transparent Disclosures

We clearly disclose every third-party service that may receive your data, the reason it is shared, and the contractual safeguards in place.

Breach Notification

In the unlikely event of a data breach affecting your information, we will notify you within 72 hours of becoming aware, consistent with international standards.

Effective Date: January 1, 2026  |  Last Reviewed: January 1, 2026

Summary: cr88 collects the personal data you provide during registration and account use, uses it to deliver our services and meet legal obligations, and does not sell it to third parties. You have meaningful rights over your data and can exercise them at any time. Please read each section below for the full details.

1. Scope and Controller Identity

This Privacy Policy ("Policy") describes how cr88 ("we", "us", "our") — the operator of the online betting platform accessible at https://cr88.cam — collects, processes, stores, and discloses personal data relating to individuals ("you", "User", "Player") who visit, register with, or use our platform and associated services.

This Policy applies to all personal data processed by cr88 regardless of the channel through which it was collected — including our website, customer support communications, payment processing flows, and any marketing communications you have opted into. It covers Users located in Indonesia and all other jurisdictions where cr88 services are accessed.

cr88 is the data controller for the personal data it collects directly. Where third-party service providers process data on our behalf, they act as data processors under contractual data-processing agreements that require them to handle your data in accordance with this Policy and applicable data-protection laws.

Indonesia Context: cr88 operates under an international gaming license and serves players throughout Indonesia, including in Jakarta, Surabaya, Medan, Bandung, and Bali. We are committed to handling all personal data with the care and respect expected by Indonesian users and in accordance with internationally recognized data-protection principles.

2. Definitions

The following terms carry specific meanings throughout this Policy:

  • "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, email address, date of birth, IP address, payment details, and device identifiers.
  • "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion.
  • "Data Controller" — the entity (cr88) that determines the purposes and means of processing personal data.
  • "Data Processor" — a third party that processes personal data on behalf of cr88 under a contractual agreement.
  • "Sensitive Data" — a subset of personal data that warrants heightened protection, including financial account information, government-issued identification numbers, and health information.
  • "Cookies" — small text files placed on your device by our website that store information about your session and preferences.
  • "KYC" (Know Your Customer) — the identity-verification process requiring submission of government-issued ID and address proof before withdrawal processing.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account, complete KYC verification, make deposits, or contact our support team, you provide us with information that may include:

  • Full legal name and date of birth
  • Residential address (including city, province, and postal code within Indonesia)
  • Email address and mobile phone number
  • Username and encrypted password
  • Government-issued ID details (Indonesian KTP number, passport number, or driver's license number)
  • Selfie photographs submitted for facial-identity verification
  • Bank account details, e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and payment-method ownership information
  • Communications with our support team via live chat, email, or WhatsApp

3.2 Information Collected Automatically

When you visit or use our platform, we automatically collect certain technical and behavioral information:

Data Category Examples Purpose
Device & Browser Data Device type, operating system, browser version, screen resolution Platform optimization; fraud prevention
Network Data IP address, approximate geolocation (country/city level), ISP Jurisdiction verification; security monitoring
Session & Interaction Data Pages visited, time on site, click patterns, games played, bets placed Service improvement; responsible gaming monitoring
Transaction Data Deposit amounts, withdrawal requests, bet history, bonus usage Account management; AML compliance; dispute resolution
Cookie & Tracking Data Session tokens, preference cookies, analytics identifiers Authentication; analytics; user experience personalization

3.3 Information from Third Parties

We may receive supplementary information about you from trusted third-party sources, including:

  • Identity verification services that validate your KTP, passport, or other government-issued ID against official databases
  • Payment processors (including Indonesian banks such as BCA, BRI, BNI, Mandiri, and e-wallet providers) that confirm transaction status and ownership details
  • Fraud-detection and AML-screening services that flag high-risk accounts or suspicious transaction patterns
  • Responsible gaming databases that notify us if you have registered a self-exclusion request on another platform

4. Legal Basis for Processing

cr88 processes your personal data only where a valid legal basis exists. The primary bases we rely on are:

  • Contractual Necessity: Processing your account registration data, payment details, and betting history is necessary to perform the contract between you and cr88 — that is, to provide the services you signed up for.
  • Legal Obligation: We are required by our international gaming license and anti-money laundering (AML) regulations to collect KYC documentation, retain transaction records, and report suspicious activity to relevant authorities.
  • Legitimate Interests: We process certain technical and behavioral data to detect fraud, secure our platform, improve our services, and conduct responsible gaming monitoring. These interests are balanced against your privacy rights and do not override them.
  • Consent: Where we send optional marketing communications or place non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting your account.

Right to Object: Where we rely on legitimate interests as our legal basis, you have the right to object to that processing. Please contact our support team at [email protected] to exercise this right. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

5. How We Use Your Information

cr88 uses the personal data we collect for the following specific purposes:

5.1 Account Management and Service Delivery

  • Creating and maintaining your cr88 account
  • Verifying your identity and age (21+ requirement) through KYC processes
  • Processing deposits and withdrawals through your chosen Indonesian banking channel or e-wallet
  • Crediting winnings, applying bonuses, and managing your account balance in Indonesian Rupiah (IDR)
  • Providing customer support via live chat, email, or WhatsApp
  • Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts)

5.2 Security, Fraud Prevention, and Compliance

  • Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and multi-account violations
  • Conducting AML screening and source-of-funds verification for high-value transactions
  • Monitoring for and responding to unauthorized account access or suspicious login activity
  • Complying with our international gaming license obligations, including record-keeping and reporting requirements
  • Cooperating with law enforcement, regulatory authorities, or court orders where legally required

5.3 Responsible Gaming

  • Monitoring betting patterns to identify potential signs of problem gambling
  • Enforcing deposit limits, loss limits, session time limits, and self-exclusion requests you have set
  • Proactively contacting players who display risk indicators with information about support resources
  • Maintaining self-exclusion records to prevent re-registration by excluded players

5.4 Platform Improvement and Analytics

  • Analyzing aggregated, anonymized usage data to improve platform performance and user experience
  • Testing new features and game offerings in response to player behavior trends
  • Optimizing our platform for Indonesian mobile networks and device types

5.5 Marketing Communications (Consent-Based Only)

If you have opted in to marketing communications, we may send you information about promotions, bonuses, new game releases, and seasonal offers relevant to Indonesian players (including during Idul Fitri, Ramadhan, and Indonesian Independence Day promotional periods). You can unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email or by contacting our support team.

No Automated Decision-Making with Legal Effect: cr88 does not make decisions that have a legal or similarly significant effect on you solely through automated processing without human review. Account closure decisions based on fraud or AML grounds are reviewed by a human compliance officer before action is taken.

6. Sharing and Disclosure of Data

cr88 does not sell or rent your personal data. We disclose it only in the specific, limited circumstances described below:

6.1 Service Providers (Data Processors)

We engage trusted third-party companies to perform services on our behalf. These processors are contractually prohibited from using your data for any purpose other than the specific service they provide to cr88. Current categories of processor include:

  • Payment Processors: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Syariah Indonesia, Bank Permata) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to execute deposit and withdrawal transactions
  • Identity Verification Providers: Third-party KYC services that validate government-issued IDs and perform liveness checks for age and identity confirmation
  • Gaming Software Providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and other licensed game studios receive session data necessary to deliver game outcomes and fair-play audits
  • Customer Support Tools: Live chat and ticketing platform providers that facilitate communications between you and our support team
  • Analytics Providers: Anonymized platform analytics services that help us understand aggregate usage patterns
  • Fraud and AML Screening: Compliance technology providers that screen transactions against international watchlists and risk databases

6.2 Legal and Regulatory Disclosures

We may disclose your personal data to government authorities, law enforcement agencies, or courts when we are legally obligated to do so, including but not limited to:

  • Compliance with a valid court order, subpoena, or search warrant
  • Reporting obligations under AML and counter-terrorism-financing regulations
  • Responses to verified requests from our licensing authority
  • Protection of the legal rights, property, or safety of cr88, its employees, or other Users

6.3 Business Transfers

In the event that cr88 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer via email and prominent notice on the platform at least 30 days before your data becomes subject to a materially different privacy policy.

Confirmation: cr88 will never sell your personal data to advertising networks, data brokers, or unrelated third-party businesses for commercial purposes. This commitment is absolute and not subject to exceptions.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit cr88. They enable the platform to remember your session, preferences, and certain behavioral signals. Alongside cookies, we may use similar tracking technologies such as web beacons, pixel tags, and local storage objects.

7.2 Categories of Cookies We Use

Cookie Type Purpose Can You Opt Out?
Strictly Necessary Maintain your login session, remember your cart/bet slip, and enable core platform functionality No — required for the platform to function
Functional Remember your language preferences, display settings, and responsible gaming limit configurations Yes — disabling may degrade user experience
Analytics Collect anonymized data about page views, session durations, and feature usage to improve the platform Yes — opt out via browser settings
Security Detect fraudulent sessions, bot activity, and suspicious login patterns No — required for account security

7.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are set. Please note that disabling certain cookies may affect the functionality of your cr88 account, including the ability to stay logged in or retain your preferences between sessions.

8. Data Retention

cr88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:

Data Category Retention Period Basis
Account Registration Data Duration of account + 5 years after closure Legal obligation (AML / gaming license)
KYC / Identity Documents 5 years from date of verification Legal obligation (AML regulations)
Transaction Records 7 years from transaction date Financial record-keeping obligations
Betting History 5 years from bet settlement Dispute resolution; gaming license
Support Communications 3 years from last communication Legitimate interests (dispute resolution)
Self-Exclusion Records Permanently (or for exclusion duration + 5 years) Responsible gaming obligation
Marketing Consent Records Until consent withdrawn + 3 years Legal obligation (consent audit trail)
Analytics Data (anonymized) 26 months on a rolling basis Legitimate interests (platform improvement)

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing and scheduled for the next secure deletion cycle.

9. International Data Transfers

cr88 operates internationally, and your personal data may be transferred to and processed in countries outside Indonesia. When we transfer personal data internationally, we ensure that adequate safeguards are in place to protect your information, including:

  • Contractual data-transfer agreements incorporating standard contractual clauses that require recipients to apply data protection standards equivalent to those described in this Policy
  • Transfers only to jurisdictions recognized as providing adequate levels of data protection
  • Technical and organizational safeguards, including encryption in transit and at rest, access controls, and audit logging, applied regardless of processing location

All gaming software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others) are required under our licensing agreements to maintain appropriate data security certifications and to process player data only for the purpose of game delivery and fairness auditing.

10. Security Measures

cr88 implements a comprehensive, multi-layered security program to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Key measures include:

  • Transport Encryption: All data transmitted between your browser or device and cr88 servers is encrypted using TLS 1.2 or higher (HTTPS).
  • Data-at-Rest Encryption: Stored personal data, including payment details and identification documents, is encrypted using AES-256.
  • Access Controls: Access to personal data is restricted to cr88 employees and contractors who require it to perform their specific job functions. All access is logged and audited.
  • Password Security: Passwords are stored using industry-standard one-way hashing with salting. We never store plain-text passwords.
  • Vulnerability Management: We conduct regular penetration testing, vulnerability scans, and third-party security audits of our platform.
  • Incident Response: We maintain a documented data-breach response plan and will notify affected Users within 72 hours of discovering a breach that poses a risk to their rights and freedoms.

Your Role in Security: While cr88 implements robust technical safeguards, the security of your account also depends on your own practices. Use a strong, unique password for your cr88 account, never share your login credentials, and contact our support team immediately if you suspect any unauthorized access to your account.

11. Your Rights and Choices

As a cr88 User, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request. We will respond within 30 days.

Your Data Rights at a Glance

These rights apply to all cr88 Users. Contact [email protected] to exercise any of them — we respond within 30 days.

Right of Access

Request a copy of all personal data cr88 holds about you, including how it is used and with whom it is shared.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held in your cr88 account without undue delay.

Right to Erasure

Request deletion of your personal data where we no longer have a legal basis to retain it, subject to our legal obligations.

Right to Restrict Processing

Ask us to pause processing of your data while a dispute about its accuracy or lawfulness is resolved.

Right to Data Portability

Receive a structured, machine-readable copy of data you have provided to us, for transfer to another service.

Right to Withdraw Consent

Withdraw any consent you have given at any time — for example, to opt out of marketing emails — without affecting prior processing.

12. Children and Minors

cr88 services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step of our KYC process, and any account found to have been registered by a person under 21 will be immediately closed, all funds will be returned via the original payment method where legally permissible, and the incident may be reported to relevant authorities.

If you are a parent or guardian and believe that a minor has accessed cr88 or submitted personal data to us without your knowledge, please contact us immediately at [email protected]. We will take prompt steps to investigate and delete any such data.

We strongly recommend that parents and guardians use parental-control software to restrict minors' access to online gambling websites. Organizations such as Gambling Therapy and GamCare provide free resources and guidance for families concerned about a young person's exposure to gambling content.

13. Changes to This Policy

cr88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:

  • Update the "Last Reviewed" date at the top of this page
  • Display a prominent notice on the cr88 platform for at least 30 days after the change takes effect
  • Send an email notification to the address registered on your account if the changes materially affect how we use your personal data

Your continued use of cr88 after the effective date of a revised Policy constitutes your acknowledgment of the updated terms. If you do not agree with a material change, you may close your account by contacting our support team. We will process any remaining balance in your account in accordance with our Terms & Conditions.

Tip: We recommend bookmarking this page and checking it periodically. The "Last Reviewed" date at the top of the page is the quickest way to confirm whether the Policy has been updated since you last read it.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cr88, please reach out to our Data Protection team through any of the following channels:

  • Email: [email protected] — include the subject line "Privacy Request" and your registered account username
  • Live Chat: Available 24 hours a day, 7 days a week through the cr88 platform. Our Indonesian-speaking agents can assist you directly.
  • WhatsApp Support: Accessible through your account dashboard for real-time assistance

We aim to respond to all privacy-related inquiries within 10 business days and to complete substantive data requests within 30 calendar days. For complex requests, we may extend this period by an additional 30 days and will notify you of the extension and the reason for it.

14.1 Complaints

If you are unsatisfied with our response to a privacy concern, you have the right to escalate your complaint to our licensing authority's data-protection officer or to an independent supervisory authority in your jurisdiction. We will provide you with the relevant contact details upon request. We take all complaints seriously and will work diligently to resolve them fairly and promptly.

Our Commitment: cr88 is committed to handling your personal data with integrity and transparency. This Policy reflects our genuine respect for your privacy as an Indonesian player and as an individual. We will always strive to process your data fairly, use it only as described, and protect it with the security measures it deserves.

Questions About Your Privacy?

Our support team is available 24/7 to address any data-related concerns. You can also explore our other policy documents for a complete picture of your rights and our obligations.