Transparent, plain-English disclosure of how cr88 collects, uses, stores, and protects your personal data. Your privacy is a right we take seriously.
Six core principles that govern every decision cr88 makes about your personal information
We collect only the data strictly necessary to operate your account, process transactions, and comply with legal obligations. Nothing extraneous is gathered.
All personal data transmitted between your device and cr88 servers is protected by TLS/SSL encryption. Data at rest is encrypted using AES-256 standards.
cr88 will never sell, rent, or trade your personal data to third parties for marketing purposes. Your information is not a commodity.
You have the right to access, correct, port, restrict processing of, or request deletion of your data at any time by contacting our support team.
We clearly disclose every third-party service that may receive your data, the reason it is shared, and the contractual safeguards in place.
In the unlikely event of a data breach affecting your information, we will notify you within 72 hours of becoming aware, consistent with international standards.
Summary: cr88 collects the personal data you provide during registration and account use, uses it to deliver our services and meet legal obligations, and does not sell it to third parties. You have meaningful rights over your data and can exercise them at any time. Please read each section below for the full details.
This Privacy Policy ("Policy") describes how cr88 ("we", "us", "our") — the operator of the online betting platform accessible at https://cr88.cam — collects, processes, stores, and discloses personal data relating to individuals ("you", "User", "Player") who visit, register with, or use our platform and associated services.
This Policy applies to all personal data processed by cr88 regardless of the channel through which it was collected — including our website, customer support communications, payment processing flows, and any marketing communications you have opted into. It covers Users located in Indonesia and all other jurisdictions where cr88 services are accessed.
cr88 is the data controller for the personal data it collects directly. Where third-party service providers process data on our behalf, they act as data processors under contractual data-processing agreements that require them to handle your data in accordance with this Policy and applicable data-protection laws.
Indonesia Context: cr88 operates under an international gaming license and serves players throughout Indonesia, including in Jakarta, Surabaya, Medan, Bandung, and Bali. We are committed to handling all personal data with the care and respect expected by Indonesian users and in accordance with internationally recognized data-protection principles.
The following terms carry specific meanings throughout this Policy:
When you register an account, complete KYC verification, make deposits, or contact our support team, you provide us with information that may include:
When you visit or use our platform, we automatically collect certain technical and behavioral information:
| Data Category | Examples | Purpose |
|---|---|---|
| Device & Browser Data | Device type, operating system, browser version, screen resolution | Platform optimization; fraud prevention |
| Network Data | IP address, approximate geolocation (country/city level), ISP | Jurisdiction verification; security monitoring |
| Session & Interaction Data | Pages visited, time on site, click patterns, games played, bets placed | Service improvement; responsible gaming monitoring |
| Transaction Data | Deposit amounts, withdrawal requests, bet history, bonus usage | Account management; AML compliance; dispute resolution |
| Cookie & Tracking Data | Session tokens, preference cookies, analytics identifiers | Authentication; analytics; user experience personalization |
We may receive supplementary information about you from trusted third-party sources, including:
cr88 processes your personal data only where a valid legal basis exists. The primary bases we rely on are:
Right to Object: Where we rely on legitimate interests as our legal basis, you have the right to object to that processing. Please contact our support team at [email protected] to exercise this right. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
cr88 uses the personal data we collect for the following specific purposes:
If you have opted in to marketing communications, we may send you information about promotions, bonuses, new game releases, and seasonal offers relevant to Indonesian players (including during Idul Fitri, Ramadhan, and Indonesian Independence Day promotional periods). You can unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email or by contacting our support team.
No Automated Decision-Making with Legal Effect: cr88 does not make decisions that have a legal or similarly significant effect on you solely through automated processing without human review. Account closure decisions based on fraud or AML grounds are reviewed by a human compliance officer before action is taken.
cr88 does not sell or rent your personal data. We disclose it only in the specific, limited circumstances described below:
We engage trusted third-party companies to perform services on our behalf. These processors are contractually prohibited from using your data for any purpose other than the specific service they provide to cr88. Current categories of processor include:
We may disclose your personal data to government authorities, law enforcement agencies, or courts when we are legally obligated to do so, including but not limited to:
In the event that cr88 undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer via email and prominent notice on the platform at least 30 days before your data becomes subject to a materially different privacy policy.
Confirmation: cr88 will never sell your personal data to advertising networks, data brokers, or unrelated third-party businesses for commercial purposes. This commitment is absolute and not subject to exceptions.
Cookies are small text files placed on your device when you visit cr88. They enable the platform to remember your session, preferences, and certain behavioral signals. Alongside cookies, we may use similar tracking technologies such as web beacons, pixel tags, and local storage objects.
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your cart/bet slip, and enable core platform functionality | No — required for the platform to function |
| Functional | Remember your language preferences, display settings, and responsible gaming limit configurations | Yes — disabling may degrade user experience |
| Analytics | Collect anonymized data about page views, session durations, and feature usage to improve the platform | Yes — opt out via browser settings |
| Security | Detect fraudulent sessions, bot activity, and suspicious login patterns | No — required for account security |
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are set. Please note that disabling certain cookies may affect the functionality of your cr88 account, including the ability to stay logged in or retain your preferences between sessions.
cr88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention schedule is as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | Legal obligation (AML / gaming license) |
| KYC / Identity Documents | 5 years from date of verification | Legal obligation (AML regulations) |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Betting History | 5 years from bet settlement | Dispute resolution; gaming license |
| Support Communications | 3 years from last communication | Legitimate interests (dispute resolution) |
| Self-Exclusion Records | Permanently (or for exclusion duration + 5 years) | Responsible gaming obligation |
| Marketing Consent Records | Until consent withdrawn + 3 years | Legal obligation (consent audit trail) |
| Analytics Data (anonymized) | 26 months on a rolling basis | Legitimate interests (platform improvement) |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing and scheduled for the next secure deletion cycle.
cr88 operates internationally, and your personal data may be transferred to and processed in countries outside Indonesia. When we transfer personal data internationally, we ensure that adequate safeguards are in place to protect your information, including:
All gaming software providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and others) are required under our licensing agreements to maintain appropriate data security certifications and to process player data only for the purpose of game delivery and fairness auditing.
cr88 implements a comprehensive, multi-layered security program to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Key measures include:
Your Role in Security: While cr88 implements robust technical safeguards, the security of your account also depends on your own practices. Use a strong, unique password for your cr88 account, never share your login credentials, and contact our support team immediately if you suspect any unauthorized access to your account.
As a cr88 User, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request. We will respond within 30 days.
These rights apply to all cr88 Users. Contact [email protected] to exercise any of them — we respond within 30 days.
Request a copy of all personal data cr88 holds about you, including how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete personal data held in your cr88 account without undue delay.
Request deletion of your personal data where we no longer have a legal basis to retain it, subject to our legal obligations.
Ask us to pause processing of your data while a dispute about its accuracy or lawfulness is resolved.
Receive a structured, machine-readable copy of data you have provided to us, for transfer to another service.
Withdraw any consent you have given at any time — for example, to opt out of marketing emails — without affecting prior processing.
cr88 services are strictly for adults aged 21 years and older. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step of our KYC process, and any account found to have been registered by a person under 21 will be immediately closed, all funds will be returned via the original payment method where legally permissible, and the incident may be reported to relevant authorities.
If you are a parent or guardian and believe that a minor has accessed cr88 or submitted personal data to us without your knowledge, please contact us immediately at [email protected]. We will take prompt steps to investigate and delete any such data.
We strongly recommend that parents and guardians use parental-control software to restrict minors' access to online gambling websites. Organizations such as Gambling Therapy and GamCare provide free resources and guidance for families concerned about a young person's exposure to gambling content.
cr88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will:
Your continued use of cr88 after the effective date of a revised Policy constitutes your acknowledgment of the updated terms. If you do not agree with a material change, you may close your account by contacting our support team. We will process any remaining balance in your account in accordance with our Terms & Conditions.
Tip: We recommend bookmarking this page and checking it periodically. The "Last Reviewed" date at the top of the page is the quickest way to confirm whether the Policy has been updated since you last read it.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by cr88, please reach out to our Data Protection team through any of the following channels:
We aim to respond to all privacy-related inquiries within 10 business days and to complete substantive data requests within 30 calendar days. For complex requests, we may extend this period by an additional 30 days and will notify you of the extension and the reason for it.
If you are unsatisfied with our response to a privacy concern, you have the right to escalate your complaint to our licensing authority's data-protection officer or to an independent supervisory authority in your jurisdiction. We will provide you with the relevant contact details upon request. We take all complaints seriously and will work diligently to resolve them fairly and promptly.
Our Commitment: cr88 is committed to handling your personal data with integrity and transparency. This Policy reflects our genuine respect for your privacy as an Indonesian player and as an individual. We will always strive to process your data fairly, use it only as described, and protect it with the security measures it deserves.
Our support team is available 24/7 to address any data-related concerns. You can also explore our other policy documents for a complete picture of your rights and our obligations.