crz852 Privacy Policy

1. Introduction

crz852 is committed to protecting your privacy and ensuring the security of your personal data. As an online betting platform serving Indonesian players, we collect and process personal information necessary to provide our services, comply with legal obligations, prevent fraud, and enhance user experience. This Privacy Policy is designed to help you understand:

• What personal information we collect and why we collect it.
• How we use, store, and protect your personal information.
• Your rights regarding your personal data and how to exercise them.
• How we share information with third parties and under what circumstances.

We adhere to internationally recognized data protection principles, including the General Data Protection Regulation (GDPR) framework, to ensure your information is handled responsibly and transparently. Our data practices are regularly audited by independent third-party security firms.

2. Data Controller Information

For the purposes of applicable data protection laws, crz852 is the data controller responsible for your personal information. You can contact our Data Protection Officer (DPO) at:

• Email: [email protected]
• Postal Address: crz852 Data Protection Office, International Gaming District, Licensed Jurisdiction
• Response Time: We aim to respond to all privacy inquiries within 48 hours.

3. What Data We Collect

crz852 collects several categories of personal information to operate our Platform, fulfill our legal obligations, and provide you with a secure and personalized betting experience. The types of data we collect include:

3.1 Account Registration Data

When you create an account on crz852, we collect:

• Identity Information: Full legal name, date of birth, gender, nationality, and Indonesian National Identity Card (KTP) number.
• Contact Information: Email address, mobile phone number, and residential address (city, province, postal code).
• Login Credentials: Username and encrypted password (we never store passwords in plain text).

3.2 Financial Data

To process deposits and withdrawals, we collect:

• Bank Account Details: Bank name (BCA, BRI, BNI, Mandiri, etc.), account number, and account holder name.
• E-Wallet Information: OVO, DANA, GoPay, ShopeePay, or LinkAja account numbers and registered phone numbers.
• Transaction History: Records of all deposits, withdrawals, bets placed, and account balance changes.

Note: We do not store full credit card details on our servers. Payment processing is handled by PCI DSS-compliant third-party payment processors who encrypt and tokenize all card information.

3.3 Verification (KYC) Documents

For identity verification and compliance with anti-money laundering (AML) regulations, we collect:

• Scanned or photographed copies of your Indonesian National Identity Card (KTP).
• Proof of address documents (utility bills, bank statements, or government-issued documents dated within the last three months).
• Selfie photographs holding your ID for biometric facial verification.

All KYC documents are encrypted during transmission and storage, and access is restricted to authorized compliance personnel only.

3.4 Behavioral & Technical Data

When you use crz852, we automatically collect:

• Device Information: Device type (desktop, mobile, tablet), operating system (Android, iOS, Windows, macOS), browser type and version, screen resolution.
• Usage Data: Pages visited, games played, bet types and amounts, session duration, click patterns, and navigation paths.
• IP Address & Geolocation: Your public IP address, approximate geographic location (city/region level, not precise GPS coordinates), and timezone.
• Cookies & Tracking Technologies: Session cookies, persistent cookies, local storage, and pixels (see Section 11 for details).

3.5 Communications Data

We retain records of:

• Live chat conversations with customer support agents.
• Email correspondence sent to or received from [email protected].
• Survey responses, feedback forms, and promotional opt-in/opt-out preferences.

4. How We Collect Data

We collect personal information through multiple channels:

• Directly from You: When you register, deposit funds, verify your identity, contact support, or update your account settings.
• Automatically via Technology: Through cookies, server logs, and analytics tools that track your interactions with the Platform.
• From Third-Party Sources: Payment processors (for transaction verification), fraud prevention services (for risk assessment), and public databases (for KYC/AML compliance checks).

5. How We Use Your Data

crz852 uses your personal information for the following purposes:

5.1 Service Delivery

• Creating and maintaining your user account.
• Processing deposits, withdrawals, and bet transactions in Indonesian Rupiah (IDR).
• Delivering customer support via live chat and email.
• Sending transactional notifications (deposit confirmations, withdrawal approvals, bonus credits, security alerts).

5.2 Legal & Regulatory Compliance

• Verifying your identity and age (21+ requirement) through KYC procedures.
• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• Detecting and preventing fraud, collusion, bonus abuse, and other prohibited activities.
• Responding to legal requests from regulatory authorities, law enforcement, or courts.

5.3 Platform Improvement & Personalization

• Analyzing user behavior to improve website design, game selection, and user experience.
• Personalizing content, game recommendations, and promotional offers based on your preferences and playing history.
• Conducting A/B testing to optimize features and interfaces.

5.4 Marketing & Promotions (With Your Consent)

• Sending promotional emails about bonuses, new games, tournaments, and special events (only if you opt in).
• Displaying targeted advertisements based on your interests (you can opt out via account settings).
• Running loyalty programs and VIP rewards tailored to your activity level.

5.5 Security & Fraud Prevention

• Monitoring account activity for suspicious or unauthorized transactions.
• Enforcing our Terms & Conditions and Responsible Gaming policies.
• Protecting the Platform from cyberattacks, DDoS attacks, and data breaches.

6. Legal Basis for Processing

Under applicable data protection laws, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (providing betting services, processing transactions).
• Legal Obligation: Processing is required to comply with legal and regulatory requirements (KYC/AML, age verification, tax reporting).
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, platform improvement), provided these interests do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookies, we obtain your explicit consent, which you can withdraw at any time.

7. Data Sharing & Third Parties

crz852 does not sell your personal data to third parties. However, we may share your information with trusted partners and service providers under strict confidentiality agreements:

We require all third-party service providers to:

• Sign data processing agreements committing to GDPR-equivalent data protection standards.
• Implement appropriate technical and organizational security measures.
• Use your data only for the specific purposes we authorize.
• Delete or return data upon termination of services.

7.1 Legal Disclosures

We may disclose your personal data if required by law, court order, subpoena, or government authority, including:

• Responding to lawful requests from Indonesian or international regulatory bodies.
• Cooperating with law enforcement investigations into fraud, money laundering, or criminal activity.
• Protecting the rights, property, or safety of crz852, our users, or the public.

8. Data Retention & Storage

crz852 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: Data is retained for the duration of your account's active status.
• Closed Accounts: After account closure, we retain transactional and KYC records for a minimum of seven (7) years to comply with anti-money laundering (AML) and tax regulations.
• Marketing Data: If you opt out of marketing communications, we suppress your email address permanently but retain a record of your opt-out preference.
• Server Logs & Analytics: Technical data (IP addresses, session logs) is typically retained for 12-24 months for security and troubleshooting purposes.

All data is stored on secure, encrypted cloud servers located in internationally recognized data centers with ISO 27001 certification. Backups are performed daily and stored in geographically redundant locations.

9. Data Security Measures

crz852 employs industry-leading security technologies and practices to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL (Secure Socket Layer) encryption.
• Encryption at Rest: All personal data stored in our databases is encrypted using AES-256 encryption.
• Firewall Protection: Multi-layered firewalls protect our infrastructure from external threats.
• Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access sensitive data. All access is logged and audited.
• Two-Factor Authentication (2FA): Available for all user accounts and mandatory for withdrawals.
• Regular Security Audits: Independent third-party penetration testing and vulnerability assessments conducted quarterly.
• Employee Training: All crz852 staff undergo mandatory data protection and security awareness training.
• Incident Response Plan: We have a documented breach response plan and will notify affected users within 72 hours of discovering any data breach, as required by GDPR.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

10. Your Privacy Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

10.1 Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format (e.g., PDF or CSV) within 30 days of your request.

10.2 Right to Rectification

If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your account settings.

10.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data in certain circumstances, such as:

• The data is no longer necessary for the purposes it was collected.
• You withdraw consent for data processing (where consent was the legal basis).
• You object to processing based on legitimate interests, and there are no overriding grounds.

Important: We cannot delete data if we have a legal obligation to retain it (e.g., KYC/AML records, tax documentation, or dispute resolution records).

10.4 Right to Restriction of Processing

You may request that we limit how we use your data in certain situations, such as while we verify the accuracy of your data or assess your objection to processing.

10.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider, where technically feasible.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any promotional email or by updating your preferences in your account settings.

10.7 Right to Withdraw Consent

Where we process your data based on consent (e.g., marketing communications, optional cookies), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your request. We will respond within 30 days and may request additional information to verify your identity before processing your request.

11. Cookies & Tracking Technologies

crz852 uses cookies and similar tracking technologies to enhance user experience, analyze site traffic, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on return visits.

11.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function (login sessions, security, load balancing). These cannot be disabled.
• Functional Cookies: Remember your preferences (language, timezone, display settings).
• Analytics Cookies: Collect aggregated data on how users interact with the Platform (Google Analytics, Hotjar). Used to improve site performance.
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements (Facebook Pixel, Google Ads). You can opt out via your account settings or browser settings.

11.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies.
• Block third-party cookies.
• Receive alerts before cookies are stored.

Please note that disabling certain cookies may affect the functionality of the Platform (e.g., you may not be able to log in or place bets).

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Indonesia, including jurisdictions where our servers, payment processors, and third-party service providers are located. These countries may have different data protection laws than Indonesia.

When we transfer data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Ensuring the recipient country has been deemed to provide adequate data protection by recognized authorities.
• Binding Corporate Rules (BCRs) for transfers within corporate groups.

13. Children's Privacy

crz852 is strictly for users aged 21 years and older. We do not knowingly collect personal information from individuals under 21. If we discover that a user is underage, we will:

• Immediately close the account.
• Delete all associated personal data.
• Confiscate any account balance or winnings.

If you believe a minor has accessed our Platform, please contact us immediately at [email protected].

14. Changes to This Policy

crz852 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.

Material changes will be communicated via:

• A prominent notice on our homepage.
• Email notification to all registered users.
• In-app notification upon your next login.

Your continued use of the Platform after any changes constitutes acceptance of the revised Privacy Policy.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through your account dashboard
• Response Time: Privacy inquiries are prioritized and typically answered within 48 hours.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.