How crs99 Collects, Uses, and Protects Your Personal Information
Last Updated: January 15, 2026
Your Privacy Matters: At crs99, we are committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains what data we collect, how we use it, who we share it with, and how you can exercise control over your information. By using crs99 services, you consent to the data practices described in this policy.
This Privacy Policy governs the collection, use, storage, and disclosure of personal information by crs99, the online gaming platform operated at https://crs99.cam. This policy applies to all users who access or use our services, including:
This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policies, which together form the complete legal framework governing your use of crs99 services.
crs99 acts as the data controller for personal information collected through our platform. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.
As a platform primarily serving users in Indonesia, crs99 complies with Indonesian data protection regulations and international best practices for information security. We recognize that Indonesian players have specific privacy expectations regarding local payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay), identity verification (KTP documentation), and communication preferences (Indonesian-language support).
crs99 collects several categories of personal information to provide, maintain, and improve our services, comply with legal obligations, and prevent fraud and abuse.
When you register an account or use our services, you voluntarily provide the following information:
When you access crs99, we automatically collect certain technical and usage data:
We may receive information about you from third parties, including:
crs99 uses the personal information we collect for the following purposes:
Opt-Out: You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in emails, adjusting your account settings, or contacting customer support. Please note that transactional and service-related communications (e.g., withdrawal confirmations, account security alerts) cannot be opted out of while you have an active account.
Data Minimization Principle: crs99 adheres to the principle of data minimization—we only collect and process personal information that is necessary for the specific purposes outlined above. We do not collect excessive or irrelevant data, and we regularly review our data collection practices to ensure they remain proportionate and justified.
Under applicable data protection laws, crs99 relies on the following legal grounds to process your personal information:
Processing is necessary to perform our contract with you (the Terms & Conditions you agreed to when registering). This includes account creation, transaction processing, game provision, and customer support.
Processing is required to comply with legal obligations such as KYC verification, anti-money laundering checks, age verification, tax reporting, and responding to lawful government requests.
Processing is necessary for legitimate business interests pursued by crs99, including fraud prevention, security monitoring, platform optimization, analytics, and direct marketing. We balance these interests against your privacy rights and will not process data in ways you would not reasonably expect.
Where required by law, we obtain your explicit consent before processing certain types of data, such as marketing communications, non-essential cookies, and sensitive personal information. You can withdraw consent at any time through your account settings or by contacting customer support.
crs99 does not sell your personal information to third parties. However, we may share your data with carefully selected partners and service providers in the following circumstances:
We engage third-party companies to perform services on our behalf, including:
All service providers are contractually bound to handle your data securely, use it only for the specified purposes, and comply with applicable data protection laws. They are prohibited from using your data for their own marketing or commercial purposes.
When you play games on crs99, certain gameplay data may be shared with the game providers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi, etc.) for the purpose of delivering the game, recording outcomes, and ensuring fairness. These providers are also bound by strict confidentiality and data protection obligations.
We may disclose your information to government agencies, law enforcement, regulators, or courts when:
In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change via email and prominent notice on our website.
In circumstances not covered above, we will obtain your explicit consent before sharing your personal information with third parties.
crs99 operates internationally and may transfer your personal information to servers and service providers located outside Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
By using crs99 services, you acknowledge and consent to the international transfer of your personal information as described in this policy.
crs99 implements industry-leading technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
While we implement robust security measures, your cooperation is essential. Please:
crs99 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
While your account is active, we retain all account information, transaction history, and related data to provide services, comply with legal obligations, and resolve disputes.
After you close your account:
If your account or transactions are subject to an investigation, legal dispute, or regulatory inquiry, we may suspend deletion and retain relevant data until the matter is resolved.
Accounts with no login activity for 12 months are classified as dormant. After 24 months of complete inactivity, accounts may be permanently closed and data deleted in accordance with our retention schedule, unless legal obligations require longer retention.
Under applicable data protection laws, you have the following rights regarding your personal information:
You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through your account dashboard, or contact customer support to request a comprehensive data export.
If your personal information is inaccurate or incomplete, you have the right to request corrections. You can update most information (email, phone, address) directly in your account settings. For changes to identity documents, contact customer support with updated documentation.
You can request deletion of your personal information in certain circumstances, such as when:
Important Limitations: We may not be able to delete data if retention is required by law (e.g., financial records for tax purposes, KYC documents for regulatory compliance) or necessary to defend legal claims.
You can request that we temporarily restrict processing of your data in certain situations, such as while we verify the accuracy of information you've disputed or assess whether our legitimate interests override your objection to processing.
You have the right to receive your personal information in a structured, commonly used, machine-readable format (e.g., CSV, JSON) and transmit it to another service provider where technically feasible.
You can object to processing of your data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on your consent (e.g., marketing communications, optional cookies), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us:
We will respond to your request within 30 days. In some cases, we may need to verify your identity before fulfilling the request. If we cannot fully comply with your request, we will explain the reasons and any legal basis for refusal.
crs99 uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content.
Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences, login state, and browsing behavior.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for site functionality, login, and security. Cannot be disabled. | Session / 1 year |
| Functional | Remember your preferences, language settings, and recently played games. | 30 days - 1 year |
| Performance/Analytics | Understand how users interact with our platform to improve performance and user experience. | 1 year - 2 years |
| Advertising/Marketing | Deliver relevant advertisements and measure campaign effectiveness (requires consent). | 30 days - 1 year |
You can manage cookie preferences through your browser settings. Most browsers allow you to:
Note: Disabling necessary cookies may affect site functionality, and you may not be able to access certain features or complete transactions.
We use third-party analytics services (e.g., Google Analytics) to understand user behavior. These services may collect data such as IP address, browser type, pages visited, and time spent on site. Data collected by analytics providers is subject to their own privacy policies.
crs99 services are strictly for adults aged 21 years or older. We do not knowingly collect personal information from individuals under 21.
If we discover that we have inadvertently collected data from a person under 21, we will immediately delete that information and permanently close the account. Parents or guardians who believe their child has provided information to crs99 should contact us immediately at [email protected].
All users must complete age verification by submitting valid Indonesian KTP (identity card) during account registration. We employ automated and manual checks to detect underage registration attempts.
crs99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:
The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Continued use of crs99 services after notification of changes constitutes acceptance of the updated policy. If you do not agree with the revised policy, you should stop using our services and close your account.
If you have questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:
For formal complaints or escalated privacy concerns, you may request to speak with our Data Protection Officer (DPO) by emailing [email protected] with subject line "Attention: Data Protection Officer".
We aim to respond to all privacy inquiries within 5 business days for general questions and within 30 days for formal data rights requests. Complex requests may require additional time; we will keep you informed of progress.
If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We encourage you to contact us first so we can attempt to resolve the issue directly.
Your Privacy Commitment: At crs99, protecting your personal information is not just a legal obligation—it's fundamental to the trust you place in us. We continuously invest in security technology, train our staff on data protection best practices, and review our policies to ensure we meet the highest standards. Thank you for trusting crs99 with your personal information.
These principles guide how crs99 handles your personal information every day.
256-bit SSL encryption protects all data in transit. Sensitive information is encrypted at rest using AES-256. Your data is as secure as your online banking.
We never sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used solely to provide crs99 services.
Clear explanations of what data we collect, why we collect it, and who we share it with. No hidden data practices or vague legalese.
Access, correct, delete, or export your personal information at any time. We respect your privacy rights and respond promptly to requests.
We retain data only as long as necessary for service provision and legal compliance. No indefinite storage of unnecessary information.
Questions about your data? Contact our Indonesian-speaking support team anytime via live chat, WhatsApp, or email.
Our team is here to help you understand how we protect your personal information.
Visit FAQ Return to Homepage