At cr777, your privacy is treated with the same rigour we apply to platform security. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject.
Effective Date: 1 January 2026 · Last Updated: 1 January 2026
A plain-English summary of the six principles that guide every data decision at cr777. The full legal text follows below.
cr777 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is shared only with service providers who are contractually bound to protect it.
Every page of the cr777 platform is served over HTTPS with 256-bit SSL encryption. Data in transit between your device and our servers is protected against interception at all times, including during login, deposit, and withdrawal sessions.
cr777 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments, and comply with applicable legal obligations. We do not collect data speculatively or for unrelated commercial purposes.
Registered players may request access to, correction of, or deletion of their personal data at any time by contacting cr777 support. Subject to legal retention obligations, cr777 will action all valid data requests within 30 days.
Personal data is retained only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. Account data is deleted or anonymised within 90 days of a verified account closure request.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, cr777 will notify affected players by email within 72 hours of becoming aware of the breach, in accordance with internationally recognised data protection standards.
In this Privacy Policy, unless the context otherwise requires, the following terms carry the meanings set out below:
2.1 cr777 is the Data Controller for all Personal Data collected through the cr777 platform. As Data Controller, cr777 is responsible for ensuring that Personal Data is Processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection principles.
2.2 cr777 operates as an internationally oriented online gaming platform serving players in Indonesia. Where cr777 engages third-party Data Processors to assist in delivering platform services, those processors are selected with care and are contractually required to implement appropriate data protection measures consistent with this Policy.
2.3 For all data-related enquiries, including requests to exercise your rights under Section 10, please contact cr777 using the details provided in Section 16.
3.1 cr777 collects the categories of Personal Data described in the table below. We collect only what is necessary for the purposes identified in Section 5.
| Category | Examples | Collected At |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, KTP or passport number | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung, Bali) | Registration |
| Financial Data | Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction history | Deposit & withdrawal requests |
| Technical Data | IP address, browser type and version, device type, operating system, session timestamps | Automatically on platform access |
| Usage Data | Pages visited, games played, bet history, session duration, feature interactions | Automatically during platform use |
| Communications Data | Live chat transcripts, support email content, feedback submissions | When you contact support |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, cooling-off period history | When tools are activated |
3.2 cr777 does not knowingly collect or process Special Category Data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required to fulfil a legal obligation or with your explicit written consent.
4.1 cr777 collects Personal Data through the following channels:
4.2 Where cr777 receives Personal Data about you from a third-party source, we will inform you of the source and the categories of data received at the earliest practicable opportunity, unless doing so would conflict with a legal obligation or compromise a fraud investigation.
5.1 cr777 Processes your Personal Data only where a lawful basis exists. The primary purposes and their corresponding legal bases are set out below:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Performance of contract |
| Age and identity verification (KYC) | Identity, Financial | Legal obligation |
| Processing deposits and withdrawals | Identity, Financial | Performance of contract |
| Fraud prevention and security monitoring | Identity, Technical, Financial, Usage | Legitimate interests |
| Customer support and dispute resolution | Identity, Contact, Communications | Performance of contract |
| Responsible gaming compliance | Identity, Usage, Responsible Gaming | Legal obligation / Legitimate interests |
| Platform analytics and improvement | Technical, Usage | Legitimate interests |
| Promotional communications (opted-in) | Contact, Usage | Consent |
5.2 Where cr777 relies on legitimate interests as a legal basis, we have assessed that those interests are not overridden by your rights and freedoms, taking into account the reasonable expectations of players using an online gaming platform.
5.3 Where Processing is based on your consent (for example, for receiving promotional emails), you have the right to withdraw that consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal. To withdraw consent, contact cr777 support or use the unsubscribe link in any marketing email.
6.1 cr777 does not sell your Personal Data. We share Personal Data only in the circumstances described below, and only to the minimum extent necessary:
6.2 All third parties with whom cr777 shares Personal Data are required to implement appropriate technical and organisational security measures and to Process that data only in accordance with cr777's documented instructions.
7.1 cr777 is an internationally operating platform. In the course of providing our services to players in Indonesia, your Personal Data may be transferred to and processed in countries outside Indonesia. This includes countries where our infrastructure providers, KYC partners, and fraud-screening vendors are located.
7.2 Where Personal Data is transferred internationally, cr777 ensures that appropriate safeguards are in place. These safeguards include contractual clauses that impose data protection obligations on the receiving party that are at least equivalent to the protections set out in this Privacy Policy.
7.3 By registering an account and using the cr777 platform, you acknowledge that your Personal Data may be transferred internationally as described in this section. If you have concerns about a specific international transfer, please contact cr777 using the details in Section 16.
8.1 cr777 retains Personal Data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory obligation. The table below summarises our standard retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years post-closure | Legal / regulatory obligation |
| Financial transaction records | 7 years from transaction date | Anti-money laundering compliance |
| KYC documents | 5 years from account closure | Legal obligation |
| Support communications | 3 years from last interaction | Dispute resolution / legitimate interests |
| Technical and Usage Data | 13 months from collection | Analytics and security monitoring |
| Marketing consent records | 3 years from last consent event | Compliance with consent requirements |
8.2 At the end of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
9.1 cr777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and improve the overall player experience. The categories of cookies used are described below:
9.2 You may configure your browser to refuse or delete cookies at any time. Please note that disabling Strictly Necessary Cookies will impair your ability to use the platform, including logging in and processing transactions. Disabling other cookie categories will not affect core platform functionality.
9.3 cr777 does not use cookies to collect Special Category Data or to build advertising profiles for sale to third parties.
10.1 As a data subject, you hold the following rights in relation to the Personal Data cr777 holds about you. cr777 will respond to all valid rights requests within 30 days of receipt.
You have the right to request a copy of the Personal Data cr777 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
You have the right to request correction of any inaccurate or incomplete Personal Data cr777 holds about you. For account details such as name or date of birth, updated KYC documentation may be required before corrections are applied.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where Processing is unlawful. This right is subject to cr777's legal retention obligations, which may override erasure requests for certain data categories.
You have the right to request that cr777 restrict Processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to Processing based on legitimate interests.
Where Processing is carried out by automated means and is based on your consent or on a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to request that cr777 transmit it directly to another controller where technically feasible.
You have the right to object to Processing of your Personal Data where cr777 relies on legitimate interests as the legal basis. cr777 will cease Processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless Processing is required for the establishment or defence of legal claims.
Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of Processing that took place before withdrawal. To withdraw marketing consent, use the unsubscribe link in any cr777 email or contact support directly.
10.2 To exercise any of the rights described above, please contact cr777 support using the details in Section 16. cr777 may ask you to verify your identity before processing your request, to ensure that Personal Data is not disclosed to unauthorised individuals.
11.1 The cr777 platform is strictly for adults aged 21 and above. cr777 does not knowingly collect Personal Data from individuals under the age of 21. If you believe that cr777 has inadvertently collected data from a minor, please notify us immediately using the contact details in Section 16 and we will take prompt steps to delete that data.
11.2 cr777 uses age-gate mechanisms during registration and KYC verification to prevent minors from accessing the platform. Any account found to belong to an individual under the age of 21 will be immediately closed and all associated balances forfeited in accordance with the Terms & Conditions.
12.1 cr777 implements a layered set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
12.2 While cr777 takes every reasonable precaution to protect your Personal Data, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been compromised, please contact cr777 support immediately.
13.1 The cr777 platform does not contain links to external third-party websites for general browsing. However, certain platform functions — such as payment processing — involve redirection to third-party service provider interfaces (for example, bank transfer confirmation pages or e-wallet authorisation screens). These third-party interfaces are governed by their own privacy policies, which are outside cr777's control.
13.2 cr777 is not responsible for the privacy practices of any third-party service providers whose interfaces you access in connection with using the platform. We recommend reviewing the privacy policies of your chosen payment provider (e.g., your BCA, BRI, BNI, or Mandiri mobile banking application, or your OVO or DANA account settings) to understand how they handle your data.
14.1 cr777 will send you promotional communications — including bonus offers, seasonal promotions (such as Idul Fitri, Imlek, or Indonesian Independence Day specials), and platform news — only if you have explicitly opted in to receiving such communications during account registration or at a later date through your account settings.
14.2 You may opt out of all marketing communications at any time by clicking the unsubscribe link included in every promotional email, or by contacting cr777 support and requesting removal from our marketing list. Opting out of marketing will not affect transactional communications (such as deposit confirmations, withdrawal notifications, or security alerts) which are sent regardless of marketing preference as they are necessary for account management.
14.3 cr777 will not send marketing communications to players who have activated a self-exclusion order, a cooling-off period, or any other responsible gaming restriction. Such players are automatically removed from all marketing lists for the duration of the restriction.
15.1 cr777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered players by email to the address on file, accompanied by a prominent notice on the platform, no less than seven (7) days before the revised policy takes effect.
15.2 Your continued use of the cr777 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change to this Policy, you must cease using the platform and may request account closure by contacting cr777 support.
15.3 The version of the Privacy Policy displayed on the platform at any given time is the current operative version. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
16.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how cr777 has handled your Personal Data, please contact the cr777 Data Protection team using the details below. cr777 will acknowledge all privacy-related enquiries within five (5) business days and provide a substantive response within thirty (30) days.
16.2 Indonesian-speaking support agents are available 24 hours a day, seven days a week, including all Indonesian public holidays.
16.3 If you are not satisfied with cr777's response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority or to refer the dispute to binding arbitration as described in the cr777 Terms & Conditions.
Have questions about your privacy or want to manage your account preferences? Our support team is available around the clock. You can also explore our full FAQ, review the Terms & Conditions, or head straight to the casino.
Adults only (21+) · Play Responsibly · SSL Encrypted Platform