Privacy Policy

1 Overview

cr7sip is an internationally operated online betting and gaming platform serving players primarily in Indonesia. We understand that when you register an Account, make deposits via BCA, BRI, BNI, or Mandiri, place sports bets, or spin slot games, you are entrusting us with sensitive personal information. We take that responsibility seriously.

This Privacy Policy applies to all personal data processed by cr7sip in connection with your use of the Platform — including data collected through the website, live chat support, email communications, and any mobile interface. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

This policy is written in plain, accessible English so that every player — whether based in Jakarta, Surabaya, Bandung, Bali, or anywhere else in Indonesia — can understand exactly how their data is handled.

2 Definitions

Term	Meaning
"Personal Data"	Any information that identifies or could reasonably identify a living individual — including name, email address, phone number, bank account details, IP address, and device identifiers.
"Processing"	Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
"Data Controller"	cr7sip, as the entity that determines the purposes and means of processing your Personal Data.
"Data Processor"	Any third-party service provider that processes Personal Data on behalf of cr7sip, under our instructions and contractual oversight.
"Platform"	The cr7sip website at https://cr7sip.ws, all associated sub-pages, live casino interfaces, mobile views, and support channels.
"Account"	Your registered player profile on the Platform, created through the sign-up process.
"KYC"	Know Your Customer — the identity verification process required by cr7sip before processing withdrawals or raising Account limits.

3 Data We Collect

cr7sip collects only the Personal Data that is necessary to deliver our Services securely and in compliance with applicable anti-money-laundering (AML) and responsible gaming standards. The categories of data we collect are as follows:

3.1 Registration & Identity Data

• Full legal name (as shown on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address in Indonesia (city, province, postal code)
• Valid email address
• Mobile phone number
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Documents

• Copy of government-issued photo ID (KTP, passport, or driver's license)
• Proof of residential address (utility bill, bank statement, or official government letter dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja account registered in your name)

3.3 Financial & Transaction Data

• Deposit amounts, dates, and payment methods used
• Withdrawal requests, processed amounts, and destination account details
• Bonus claims, wagering activity, and game history
• Account balance and transaction ledger

3.4 Technical & Usage Data

• IP address and approximate geolocation (country and city level)
• Browser type, operating system, and device identifiers
• Pages visited, time spent on each page, and click-path data
• Login timestamps and session duration
• Referring URL (the website you arrived from, if any)

3.5 Communications Data

• Live chat transcripts with cr7sip support agents
• Email correspondence and support ticket history
• WhatsApp messages sent to our support number (plain text channel, not a clickable link)
• Survey responses and feedback submissions

4 How Data Is Collected

cr7sip collects your Personal Data through the following mechanisms:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically: Through cookies, log files, and analytics tools that record technical and usage data as you navigate the Platform.
• From third-party payment processors: Transaction confirmation data is shared with cr7sip by payment providers such as BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja when you initiate a deposit or withdrawal.
• From game providers: Studios such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Habanero, and Spribe may share session and gameplay data with cr7sip for fraud detection and responsible gaming monitoring purposes.
• From identity verification services: Third-party KYC providers may return identity match scores and document verification results to cr7sip as part of the onboarding process.

5 Purposes of Processing

cr7sip processes your Personal Data for the following purposes:

Purpose	Details
Account Management	Creating, maintaining, and securing your cr7sip Account; processing login requests; enforcing Account limits.
Service Delivery	Enabling sports betting, live casino, slot games, and all other Platform features; processing deposits and withdrawals via local Indonesian payment methods.
Identity Verification	Verifying your age (21+), identity, and residential address as required by AML and responsible gaming obligations.
Fraud Prevention & Security	Detecting unauthorized Account access, unusual betting patterns, multi-accounting, bonus abuse, and financial crime.
Responsible Gaming	Monitoring play patterns to identify at-risk behavior; enforcing self-exclusions, deposit limits, and time-out requests in accordance with our Responsible Gaming Policy.
Customer Support	Responding to queries, resolving disputes, and processing complaints through live chat, email, and WhatsApp channels.
Marketing & Promotions	Sending you relevant bonus offers, seasonal promotions (e.g., Ramadhan, Idul Fitri, or BRI Liga 1 season specials), and platform news — only where you have consented or where it is in our legitimate interests, and with an easy opt-out at all times.
Legal Compliance	Meeting our obligations under applicable international AML, CTF, and data protection regulations, and cooperating with lawful requests from competent authorities.
Platform Improvement	Analysing aggregated usage data to improve the cr7sip interface, optimize game performance, and enhance the overall player experience.

6 Legal Basis for Processing

cr7sip processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform our contract with you — delivering the Services, processing transactions, and managing your Account.
• Legal obligation: Processing required to comply with AML, CTF, and KYC obligations under applicable international regulatory frameworks.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform analytics — where these interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications, where you have opted in. You may withdraw your consent at any time by contacting support or using the unsubscribe link in any marketing email.

7 Sharing Your Personal Data

cr7sip does not sell your Personal Data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party providers who process data strictly on our behalf and under our instructions, including:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — to facilitate deposits and withdrawals.
• KYC / identity verification providers: To verify documents and confirm player identity as required before withdrawals.
• Game studios: Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Habanero, Spribe — for the provision of certified gaming content and session data.
• Customer support platforms: Live chat and ticketing systems that store support conversation history.
• Analytics providers: Tools used to analyze aggregated, anonymized usage data for Platform improvement.

7.2 Legal & Regulatory Disclosures

cr7sip may disclose your Personal Data where required to do so by applicable law, court order, or competent regulatory or law enforcement authority. We will, where legally permissible, notify you of any such disclosure request.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of cr7sip's assets, your Personal Data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

8 Cookies & Tracking Technologies

cr7sip uses cookies and similar tracking technologies to deliver a functional, secure, and personalized experience on the Platform. A cookie is a small text file stored on your device when you visit the Platform.

8.1 Types of Cookies We Use

Cookie Type	Purpose
Essential	Required for core Platform functionality — session management, login state, security tokens, and load balancing. Cannot be disabled without breaking the Platform.
Functional	Remembers your preferences — language settings, preferred payment method, last-visited game category — to personalize your experience on return visits.
Analytics	Collects aggregated, anonymized data on how players navigate the Platform — which pages are most visited, average session length, common click paths — to help us improve the interface.
Security	Supports fraud detection and bot prevention by analyzing session behavior patterns and device fingerprints.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may affect certain personalization features. Essential and security cookies cannot be disabled, as they are required for the Platform to operate safely.

9 Data Retention

cr7sip retains your Personal Data for as long as is necessary for the purposes described in this policy, or as required by applicable law — whichever is longer. The following retention periods generally apply:

• Active Account data: Retained for the full duration of your Account's active status plus a minimum of 5 years following Account closure, to satisfy AML record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission or Account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last interaction, unless a longer retention period is required for ongoing dispute resolution.
• Technical and usage data: Retained in anonymized, aggregated form for up to 2 years for Platform analytics purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to any individual player.

10 Security Measures

cr7sip employs a layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption: All data in transit between your device and the cr7sip Platform is encrypted using industry-standard TLS protocols.
• Encrypted data storage: Sensitive data fields — including passwords, payment details, and KYC documents — are encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA): Available and strongly recommended for all cr7sip Accounts, adding a second layer of verification at login.
• Access controls: Internal access to player Personal Data is restricted on a strict need-to-know basis, with role-based permissions and full audit logging of all access events.
• Regular security audits: The Platform undergoes periodic third-party penetration testing and vulnerability assessments.
• Incident response: cr7sip maintains a documented data breach response plan. In the event of a breach affecting your Personal Data, we will notify affected players promptly and take immediate remediation action.

11 Your Rights Over Your Personal Data

cr7sip respects your rights as a data subject. Subject to applicable law and certain legal exceptions, you have the following rights regarding your Personal Data held by cr7sip:

To exercise any of the above rights, please contact our Data Protection team via live chat or email at [email protected]. We will verify your identity before processing any data subject request. No fees are charged for submitting a request.

12 Minors & Age Restriction

The cr7sip Platform is strictly intended for adults aged 21 and over. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process. If cr7sip becomes aware that a player under the age of 21 has created an Account, that Account will be immediately suspended, all activity voided, and any deposited funds returned to the original payment source after identity verification. If you believe a minor may have accessed the Platform, please contact our support team immediately.

13 Third-Party Platforms & Game Providers

The cr7sip Platform integrates games and content from third-party studios including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Habanero, and Spribe. While cr7sip carefully vets all third-party providers and enters into data processing agreements with each, your interactions with game interfaces may involve data sharing with those studios for session functionality and RNG certification purposes. Each studio operates under its own privacy practices — cr7sip is not responsible for the data handling practices of third-party studios beyond the contractual obligations we impose on them as Data Processors.

The Platform does not contain links to unrelated external websites. Any internal links (e.g., to the FAQ, Responsible Gaming, or Terms & Conditions pages) remain within the cr7sip domain.

14 Changes to This Privacy Policy

cr7sip reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email to their registered address and by displaying a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect. The "Last Reviewed" date at the top of this page will be updated accordingly.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any update constitutes acceptance of the revised policy. If you do not agree to an updated policy, you should cease using the Platform and request Account closure by contacting our support team.

15 Contact & Data Protection Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the cr7sip Data Protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the cr7sip Platform — our native Indonesian-speaking agents are on hand every day of the year.
• WhatsApp: +62 811-2345-6789 (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays (WIB, UTC+7)

We are committed to resolving all privacy-related inquiries promptly. Formal data subject requests will be acknowledged within 3 business days and resolved within 30 calendar days wherever possible.