At crz852, protecting your personal data is a core responsibility, not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a crz852 member.
Effective Date: 1 January 2026 | Last Updated: 1 January 2026The six principles that guide how crz852 handles your personal information. Full details are in the legal sections below.
All data transmitted between your device and crz852 is protected by TLS 1.3 encryption. Sensitive fields such as passwords and payment credentials are stored using industry-standard hashing and tokenisation — never in plain text.
crz852 does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing use. Data shared with partners is strictly limited to what is necessary for service delivery, payment processing, and legal compliance.
As a crz852 member, you have the right to access, correct, port, restrict processing of, and request deletion of your personal data at any time. Submit requests to our support team and we will respond within 30 days.
crz852 collects only the data necessary to operate a compliant gaming platform for Indonesian players. Local payment data (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) is handled with the same rigour as all other personal information.
crz852 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our regulatory obligations. Data no longer needed is securely deleted or anonymised.
When this Privacy Policy is materially updated, crz852 will notify members via registered email at least 7 days before changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
This Privacy Policy applies to all personal data collected and processed by crz852 in connection with the crz852 Platform at https://crz852.net, including its sportsbook, casino, slots, virtual sports, and customer support services. By registering a crz852 account or continuing to use the Platform, you acknowledge that you have read and understood this policy. This document should be read in conjunction with our Terms & Conditions.
crz852 ("crz852", "the Platform", "we", "us", "our") takes the privacy of its members seriously. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by crz852. We are committed to handling your personal information responsibly, transparently, and in accordance with internationally recognised data protection principles.
Throughout this document, "personal data" means any information relating to an identified or identifiable natural person — that is, information that can be used, directly or indirectly, to identify you as an individual. This includes your name, email address, device identifiers, payment account details, and betting activity records.
crz852 operates primarily for Indonesian players and takes Indonesian data privacy expectations seriously, including practices consistent with internationally recognised frameworks for consent, access, and data minimisation. References to "applicable law" throughout this policy refer to the international regulatory standards under which crz852 operates, which inform our practices for members accessing the Platform from Indonesia.
crz852 acts as the data controller for all personal information collected through the Platform. As data controller, crz852 is responsible for determining the purposes and means of processing your personal data. All data protection enquiries, access requests, and complaints should be directed to our support team using the contact details in Section 16 of this policy.
Where crz852 engages third-party service providers to process data on its behalf (for example, payment processors, identity verification providers, and game studios), those parties act as data processors under written agreements that restrict their use of your data to the specific purposes for which it was shared.
crz852 collects only the personal data that is necessary to operate the Platform, verify member identities, process transactions, and meet our regulatory obligations. The categories of personal data we collect are set out in the table below.
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, copy of government-issued ID (KTP, passport, or driver's licence), selfie or liveness image for KYC verification. |
| Contact Data | Email address, WhatsApp number, residential address in Indonesia (city, province, postal code). |
| Account Data | Username, hashed password, account creation date, account status, preferred language, communication preferences. |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, transaction amounts in IDR. |
| Transaction & Wagering Data | Bet history, game session logs, wagering amounts, winnings and losses, bonus activation records, game types accessed (sportsbook, slots, live casino). |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session timestamps, cookies and similar identifiers. |
| Communication Data | Contents of live chat transcripts, support email correspondence, WhatsApp messages sent to crz852 support, and any feedback or survey responses you submit. |
| Responsible Gaming Data | Self-imposed deposit limits, cooling-off period activations, self-exclusion requests, and any problem-gambling referral records, processed with heightened confidentiality. |
crz852 does not intentionally collect special category data (such as health data, racial or ethnic origin, or political opinions) except where directly volunteered by you in a support communication context, in which case it is used solely to address your enquiry and is not retained beyond that purpose.
4.1 Directly from You. The majority of the personal data crz852 holds about you is provided directly by you during the account registration process, KYC verification, deposit and withdrawal requests, and when you contact our support team.
4.2 Automatically. When you access the crz852 Platform, certain technical data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, device identifiers, pages visited, time spent on each page, and clickstream data. See Section 11 for full details on cookies.
4.3 From Third Parties. crz852 may receive data about you from the following third-party sources:
crz852 processes your personal data for the following clearly defined purposes:
For each processing purpose described in Section 5, crz852 relies on one or more of the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account Administration | Performance of contract — necessary to provide the service you have signed up for. |
| KYC Verification | Legal obligation — required under our international gaming licence conditions and AML obligations. |
| Payment Processing | Performance of contract — necessary to process deposits and withdrawals on your behalf. |
| Fraud Prevention & Security | Legitimate interests — crz852 has a legitimate interest in protecting the integrity of the Platform and the funds of honest members. |
| Responsible Gaming Monitoring | Legal obligation and legitimate interests — our licence requires us to identify and act on problem gambling indicators. |
| Marketing Communications | Consent — we will only send direct marketing where you have opted in. You may withdraw consent at any time. |
| Platform Analytics | Legitimate interests — improving the Platform benefits all members and does not override individual privacy rights when data is aggregated and anonymised. |
7.1 Service Providers. crz852 shares personal data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These providers are permitted to use your data only as instructed by crz852 and for no other purpose. Categories of service providers include:
7.2 Legal Disclosures. crz852 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by law, court order, or in connection with legal proceedings. We will notify you of such disclosure where we are legally permitted to do so.
7.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of crz852's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected members via their registered email address before such a transfer takes place, giving them the opportunity to close their account if they wish.
7.4 No Sale of Data. crz852 does not sell, rent, lease, or otherwise commercially exploit your personal data to unaffiliated third parties for their own marketing, analytics, or profiling purposes. This commitment applies regardless of the value of the data in question.
8.1 Cross-Border Processing. As a platform serving Indonesian members through internationally based infrastructure, crz852 may transfer personal data to servers or service providers located outside Indonesia. Where such transfers occur, crz852 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this policy.
8.2 Safeguards. Appropriate safeguards for international transfers include: contractual clauses binding the recipient to data protection standards consistent with this policy; the use of certified and audited cloud infrastructure providers; and restricting transfers to jurisdictions that maintain adequate data protection frameworks.
8.3 Payment Data Localisation. Payment and banking data relating to Indonesian payment methods (BCA, BRI, BNI, Mandiri, OVO, DANA, and other local providers) is processed through systems that comply with the relevant requirements of the Indonesian payment ecosystem. crz852 does not export raw bank account or e-wallet credential data to third countries unnecessarily.
crz852 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law. The following retention guidelines apply:
| Data Category | Retention Period |
|---|---|
| Account and Identity Data | Duration of account plus 5 years following account closure, to meet AML record-keeping obligations. |
| KYC Documents | 5 years from submission date, or from account closure if later. |
| Financial and Transaction Data | 5 years from the date of each transaction, in line with standard financial record-keeping requirements. |
| Wagering and Game Session Data | 3 years from the date of each session, used for dispute resolution and responsible gaming review. |
| Support Communication Records | 2 years from the date of the last communication in a support thread. |
| Marketing Consent Records | Until consent is withdrawn plus 1 year, to evidence compliance. |
| Technical / Log Data | 13 months from collection, after which logs are anonymised or deleted. |
| Self-Exclusion Records | Permanently retained to prevent re-registration in breach of a self-exclusion commitment. |
When personal data is no longer required under the applicable retention period, it is either securely deleted, destroyed, or irreversibly anonymised such that it can no longer be linked to an identifiable individual.
10.1 Technical Controls. crz852 implements the following technical security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
10.2 Organisational Controls. Access to personal data within crz852 is restricted to staff members who require it to perform their specific role. All staff with data access receive mandatory data protection training. Access is granted on a least-privilege basis and reviewed regularly. All staff are bound by confidentiality obligations.
10.3 Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, crz852 will notify affected members without undue delay once the breach has been confirmed and its scope assessed. Our security team maintains a documented incident response plan that is tested annually.
11.1 What Are Cookies. Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, remember your preferences, and provide information to site operators about how their platform is being used.
11.2 Cookies Used by crz852. crz852 uses the following categories of cookies:
11.3 Managing Cookies. Most web browsers allow you to manage cookie preferences through the browser settings menu. Blocking strictly necessary cookies will impair your ability to use the crz852 Platform. Blocking other categories of cookies will not affect core functionality but may reduce personalisation and analytics capability. crz852 does not currently respond to browser "Do Not Track" signals, as no uniform standard for such signals has been established.
As a crz852 member whose personal data is processed by us, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact our support team using the details in Section 16. crz852 will respond to all valid requests within 30 calendar days.
Please note that certain rights are subject to limitations. For example, crz852 cannot erase data that it is legally required to retain for AML compliance, nor can it provide access to data that would reveal information about another individual. We will clearly explain any limitations when responding to your request.
13.1 Age Restriction. The crz852 Platform is strictly intended for adults aged 21 and over. crz852 does not knowingly collect or process personal data relating to individuals under the age of 21. Age verification is a mandatory step in the KYC process and is applied to every account before real-money services are activated.
13.2 Discovery of Underage Data. If crz852 discovers or is notified that personal data belonging to an individual under the age of 21 has been collected — whether through misrepresentation at registration or any other means — crz852 will immediately suspend the associated account, delete the underage individual's personal data to the extent permitted by law, and return any deposited funds to the payment method of origin after verification.
13.3 Parental Responsibility. Adults who share devices or accounts with minors are responsible for preventing underage access to the crz852 Platform. crz852 recommends the use of parental control software on shared devices. crz852 accepts no liability for underage access resulting from a failure of household supervision.
14.1 Game Providers. The crz852 Platform hosts games developed and operated by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe. When you play these games, limited session data (such as bet amounts, outcomes, and session duration) is shared with the relevant game provider to calculate results and maintain game integrity. Each provider operates under its own privacy practices, which are governed by their respective licences and contractual agreements with crz852.
14.2 Payment Partners. Deposits and withdrawals are facilitated through third-party payment processors that interface with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja). These processors receive the minimum data required to execute your transaction. crz852 does not store full bank account credentials in its own systems.
14.3 No Responsibility for Third-Party Policies. crz852 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations imposed on them by crz852. We encourage you to review the privacy policies of any third-party services you interact with in connection with your crz852 account.
15.1 Right to Update. crz852 reserves the right to update, amend, or replace this Privacy Policy at any time. We will make every reasonable effort to notify members of material changes before they take effect.
15.2 Notification of Changes. Material changes to this Privacy Policy will be communicated to members via email to the registered email address on file, with a minimum of 7 days' notice before the amended policy becomes effective. Non-material changes (such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or formatting updates) may be made without prior notice.
15.3 Continued Use. Your continued use of the crz852 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you should close your account before the effective date by contacting our support team.
15.4 Version History. The current effective date of this Privacy Policy is always displayed at the top of this page. crz852 maintains an internal version history of all previous Privacy Policy editions, which are available on request.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 12, or wish to make a complaint about crz852's data handling practices, please contact our data protection team through any of the following channels:
crz852 will acknowledge all privacy complaints within 48 hours of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for the delay.
If you are not satisfied with crz852's response to your complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction applicable to your circumstances. crz852 is committed to cooperating with any such authority in good faith.
For matters relating to the Platform's general terms of use, account management, or responsible gaming tools, please visit our Terms & Conditions or Responsible Gaming pages respectively.
With industry-leading encryption, strict data minimisation, and full KYC protection, crz852 keeps your personal information secure so you can focus on what matters — great sports betting, premium slots, and live casino action in IDR.