Privacy Policy
cr7vip Member Data Protection Statement

This Privacy Policy applies to all personal data processed by cr7vip ("we", "us", "our", "the Platform") in connection with your access to and use of the cr7vip online betting and gaming platform at https://cr7vip.cam, including the platform's web interface, customer support channels, and any communications between you and cr7vip.

cr7vip operates as the data controller for the personal information you submit during registration, account use, KYC verification, payment processing, and support interactions. As data controller, cr7vip determines the purposes and means of processing your personal data in accordance with the principles described in this policy.

This Privacy Policy applies to all members regardless of their location, but is specifically designed to address the rights and expectations of users accessing the platform from Indonesia and the surrounding Southeast Asian region. References to applicable law are general in nature, as online gaming platforms serving Indonesian members operate under international licensing frameworks.

cr7vip collects the following categories of personal data in connection with your use of the platform. Collection is limited to data that is necessary for the purposes described in Section 4 of this Policy.

cr7vip does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health information, except where strictly necessary for responsible gaming intervention purposes (e.g., a self-reported gambling disorder triggering self-exclusion). Such data is handled with additional safeguards and is never used for commercial profiling.

cr7vip collects personal data through the following channels and mechanisms:

You provide data directly to cr7vip when you complete the registration form, submit KYC verification documents, make a deposit or withdrawal request, contact our support team, set responsible gaming preferences, or respond to surveys and promotional communications.

When you access the cr7vip platform, our servers and analytics tools automatically record technical data including your IP address, device identifiers, browser information, and detailed logs of your platform interactions. This data is collected via server logs, cookies, and similar tracking technologies described further in Section 7.

cr7vip may receive data about you from third-party service providers in the following contexts:

• Payment processors and banking pa rtners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) who confirm transaction status and account ownership during deposit and withdrawal processing.
• Identity verification service providers who assist in validating government-issued documents submitted during KYC.
• Fraud prevention and anti-money laundering screening services that cross-reference your data against watchlists and risk databases.
• Analytics and platform performance tools that aggregate behavioral data to help us improve platform usability and game experience.

In all cases, third-party data sources used by cr7vip are contractually bound to handle your data lawfully and to share only the minimum data necessary for the specific operational purpose.

cr7vip processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.

• Creating and maintaining your cr7vip member account, including authentication and credential management.
• Processing deposits and withdrawals via your chosen local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI, OCBC NISP, Bank Danamon) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Settling sports bets, casino game rounds, togel draws, and all other wagering activity accurately and in a timely manner.
• Applying bonus credits, calculating wagering requirement progress, and processing promotional rewards.
• Responding to your support queries via live chat or email, and maintaining records of support interactions for quality assurance.

• Verifying your identity, age (21+), and the ownership of your payment methods as part of the KYC process required before withdrawals are processed.
• Screening transactions and account activity for indicators of money laundering, terrorist financing, fraud, or other prohibited conduct.
• Maintaining transaction records as required by applicable anti-money laundering regulations and international gaming compliance standards.
• Responding to lawful requests for information from competent regulatory or law enforcement authorities.

• Detecting and preventing unauthorized account access, credential theft, and account takeover attempts.
• Identifying patterns indicative of bonus abuse, multi-accounting, or collusion between members.
• Monitoring for the use of VPNs, proxy servers, or automated scripts that violate our Terms & Conditions.
• Enforcing self-exclusion and responsible gaming restrictions across all cr7vip platform touchpoints.

• Personalizing your platform experience based on your gaming preferences and betting history, including surfacing relevant game recommendations and market highlights for leagues such as BRI Liga 1, EPL, and the UEFA Champions League.
• Sending you account-related notifications including deposit confirmations, withdrawal status updates, and security alerts.
• Where you have opted in, sending promotional communications about bonuses, seasonal offers (including Idul Fitri, Ramadhan, and Imlek promotions), and new platform features. You may opt out of marketing communications at any time via your account settings or by contacting support.

• Analyzing aggregated usage data to understand how members interact with the platform and to identify areas for improvement in user experience, navigation, and game performance.
• Conducting internal research and analysis to inform product development decisions, including the introduction of new payment methods, game categories, and responsible gaming tools.
• Monitoring platform technical performance, identifying bugs, and ensuring stable uptime across all device types used by our Indonesian member base.

cr7vip processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfill our obligations under the member agreement established when you register an account — including account management, transaction processing, and KYC verification.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and internal analytics, where our legitimate business interests are not overridden by your privacy rights.
• Legal Obligation: Processing required to comply with applicable anti-money laundering, Know Your Customer, and international gaming regulatory obligations, including the retention of transaction records.
• Consent: Processing for optional marketing communications and non-essential personalization features, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

cr7vip does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

We share financial data with payment processors and banking partners — including local Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely to process deposit and withdrawal transactions initiated by you. These providers receive only the data necessary to execute the specific transaction.

We work with accredited identity verification service providers to validate the documents you submit during KYC. These partners process your identity documents and verification results under strict confidentiality agreements and are prohibited from using your data for any purpose beyond the specific verification task.

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive limited session data (such as a session token or anonymized player ID) to facilitate game delivery and RNG certification. These studios do not receive your name, contact details, or financial information.

We share data with fraud detection and anti-money laundering screening services as part of our ongoing obligation to prevent financial crime. These services may cross-reference your account data against watchlists and risk databases maintained under international regulatory frameworks.

cr7vip will disclose personal data to competent government or regulatory authorities where we are legally required to do so, or where disclosure is necessary to prevent or detect serious crime. We will not disclose more data than is legally required, and where permitted by law, we will notify affected members of such requests.

cr7vip uses cookies and similar tracking technologies to operate the platform, improve user experience, and support our security and analytics functions. A cookie is a small text file stored on your device by your web browser when you visit a website.

You may control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain categories, or delete cookies already stored on your device. Please be aware that disabling strictly necessary cookies will impair your ability to use the cr7vip platform, as session authentication depends on them. Detailed instructions for managing cookies are available in your browser's help documentation.

cr7vip retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of submission, as required by international KYC compliance standards.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy regulatory audit obligations.
• Support communications: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance reviews.
• Technical and usage logs: Retained for twelve (12) months from the date of collection, after which they are aggregated and anonymized or deleted.
• Marketing preferences and consent records: Retained until you withdraw consent or close your account, whichever is earlier, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any individual. Where deletion is not technically feasible within systems subject to scheduled purge cycles, data is isolated and restricted from any further active processing pending deletion.

cr7vip implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and cr7vip servers is encrypted using industry-standard transport layer security protocols.
• Encrypted Data Storage: Personal and financial data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data systems is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication.
• Firewalls & Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for unauthorized access attempts.
• Routine Security Audits: cr7vip conducts periodic internal and third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses.
• Staff Training: All personnel with access to personal data receive data protection training and are bound by confidentiality obligations as a condition of their engagement.

As a cr7vip member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as described in Section 14. We will respond to all verified data rights requests within 30 days.

Please note that certain rights are subject to limitations where our processing is required to fulfil a legal obligation or to protect the vital interests of another individual. For example, we cannot delete KYC records that we are legally required to retain for anti-money laundering compliance purposes. We will always explain the basis for any limitation on your rights in our response to your request.

cr7vip's platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, use, or store personal data from individuals under the age of 21. All registration submissions are subject to age verification checks, and KYC requirements ensure that withdrawals cannot be processed by unverified or underage account holders.

If cr7vip becomes aware — whether through KYC review, third-party reporting, or any other means — that an account is held by a person under 21 years of age, we will immediately suspend the account, cease all processing of that individual's personal data beyond what is necessary for the suspension, and take appropriate steps to delete or restrict the data in accordance with applicable requirements.

Parents or legal guardians who suspect that a minor has registered on cr7vip without authorization are encouraged to contact our support team immediately at [email protected] (plain text — not a clickable link). We take all such reports seriously and will act on them promptly.

As an internationally operated platform serving members primarily based in Indonesia, cr7vip may transfer your personal data to servers and service providers located outside of Indonesia. Where such transfers occur, cr7vip takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

Safeguards for international transfers may include:

• Standard contractual clauses incorporated into agreements with data processors and sub-processors located in third countries.
• Transfers to jurisdictions that maintain data protection standards recognized as adequate by relevant international frameworks.
• Binding corporate rules or equivalent compliance frameworks applicable to recipients within the same group of companies.

By registering on cr7vip and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside of Indonesia. cr7vip will always ensure that any such transfer is governed by appropriate contractual or legal safeguards.

cr7vip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — meaning they substantially affect how we collect, use, or share your personal data — cr7vip will notify active members via email or via a prominent notice on the platform prior to the changes taking effect. We encourage all members to review this Privacy Policy periodically to remain informed of their data rights.

Your continued use of the cr7vip platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with the revised policy, you should cease using the platform and may request account closure in accordance with the process described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cr7vip processes your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related queries promptly and transparently.

• Privacy Inquiries Email: [email protected] (plain text — not a clickable link). Use the subject line "Privacy Request — [Your Account Username]".
• Live Chat: Available 24/7 via the in-platform chat widget after login. For data rights requests, please follow up with an email for formal record-keeping.
• Response Time: cr7vip aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 days. Complex requests may require additional time, in which case we will notify you of the expected timeline.
• Indonesian-Speaking Support: Native Indonesian-speaking agents are available from 08:00–24:00 WIB to assist with privacy queries in Bahasa Indonesia where preferred.