Official Documents

Privacy Policy cri123 — User Data Protection

Cri123 is committed to protecting the privacy of every user who entrusts us with their personal data. This page transparently explains how we collect, use, store, and protect your information.

Last updated: January 1, 2026
Privacy Commitment

How cri123 Protecting Your Data

256-bit SSL Encryption

All data transmitted between your device and cri123 servers is encrypted using 256-bit SSL protocol — the same highest-grade security standard used by banks and global financial institutions.

Encrypted Data Storage

User personal data is stored on servers protected by multi-layered security systems — including encryption at rest, advanced firewalls, and continuous real-time intrusion monitoring.

Not Sold to Third Parties

Cri123 never sells, rents, or trades users' personal data to any third party for commercial purposes. Your data belongs to you — we only use it for platform operations.

Data Control in Users' Hands

Cri123 users have full rights to access, correct, and request deletion of their personal data at any time. This process can be initiated directly through the support team, available 24 hours a day.

Regulatory Compliance

The cri123 Privacy Policy is developed with applicable data protection standards in mind, including the principles of transparency, data minimization, and legitimate purpose in every use of user information.

Communication Preference Controls

Users can manage their marketing communication preferences at any time — including unsubscribing from promotional emails or push notifications from the cri123 app — through account settings without any complicated steps.

This Privacy Policy applies to all services provided by cri123, including the official website, Android and iOS mobile apps, and all interactions between users and the platform's support team.

Chapter 1 Introduction

Cri123 is a digital entertainment platform providing sports betting, Live Casino, and a variety of online games to users in Indonesia. In operating its services, cri123 collects and processes certain personal data as an unavoidable part of its operations.

We believe privacy is a fundamental right. That is why this Privacy Policy is written in clear, straightforward language — not merely as a formal compliance document, but as cri123's genuine commitment to being transparent about how your data is managed.

By registering and using cri123 services, you consent to the collection and use of data as described in this policy. This policy should be read together with Terms and Conditions applicable on our platform.

Chapter 2 Personal Data We Collect

Cri123 collects various types of data from users, which can be grouped into three main categories: data you provide directly, data collected automatically, and data from legitimate third-party sources.

Data Category Information Type Source
Identity Data Full name, date of birth, gender, ID/Driver's License/Passport document photo Filled in upon registration and KYC
Contact Data Email address, phone number, residential address Filled in upon registration
Financial Data Bank name, account number (encrypted), digital wallet number, transaction history Deposit & withdrawal process
Activity Data Betting history, games played, session duration, game preferences Automatically during platform use
Technical Data IP address, device type, operating system, browser, approximate location data Automatically from device
Communication Data Support chat history, submitted reports and complaints Customer support interactions

cri123 applies the principle of data minimization — we only collect information that is strictly necessary for the purposes specified. We do not collect sensitive data such as health information or users' political affiliations.

Chapter 3 Purpose of Data Use

The data we collect is used exclusively for platform operational purposes and to improve our services to users. The following are the specific purposes for data use at cri123:

  • Identity Verification (KYC): Ensuring every user is a real individual who meets the age and eligibility requirements to use cri123 services.
  • Transaction Processing: Processing deposits, withdrawals, and win payouts accurately and promptly to registered bank accounts or digital wallets.
  • Fraud Prevention: Detecting and preventing fraud, money laundering, account abuse, and other violations of our terms of use.
  • Service Personalization: Personalizing the gaming experience based on user preferences and activity history — such as game recommendations or relevant sports event notifications.
  • Customer Support: Providing relevant and effective assistance when users contact the cri123 support team with questions or issues.
  • Platform Communications: Sending important notifications regarding accounts, policy updates, and promotional information (which users may opt out of at any time).
  • Platform Improvement: Analyzing aggregated usage patterns to improve the performance, interface, and features of the cri123 platform.
  • Responsible Gaming: Monitoring gameplay behavior patterns to identify users who may need support related to responsible gaming habits.

Chapter 4 Legal Basis for Data Processing

Cri123 processes users' personal data based on one or more of the following lawful bases:

  • Contract Performance: Most data processing occurs because it is necessary to fulfill the service agreement between cri123 and its users, as outlined in the Terms and Conditions.
  • Legitimate Interest: For platform security, fraud prevention, and service improvement purposes — where the interests of cri123 and users as a whole do not conflict with individual privacy rights.
  • Consent: For marketing communications and non-essential cookies, we request explicit consent from users and provide the option to withdraw that consent at any time.
  • Legal Obligation: For compliance with anti-money laundering (AML) regulations, the Know Your Customer (KYC) program, and reporting obligations to relevant authorities.

Chapter 5 Data Sharing with Third Parties

Cri123 does not sell users' personal data to third parties. However, in the course of platform operations, there are limited circumstances in which we need to share data with certain parties:

  • Payment Service Provider: Local banks and digital wallet providers that process user financial transactions — only the data necessary to complete the transaction is shared.
  • KYC Service Provider: Identity verification partners that help validate the authenticity of users' identity documents as part of a secure onboarding process.
  • Game Provider: Minimal technical data (such as anonymous session IDs) required to load and run games from third-party providers within the cri123 platform.
  • Competent Authority: Information legally required to be disclosed to government authorities or law enforcement agencies pursuant to a court order or applicable regulatory obligation.

All third-party partners who receive user data are bound by strict confidentiality agreements and are required to maintain data security standards equal to or higher than those applied by cri123 itself.

Chapter 6 Cookies and Tracking Technologies

Cri123 uses cookies and similar tracking technologies to enhance the user experience on the platform. Cookies are small text files stored on your device when you visit the website or use the cri123 app.

  • Essential Cookies: Required for basic platform functions such as maintaining login sessions, language preferences, and account security settings. This type of cookie cannot be disabled.
  • Performance Cookies: Collecting anonymous information about how users interact with the platform — frequently visited pages, session duration, and navigation patterns — for internal analytics purposes.
  • Functional Cookies: Storing user preferences such as display themes, notification settings, and favorite game types to deliver a more personalized experience.
  • Marketing Cookies: Used to present relevant promotional content to users. This type of cookie requires consent and can be disabled through account settings.

Users can manage cookie preferences through their browser settings or via the preference panel available on the cri123 platform. Disabling certain cookies may affect the functionality of some platform features.

Chapter 7 Data Security

Cri123 implements comprehensive technical and organizational security measures to protect users' personal data from unauthorized access, alteration, disclosure, or unintended deletion:

  • End-to-end encryption using TLS/SSL protocols for all data transmissions between users and cri123 servers.
  • Data at-rest encryption for all sensitive information stored in the cri123 database, including account numbers and KYC data.
  • Two-factor authentication (2FA) available for all user accounts as an additional layer of security.
  • 24/7 security monitoring with an automated intrusion detection system that identifies and blocks suspicious activity in real time.
  • Access to user data by cri123 employees is restricted solely to personnel with a legitimate business need, based on the principle of least privilege.
  • Regular security testing by the internal team and external security audits to ensure there are no exploitable vulnerabilities.

While cri123 implements best-in-class security measures, no digital system can guarantee 100% security. Users also play an important role in keeping their accounts secure by using strong passwords and never sharing them with anyone.

Chapter 8 Data Retention and Deletion

Cri123 retains users' personal data for as long as necessary to fulfill the purposes described in this policy, including to meet legal obligations, resolve disputes, and enforce service agreements.

In general, active account data is retained for as long as the account remains in use. After an account is closed, core user data is retained for a minimum of 5 (five) years to comply with applicable financial regulations and anti-money laundering requirements. Technical data and activity logs are generally retained for shorter periods.

Once the retention period expires or a valid deletion request has been processed, data will be permanently deleted from cri123 systems or anonymized so that it can no longer be linked to any individual user's identity.

Chapter 9 User Rights over Personal Data

As a cri123 user, you have a number of rights you can exercise at any time regarding your personal data. cri123 is committed to respecting and facilitating the exercise of these rights:

1
Right of Access

You have the right to request a copy of the personal data we hold about you, including information on how it is used.

2
Right to Rectification

You have the right to request correction of any inaccurate or incomplete data we hold about you.

3
Right to Erasure

You have the right to request deletion of your personal data under certain conditions, subject to applicable legal obligations.

4
Right to Restriction

You have the right to request restriction of your data processing under certain conditions, such as when data accuracy is in dispute.

5
Right to Portability

You have the right to receive your personal data in a structured, machine-readable format for the purpose of service portability.

6
Right to Object

You have the right to object to data processing for direct marketing purposes, which we will cease immediately upon receiving your request.

To exercise any of the rights above, please contact the cri123 support team via live chat, available 24 hours on the platform. We will respond to your request within a reasonable timeframe in accordance with applicable procedures.

Chapter 10 Children's Data Protection

Cri123 services are expressly not intended for individuals under the age of 18 (eighteen). cri123 does not knowingly collect personal data from minors.

If cri123 becomes aware that personal data from individuals under the age of 18 has been collected without proper consent verification, we will promptly take steps to delete that information from our systems and close the account in question.

If you are a parent or guardian and become aware that your child has registered an account on cri123, please contact our support team immediately so the account can be handled in accordance with the applicable procedure.

Chapter 11 Privacy Policy Updates

Cri123 may update this Privacy Policy from time to time to reflect changes in data management practices, regulatory updates, or changes to platform services. Any changes will be posted on this page along with the latest update date.

For material changes — meaning changes that significantly affect how we use or protect your data — cri123 will provide advance notice via the email registered to your account or via a notification displayed when you log in to the platform.

Continued use of cri123 services after an updated Privacy Policy takes effect constitutes your acceptance of the revised terms.

Chapter 12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how cri123 handles your personal data, we invite you to reach out to us through the following channels:

Live Chat

The fastest way — available directly on the cri123 platform, 24 hours a day, 7 days a week.

Support Email

[email protected] — for detailed inquiries requiring an official written response.

cri123 is committed to responding to all privacy-related inquiries and requests within a maximum of 30 business days from the time the request is received and verified. For urgent matters, live chat is the best option for a faster response.

FAQ

Frequently Asked Questions About Privacy Policy

No — cri123 never sells, rents, or trades users' personal data to advertisers or any third party for commercial purposes. User data is only shared with operational partners bound by strict confidentiality agreements, such as payment service providers and KYC verification partners, and only to the extent necessary to perform those functions. That is the sole exception — beyond that, your data does not leave the cri123 ecosystem.

You may submit a data deletion request by contacting the cri123 support team via live chat on the platform or by emailing [email protected]. Our team will verify your identity before processing the request. Please note that some data may need to be retained for a certain period due to applicable legal obligations, such as anti-money laundering regulations; however, such data will not be used for any other purpose and will be deleted once the mandatory retention period expires.

cri123 uses 256-bit SSL encryption for all connections, meaning data transmitted between your device and our servers is encrypted even when using public networks. However, for optimal security, we recommend avoiding accessing any financial account — including cri123 — from unprotected public Wi-Fi. Using the cri123 mobile app installed on your personal device over a mobile data connection is a safer option than a browser on a public Wi-Fi network.

The KYC process at cri123 requires a photo or scan of a valid, government-issued ID — an Indonesian National ID (KTP), driver's license, or passport. In some cases, you may be asked to upload a selfie holding your ID document for additional verification. These documents are used solely to verify your identity and age, stored with high-level encryption, and never shared with any party other than KYC verification partners bound by a confidentiality agreement with cri123.

Yes, you have the full right to stop receiving promotional emails or marketing communications from cri123 at any time. To do so: log in to your account, go to Settings, and adjust your notification and communication preferences. You can also click the unsubscribe link available in every promotional email we send. Please note that opting out of marketing communications does not affect the receipt of important account notifications, such as transaction confirmations or security updates — those notifications remain necessary for account operations.
Your Data is Protected

Play with Peace of Mind, Your Data Safe at cri123

Cri123 uses industry-leading security technology to ensure your privacy is protected at all times. Join us and enjoy the best digital entertainment without worrying about data security.

256-bit SSL Encryption
Data Not Sold
Verified KYC
Bahasa Indonesia