Privacy Policy CRC99 – Data Protection and Security for Our Members

This Privacy Policy explains how crc99 collects, uses, stores, and protects your personal information when you use our platform. It applies to all services provided by crc99, including the website, mobile app, and all communication channels we operate.

User privacy is something we take seriously — not merely a legal obligation, but a core value that underlies how we build and operate crc99. Every decision involving data management always considers the interests and trust of our members.

By registering and using crc99's services, you confirm that you have read and understood this Privacy Policy. If you disagree with how we manage your data as described here, you may contact us or choose to stop using the platform.

CRC99 only collects data that is genuinely necessary to operate the platform effectively. We do not collect excessive or irrelevant data. The following are the categories of data we process:

Data you provide directly:

• Identity Data: Full name, date of birth, national ID number, identity photo (for KYC)
• Contact Data: Email address, registered phone number
• Financial Data: Bank account or digital wallet details for deposit and withdrawal transactions
• Account Credentials: Username and password in hashed form (not stored as plain text)

Data collected automatically:

• Technical Data: IP address, device type, operating system, browser version, screen resolution
• Activity Data: Pages visited, session duration, games played, transaction history
• Cookie Data: User preferences, session tokens, anonymous analytics identifiers

The data collected is used exclusively to support your gaming experience and account security at CRC99. Specifically, the following are the data usage purposes we apply:

• Account Management: Create, verify, and manage your member account
• KYC Process: Verify identity for regulatory compliance and transaction security
• Transaction Processing: Manage deposits, withdrawals, bonuses, and account financial history
• Fraud Prevention: Detect and prevent suspicious activity, duplicate accounts, or system abuse
• Service Improvement: Analyze usage patterns in aggregate to improve platform performance and features
• Communications: Send important notifications regarding your account, security, and policy updates
• Customer Support: Handle inquiries, complaints, and support requests effectively
• Responsible Gaming: Monitoring gameplay patterns to identify potentially unhealthy gambling behavior

CRC99 does not use your data for third-party advertising, commercial profiling, or any activities beyond those explicitly stated above.

CRC99 processes your personal data on the basis of one or more of the following lawful grounds:

• Contract Performance: Processing is required to fulfill the contractual obligations between crc99 and you as a member who has agreed to the platform's Terms and Conditions
• Legitimate Interest: Processing for fraud prevention, system security, and service improvement that does not conflict with your privacy interests
• Legal Obligation: Processing required to comply with applicable regulations, including reporting obligations to the relevant authorities
• Consent: For optional processing, such as sending promotional materials, we request explicit consent which you may withdraw at any time

CRC99 does not sell your personal data to anyone. However, under certain limited and controlled circumstances, data may be shared with third parties as follows:

• Payment Service Providers: Banks, digital wallets, and payment gateways that process your financial transactions. They only receive data necessary to complete the transaction
• Game Providers: Game providers that deliver gaming services may receive session data required for game functionality — without any personally identifiable information that could identify you
• Infrastructure Providers: Hosting, cybersecurity, and CDN companies that help us operate the platform technically, bound by strict confidentiality agreements
• Competent Authority: CRC99 will only disclose data when required by law or a valid court order

Data security is a priority investment at crc99, not a cost to be minimized. We implement a comprehensive set of technical and organizational security controls:

• Data Encryption in Transit: All communications between your device and crc99 servers use TLS 1.3 protocol with 256-bit encryption
• Data Encryption at Rest: Sensitive data, including financial information and identity documents, is encrypted at rest in the database
• Role-Based Access Control: crc99 employees may only access data that is necessary for their specific role and responsibilities
• Continuous Security Monitoring: The SIEM (Security Information and Event Management) system actively monitors for anomalous activity 24/7
• Regular Security Audits: Penetration testing and security audits are conducted regularly by both our internal security team and independent third parties
• Incident Response Plan: CRC99 has a structured procedure to respond to security incidents quickly and effectively

That said, no technology system can guarantee 100% perfect security. crc99 encourages members to play an active role in keeping their accounts secure by using strong passwords and not sharing account credentials with anyone.

CRC99 uses cookies and similar technologies to ensure the platform functions properly and to deliver a personalized experience. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as keeping your login session active. These cookies cannot be disabled without disrupting platform functionality
• Functional Cookies: Store your preferences such as language, display theme, and other settings to deliver a consistent experience
• Analytics Cookies: Helps us understand how users interact with the platform in an aggregated and anonymized way, so we can continuously improve our services
• Security Cookies: Used to detect suspicious activity, prevent cross-site request forgery (CSRF), and protect your account

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of some CRC99 platform features.

CRC99 retains your personal data only for as long as necessary to fulfill the processing purposes described in this policy, or as required by applicable regulations.

• Active Account Data: Retained for as long as your account remains active and as long as necessary to deliver our services
• Transaction Data: Transaction history is retained in accordance with applicable financial regulatory requirements, generally for a minimum of 5 years
• KYC Data: Identity verification documents are retained in accordance with applicable anti-money laundering regulations
• Closed Account Data: After account closure, data not required by law will be deleted or anonymized within a defined period

As a crc99 member, you have a set of rights regarding your personal data that crc99 respects and facilitates. Here are those rights and how to exercise them:

This Privacy Policy may be updated from time to time to reflect changes in our data management practices, technological developments, or applicable regulatory changes. We are committed to always notifying you of any significant updates.

How we notify you about policy updates:

• In-platform notification at your next login following an update
• Announcements on the crc99 homepage for material changes
• Email notification to your registered address for changes that significantly affect your privacy rights

The "Last updated" date at the top of this document always reflects the most current version. Previous versions of the policy are available upon request for reference purposes.

If you have any questions, concerns, or requests regarding your data privacy at crc99, our support team is available 24 hours a day via live chat on the platform. We are committed to responding to all privacy-related inquiries within a reasonable timeframe.