Your privacy is fundamental to how we operate. This Policy explains precisely what data crvip collects, why we collect it, how we protect it, and the rights you hold as a Player.
This Privacy Policy ("Policy") describes how crvip ("the Platform", "we", "us", "our"), operating at https://crvip.cam, collects, uses, stores, discloses, and protects the personal data of registered Players and website visitors. By creating an account or continuing to use our Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions.
The following definitions apply throughout this Privacy Policy:
crvip, operating the online gaming platform accessible at https://crvip.cam, is the Data Controller responsible for the personal information you provide when registering, transacting, or otherwise engaging with our services. We determine the purposes for which your Personal Data is processed and the manner in which it is handled.
All data protection enquiries, rights requests, and privacy complaints should be directed to our dedicated support team. Contact details are provided in Clause 16 of this Policy. We are committed to responding to all legitimate privacy requests within 30 calendar days of receipt.
crvip processes Personal Data in accordance with internationally recognised data protection principles: lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.
We collect Personal Data across several categories depending on your interaction with the Platform. The table below summarises the main data types and their purpose:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, KTP (Indonesian National ID) number, passport or driver's licence | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, mobile phone number, residential address in Indonesia (city/province) | Account communication, security alerts, support responses |
| Financial Data | Bank account number and bank name (BCA, BRI, BNI, Mandiri, CIMB Niaga, etc.), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), deposit and withdrawal history, transaction amounts in IDR | Payment processing, fraud prevention, anti-money-laundering compliance |
| KYC Document Data | Scanned or photographed identity documents, selfie photographs, proof of address documents | Identity verification, regulatory compliance, fraud prevention |
| Gaming & Betting Data | Game history, bet amounts, win/loss records, togel bet slips, mix parlay selections, sports betting markets, session duration | Account management, responsible gaming monitoring, dispute resolution |
| Technical & Device Data | IP address, device type, operating system, browser type, screen resolution, session timestamps | Security, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Customer support, dispute resolution, service quality improvement |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channel | Personalised promotions, bonus communications (only where consent given) |
We adhere to the principle of data minimisation — we collect only the Personal Data that is strictly necessary for the purposes outlined in this Policy. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is voluntarily disclosed in responsible gaming self-assessment contexts.
crvip collects Personal Data through the following channels:
The majority of Personal Data we hold is provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, cont act our support team, participate in a promotion, or respond to a responsible gaming self-assessment. This includes all registration form fields, uploaded KYC documents, and any information you voluntarily provide in live chat or email correspondence.
When you access the crvip Platform, our servers and analytics systems automatically record certain Technical and Device Data, including your IP address, browser type, device identifiers, pages visited, time spent on each page, and click-path behaviour. This data is collected passively and does not require any action on your part beyond visiting the site.
We use cookies, web beacons, pixel tags, and similar tracking technologies to maintain session continuity, remember your preferences, detect fraud signals, and gather aggregated analytics. A full description of our cookie practices is provided in Clause 8 of this Policy.
In limited circumstances, we may receive Personal Data about you from third-party sources, including payment processors confirming transaction status, identity verification service providers validating your KYC documents, fraud-detection platforms flagging unusual account activity, and analytics providers supplying aggregated behavioural insights. All such third-party providers are bound by contractual data-processing agreements consistent with this Policy.
crvip processes your Personal Data on one or more of the following legal grounds:
crvip uses your Personal Data for the following specific and documented purposes:
We process Identity Data, Contact Data, and Financial Data to create and maintain your Account, authenticate your identity at login, manage your Account balance in IDR, and provide you with access to our full range of gaming and betting services — including slot games, live casino, togel (Indonesia's traditional numbers lottery), and sports betting markets such as BRI Liga 1 and international leagues.
Financial Data is processed to execute deposits and withdrawals through your chosen Indonesian payment method — whether that is a bank transfer via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, or Bank Permata, or an e-wallet transaction through OVO, DANA, GoPay, ShopeePay, or LinkAja. Transaction records are retained for financial audit and regulatory compliance purposes.
KYC Document Data is collected and reviewed to confirm that you are at least 21 years of age, that you are the lawful owner of the payment methods used on your Account, and that your identity is consistent across all registration details. This processing is a legal obligation and a precondition for withdrawal.
We analyse Technical and Device Data, Financial Data, and Gaming & Betting Data to detect and prevent fraudulent activity, account takeovers, bonus abuse, collusion, money laundering, and other forms of Platform manipulation. Automated fraud-scoring systems may flag accounts for manual review where anomalies are detected.
Gaming & Betting Data — including session length, bet frequency, deposit patterns, and loss trajectories — is monitored by our responsible gaming systems to identify Players who may be exhibiting at-risk behaviour. Where concerns are identified, our team may reach out proactively to offer self-management tools such as deposit limits, session timers, or self-exclusion. This processing is conducted in your interest and forms part of our commitment to player welfare. For more information, please visit our Responsible Gaming page.
Communications Data (including live chat transcripts and support emails) is retained to resolve your queries, investigate complaints, and maintain a record of interactions for quality assurance. Support records are held for a minimum of 24 months from the date of the relevant interaction.
Where you have provided explicit consent to receive promotional communications, we use your Contact Data and Marketing Preferences to send you information about bonuses, seasonal promotions (such as those aligned with Idul Fitri, Ramadhan, or major sporting events like the Piala AFF or Champions League), new game launches, and VIP tier updates. You may opt out of marketing communications at any time by contacting our support team or updating your Account preferences.
Aggregated and anonymised Technical and Device Data is used to analyse Platform performance, identify navigation issues, optimise loading speeds, and prioritise feature development. This analytics processing does not identify you as an individual.
crvip does not sell, rent, or trade your Personal Data to any third party for their independent commercial use. We share Personal Data only in the following limited and documented circumstances:
We engage trusted third-party Data Processors who handle Personal Data solely on our instruction and for the purposes we specify. These include payment gateway operators facilitating IDR transactions, KYC and identity verification platforms, cloud hosting and server infrastructure providers, customer support software vendors, fraud detection and cybersecurity specialists, and analytics platforms. All Data Processors are bound by written data-processing agreements that prohibit them from using your data for their own purposes.
To deliver our full library of casino games — including titles from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — limited technical data (such as session tokens and bet values) is shared with the relevant game studio API. These studios do not receive your full identity or contact details.
We may disclose Personal Data to regulators, law enforcement authorities, courts, or government bodies where we are legally required to do so, where disclosure is necessary to prevent imminent harm or criminal activity, or where we are responding to a valid legal order. We will notify you of any such disclosure where legally permitted to do so.
In the event that crvip undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your Personal Data may be transferred to the acquiring or successor entity as part of that transaction. We will notify you via email and/or a prominent Platform notice prior to any such transfer, and your data will remain subject to the protections described in this Policy.
We may share your Personal Data with additional third parties where you have provided specific, informed consent for that sharing. You may withdraw such consent at any time by contacting our support team.
crvip uses cookies and similar tracking technologies to enhance your experience on the Platform. The following categories of cookies are in use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your authenticated session, store login tokens, and enable core Platform functions. Cannot be disabled without breaking core functionality. | Session / up to 24 hours |
| Functional | Remember your language preference, display settings, and responsible gaming tool configurations across sessions. | Up to 12 months |
| Analytics | Collect anonymised data on page views, session duration, navigation paths, and feature usage to improve Platform performance. No personally identifiable information is included in analytics reports. | Up to 24 months |
| Security & Fraud | Fingerprint devices to detect suspicious login patterns, bot activity, and multi-account creation attempts. These cookies are strictly necessary for Platform integrity. | Up to 6 months |
You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. We do not use third-party advertising or retargeting cookies.
We retain your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. The following retention periods apply:
When Personal Data is no longer required, we securely delete or anonymise it in a manner that ensures it cannot be reconstructed or re-identified. Anonymised and aggregated data that cannot be linked to any individual may be retained indefinitely for statistical and analytical purposes.
crvip employs a layered technical and organisational security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:
In the event of a Personal Data breach that poses a risk to your rights, crvip will notify affected Players without undue delay and, where required by applicable law, will report the breach to the relevant supervisory authority within the legally prescribed timeframe.
As a Player whose Personal Data is processed by crvip, you hold the following rights. To exercise any right, contact us at [email protected] with your Account username and a description of your request. We will respond within 30 calendar days.
Request a copy of all Personal Data we hold about you, together with details of how and why it is being processed.
Request correction of inaccurate or incomplete Personal Data. This may require KYC re-verification for identity field changes.
Request deletion of your Personal Data where it is no longer necessary, subject to overriding legal retention obligations (e.g., AML records).
Request that we limit the processing of your data while a rectification request or objection is being assessed.
Receive a structured, machine-readable copy of Personal Data you provided to us, where technically feasible.
Object to processing conducted on the basis of legitimate interests, including direct marketing. Opt-out of marketing at any time with immediate effect.
Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
Request human review of any decision that significantly affects you and was made solely through automated processing, including fraud-score-based account actions.
Exercising your rights will not result in any penalty or disadvantage to your Account. However, certain rights (such as erasure) may conflict with mandatory legal retention obligations. Where a conflict exists, we will explain the specific legal basis for retaining the data and apply the maximum practicable degree of restriction in the interim.
The crvip Platform is strictly intended for persons aged 21 years or older. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered Players.
If we become aware that Personal Data has been collected from a person under 21 — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant Account, delete or securely quarantine all associated data, and return any deposited funds (net of bonus amounts) via the original payment method.
If you are a parent or guardian and believe that your child may have registered an Account on crvip, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action, including full Account closure and data deletion.
The crvip Platform may reference or display content from third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) whose software interfaces are embedded within our Platform environment. While we take care to partner only with reputable, internationally licensed studios, crvip does not control and is not responsible for the privacy practices of these third-party providers within their own independent services or websites.
This Policy applies solely to data processed by crvip in connection with the Platform. If you navigate away from the crvip environment to any external site, the privacy policy of that external site will govern the collection and use of your data there. We strongly encourage you to review the privacy policies of any third-party services you access independently.
crvip operates internationally and may transfer your Personal Data to servers or Data Processors located outside of Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to maintain the level of protection afforded by this Policy and by applicable data protection standards. These safeguards may include:
By using the crvip Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Indonesia. We will not transfer your data to a jurisdiction that lacks adequate protections without first putting one of the above safeguards in place.
crvip reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or developments in the services we offer. When material changes are made — that is, changes that affect your rights or the nature of how we process your data — we will:
Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you must cease using the Platform and may request Account closure as described in our Terms & Conditions. We encourage you to review this Policy periodically to remain informed about how we protect your data.
For any questions relating to this Privacy Policy, the Personal Data we hold about you, or to exercise any of the rights described in Clause 11, please contact us through the following channels. All contact details are provided as plain text — no clickable email or phone links are used on this Platform.
If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or supervisory body in your jurisdiction. crvip will cooperate fully with any such investigation.
Six pillars of data protection that keep your information safe on our Platform
Every data exchange between your device and the crvip Platform is secured by 256-bit SSL/TLS encryption. Your login credentials, financial details, and KYC documents are never transmitted in plaintext.
crvip never sells, rents, or trades your personal information to third-party marketers. Your data is used exclusively to operate your Account, process payments, and improve our Platform — nothing more.
Access, correct, export, or request deletion of your personal data at any time. Our dedicated support team processes all data rights requests within 30 calendar days via email or live chat.
Our automated fraud-detection systems monitor account activity around the clock, identifying suspicious patterns before they escalate. Device fingerprinting and behavioral analytics protect your Account from unauthorized access.
Identity verification through KTP and supporting documents ensures that only the rightful account holder can request withdrawals. Our KYC process protects both you and the integrity of the Platform.
We hold your data only as long as legally required or operationally necessary. Clear retention schedules govern every data category — from transaction records to support chat logs — with secure deletion applied thereafter.
Our support team is available 24/7 to handle data access requests, privacy concerns, and account queries. You can also explore our FAQ for quick answers or review our full Terms & Conditions.