cr789 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which cr789 ("cr789", "we", "us", or "our") collects, processes, stores, and shares personal data obtained from users of the cr789 platform available at cr789.club ("Platform"). This Policy applies to all users who access the Platform from any device or browser, including Pakistani players accessing cr789 from Karachi, Lahore, Islamabad, Faisalabad, and other cities across Pakistan.

By registering an account on the cr789 Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or continue using the Platform.

This Policy should be read in conjunction with the cr789 Terms and Conditions, which together form the complete agreement between you and cr789 regarding your use of the Platform.

cr789 is an internationally licensed online gaming platform operating under applicable gaming regulatory frameworks. The cr789 Platform offers sports betting (including cricket, PSL markets, and international fixtures), live casino games, and online slot games to eligible adult players.

For the purposes of data protection law, cr789 is the data controller in respect of personal data collected directly from users during registration, identity verification, and ongoing use of the Platform. Where cr789 engages third-party service providers to process data on its behalf (such as payment processors and KYC verification providers), those parties act as data processors under cr789's instruction.

If you have any questions about this Policy or wish to exercise your data rights, you may contact cr789 at the address provided in Section 14 of this Policy.

cr789 collects personal data from users through several channels: directly at registration and during account management, automatically through your use of the Platform, and from third-party verification providers during KYC checks. The categories of data collected are set out in the table below:

cr789 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by law enforcement or regulatory order, in which case such collection will be disclosed to you to the extent permitted by law.

cr789 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law:

• Account creation and management: To register your cr789 account, verify your identity, and maintain your account profile throughout the account lifecycle.
• Age verification and responsible gaming: To confirm you meet the mandatory 21+ age requirement and to enforce responsible gaming limits, cooling-off periods, and self-exclusion requests.
• Payment processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20, and to maintain accurate financial records in compliance with anti-money laundering obligations.
• KYC and fraud prevention: To satisfy know-your-customer requirements, detect and prevent fraudulent activity, money laundering, and multi-account abuse.
• Platform personalisation: To remember your game preferences, display relevant promotions (if you have opted in to marketing communications), and tailor your overall cr789 experience.
• Customer support: To respond to account queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Legal and regulatory compliance: To comply with obligations under applicable international gaming licence conditions, anti-money laundering laws, and requests from competent regulatory authorities.
• Platform security and integrity: To monitor for and investigate suspicious betting patterns, bot activity, VPN misuse, and other forms of platform abuse.

cr789 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contract performance: Processing necessary to create and manage your account, process transactions, and deliver the gaming services you have contracted for.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, gaming licence conditions, and orders from competent authorities.
• Legitimate interests: Processing carried out for cr789's legitimate interests in fraud prevention, platform security, and improvement of gaming services, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of data for optional purposes such as marketing communications, personalised promotions, and non-essential analytics cookies, where you have given clear, informed, and freely withdrawable consent.

Where cr789 relies on consent as the legal basis for any processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

cr789 does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the specified purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network operators receive the minimum data required to authorise and record your transactions. These providers are bound by their own regulatory obligations and data protection agreements with cr789.
• KYC and identity verification providers: Regulated third-party KYC service providers process your identity documents solely for the purpose of age and identity verification. Document data is not retained by these providers beyond the verification window.
• Regulatory and legal authorities: cr789 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required to do so under applicable law or a valid legal order. cr789 will notify you of such disclosure where legally permitted to do so.
• Fraud prevention and security services: Aggregated or pseudonymised data may be shared with industry fraud prevention databases to identify and block fraudulent accounts across the online gaming sector.
• Corporate transactions: In the event of a merger, acquisition, or sale of cr789's business or assets, personal data may be transferred to the acquirer as part of the transaction, subject to equivalent data protection commitments.

cr789 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by cr789 are as follows:

Upon expiry of the applicable retention period, cr789 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

cr789 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• Encryption: All personal data is encrypted at rest using AES-256 and in transit using TLS 1.3. Payment data is handled exclusively by PCI-DSS compliant payment processors.
• Access controls: Access to personal data within cr789's systems is restricted on a strict need-to-know basis. Staff with access to user data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: cr789 offers 2FA for all account holders and strongly encourages its use, particularly for accounts linked to JazzCash or EasyPaisa mobile numbers.
• Penetration testing: cr789's Platform infrastructure undergoes regular third-party security assessments, including penetration testing and vulnerability scanning.
• Incident response: In the event of a confirmed personal data breach, cr789 will notify affected users within 72 hours of becoming aware of the breach, to the extent required by applicable law.

cr789 uses cookies and similar tracking technologies to enable essential Platform functionality, improve user experience, and — where you have given consent — to analyse Platform usage patterns. The cookie categories used by cr789 are as follows:

You can manage or withdraw your cookie consent at any time through your browser settings. Disabling essential cookies may affect your ability to log in and use core Platform features. Disabling analytics or marketing cookies will not affect your access to cr789 games or your account balance.

As a cr789 account holder, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the cr789 support team as described in Section 14. cr789 will respond to all valid data rights requests within 30 calendar days:

• Right of access: You may request a copy of all personal data cr789 holds about you, together with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by cr789.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cr789's legal and regulatory retention obligations.
• Right to restrict processing: You may request that cr789 limit the processing of your personal data in certain circumstances, such as while an accuracy dispute is being resolved.
• Right to data portability: You may request a copy of personal data you have provided to cr789 in a structured, machine-readable format for transfer to another service provider.
• Right to object: You may object to the processing of your personal data where cr789 relies on legitimate interests as its legal basis, and where your specific situation justifies the objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.

cr789 strictly prohibits access by individuals under 21 years of age. The cr789 Platform is not intended for, and does not knowingly collect personal data from, minors. cr789 employs the following measures to enforce the 21+ age requirement:

• A mandatory age declaration at the point of registration requiring the user to confirm they are 21 years of age or older.
• Mandatory KYC identity verification prior to processing any withdrawal, which includes verification of date of birth against official identity documents such as CNIC or passport.
• The right to request proof of age at any point during the account lifecycle where cr789 has reasonable grounds to suspect the account holder may be under 21.

If cr789 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated personal data will be reviewed and deleted to the extent not required to be retained for regulatory purposes, and the relevant account balance will be voided and handled in accordance with applicable gaming licence requirements.

If you are a parent or guardian and believe your child has registered an account on the cr789 Platform, please contact our support team immediately so that we can investigate and take appropriate action.

cr789 is an internationally operated platform. In the course of providing its services to Pakistani players, personal data may be processed and stored on servers located outside Pakistan. Where cr789 transfers personal data internationally, it ensures that equivalent data protection safeguards are in place at the destination, including:

• Data processing agreements with all third-party service providers that impose binding data protection obligations consistent with this Policy.
• Use of servers and infrastructure hosted by reputable, internationally certified cloud providers that maintain ISO 27001 and SOC 2 Type II certifications.
• Contractual clauses with KYC and payment processing partners that prohibit onward transfer of cr789 user data to sub-processors without cr789's prior written approval.

By using the cr789 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, and that cr789 takes appropriate steps to protect your data during such transfers as described above.

cr789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made to this Policy, cr789 will:

• Update the "Last Updated" date at the top of this page.
• Notify registered account holders via the email address associated with their account where the changes are material and affect their rights.
• Display a prominent notice on the cr789 Platform for a period of at least 14 days following any significant update.

Your continued use of the cr789 Platform following notification of any amendment to this Policy constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure in accordance with the cr789 Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related complaint, please contact the cr789 Data Protection team through the following channel:

• Email: [email protected]
• Live Chat: Available within the cr789 Platform during support hours.
• Support Hours: 10:00 AM – 02:00 AM PST, daily.

cr789 aims to acknowledge all privacy-related requests within 5 business days and to resolve them fully within 30 calendar days. Where a request is particularly complex or you have made multiple requests simultaneously, cr789 may extend this period by a further 30 days, in which case we will notify you accordingly.

If you are not satisfied with cr789's response to your privacy complaint, you may escalate the matter to the relevant data protection supervisory authority or dispute resolution body associated with cr789's applicable international gaming licence.