CR789 Privacy Policy – How We Handle Your Data

01 Introduction

This Privacy Policy applies to all users of CR789 — Pakistan's online betting and gaming platform available at cr789.ws. It covers every way that cr789 interacts with your personal data: when you browse the site without registering, when you create an account, when you deposit funds, when you place a bet, when you play a game, when you contact support, and when you receive communications from us.

Privacy matters. The cr789 team understands that Pakistani users have real concerns about where their personal data goes when they use online platforms — particularly financial data and identity information. This policy exists to answer those concerns as honestly as possible. CR789 does not treat privacy as an afterthought — it is part of how we built the platform from the start.

By creating a cr789 account or using the platform in any capacity, you confirm that you have read and understood this Privacy Policy and that you consent to cr789 collecting and processing your personal data in the manner described here. If you do not consent, please do not use cr789 or create an account.

This policy should be read alongside the Terms and Conditions, which govern the overall relationship between cr789 and its users, and the Responsible Gaming policy, which covers data used in the context of player protection tools.

02 Who We Are

CR789 is an online betting and gaming platform operating under the brand name "CR789" and accessible at cr789.ws. For the purposes of this Privacy Policy, CR789 is the data controller — meaning we determine what data is collected, why it is collected, and how it is processed.

CR789 operates primarily to serve users in Pakistan and has structured its data practices around the needs and expectations of Pakistani users. All account balances, transactions, and records are maintained in Pakistani Rupees (PKR).

If you need to contact CR789 regarding any matter covered by this Privacy Policy, including making a data access request or reporting a concern, you can reach us at: support@cr789.ws

03 Data We Collect

CR789 collects different categories of personal data depending on how you interact with the platform. The table below summarises the main categories and provides examples of specific data points within each category.

04 How We Collect Your Data

CR789 collects personal data through the following mechanisms:

05 Why CR789 Uses Your Data

CR789 processes your personal data for the following specific purposes. We only use data for purposes that are proportionate and necessary to operate the platform properly.

• Account Creation and Management: Your identity and contact data is used to create and maintain your cr789 account, verify your identity, and communicate essential account information including security alerts.
• Age Verification: CR789 has a strict 18+ policy. Identity data including date of birth and CNIC is processed to verify that users meet the age requirement before accessing betting and gaming features.
• Processing Deposits and Withdrawals: Financial data and transaction data is used to process PKR deposits to your cr789 balance and to return winnings to your mobile wallet or bank account accurately and quickly.
• Settling Bets and Games: Betting and gaming data is used to settle your wagers and game sessions correctly and to maintain an accurate record of your account activity.
• Fraud and Security: Technical data and transaction data is analysed to detect and prevent fraudulent activity, money laundering, account takeover attempts, and abuse of cr789's promotional system.
• Responsible Gaming: CR789 uses betting and gaming data, combined with responsible gaming settings, to monitor for patterns associated with problem gambling and to activate protections when relevant thresholds are triggered or when a user requests them.
• Platform Improvement: Usage data and technical data is used to understand how cr789 is being used, identify bugs and performance issues, and improve the platform experience for Pakistani users.
• Customer Support: Communications data is used to investigate and resolve support queries, complaints, and disputes in your cr789 account history.
• Legal Compliance: CR789 may use your data to comply with legal obligations including anti-money laundering requirements, fraud reporting, and responses to legitimate law enforcement requests.
• Marketing Communications: If you have opted in to receive promotional communications, cr789 will use your contact data to send you information about relevant offers, bonuses, and promotions. You can opt out at any time.

06 Legal Basis for Processing

CR789 processes your personal data on the following legal bases:

• Contractual Necessity: Most of the data processing described in this policy is necessary to perform the contract between you and cr789 — i.e., to provide you with the betting and gaming services you registered for. Without this processing, cr789 cannot provide the service.
• Legitimate Interests: CR789 processes certain data — particularly technical and usage data — on the basis of legitimate interests, specifically the interest in operating a secure, fraud-free platform and improving the user experience. These interests do not override your privacy rights.
• Legal Obligation: Some processing is required by law — for example, retaining transaction records for financial compliance purposes or sharing data with law enforcement in response to a valid legal order.
• Consent: Where processing is not covered by the above bases — specifically for marketing communications — cr789 relies on your explicit consent. Consent can be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

07 Data Sharing — Who Sees Your Data

CR789 does not sell your personal data to third parties. Period. We share personal data only in the following limited circumstances:

• Payment Processors: When you deposit or withdraw, necessary transaction data is shared with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, or Visa/Mastercard gateway). Each payment provider operates under their own privacy policy and data protection obligations.
• Identity Verification Providers: Where cr789 uses a third-party verification service to confirm identity or age, your identity data is transmitted to that service for the verification check. The service returns only a pass/fail result plus any required compliance records.
• Fraud Detection and Security Partners: CR789 works with fraud detection services that analyse transaction and behavioural patterns to identify suspicious activity. These services process data on cr789's behalf under strict data processing agreements.
• IT and Platform Providers: Cloud hosting providers, database service providers, and other technical infrastructure partners that cr789 uses to operate the platform may have access to personal data in the course of providing their services. All such providers are contractually required to maintain appropriate data security standards.
• Legal and Regulatory: CR789 will share personal data with law enforcement agencies, regulatory authorities, or courts when required to do so by a valid legal order or obligation. CR789 will not voluntarily disclose user data to any government authority beyond what is legally required.
• Business Transfers: In the event of a merger, acquisition, or sale of cr789's business assets, user data may be transferred to the acquiring entity. Users will be notified of any such transfer and the applicable privacy terms will be communicated clearly.

08 How CR789 Secures Your Data

CR789 takes data security seriously and has implemented technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• Encryption in Transit: All data transmitted between your device and cr789 is encrypted using TLS (Transport Layer Security). This applies to the cr789 website and any cr789 applications. You can verify this by the padlock symbol in your browser's address bar.
• Encryption at Rest: Sensitive personal data stored in cr789's databases — including identity data, financial data, and login credentials — is encrypted at rest. Passwords are stored using one-way hashing and are never stored in plain text.
• Access Controls: Access to cr789's systems that contain personal data is restricted on a need-to-know basis. Staff who do not have a legitimate operational reason to access specific user data cannot do so. Access is logged and reviewed.
• Two-Factor Authentication: CR789 offers and encourages two-factor authentication (2FA) for account access. Users are strongly recommended to enable 2FA through their cr789 account security settings.
• Security Monitoring: CR789 operates continuous monitoring for unusual access patterns, login anomalies, and suspicious activity. Automated alerts trigger investigation of potential security incidents.
• Vulnerability Management: CR789's technical infrastructure is regularly reviewed and tested for vulnerabilities. Critical security patches are applied promptly.

09 How Long CR789 Keeps Your Data

CR789 retains personal data only for as long as necessary for the purposes described in this policy, or as required by legal obligations. The following retention periods apply:

• Active Account Data: While your cr789 account is active, all account data — identity, contact, financial, transaction, and betting/gaming data — is retained in full to enable the platform to function correctly.
• Closed Account Data: When a cr789 account is closed (whether at your request or by cr789), identity and transaction data is retained for a minimum of 5 years from the date of closure. This retention is required for financial compliance, anti-money laundering record-keeping, and to handle any disputes that may arise after closure.
• Communications Data: Support communications and complaint records are retained for 3 years from the date of the interaction.
• Technical and Usage Data: Log data, IP address records, and usage analytics are typically retained for 12 months before being aggregated or deleted.
• Responsible Gaming Records: Self-exclusion records and responsible gaming history are retained for the full duration of any exclusion period plus 5 years after the period ends, to prevent re-registration during exclusion and to support any future responsible gaming requests.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for 3 years from the date of the consent or opt-out action.

After applicable retention periods have passed, cr789 deletes or anonymises personal data in a secure manner so that it cannot be reconstructed or linked back to any individual.

10 Cookies and Tracking Technologies

CR789 uses cookies and similar technologies on its website and applications. Cookies are small text files placed on your device when you visit cr789 that help the platform function correctly and remember your preferences.

CR789 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for cr789 to function. These include session cookies that keep you logged in during a visit, security cookies that protect against cross-site request forgery, and cookies that enable payment processing flows. These cannot be disabled without breaking platform functionality.
• Performance Cookies: Used to understand how users navigate cr789 — which pages are visited most, where errors occur, and how platform features are used. This data is used in aggregate to improve cr789 and is not linked to individual identities in its analytical form.
• Functionality Cookies: Remember your preferences on cr789 — such as your preferred language, whether you prefer decimal or fractional odds format, and whether you have dismissed certain notifications. These improve your experience but are not essential.
• Security and Fraud Prevention: Cookies used to analyse device fingerprints and behavioural patterns to detect fraudulent activity, bot access, and account takeover attempts.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent cr789 from functioning correctly. Disabling performance and functionality cookies will not prevent you from using cr789 but may reduce the quality of the experience.

11 Your Rights Over Your Data

As a CR789 user, you have the following rights in relation to your personal data. CR789 will respond to valid requests within a reasonable timeframe — typically within 30 days.

To exercise any of these rights, contact the cr789 support team at support@cr789.ws with your request. We may ask you to verify your identity before processing a data rights request to ensure we are responding to the correct account holder.

12 Children and Underage Users

CR789 is strictly prohibited from use by anyone under the age of 18. Our platform is designed, marketed, and operated exclusively for adults. CR789 does not knowingly collect personal data from individuals under 18 years of age.

If CR789 discovers or has reason to believe that a registered account belongs to a person under 18, the account will be immediately suspended, all transactions will be reversed where possible, and the account data will be flagged appropriately. Any funds deposited by an underage user will be returned to the original payment source where technically possible.

If you believe a minor has registered on CR789 using false information, please contact our support team immediately at support@cr789.ws so we can investigate and take appropriate action.

13 Changes to This Privacy Policy

CR789 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in the platform, or changes in applicable legal requirements. When we make significant changes, we will notify registered users via SMS or email notification before the changes take effect.

Minor clarifications or wording changes that do not materially affect your rights or our data practices may be updated without individual notification. The "Last Updated" date at the top of this policy always reflects the most recent revision.

The current version of this Privacy Policy is always available at /privacy-policy. We encourage you to review this policy periodically, particularly if you receive a notification that it has been updated. Continued use of cr789 after an updated policy has been published constitutes your acceptance of the revised terms.

14 Contact and Data Requests

For any questions about this Privacy Policy, about how cr789 uses your personal data, or to submit a data rights request, please contact us through the following channel:

If you are unsatisfied with CR789's response to a privacy concern, you have the right to escalate your concern through appropriate legal channels. CR789 will cooperate fully with any legitimate regulatory or legal review of our data practices.