Privacy Policy
Last updated: 08.10.2025
1. Introduction
This Privacy Policy explains how CREXBET 99 (“we,” “our,” “us”) collects, uses, shares, and protects your personal data when you visit or use crexbet99.online or any related services, mobile apps, or APIs (collectively, “Services”). We process personal data in accordance with:
- EU General Data Protection Regulation (GDPR)
- UK GDPR & DPA 2018
- California Consumer Privacy Act (CCPA)
- Brazil’s LGPD
- Canada’s PIPEDA
- Other applicable global laws
2. What Data We Collect
- Account & Identity Data: Name, date of birth, nationality, address, phone, email, username, ID documents.
- Financial Data: Payment card or e-wallet details (tokenized), crypto wallet addresses, bank info, transaction history.
- Technical & Usage Data: IP address, device IDs, browser type, language, cookies, gameplay logs, referral sources, geolocation (coarse), session times.
- Marketing Preferences: Opt-ins, consents, and communication history.
- Responsible Gaming Data: Deposit limits, self-exclusion history, responsible-gaming interactions.
3. Legal Bases for Processing (GDPR Article 6)
- Contract performance
- Legitimate interests (site security, fraud prevention, direct marketing to existing customers)
- Compliance with legal obligations (AML/KYC, tax, gambling regulations)
- Consent (newsletters, non-essential cookies)
4. How We Use Your Data
- Create and manage your account
- Process deposits, withdrawals, and bets
- Verify identity, age, and location (KYC/AML)
- Provide customer support
- Personalize content and promotions
- Conduct analytics, product development, and risk management
- Send transactional or marketing communications
- Meet legal requirements (reporting, sanctions screening)
5. Cookies & Similar Technologies
We use first- and third-party cookies, SDKs, and pixels to:
- Remember preferences and login sessions
- Analyze site traffic (Google Analytics, Matomo)
- Enable marketing retargeting (Google Ads, Facebook Pixels)
You can manage consent via our Cookie Preference Center or your browser.
6. International Data Transfers
We may transfer your data to servers and service providers in countries outside your own using adequacy decisions, Standard Contractual Clauses (SCCs), Binding Corporate Rules, or explicit consent for certain transfers.
7. Data Retention
We keep personal data while your account is active, or as required by law. After expiry, data is securely erased or anonymized.
8. Data Security
- TLS 1.3 encryption in transit, AES-256 at rest
- Multi-factor admin access
- Annual penetration tests
- ISO 27001-aligned policies
- Incident response plan with 72-hour breach notification
9. Your Rights
Depending on your location, you may have rights including access, rectification, erasure, restriction, objection, data portability, opt-out of marketing, and CCPA “Do Not Sell or Share My Personal Information.”
10. Marketing & Opt-Out
We send promotional emails/SMS only to existing customers or those who consented. You can opt-out anytime via links in messages or account settings.
11. Children
We do not knowingly collect data from anyone under 18. Contact us for removal if a minor used our Services.
12. Third-Party Links & Services
We are not responsible for external sites. Clicking third-party links or using external payment gateways is at your own risk.
13. Changes to This Policy
We may update this Privacy Policy. Material changes will be announced on the Site or via email. The “Last updated” date indicates the latest revision.