crystaltogel Platform Privacy Notice
This page describes what we collect when you use crystaltogel and how we keep that data protected. When you create an account and fund it via DANA, e-wallet, or another payment method, we gather information needed to verify your identity and process transactions. We take data security seriously and never sell your personal information.
We operate crystaltogel for users in supported Indonesian jurisdictions. Our privacy practice reflects both our commitment to transparency and the legal requirements that apply to our business. Whether you're in Jakarta, Surabaya, Bandung, Medan, Semarang, Yogyakarta, or elsewhere, the same protections apply.
We encourage you to read this notice carefully. If you have questions about how we handle your data, contact us using the channels listed at the end of this page.
What We Collect When You Join crystaltogel
We at crystaltogel collect information you provide directly and information generated when you use our platform. When you register, we ask for your full legal name, date of birth, email address, mobile number, and username. This information is mandatory to create your account and comply with know-your-customer (KYC) regulations.
When you deposit, we collect payment details: the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer via mobile banking, local payment, online payment, e-wallet), the amount, and timestamp. For withdrawals, we record the destination account or e-wallet linked to your request. We do not store your credit card numbers or full bank account details; our payment processors handle encrypted storage and we receive only confirmation of successful transfer.
For identity verification, we ask for scans or photographs of your Indonesian ID card (KTP), driver's license, passport, and proof of address such as a utility bill or bank statement. We store these documents securely in encrypted servers for compliance and fraud prevention. Once verification is complete, we retain these documents for seven years to meet regulatory holding periods, then delete them unless legal or compliance reasons require longer retention.
Activity and Interaction Data
When you use crystaltogel, we log your account activity: selections placed, games played, deposits received, withdrawals processed, login times, and IP addresses. This data helps us detect fraud, resolve disputes, and improve platform performance. We also collect browser type, device model, operating system, and network connection type to optimize the mobile experience on Android and iOS.
We use cookies to remember your login session and preferences (language, account currency). Cookies expire after 30 days of inactivity; you can clear them anytime from your browser settings. Functional cookies are necessary for the platform to operate; we do not use advertising cookies.
Data we collect summary
- Account information: name, email, mobile, date of birth, username
- Payment details: method, amount, timestamp (no stored card or full bank account numbers)
- Identity documents: KTP, driver's license, passport, proof of address
- Activity logs: selections, games, deposits, withdrawals, logins, IP address
- Device and browser information: model, OS, connection type, user agent
How We Use and Protect Your Data on crystaltogel
We use your data for four core purposes. First, we process your payments and manage your account—deposits, withdrawals, balance updates, and selection settlement all rely on verified identity information. Second, we comply with local and international regulations; we share your data with government authorities only when legally required by subpoena or court order. Third, we prevent fraud and money laundering by cross-referencing your account details against sanctions lists and flagging unusual activity. Fourth, we improve our platform by analysing how users interact with sports markets (Liga 1, Piala Indonesia), live-dealer tables, and slot games—all analysis is anonymised and never tied to your individual identity.
We do not sell or lease your personal information to third parties for marketing. We do not use your data for targeted advertising. We do not share your payment history with other merchants or services.
Payment Processing and Third-Party Partners
We at crystaltogel rely on licensed payment processors to handle DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers. These processors see your payment method, transaction amount, and confirmation code. We have data-processing agreements with each processor obligating them to encrypt your data in transit and at rest. We conduct annual security audits of these relationships. If a processor is breached, we notify all affected users within 72 hours and offer identity-protection services at our cost.
We also use third-party identity-verification providers to validate your KTP or passport scan. These providers operate under strict confidentiality agreements and delete your documents from their servers immediately after verification completes. We retain your documents only on our own encrypted servers.
Your Rights and Data Requests
Under Indonesian data protection frameworks, you have the right to request a copy of all data we hold about you, ask us to correct inaccurate information, and request deletion of non-essential data. We respond to all data-subject requests within 15 business days. To exercise these rights, contact our support team with your account ID and request type.
You may also close your account at any time. Upon closure, we keep your activity logs for seven years to settle disputes and meet compliance obligations. We delete optional personal information (such as your preferred contact method) within 30 days of closure, unless you request faster deletion.
Security and Server Location
We encrypt all data in transit using TLS 1.2 or higher. Your password is hashed using bcrypt and never stored in plain text. Our servers may be located outside Indonesia; by using crystaltogel, you consent to data processing outside your home jurisdiction where our service infrastructure resides. All servers are protected by firewalls, intrusion-detection systems, and 24/7 monitoring. We conduct penetration tests quarterly and maintain a security-incident response plan.
If we discover a data breach affecting your account, we contact you immediately via the email on file and offer complimentary credit-monitoring services. We also notify relevant authorities as required by law.
Contact and Policy Updates
If you have privacy questions or wish to exercise your rights, contact our support team at any time. We respond in both Indonesian and English within 4 business hours during weekdays, and within 24 hours on weekends. You can also mail us at our registered office, details available on our contact page.
We update this privacy notice annually and whenever our practices change materially. We notify all users of material changes via email. Your continued use of crystaltogel after an update constitutes your acceptance of the new terms. You can view previous versions of this notice on request.