cr7sip Privacy Policy

1Introduction

This Privacy Policy (hereinafter referred to as "the Policy") describes how cr7sip (hereinafter referred to as "the Company", "we", "us", or "our") collects, processes, stores, and protects the personal data of individuals (hereinafter referred to as "you", "your", or "the Member") who access or use the cr7sip Platform, including the website at https://cr7sip.click and all associated services.

cr7sip operates as an online sports betting and live casino platform serving players in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions within Malaysia. As a platform that handles real-money transactions and identity-verified accounts, we take our data protection obligations with the utmost seriousness.

By creating a cr7sip account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the Platform.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that relates to an identified or identifiable living individual, including but not limited to name, email address, date of birth, payment details, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, or deletion.
• "Data Controller" — cr7sip, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party engaged by cr7sip to process personal data on its behalf, such as payment service providers and KYC verification partners.
• "KYC" — Know Your Customer, the identity and age verification process required before withdrawal processing.
• "Cookies" — small text files placed on your device by the Platform for session management, analytics, and personalisation purposes.
• "Platform" — the cr7sip website at https://cr7sip.click, all associated pages, and any services delivered through those channels.

3Data We Collect

cr7sip collects personal data that falls into the following categories:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document (MyKad or passport).
• Date of birth (used for age verification — all Members must be 21 years of age or above).
• Email address and Malaysian mobile phone number.
• Residential address in Malaysia.

3.2 Financial & Transaction Data

• Deposit and withdrawal history, including method, amount, and timestamp.
• Payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers for Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong).
• Cryptocurrency wallet addresses used for BTC, ETH, or USDT transactions.
• Wagering and gaming activity history, including bet amounts, game types, and outcomes.

3.3 Verification & KYC Data

• Copies of government-issued identity documents submitted during KYC verification.
• Selfie photographs submitted for facial verification purposes.
• Source-of-funds documentation where required under regulatory obligations.

3.4 Technical & Usage Data

• IP address, browser type and version, device type, operating system, and screen resolution.
• Referring URLs, pages visited on the Platform, session duration, and click paths.
• Login timestamps, session identifiers, and device fingerprint data.

3.5 Communication Data

• Records of live chat, email, and other support interactions between you and the cr7sip support team.
• Survey responses and feedback submitted voluntarily through the Platform.

4How We Collect Your Data

cr7sip collects personal data through the following channels:

• Direct submission — information you provide when registering an account, completing KYC verification, depositing funds, contacting support, or responding to surveys.
• Automated collection — technical data collected automatically as you navigate the Platform, including via cookies, web server logs, and similar technologies.
• Third-party sources — identity verification and fraud-screening data received from our licensed KYC partners; transaction data received from payment processors; and publicly available records used for enhanced due diligence where required.

5Legal Basis for Processing

cr7sip processes your personal data on the following legal bases:

6How We Use Your Personal Data

cr7sip uses the personal data we collect for the following purposes:

• To create and manage your cr7sip account, including authentication and account recovery.
• To process deposits and withdrawals via your selected payment method, including Malaysian e-wallets, FPX bank transfers, and cryptocurrency channels.
• To verify your identity and age (21+) in compliance with our KYC obligations prior to processing your first withdrawal.
• To detect, prevent, and investigate fraudulent activity, money laundering, and other prohibited conduct.
• To administer bonuses, promotions, and loyalty programme rewards, including wagering requirement tracking.
• To provide 24/7 customer support in English, Bahasa Melayu, and Mandarin.
• To send you transactional communications relating to your account, including deposit confirmations, withdrawal updates, and security alerts.
• To send you promotional communications and personalised offers, where you have consented to receive them.
• To analyse Platform usage patterns and improve the overall user experience for our Malaysian player base.
• To comply with all applicable legal and regulatory obligations.

7Data Sharing & Disclosure

cr7sip does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties strictly where necessary:

• Payment service providers — including operators of Malaysian payment networks (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and participating banks) and cryptocurrency processing services, for the purpose of processing your transactions.
• KYC and identity verification partners — licensed third-party providers engaged to verify the identity, age, and address of our Members in compliance with regulatory requirements.
• Fraud prevention and risk management services — third-party screening services used to detect and prevent fraudulent, unlawful, or abusive activity on the Platform.
• IT infrastructure and cloud service providers — providers of hosting, database, and security services engaged by cr7sip under binding data processing agreements that require them to handle your data only as instructed by us.
• Regulatory and law enforcement authorities — where we are required by law, court order, or regulatory direction to disclose personal data.

All third parties engaged by cr7sip as data processors are required to handle your personal data in accordance with applicable data protection standards and under contractual obligations that prohibit them from using your data for any purpose other than the specific service they provide.

8International Data Transfers

cr7sip is a platform that may utilise service providers located outside of Malaysia. Where personal data is transferred to a country outside Malaysia, cr7sip takes appropriate measures to ensure that such transfers are conducted in a secure manner and in accordance with applicable data protection requirements.

Such measures may include requiring recipient organisations to adhere to equivalent data protection standards, executing appropriate data transfer agreements, or relying on recognised legal transfer mechanisms applicable to the jurisdictions involved.

If you would like further information about the specific safeguards we apply to international data transfers, please contact our support team at [email protected].

9Data Retention

cr7sip retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to maintain regulatory compliance, and to resolve any disputes that may arise. The following general retention principles apply:

• Account and identity data — retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Financial transaction records — retained for a minimum of five (5) years in compliance with applicable financial record-keeping obligations.
• KYC documentation — retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Technical and usage data — typically retained for up to twenty-four (24) months for analytics and security purposes, after which it is anonymised or deleted.
• Marketing preferences and consent records — retained for the duration of your account or until consent is withdrawn, plus a reasonable period thereafter for compliance record-keeping.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Data that has been anonymised no longer constitutes personal data and may be retained for statistical or analytical purposes indefinitely.

10Data Security

cr7sip implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial records and KYC documentation.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Two-factor authentication requirements for all platform-side administrative access.
• Regular security audits, vulnerability assessments, and penetration testing of our infrastructure.
• Incident response procedures designed to detect, contain, and notify affected parties of any data breach in a timely manner.

While cr7sip takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your own account credentials and for notifying us promptly if you suspect unauthorised access to your account.

11Cookies & Tracking Technologies

cr7sip uses cookies and similar tracking technologies to operate the Platform, maintain session state, analyse usage patterns, and deliver a personalised experience. The following types of cookies are used:

• Strictly Necessary Cookies — essential to the basic operation of the Platform, including authentication, session management, and security features. These cannot be disabled without affecting core functionality.
• Performance & Analytics Cookies — used to collect aggregated, anonymised information about how visitors use the Platform, enabling us to identify areas for improvement.
• Functional Cookies — used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing Cookies — used to deliver promotional content relevant to your interests, where you have consented to receive such communications.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for basic operation.

12Your Data Rights

cr7sip respects your rights over your personal data. Subject to applicable legal exceptions, you have the following rights with respect to the personal data we hold about you:

To exercise any of the above rights, please contact our Data Protection team at [email protected] or via live chat. We will respond to verified requests within thirty (30) calendar days. In certain cases, we may require additional identity verification before fulfilling your request.

13Minors & Age Restriction

The cr7sip Platform is strictly intended for individuals who are 21 years of age or above. cr7sip does not knowingly collect personal data from individuals under the age of 21.

We employ age verification measures at the point of registration and during KYC processing to identify and prevent underage access. Where we determine that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the Platform, please contact us immediately at [email protected].

14Policy Updates

cr7sip reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or operational requirements. When material changes are made, we will notify you by:

• Sending an email notification to the address registered on your account; and / or
• Displaying a prominent notice on the Platform prior to the updated Policy taking effect.

We encourage you to review this Policy periodically. The effective date at the top of this page indicates when the Policy was last revised. Your continued use of the Platform following the effective date of any updated Policy constitutes acceptance of those changes.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way cr7sip handles your personal data, please contact us using the details below:

• Platform: https://cr7sip.click
• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Mandarin, directly through the cr7sip Platform.

Our support team aims to respond to all privacy-related enquiries within five (5) business days. For formal data subject access requests or complaints, please state the nature of your request clearly in the subject line of your email.