This Privacy Policy explains how CRAPSZ INC collects, uses, stores, shares and protects information in the course of designing, building, commissioning and supporting computer integrated systems for gaming tables and venue control systems.
This policy is published by CRAPSZ INC and describes the practices of the developer known as Crapsz together with the CRAPSZ INC engineering and support teams. The company address is 2095 W 9260 N, Neola - 84053-7708, United States (US). Questions about this policy may be sent to admin@crapsz.lol or raised by telephone on +15808805746.
We serve professional venues and the operators who run them. We treat privacy as part of systems engineering rather than as a legal afterthought, and we ask the same of every partner who touches a table system we have built.
1. Who We Are
CRAPSZ INC is a company registered and operating in the United States. Our business is computer integrated systems design for gaming tables and venue control systems, including table sensor integration, payouts automation, venue display controllers, player tracking platforms, cabinet build engineering and house systems support. Our workshop and principal place of business is located at 2095 W 9260 N, Neola - 84053-7708, United States (US).
For the purposes of applicable data protection law, CRAPSZ INC is the controller of personal information that we collect directly from our website visitors, prospective clients and business contacts. Where we process information on behalf of a venue operator in the course of a systems engagement, that venue operator is the controller and CRAPSZ INC acts as a processor under a written agreement that sets out the purpose, duration and security expectations of the processing.
The developer credit for this website and for the systems documentation it describes is Crapsz. References to CRAPSZ INC in this policy mean the company, while references to Crapsz identify the developer name used on our published materials. Both refer to the same engineering and support practice described on this website.
2. Scope of This Policy
This policy applies to information collected through the website at www.crapsz.lol, through email and telephone contact with our team, through proposals and surveys, through the design and build of table systems and through the support services we provide after commissioning.
This policy does not govern the separate privacy practices of a venue operator, a payment processor, a loyalty program provider or any other third party that a venue may use. When a venue shares guest information with us for the purpose of a systems engagement, that venue is responsible for obtaining the consents and providing the notices required by the law that applies to it. Our agreement with the venue sets out those responsibilities in detail.
Where our systems process information inside a venue, the classification of that information depends on the venue and its jurisdiction. Some venues treat play history as ordinary business records, while others treat it as regulated personal information with strict retention and access limits. We design every engagement around the stricter reading so that the system remains lawful if the venue is later audited or expands into a new jurisdiction.
3. Information We Collect
We collect information in four broad categories: information you give us directly, information generated when you use our website, information produced by the table systems we build and support, and information we receive from venues or partners in the course of an engagement.
- Identity and contact details such as name, job title, employer, email address, telephone number and postal address.
- Project information such as venue location, table count, floor plans, power and network details, photographs of a pit and notes from a site survey.
- Commercial information such as proposals, quotations, purchase orders, invoices and payment records associated with a business relationship.
- Correspondence such as emails, call notes, support tickets and meeting records.
- Technical information about the devices and networks used to reach our website, as described in the section on website and technical data.
- System information produced by installed equipment, as described in the sections on table sensor data and player tracking.
We ask that you do not send us sensitive personal information unless it is strictly necessary for a specific engagement and we have agreed in writing how it will be handled. If you believe that sensitive information has reached us without that agreement, please contact us so that we can review and, where appropriate, delete it.
4. Table Sensor and Event Data
The table systems we design produce a stream of events: a die settles, a chip lands, a point is established, a hand is settled. These events are primarily about the game rather than about any individual person, and we design the sensor layer to record the minimum detail needed to settle and reconcile play.
Where a sensor event is associated with a seat, a rating terminal or a player card, the resulting record may become personal information. In that case we treat the record according to the venue agreement, which specifies what may be linked to an identity, how long the link may be retained and who inside the venue may access it. Our default engineering position is to keep the event stream free of identity data and to perform any link only at the point where the venue needs it, rather than storing a permanent combined profile.
Sensor calibration records contain technical reference values rather than guest information. We retain them for support and audit purposes because they allow us to demonstrate that a system was operating within its design envelope at a given time.
Diagnostic captures may occasionally include short windows of event data used to investigate a fault. Diagnostic captures are limited to the smallest window that resolves the issue, are accessible only to the engineers assigned to the case and are removed once the case is closed and the fix has been verified on site.
5. Player Tracking Information
Player tracking platforms are operated under the authority of the venue. CRAPSZ INC supplies the platform, configures it and supports it, but the venue determines why tracking data is collected and what is done with it. Where we act as a processor, we follow the written instructions of the venue and do not use tracking data for our own purposes.
The platform may store identity records, consent records, session records and play history in separate stores with explicit links between them. This separation is a privacy control. It allows a routine request for play history to be answered without exposing identity details and a request about a guest identity to be answered without exposing a complete play record.
Consent is captured at the ratings desk in plain language. A guest who declines tracking is still able to play, and we design the system so that a declined guest does not receive a shadow profile built from raw chip movements. Where local law requires a written notice, the venue provides it, and where local law requires a deletion or correction process, the venue operates it with our technical support.
6. Business Contact Information
Most of the personal information we hold is business contact information: the name, role and contact details of a venue manager, a facilities engineer, a procurement officer or a support coordinator. We use this information to respond to enquiries, prepare proposals, deliver projects, provide support and maintain the commercial records required of a United States company.
We may enrich business contact records with publicly available information such as a company website or a professional directory, but we do not build profiles of individuals for advertising purposes and we do not sell business contact information to list brokers.
If you change roles or leave an organization, you may ask us to update or remove your business contact record. We will honor the request except where we must retain a record for a legal, tax or contractual reason, in which case we will explain the reason and limit further use.
7. Website and Technical Data
When you visit www.crapsz.lol, our web server may record standard technical information such as the requested page, the time of the request, the referring address, the browser type and the approximate network location associated with the request. This information is used to deliver pages, diagnose faults and protect the site from abuse.
We do not attempt to identify individual visitors from server logs, and we do not combine log data with business contact records. Log data is retained only for as long as needed to investigate an incident or confirm normal operation, after which it is deleted or aggregated into a form that no longer identifies a visitor.
Our website does not require an account and does not store a profile of your browsing on our servers. If we introduce a feature that changes this, we will update this policy and describe the change before the feature is enabled.
9. How We Use Information
We use information for the following purposes, always limited to what is necessary for the stated purpose:
- Responding to enquiries sent through the contact form, email or telephone.
- Preparing surveys, proposals, quotations and project plans.
- Designing, building, commissioning and documenting table systems.
- Providing support, escalation and spare parts under a support agreement.
- Performing quarterly audits of sensor drift, payout rules, displays and tracking reconciliation.
- Maintaining commercial records such as invoices, purchase orders and tax filings.
- Protecting our website, our systems and our people from fraud, abuse and security incidents.
- Complying with legal obligations and responding to lawful requests from authorities.
- Improving our engineering practice through aggregated, non identifying analysis of project outcomes.
We do not use information for automated decision making that produces legal or similarly significant effects on an individual. Payout automation settles game outcomes under rules set by the house and reviewed by human supervisors, which is a game integrity function rather than a profiling activity directed at a person.
10. Legal Bases for Processing
Where the General Data Protection Regulation or a similar law applies, we rely on one or more of the following legal bases. We rely on contract where processing is necessary to take steps at your request before entering a contract or to perform a contract with you or your organization. We rely on legitimate interests where processing supports our business operations in a way that is not overridden by your rights, such as responding to a business enquiry or protecting our systems. We rely on legal obligation where a record must be kept or a request must be answered under applicable law. We rely on consent where we have asked for it specifically, and you may withdraw consent at any time without affecting the lawfulness of processing that took place before the withdrawal.
Where we act as a processor for a venue, the venue is responsible for identifying the legal basis for the processing it instructs. Our agreement records that responsibility and requires the venue to provide the notices and consents that its jurisdiction demands.
If you are unsure which basis applies to a particular activity, contact us and we will explain the reasoning for the relevant record.
12. Service Providers and Partners
Our work depends on a small number of specialized suppliers: network hardware vendors, timber and cabinet material suppliers, calibration equipment providers, cloud infrastructure for documentation and support ticketing, and courier services for spare parts. These suppliers receive only the information they need to perform their function.
A cloud documentation provider, for example, may store drawings that name a venue but does not receive guest records. A courier receives a delivery address and a contact name but does not receive table event data. A calibration equipment provider may receive a technical question about a sensor model but does not receive the identity of a player.
We review our service providers at least once a year for security posture, data location and subcontracting changes. If a provider cannot meet our requirements, we replace it rather than accept a weaker arrangement.
13. Data Retention
We keep information only as long as it is needed for the purpose for which it was collected, and always within the limits set by law and by our agreements with venues.
| Record | Typical period |
|---|---|
| Website server logs | Up to ninety days, then deleted or aggregated |
| Contact form and enquiry records | Up to two years after the last contact |
| Project proposals and survey notes | Up to seven years after project close |
| Invoices and tax records | As required by law, typically seven years |
| Support tickets and diagnostic captures | Case duration plus twelve months |
| Calibration and audit records | Life of the system plus two years |
Where a venue agreement sets a shorter period, the shorter period applies. Where a legal hold requires a record to be preserved, we retain it until the hold is released and then apply the normal deletion schedule.
When a retention period ends, we delete the record or convert it into an aggregated form that no longer identifies a person. Backup copies are removed according to the backup cycle. We do not keep indefinite copies in a side archive.
14. How We Protect Information
We protect information through a combination of technical measures, physical controls and operating discipline. Access to project records and support systems is limited to the people who need it for an assigned task, accounts are protected with strong authentication, and administrative access is logged.
Data in transit between venue equipment and our support systems is encrypted. Data at rest is stored on systems that apply encryption and access control. Physical documents such as signed payout rule sheets are kept in the Neola workshop in a controlled area and are destroyed on the retention schedule.
Our staff and contractors complete privacy and security orientation before accessing client information. We run periodic reviews of access rights, remove accounts when a person leaves a project and test our incident response procedure at least once a year.
No system is perfectly secure. If a security incident affects information we control, we will notify affected parties and the relevant authorities as required by law, and we will explain what happened, what we have done and what we recommend. We will not describe a breach in vague language to make it sound smaller than it is.
15. International Transfers
CRAPSZ INC is based in the United States. If you contact us from another country, your information will be processed in the United States, where privacy laws may differ from the laws in your home jurisdiction.
Where a venue in another country engages us, our agreement addresses the transfer. We use appropriate safeguards such as standard contractual clauses or an equivalent mechanism, and we assess the legal environment of each destination before transferring regulated information.
Cloud services used for documentation and support are configured to keep records in the region specified in the venue agreement where the agreement requires regional storage. If a provider cannot meet a regional requirement, we offer a local alternative or store the record in the workshop instead.
16. Your Privacy Rights
Depending on the law that applies to you, you may have the right to request access to the personal information we hold about you, to request correction of inaccurate information, to request deletion, to request restriction of processing, to object to processing based on legitimate interests, to request portability of information you provided to us and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.
To exercise a right, write to admin@crapsz.lol with enough detail for us to identify the record and understand the request. We may ask for proof of identity where the request concerns sensitive records. We respond within the period required by applicable law, and if we need more time we explain why.
If your request concerns information held by a venue and we act as a processor, we will forward the request to the venue and support it as the venue directs. We do not decide on our own whether to delete a venue record when the venue is the controller.
We do not charge a fee for a reasonable request. If a request is manifestly unfounded or excessive, we may explain the position and, where the law permits, decline or charge a reasonable administrative fee.
17. Privacy for Children
Our services are directed to professional venue operators and their staff. Our website is not directed at children, and we do not knowingly collect personal information from a child.
Gaming venues may have their own rules that prohibit minors from entering a gaming floor or that restrict access to certain areas. Those rules belong to the venue and to the regulator that supervises it. Our systems are designed for use by trained staff, not by members of the public.
If you believe that a child has provided personal information to us, contact admin@crapsz.lol and we will investigate and delete the information where appropriate.
18. Automated Processing and Fairness
Some of our systems make automatic decisions about a game event, such as whether a payout matches the house rule sheet. These decisions are about the game, not about a person, and they are subject to review by a human supervisor. Where a decision could affect a guest, the venue provides a route for the guest to raise a question with floor staff.
We test payout rules against scripted hands before go live, and we monitor for drift after commissioning. A rule that behaves differently from the signed house sheet is treated as a defect and corrected before the table continues to settle hands under the affected configuration.
We do not use automated processing to make employment decisions, to determine creditworthiness or to build advertising profiles. If a future service involves a new automated decision, we will publish a description before the service is offered.
19. Links to Other Sites
Our website and documentation may link to resources operated by other organizations, such as a standards body, a hardware vendor or a professional association. We do not control those sites and we are not responsible for their privacy practices.
When you follow a link to another site, read its privacy notice. If you believe a site we link to is misleading or unsafe, tell us at admin@crapsz.lol and we will review the link.
20. Changes to This Policy
We may update this policy when our services change, when the law changes or when we adopt a better practice. The date at the top of the page shows the most recent update.
If a change materially affects how we handle personal information, we will add a prominent note to the policy and, where we hold a direct relationship with you, send a short notice to the contact address we have on file. We will not apply a material change retroactively to information collected under an earlier version without a lawful basis for doing so.
You are welcome to contact us for a copy of the current policy in a plain text format if that is easier to read or archive.
21. How to Contact Us
For any question about this policy, a privacy request or a concern about how information has been handled, contact CRAPSZ INC using the details below.
CRAPSZ INC, 2095 W 9260 N, Neola - 84053-7708, United States (US). Email: admin@crapsz.lol. Telephone: +15808805746. Website: https://www.crapsz.lol.
We aim to acknowledge a privacy enquiry within one business day and to resolve it as quickly as the facts allow. If you are not satisfied with our response, you may contact the supervisory authority in your jurisdiction, and we will cooperate with any lawful inquiry.
This policy is written in plain English for the venues and partners we serve. If any part is unclear, please ask us, because a privacy notice that cannot be understood is not doing its job.