crown99 Privacy Policy

1 Data Controller Identity

Crown99 ("crown99", "we", "us", "our") is the data controller responsible for personal data collected through the crown99 online gaming platform at crown99.asia. Crown99 determines the purposes and means by which Member personal data is processed in accordance with this Privacy Policy and applicable data protection legislation.

For all privacy-related queries, data subject requests, or concerns regarding this Policy, Members may contact crown99 using the support contact details provided in Section 13 of this Policy.

2 Personal Data We Collect

2.1 Registration Data

When you create a crown99 account, we collect the following personal data that you voluntarily provide:

• Full legal name;
• Date of birth (for age verification purposes);
• Residential address, including postcode and state within Malaysia;
• Email address;
• Malaysian mobile number;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering (AML) requirements, crown99 may collect copies of identity documents including your Malaysian National Registration Identity Card (NRIC), passport, or other government-issued identification, as well as proof of address documents and payment method verification documents.

2.3 Financial Data

Crown99 collects transaction-level data including deposit amounts, withdrawal requests, payment method identifiers (such as masked bank account numbers or eWallet IDs), and transaction timestamps. Crown99 does not store full payment card numbers or online banking credentials.

2.4 Gaming Activity Data

Crown99 records all gaming activity conducted under your account, including game sessions, bet amounts, game outcomes, bonus usage, and account balance changes. This data is maintained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Device and Technical Data

When you access the crown99 platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, and session duration. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

We retain records of communications between you and the crown99 support team, including live chat transcripts, support ticket records, and email correspondence. This data is retained for quality assurance, compliance, and dispute resolution purposes.

3 How We Collect Personal Data

Crown99 collects personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC verification, making a deposit, contacting support, or updating your account profile.
• Automated collection: Technical and device data collected automatically when you visit and interact with the crown99 platform, including via cookies and server logs.
• Third-party sources: Identity verification and fraud screening data received from third-party KYC and AML service providers engaged by crown99, as well as payment processing data from your bank or eWallet provider.

4 Purposes and Legal Basis for Processing

Crown99 processes your personal data for the following purposes and on the following legal bases:

• Contract performance: Processing necessary to operate your crown99 account, facilitate deposits and withdrawals, and deliver gaming services as agreed at registration.
• Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering regulations, age verification obligations, and any applicable financial reporting requirements.
• Legitimate interests: Processing for fraud detection, security monitoring, platform performance improvement, and responsible gaming monitoring — where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications where you have provided express consent. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.

5 Data Sharing and Disclosure

5.1 Service Providers

Crown99 shares personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers include KYC and identity verification services, payment processing partners, cloud infrastructure providers, and customer support technology providers. All service providers are contractually required to process data only in accordance with crown99's instructions and applicable data protection obligations.

5.2 Regulatory and Legal Disclosure

Crown99 may disclose personal data to relevant regulatory authorities, licensing bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. Crown99 will not disclose more data than is strictly required to satisfy the applicable legal obligation.

5.3 Fraud Prevention

Crown99 participates in industry fraud prevention initiatives and may share limited Member data with fraud screening organisations and other licensed gaming operators where there is a reasonable basis to suspect fraud, money laundering, or other criminal activity involving the crown99 platform.

5.4 No Sale of Personal Data

Crown99 does not sell, rent, or trade Member personal data to any third party for that party's own independent marketing or commercial purposes.

6 Cookies and Tracking Technologies

Crown99 uses cookies and similar tracking technologies on the crown99 platform to support essential platform functionality, measure platform performance, and where consent is provided, personalise your experience. The categories of cookies used include:

• Essential cookies: Required for user authentication, session management, and core platform security. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to measure aggregated platform usage patterns, page load performance, and navigation flow. Crown99 uses this data to identify and resolve performance issues.
• Preference cookies: Store your display preferences and settings to improve your experience across sessions.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to access certain platform features.

7 Data Retention

Crown99 retains personal data in accordance with the following general retention schedule:

• Account and KYC data: Retained for the duration of active account membership and for a minimum of five (5) years following account closure, as required by applicable AML and gaming licensing regulations.
• Transaction and gaming activity data: Retained for a minimum of five (5) years from the date of the relevant transaction or gaming session, for regulatory compliance and dispute resolution purposes.
• Communications data: Support communications are retained for a period of two (2) years from the date of the last communication in the relevant thread.
• Technical and device data: IP logs and device session data are retained for a period of twelve (12) months for security monitoring purposes.

Upon expiry of applicable retention periods, crown99 will securely delete or irreversibly anonymise the relevant personal data.

8 Security Measures

Crown99 implements a range of technical and organisational measures to protect Member personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the crown99 platform;
• Encryption of sensitive data fields at rest in crown99's database infrastructure;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for access to crown99's internal administrative systems;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals;
• Documented incident response procedures for the identification, containment, and notification of personal data breaches.

While crown99 takes all reasonable precautions to protect your personal data, no internet-based transmission or electronic storage system can be guaranteed to be 100% secure. Members are encouraged to use strong, unique passwords and to enable two-factor authentication on their crown99 account.

9 Your Data Protection Rights

Subject to applicable law and any overriding legal obligations of crown99, you have the following rights with respect to your personal data held by crown99:

• Right of Access: You may request a copy of the personal data crown99 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal retention obligation applies.
• Right to Restrict Processing: You may request that crown99 restrict processing of your personal data in certain circumstances, such as where the accuracy of the data is contested.
• Right to Data Portability: You may request a copy of personal data you have provided to crown99 in a structured, commonly used, machine-readable format.
• Right to Object: You may object to crown99's processing of your personal data where that processing is based on legitimate interests, and where your individual circumstances provide grounds for such objection.
• Right to Withdraw Consent: Where crown99 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact crown99 support using the details in Section 13. Crown99 will respond to all valid data subject requests within thirty (30) days of receipt.

10 Children's Privacy

The crown99 platform is strictly restricted to individuals aged 21 years and above. Crown99 does not knowingly collect personal data from persons under the age of 21. If crown99 becomes aware that personal data has been collected from an individual under 21 — whether through misrepresentation at registration or otherwise — the relevant account will be closed immediately, all funds will be forfeited, and all associated personal data will be deleted from crown99's systems without delay, subject only to any mandatory regulatory retention obligations.

11 International Data Transfers

Crown99's primary server infrastructure is operated from jurisdictions outside Malaysia. Accordingly, personal data collected from Malaysian Members may be transferred to and processed in countries other than Malaysia. Where such transfers occur, crown99 ensures that appropriate safeguards are in place to protect the transferred data, including contractual data transfer mechanisms consistent with applicable international data protection standards. By using the crown99 platform, you acknowledge and consent to such international transfers as described in this Policy.

12 Changes to This Privacy Policy

Crown99 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Updated versions of this Policy will be published on this page with an updated "Last Updated" date. Where changes are material, crown99 will provide notice to active Members via email to their registered address. Your continued use of the crown99 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

13 Contact Us

For all privacy-related queries, data subject access requests, or complaints regarding crown99's handling of your personal data, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 via the crown99 platform support widget

Crown99 is committed to resolving all data protection concerns in a timely and transparent manner. If you are not satisfied with crown99's response to your complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.