crown999 Privacy Policy

1. Who We Are

This Privacy Policy ("Policy") is issued by crown999 ("crown999", "we", "us", "our"), the operator of the online gaming and sportsbook platform accessible at crown999.co. crown999 is the data controller in respect of personal data processed in connection with the provision of its Services.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and the requirements of our international gaming authority licence. This Policy applies to all personal data collected through the crown999 website, mobile interface, and any related communications, regardless of whether you are a registered player or a visitor.

2. Personal Data We Collect

crown999 collects personal data only to the extent necessary to provide its Services, meet legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify 21+ eligibility);
• National Identification Number (MyKad or equivalent);
• Residential address (including postcode and state in Malaysia);
• Email address;
• Mobile phone number;
• Username and account credentials (passwords are stored in hashed form and are never accessible in plain text).

2.2 Financial & Transaction Data

• Payment method details (e.g., Touch 'n Go eWallet account identifiers, Boost account, FPX bank selection, Maybank2u or CIMB account reference);
• Deposit, withdrawal, and transaction history;
• MYR wallet balance and bonus balance records.

2.3 Identity Verification Documents

• Copies of government-issued photo identification (e.g., MyKad, passport);
• Proof of residential address (e.g., utility bills, bank statements addressed to your registered address in Kuala Lumpur, Penang, Johor Bahru, or elsewhere in Malaysia);
• Proof of payment method ownership where required by KYC/AML procedures.

2.4 Usage & Technical Data

• IP address and approximate geolocation;
• Browser type, version, and operating system;
• Device identifiers;
• Session duration and login timestamps;
• Pages viewed, games played, bets placed, and navigation patterns;
• Referring URLs.

2.5 Communications Data

• Live chat transcripts and support ticket content;
• Email correspondence with the crown999 support team;
• Responsible gaming communications and self-exclusion requests.

3. How We Use Your Personal Data

Purpose	Data Used
Account registration and management	Registration & Identity Data
Age and identity verification (KYC)	Identity documents, date of birth
Processing deposits and withdrawals	Financial & Transaction Data
Anti-money laundering (AML) compliance	Identity, Financial, Usage Data
Providing and improving game services	Usage & Technical Data
Fraud detection and account security	IP address, login history, device data
Customer support	Communications Data, account data
Responsible gaming monitoring	Usage Data, Financial Data
Marketing communications (opt-in only)	Email address, preferences
Regulatory reporting obligations	Identity, Financial, Transaction Data

crown999 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where required for fraud prevention or regulatory compliance, in which case you have the right to request human review.

4. Legal Basis for Processing

crown999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the Services you have requested;
• Legal obligation: Processing required to comply with KYC/AML obligations, gaming licensing requirements, and applicable financial regulations;
• Legitimate interests: Processing required for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time by contacting our support team.

5. Sharing Your Personal Data

crown999 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following circumstances:

• Payment processors: To facilitate MYR transactions via Touch 'n Go eWallet, Boost, FPX, Maybank2u, CIMB Clicks, Public Bank, and bank transfer;
• Identity verification providers: To satisfy KYC requirements under our licensing obligations;
• Game software providers: To operate the games on our platform; providers receive only the minimum data necessary (e.g., player ID, bet amount, currency);
• Regulatory authorities: Where required by law, our gaming licence, or a lawful order from a competent authority;
• Fraud prevention services: To detect and prevent financial crime and bonus abuse;
• Professional advisers: Including legal counsel and auditors, under confidentiality obligations.

All third-party processors engaged by crown999 are bound by data processing agreements requiring them to protect your data to an equivalent standard.

6. Cookies & Tracking Technologies

crown999 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us deliver a functional and personalised experience.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function (e.g., session authentication, security tokens). These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, preferred lobby view) to improve your experience across sessions.
• Analytical cookies: Collect anonymised data about how players use the platform to help us identify areas for improvement.
• Security cookies: Used to detect fraudulent activity and protect against account compromise.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the crown999 platform. crown999 does not use third-party advertising cookies or sell browsing data to ad networks.

7. Data Retention

crown999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and regulatory reporting requirements. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with AML and gaming licence obligations;
• Identity verification documents are retained for the period required by our licensing authority, typically five (5) years after the end of the business relationship;
• Support communications are retained for two (2) years unless a longer retention period is required by an ongoing investigation or legal matter;
• Marketing opt-in records are retained until consent is withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

8. Data Security

crown999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Industry-standard SSL/TLS encryption for all data in transit between your device and crown999 servers;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Two-factor authentication (2FA) available for player accounts;
• Regular security audits and penetration testing by independent security professionals;
• Automatic session timeout after periods of inactivity.

9. Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by crown999:

• Right of access: You may request a copy of the personal data crown999 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where retention is no longer necessary, subject to legal retention obligations;
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances;
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to us;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond within 30 days. Note that some rights may be limited by our AML and gaming licence obligations.

10. Children and Minors

If you believe that a minor has registered an account or provided personal data to crown999, please notify us immediately at [email protected].

11. Third-Party Content

The crown999 platform may contain links to game providers' informational pages or third-party payment gateway interfaces for the purpose of completing transactions. Once you leave the crown999 platform, this Privacy Policy no longer applies. crown999 is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third parties you interact with.

12. Updates to This Policy

crown999 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered players by email to the address on file or via a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the crown999 platform following notification of changes constitutes acceptance of the updated Policy.

13. Contact & Data Enquiries

For all privacy-related enquiries, data subject access requests, or concerns regarding how crown999 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via your crown999 account dashboard
• Email: [email protected]
• Hours: 24 hours daily, Malaysia Standard Time (UTC+8)

We aim to acknowledge all privacy-related requests within 5 business days and resolve them within 30 calendar days. If you are unsatisfied with our response, you have the right to lodge a complaint with the applicable data protection supervisory authority.