crown66 Privacy Policy

1. Introduction

Crown66 ("crown66", "we", "us", "our") operates the online gaming platform accessible at crown66.net and all associated subdomains and mobile interfaces. Crown66 is committed to protecting the personal data of all users ("Member", "Player", "User", "you") who interact with our platform.

This Privacy Policy describes how crown66 collects, processes, stores, and protects personal data in connection with the services we provide — including live casino, slot games, sportsbook, promotions, and customer support. It applies to all crown66 Members, regardless of the device or browser used to access the platform.

By registering a crown66 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection legislation, crown66 acts as the Data Controller in respect of the personal data of its Members. Crown66 determines the purposes and means by which personal data is processed. All enquiries regarding data processing, data subject rights, or this Privacy Policy should be directed to our Data Protection team via live chat or the contact details set out in Clause 15.

3. Information We Collect

3.1 Information You Provide Directly

When you register a crown66 account or interact with our services, we collect the following categories of personal data:

• Identity data: full legal name, date of birth, gender, nationality;
• Contact data: email address, mobile phone number, residential address (including postcode and state within Malaysia, e.g. Kuala Lumpur, Selangor, Penang, Johor, Sabah, Sarawak);
• Verification documents: government-issued identity card (MyKad), passport, or other acceptable KYC documentation and selfie verification images;
• Financial data: bank account details, eWallet identifiers (e.g. Touch 'n Go eWallet, Boost), transaction records, and deposit/withdrawal history;
• Account credentials: username and hashed password (we never store plaintext passwords);
• Communications data: records of live chat, email correspondence, and support ticket interactions.

3.2 Information Collected Automatically

When you access or use the crown66 platform, we automatically collect certain technical and usage data, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps, page views, and navigation paths;
• Game session data, wager amounts, and gameplay outcomes;
• Cookie identifiers and similar tracking technologies (see Clause 9).

4. How We Use Your Data

Crown66 processes personal data for the following purposes:

• Account creation and management: to register, verify, and administer your crown66 account;
• Service delivery: to provide live casino, slot, and sportsbook services, process deposits and withdrawals, and credit winnings;
• KYC and regulatory compliance: to satisfy identity verification, age verification (21+), anti-money laundering (AML), and Know Your Customer obligations under our international gaming authority licence;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, account compromise, and platform abuse;
• Customer support: to respond to enquiries, resolve disputes, and provide technical assistance;
• Promotions and communications: to send you relevant promotional offers and platform updates where you have opted in or where we have a legitimate interest to do so;
• Responsible gaming: to monitor gameplay patterns for signs of problem gambling and to enforce player-set limits and self-exclusion decisions;
• Platform improvement: to analyse aggregate usage data and improve the functionality, performance, and user experience of the crown66 platform;
• Legal obligations: to comply with applicable laws, regulations, and orders issued by competent authorities.

5. Legal Basis for Processing

Crown66 processes personal data under the following legal bases:

• Contractual necessity: processing required to perform the services you have engaged crown66 to provide under our Terms & Conditions;
• Legal obligation: processing necessary for compliance with AML, KYC, licence conditions, and applicable law;
• Legitimate interests: processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms;
• Consent: for optional marketing communications and non-essential cookie placement, where you have given explicit, freely withdrawable consent.

6. Sharing of Personal Data

Crown66 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly as necessary:

• Payment processors and banking partners: to process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and other supported channels;
• Identity and AML verification providers: third-party KYC service providers engaged to perform document verification and sanctions screening;
• Game content providers: certified game studios and aggregators who process gameplay data under their own data processing agreements with crown66;
• IT infrastructure and cloud providers: hosting, database, and security service providers operating under contractual data processing obligations;
• Regulatory authorities and law enforcement: where required by applicable law, court order, or gaming licence conditions;
• Professional advisers: legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.

All third parties with whom crown66 shares personal data are contractually required to process that data only as directed by crown66 and in accordance with applicable data protection standards.

7. International Data Transfers

Crown66 operates globally and some of our service providers and infrastructure partners may be located outside Malaysia. Where personal data is transferred internationally, crown66 ensures appropriate safeguards are in place — including standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms — to protect your data to a standard equivalent to that required under applicable Malaysian and international data protection law.

8. Data Retention

Crown66 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying regulatory retention obligations under our gaming licence. Specifically:

• Active account data is retained for the lifetime of your crown66 account;
• KYC and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements;
• Support correspondence is retained for two (2) years from the date of last interaction;
• Gameplay logs are retained for three (3) years for dispute resolution and regulatory audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

9. Cookies & Tracking Technologies

Crown66 uses cookies and similar tracking technologies (including web beacons and pixel tags) to operate and improve the platform. Cookies used by crown66 fall into the following categories:

• Strictly necessary cookies: required for session authentication, security, and core platform functionality. These cannot be disabled without impairing your ability to use the platform;
• Performance and analytics cookies: used to measure platform traffic, page performance, and user navigation patterns using aggregated, anonymised data;
• Preference cookies: used to remember your language, regional, and display preferences;
• Marketing cookies: used to serve relevant promotional content, subject to your consent where required.

You may manage non-essential cookie preferences via the cookie settings panel on the platform. Withdrawing consent for non-essential cookies does not affect the legality of processing that occurred prior to withdrawal.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by crown66:

• Right of access: to request a copy of the personal data crown66 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restriction: to request that processing of your data be limited in certain circumstances;
• Right to data portability: to receive your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: to withdraw consent for any processing activity where consent is the legal basis, at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection team via live chat or the contact details in Clause 15. Crown66 will respond to all verified requests within 30 calendar days.

11. Children & Minors

The crown66 platform is strictly for adults aged 21 years and above. Crown66 does not knowingly collect personal data from individuals under the age of 21. If crown66 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted promptly and the associated account will be permanently closed. If you believe a minor has provided personal data to crown66, please notify us immediately via the contact details in Clause 15.

12. Data Security

Crown66 implements technical and organisational security measures appropriate to the risk of the processing activities carried out. These include TLS 1.3 encryption for all data in transit, AES-256 encryption for sensitive data at rest, salted cryptographic hashing of all stored passwords, role-based access controls limiting internal data access to personnel with a demonstrable business need, and regular penetration testing and vulnerability assessments by independent security specialists.

No online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, crown66 will notify you without undue delay in accordance with applicable data breach notification obligations.

13. Third-Party Services

The crown66 platform integrates third-party game content, payment processing, and analytics services. These third parties operate under their own privacy policies and are responsible for their own data processing activities. Crown66 is not responsible for the privacy practices of third-party providers beyond the contractual data processing obligations it imposes on them as described in Clause 6.

14. Changes to This Policy

Crown66 reserves the right to update this Privacy Policy at any time. Material changes will be communicated via a notice on the crown66 platform or to your registered email address with at least 14 days' notice before the changes take effect. Continued use of the crown66 platform following notification of changes constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

15. Contact Us

For questions, data subject requests, or concerns about this Privacy Policy or crown66's handling of your personal data, please contact our Data Protection team via:

• Live Chat: available 24/7 on the crown66 platform (fastest response);
• Email: support@crown66.net — please include "Privacy" in your subject line.

Crown66 takes all privacy enquiries seriously and will acknowledge receipt within one business day and provide a substantive response within 30 calendar days of verification of your identity.