Crown88 Privacy Policy

Crown88 ("Crown88", "we", "us", "our") operates the online gaming platform accessible at https://crown88.buzz (the "Platform") and is committed to safeguarding the privacy and personal data of all individuals who access or use our services, including registered Members and visitors to the Platform (collectively referred to as "you" or "data subjects").

This Privacy Policy ("Policy") sets out the basis on which Crown88 collects, processes, stores, discloses, and otherwise handles personal data in connection with the Platform and our associated services. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, each of which form part of your agreement with Crown88.

Crown88 processes personal data in accordance with applicable data protection legislation and recognised principles of fair and transparent data handling. We do not sell, rent, or commercially trade your personal data with unaffiliated third parties. Your data is used solely to deliver, maintain, and improve the Crown88 service and to meet our regulatory obligations.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Crown88 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify compliance with our 21+ age requirement)
• Email address and mobile phone number
• Residential address within Malaysia (including city references such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam)
• Chosen username and encrypted password credentials

3.2 KYC Verification Data

• Scanned copy or clear photograph of a valid Malaysian NRIC (MyKad), driver's licence, or passport
• Proof of address document (utility bill or bank statement, issued within three months)
• Selfie photograph holding the submitted identity document

3.3 Financial Data

• Payment method details used for deposits and withdrawals (e.g., account details for Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency wallet addresses for BTC, ETH, USDT, BNB)
• Transaction history including deposit amounts, withdrawal requests, and bonus credits denominated in Malaysian Ringgit (MYR) or cryptocurrency equivalent

3.4 Technical and Usage Data

• IP address, device identifiers, browser type and version, operating system
• Session duration, pages visited, game history, betting activity, and interaction logs
• Geolocation data (to the extent permitted and for the purpose of access restriction compliance)
• Cookies and similar tracking technologies as described in Section 10 of this Policy

3.5 Communications Data

• Records of your interactions with Crown88's customer support team via live chat or email
• Feedback, complaints, dispute correspondence, and any other written communications you direct to Crown88

3.6 Responsible Gambling Data

• Self-exclusion status, deposit limit configurations, session limit settings, and cool-off period records, maintained for compliance, player protection, and regulatory purposes

Crown88 collects personal data through the following channels:

• Directly from you: During Account registration, KYC submission, payment transactions, use of responsible gambling tools, completion of support queries, and any other direct interaction with the Platform or Crown88 staff.
• Automatically through the Platform: Via server logs, cookies, session tokens, and analytics tools that record your device and browsing behaviour while using the Crown88 Platform.
• From third-party service providers: Including identity verification agencies engaged to conduct KYC checks, payment processors handling deposit and withdrawal transactions, fraud detection services, and financial compliance screening databases where required by law.

Crown88 processes your personal data for the following specific purposes:

Crown88 does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individual Members, except where required for fraud prevention, AML compliance, or responsible gambling risk assessment — in which case human review is available upon request.

Crown88 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions accepted by each Member upon registration, including Account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including AML legislation, KYC mandates, and responsible gambling obligations.
• Legitimate Interests: Processing carried out for Crown88's legitimate business interests, including fraud prevention, Platform security, dispute resolution, and service improvement, where such interests are not overridden by the rights and freedoms of data subjects.
• Consent: Processing for optional purposes, such as the sending of marketing communications, where Crown88 has obtained your explicit consent. Consent may be withdrawn at any time by contacting Crown88 support or using the opt-out mechanism in any marketing email.

Crown88 does not sell, trade, or rent your personal data to unaffiliated third parties for their own commercial purposes. Crown88 may share personal data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data processing agreements:

• KYC and Identity Verification Providers: Third-party agencies engaged to verify the identity, age, and address of Members in compliance with regulatory requirements.
• Payment Service Providers: Processors facilitating MYR and cryptocurrency transactions, including providers supporting DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency networks.
• Fraud Prevention and AML Screening Services: Platforms and databases used to screen transactions and Member profiles against sanctions lists, politically exposed person (PEP) registers, and fraud risk indicators.
• Cloud Infrastructure and Hosting Providers: Providers that host Crown88's servers, databases, and associated infrastructure, subject to contractual data protection obligations.
• Regulatory and Law Enforcement Authorities: Where Crown88 is required or permitted by law to disclose personal data to regulatory bodies, law enforcement agencies, courts, or other government authorities in Malaysia or internationally.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers engaged by Crown88 in connection with legal, regulatory, or compliance matters, subject to duties of confidentiality.

Crown88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of the Member's active Account relationship with Crown88, plus any additional period required by applicable law following Account closure.
• KYC and Identity Verification Data: Retained for a minimum of five (5) years following the end of the Member's relationship with Crown88, in accordance with standard AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• Support and Communications Records: Retained for a minimum of three (3) years, or longer where records are relevant to ongoing legal or regulatory proceedings.
• Marketing Consent Records: Retained for the period during which consent is active, plus a reasonable additional period to evidence compliance with consent requirements.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Crown88 implements a range of technical, organisational, and procedural security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Crown88 Platform is encrypted in transit using industry-standard Transport Layer Security protocols.
• Encryption at Rest: Sensitive personal data stored on Crown88 servers, including KYC documentation and payment credentials, is encrypted at rest using appropriate cryptographic standards.
• Access Controls: Personal data is accessible only to Crown88 personnel and authorised third-party processors who require access in the performance of their legitimate functions, subject to role-based access permissions and confidentiality obligations.
• Multi-Factor Authentication: Internal Crown88 systems handling personal data are protected by multi-factor authentication requirements for all authorised personnel.
• Regular Security Assessments: Crown88 conducts periodic security assessments and vulnerability testing to identify and remediate potential risks to personal data held on our infrastructure.
• Incident Response: Crown88 maintains a data breach response procedure. In the event of a personal data breach that is likely to result in significant risk to affected individuals, Crown88 will notify the relevant data subjects and regulatory authorities in accordance with applicable requirements.

While Crown88 takes all reasonable steps to protect your personal data, no digital platform or internet transmission is entirely immune from security risks. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying Crown88 immediately if you suspect that your Account has been accessed by an unauthorised party.

Crown88 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform to enhance user experience, maintain session state, collect analytical data, and support fraud prevention activities. Cookies are small text files stored on your device when you access the Platform.

Crown88 uses the following categories of Cookies:

Most web browsers allow you to manage Cookie preferences through your browser settings. However, disabling strictly necessary Cookies may impair your ability to access and use certain features of the Crown88 Platform. For detailed guidance on managing Cookies in your specific browser, refer to your browser's help documentation.

As a data subject, you hold a number of rights in relation to your personal data held by Crown88. Crown88 respects and supports the exercise of these rights, subject to applicable legal limitations and identity verification requirements to prevent fraudulent access requests.

To exercise any of the rights described in this section, please submit your request in writing to [email protected], with the subject line "Data Rights Request". Crown88 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days, except where the complexity or volume of requests requires an extension of up to a further sixty (60) days, of which you will be notified.

The Crown88 Platform is strictly intended for individuals aged 21 years and above. Crown88 does not knowingly collect or process personal data relating to individuals below this age threshold. Crown88 enforces age verification through the KYC process applicable to all Members, which requires submission of valid government-issued age-bearing identification.

In the event that Crown88 discovers it has inadvertently collected personal data relating to an individual under the age of 21, we will take immediate steps to delete all associated Account data and transaction records, return any net deposits to the originating payment method, and permanently close the Account. Any bonus credits received will be forfeited in full.

Parents or legal guardians who believe that a minor may have registered an Account on the Crown88 Platform are encouraged to contact our support team immediately at [email protected]. Crown88 treats such reports as high-priority and will respond within 24 hours.

In the course of providing services to Malaysian Members, Crown88 may transfer personal data to third-party service providers or infrastructure partners located outside of Malaysia. Where such transfers occur, Crown88 takes appropriate steps to ensure that personal data is protected to a standard equivalent to that applicable in Malaysia, including through the use of contractual data protection agreements, standard contractual clauses, or equivalent transfer mechanisms recognised under applicable data protection frameworks.

Crown88 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards. By accepting this Privacy Policy, you acknowledge that your personal data may be transferred and stored outside Malaysia for the purposes described herein.

Crown88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable data protection legislation, regulatory guidance, Crown88's data processing activities, or technological developments affecting data security.

Where amendments are material — meaning they substantively affect Member rights or the manner in which Crown88 processes personal data — Crown88 will provide reasonable prior notice via in-Platform notification or email to the address registered on the Member's Account, and will update the "Last updated" date at the head of this Policy.

Your continued use of the Crown88 Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the amended Policy. Where you do not agree with any amendment, you should cease using the Platform and request Account closure in accordance with the procedures set out in our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or Crown88's handling of your personal data, please contact our team through one of the following channels:

• Email: [email protected] — for privacy queries, data rights requests, and data breach notifications. Please include "Privacy Policy" or "Data Rights Request" in your subject line.
• Live Chat: Available 24 hours a day, 7 days a week, directly through the Crown88 Platform. For data rights requests, we recommend submitting in writing via email to create a verifiable record.