crown66 Privacy Policy

1. Who We Are

crown66 is the operator of the online casino and sports betting platform accessible at crown66.org and any associated subdomains or mobile interfaces (collectively, the "Platform"). crown66 acts as the data controller in respect of personal data collected from Members and visitors to the Platform. References to "crown66", "we", "us", or "our" in this Privacy Policy refer to the crown66 platform operator.

This Privacy Policy applies to all personal data collected through the Platform, including data provided during account registration, KYC verification, payment processing, customer support interactions, and through automated data collection technologies such as cookies.

2. Personal Data We Collect

crown66 collects the following categories of personal data from Members and, where applicable, from visitors to the Platform:

crown66 does not intentionally collect sensitive personal data such as health information, racial or ethnic origin, religious beliefs, or biometric data beyond what is incidentally captured in government-issued identity documents submitted for KYC purposes.

3. How We Collect Your Data

crown66 collects personal data through the following means:

• Direct provision by you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automated collection — through cookies, web beacons, session tracking technologies, and server logs that capture technical and usage data when you access the Platform.
• Third-party sources — from KYC verification service providers, payment processors, fraud detection services, and, where applicable, from gaming regulatory authorities as part of our licensing obligations.

4. How We Use Your Personal Data

crown66 uses personal data collected from Members for the following purposes:

• To create, manage, and verify your crown66 Account, and to authenticate your identity when you log in.
• To process deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, and GrabPay.
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations applicable to licensed gaming operators, including transaction monitoring and suspicious activity reporting.
• To verify your age and eligibility to use the Platform in accordance with crown66's 21+ age policy.
• To deliver customer support, process complaints, and resolve disputes.
• To send transactional communications such as deposit confirmations, withdrawal notifications, and OTP codes required for account security.
• To send promotional communications about crown66 bonuses, offers, and platform updates, where you have provided consent or where such communications are permitted under applicable law. You may opt out of promotional emails at any time.
• To monitor for fraudulent activity, prohibited conduct, and breaches of crown66's Terms & Conditions.
• To operate responsible gaming tools including deposit limits, session monitoring, and self-exclusion management.
• To analyse platform usage patterns and improve the crown66 product offering.

5. Legal Basis for Processing

crown66 processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil the membership agreement between crown66 and the Member, including account management, payment processing, and delivery of gaming services.
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including AML obligations, age verification mandates, and gaming licensing conditions.
• Legitimate interests — processing carried out in the pursuit of crown66's legitimate business interests where such interests are not overridden by the Member's rights, including fraud prevention, platform security, and product improvement.
• Consent — where crown66 relies on consent as the legal basis for processing (e.g., for certain marketing communications), Members have the right to withdraw consent at any time by contacting support or using the unsubscribe mechanism in any marketing email.

6. Sharing Your Personal Data

crown66 does not sell or rent your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors and e-wallet providers — to facilitate deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay. Data shared is limited to what is necessary for transaction processing.
• KYC and identity verification providers — to verify Member identity and age as required by our licensing obligations. These providers operate under strict data processing agreements with crown66.
• Game software providers — certain game providers (e.g., Pragmatic Play, Evolution Gaming) may receive session-level technical data necessary to deliver their games. No unnecessary personal information is shared with game providers.
• Regulatory and law enforcement authorities — where required by applicable law, a court order, or regulatory directive, crown66 will disclose personal data to the relevant authority. crown66 will, where legally permitted, notify affected Members of such disclosures.
• Professional advisers — including legal counsel, auditors, and consultants where necessary for the operation of crown66's business, all of whom are bound by confidentiality obligations.

All third parties with whom crown66 shares personal data are required by contract to implement appropriate technical and organisational security measures consistent with the sensitivity of the data shared.

7. Cookies & Tracking Technologies

crown66 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — required for the Platform to function, including session management, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies — remember your preferences such as language settings and login state to provide a more convenient experience.
• Analytics cookies — collect anonymised usage data to help crown66 understand how Members interact with the Platform, identify areas for improvement, and diagnose technical issues.
• Security cookies — assist in detecting and preventing fraudulent activity and unauthorised account access.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the crown66 Platform. crown66 does not use cookies to serve third-party advertising.

8. Data Retention

crown66 retains personal data for the following periods, or longer where required by applicable law:

• Account and transaction records — retained for a minimum of 5 years from the date of the last transaction or account closure, as required by anti-money laundering regulations applicable to licensed gaming operators.
• KYC documentation — retained for a minimum of 5 years following account closure or the completion of the relevant transaction, in accordance with AML and gaming licensing requirements.
• Customer support communications — retained for 3 years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing data — retained until you withdraw consent or opt out of marketing communications, after which it is promptly removed from active marketing databases.
• Technical and log data — retained for a rolling period of 12 months for security and fraud investigation purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with crown66's data destruction procedures.

9. Your Rights

Subject to applicable law and crown66's legal and regulatory obligations, Members have the following rights in relation to their personal data:

• Right of access — you may request a copy of the personal data crown66 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to crown66's regulatory retention obligations.
• Right to restrict processing — you may request that crown66 restrict processing of your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to data portability — you may request that crown66 provide your data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to object — you may object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection to direct marketing, crown66 will cease such processing immediately.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the crown66 privacy team at [email protected]. Requests will be acknowledged within 5 business days and responded to within 30 days. crown66 may need to verify your identity before processing a data rights request.

10. Children and Minors

crown66 is strictly an adult platform. The Platform is not directed at, and crown66 does not knowingly collect personal data from, individuals under 21 years of age. Age verification is conducted as a mandatory part of the KYC process for all Members.

If crown66 discovers or is informed that it has inadvertently collected personal data from an individual under the age of 21, all data relating to that individual will be immediately and permanently deleted from crown66's systems, and the associated Account will be closed with any deposited funds returned to the source payment method.

If you have reason to believe that a minor has registered an Account on crown66, please contact us immediately at [email protected].

11. International Data Transfers

crown66 operates under international gaming licensing and may engage service providers whose data processing infrastructure is located outside Malaysia. Where personal data is transferred to countries that may not offer the same level of data protection as Malaysia, crown66 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard clauses that impose equivalent data protection obligations on the recipient.
• Transfers to recipients in jurisdictions that have been assessed as providing an adequate level of data protection by relevant supervisory authorities.
• Use of encryption and access controls to protect data in transit across international networks.

12. Security Measures

crown66 implements a comprehensive set of technical and organisational security measures to protect Member personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the crown66 Platform.
• AES-256 encryption for personal data and sensitive financial information stored in crown66 databases.
• Two-factor authentication available for all Member accounts and mandatory for internal administrative access.
• Role-based access controls limiting internal access to personal data to personnel who require it for their specific job functions.
• Continuous security monitoring, intrusion detection systems, and regular third-party penetration testing.
• Documented incident response procedures to detect, contain, and notify affected Members of data breaches in accordance with applicable regulatory requirements.

Despite these measures, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords and to enable two-factor authentication on their crown66 accounts.

13. Changes to This Privacy Policy

crown66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, crown66 will provide Members with advance notice via email or a prominent notice on the Platform at least 14 days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the crown66 Platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should discontinue use of the Platform and contact support to close your Account.

14. Contact & Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or crown66's handling of your personal data, please contact our privacy team using the details below. Please note that email addresses are provided as plain text only — they are not clickable links.

• Privacy enquiries email: [email protected]
• Live chat support: Available 24/7 via the crown66 Platform when logged in to your Account
• Response commitment: Privacy requests acknowledged within 5 business days; substantive responses within 30 calendar days
• Languages supported: English, Bahasa Malaysia, Mandarin Chinese

crown66 takes privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.