Privacy Policy

Introduction

Crown999 ("Crown999", "we", "us", "our") operates the online gaming and sports betting platform accessible athttps://crown999.cam. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy ("Policy") describes the personal data we collect from you when you register for, access, or use the Crown999 platform, the purposes for which we process that data, the legal bases upon which we rely, and the rights available to you in connection with your personal information.

This Policy applies to all users of the Crown999 Platform, including registered Members and visitors who access the website without registration. By registering an account or continuing to use the Crown999 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with Crown999's Terms and Conditions and Responsible Gambling Policy. Where a conflict arises between this Policy and the Terms and Conditions with respect to data protection matters, this Policy shall prevail.

Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers such as IP addresses.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or destruction.
• "Data Controller" means Crown999, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means a third party that processes personal data on behalf of Crown999under a written data processing agreement (e.g., payment gateways, KYC verification providers).
• "KYC" means Know Your Customer — identity and age verification procedures required for regulatory compliance and fraud prevention.
• "Member" / "User" means an individual who has registered and maintains an active account on the Crown999 Platform.
• "Sensitive Personal Data" means personal data relating to health, financial position, or other categories that warrant heightened protection under applicable data protection law.
• "Cookies" means small data files placed on your device by the Crown999 Platform to facilitate functionality, analytics, and personalisation.

Personal Data We Collect

Crown999 collects personal data through several channels: directly from you when you register and interact with the Platform; automatically through your use of our systems; and from third-party service providers engaged for compliance, payment processing, and fraud detection.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

• IP address, device type, operating system, and browser type collected on each Platform visit.
• Session data including pages viewed, time spent, click patterns, and navigation paths.
• Game activity logs: games played, wagers placed, outcomes, session duration, and betting history.
• Geolocation data at the country and city level (e.g., Kuala Lumpur, Penang, Johor Bahru) derived from IP address — Crown999 does not collect precise GPS location.
• Cookie and tracking technology data as described in Section 8of this Policy.

3.3 Data from Third Parties

Crown999 may receive personal data from third-party service providers engaged for identity verification (KYC), fraud screening, payment processing, and technical platform operations. All such third parties are contractually bound to handle personal data in accordance with Crown999's data protection standards.

How We Use Your Personal Data

Crown999 processes personal data only for defined, legitimate purposes. We do not process personal data in a manner incompatible with the purposes for which it was originally collected. The primary purposes for which Crown999 processes personal data are set out below:

• Account Management: To create, maintain, and administer your Crown999 Member Account, including account authentication and password recovery.
• Transaction Processing: To process deposits via approved Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong) and to process withdrawal requests to your designated account.
• Identity Verification (KYC): To verify your identity, age (21+ enforcement), and source of funds as required by our international gaming licensing obligations and anti-money-laundering compliance framework.
• Regulatory Compliance: To meet obligations under our international gaming licence, anti-money-laundering requirements, and any lawful requests from competent regulatory or law enforcement authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity account takeover attempts, collusion, and money laundering on the Platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to administer self-exclusion and deposit limit requests, and to signpost support resources to at-risk players.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, and WhatsApp.
• Platform Improvement: To analyse aggregate usage data, optimise Platform performance, improve game selection, and enhance the overall user experience.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and relevant product updates. You may withdraw this consent at any time by contacting support.

Legal Basis for Processing

Crown999 relies on the following legal bases for processing personal data, consistent with applicable international data protection principles:

Data Sharing & Disclosure

Crown999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared externally only in the limited circumstances described below, and in all cases subject to appropriate contractual safeguards.

6.1 Service Providers (Data Processors)

Crown999 engages carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include: payment processing partners (including local Malaysian payment infrastructure providers for DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay); identity verification and KYC service providers; fraud detection and cybersecurity vendors; cloud hosting and infrastructure providers; and customer support platform operators.

6.2 Regulatory and Legal Disclosure

Crown999 may be required to disclose personal data to competent regulatory bodies, law enforcement agencies, or judicial authorities in response to lawful requests, court orders, or legal process. Crown999 will comply with such requests to the extent legally required and will notify affected Members where permitted to do so.

6.3 Corporate Transactions

In the event of a corporate merger, acquisition, or sale of assets, personal data held by Crown999 may be transferred to the successor entity, subject to equivalent data protection commitments. Affected Members will be notified of any such transfer and any changes to this Policy that may result.

Data Retention

Crown999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to meet applicable legal, regulatory, and accounting obligations.

As a general principle, active Member account data is retained for the duration of the account relationship. Following account closure, Crown999 retains personal data for a minimum period of five (5) years in accordance with our international gaming licensing requirements and anti-money-laundering record-keeping obligations.

KYC documentation (including copies of identity documents) is retained for a period consistent with applicable regulatory requirements, which typically range from five (5) to seven (7) years from the date of verification or the date the account relationship ends.

Transaction records and betting history logs are retained for a minimum of five (5) years for compliance and audit purposes.

Data retained solely for analytical purposes (e.g., anonymised platform usage statistics) is de-identified and may be retained indefinitely without constituting personal data retention.

Cookies & Tracking Technologies

Crown999 uses cookies and similar tracking technologies to operate and improve the Platform, to maintain your session while you are logged in, and to gather analytics data about how the Platform is used. The following types of cookies are used:

You can manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may affect certain personalisation features of the Platform. Disabling essential cookies will prevent you from using the Platform effectively.

Data Security

Crown999 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Crown999 Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data and financial records stored in Crown999's systems are encrypted at rest using industry-standard cryptographic methods.
• Access Controls: Personal data access within Crown999 is restricted on a strict need-to-know basis. Staff with access to Member data are bound by confidentiality obligations.
• Infrastructure Security: Crown999's hosting infrastructure is subject to regular independent security audits, vulnerability scanning, and penetration testing.
• Incident Response: Crown999 maintains a data breach response procedure. In the event of a security incident affecting personal data, affected Members will be notified in accordance with applicable requirements.

Notwithstanding the above measures, no internet-based transmission or electronic storage system is entirely immune from risk. Crown999 cannot guarantee the absolute security of data transmitted to the Platform. Users are encouraged to use strong, unique passwords and to notify Crown999 immediately at [email protected] if they suspect any unauthorised activity on their Account.

Your Data Rights

Subject to applicable law and certain limitations, Crown999 Members hold the following rights with respect to their personal data. To exercise any of these rights, please contact our support team as described in Section 14.

International Data Transfers

Crown999 operates on an internationally licensed basis and may engage service providers whose infrastructure is located outside Malaysia. Personal data processed by Crown999 may therefore be transferred to, and stored in, countries other than Malaysia.

Where personal data is transferred internationally, Crown999 takes reasonable steps to ensure that it remains subject to a standard of protection consistent with this Privacy Policy. Such steps may include entering into contractual data processing agreements with receiving parties that incorporate equivalent data protection obligations.

Crown999 does not intentionally transfer personal data to jurisdictions with materially deficient data protection standards without implementing compensating safeguards. If you have questions about specific transfer arrangements, please contact using the details in Section 14.

Minors & Age Restriction

The Crown999 Platform is strictly intended for individuals aged 21 years and above. Crown999 does not knowingly collect, use, or retain personal data from persons under the age of 21. Age verification is conducted as part of the KYC process, and accounts found to belong to persons under 21 will be immediately suspended and any associated data deleted or anonymised.

If you become aware that a minor has submitted personal data to Crown999 in connection with an account registration, please notify us immediately at [email protected] so that we may take appropriate action, including the deletion of that data and closure of the account.

Changes to This Privacy Policy

Crown999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our operational requirements. When material changes are made, the "Last Updated" date at the top of this Policy will be revised accordingly.

Where changes are significant, Crown999 will endeavour to provide registered Members with advance notice via email or a prominent notification on the Platform. Your continued use of the Crown999 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed of how Crown999 handles your personal data. Archived versions of prior policies are available upon written request to [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or Crown999's handling of your personal data — including requests to exercise any of your data rights under Section 10 — please contact us through the following channels: