Introduction and Scope of Privacy Policy
Welcome to the crown88 Privacy Policy page. We, crown88, are an online gaming platform operator licensed under a recognised international licence. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information when you use the website, mobile app, and all services provided by crown88 (collectively referred to as the "Platform").
This policy applies to all users of the Crown88 platform, including website visitors, registered members, and any individual who interacts with our services. By using the Crown88 platform, you agree to the practices described in this Privacy Policy.
Crown88 is committed to complying with all applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant regulatory guidelines. This commitment goes beyond a legal obligation — it is a core value in building trust with our members across Malaysia.
Personal Information We Collect
Crown88 collects various types of information depending on how you interact with our platform. This information is collected directly from you, automatically through your use of the platform, or from trusted third-party sources.
Information you provide directly:
- Full name as per identity card or passport
- Identity card number (MyKad) or passport number
- Date of birth and gender
- Current residential address
- Active mobile phone number
- Valid email address
- Bank account or e-wallet details for deposit and withdrawal purposes
- Identity verification (KYC) documents such as a copy of your identification card, utility bill, or bank statement
Information collected automatically:
- IP address and device information (operating system, browser type, screen resolution)
- General location data based on IP address
- Game activity logs including date, time, game type, and wagering amount
- Login session data including login time, logout time, and session duration
- Records of all financial transactions on the platform
- Cookie information and device identifiers
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity | Name, IC, date of birth | Account verification, KYC, fraud prevention |
| Contact | Email, phone number | Communications, two-factor authentication, support |
| Financial | Bank accounts, e-wallets | Deposits, withdrawals, AML compliance |
| Technical | IP, device, cookies | Security, fraud detection, optimization |
| Games | Activity logs, betting records | Responsible gaming, audits, disputes |
How We Use Your Data
Every piece of data we collect has a clear and legitimate purpose. crown88 does not use your data for unrelated purposes without your prior consent. The following is a complete list of data use purposes:
- Account management: Register, verify, and maintain your member account, including the KYC process and age verification.
- Transaction processing: Process deposits, withdrawals, bonus payments, and all financial transactions on the platform.
- Security and fraud prevention: Detect suspicious activity, prevent unauthorized access, and protect the integrity of the platform.
- Legal compliance: Meet regulatory requirements, financial reporting obligations, and cooperate with authorities when legally required.
- Customer support: Resolve inquiries, complaints, and disputes efficiently and accurately.
- Service communications: Send important notifications about your account, transactions, and policy changes.
- Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate assistance.
- Platform improvements: Analyze aggregated usage data to improve user experience and platform performance.
- Marketing (with consent): Send promotional information and exclusive offers — only if you have consented to receive them.
Information Sharing and Disclosure
Crown88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. However, there are limited circumstances in which we need to share your information with certain parties to operate our services effectively:
- Payment service providers: Banks, e-wallet operators (Touch 'n Go eWallet, GrabPay, Boost), and FPX/DuitNow payment processors required to carry out your financial transactions.
- Game software providers: Game provider partners who require minimum information to verify eligibility and prevent fraud.
- IT service providers: Companies that maintain our technical infrastructure — such as cloud servers, security systems, and communication platforms — all subject to strict confidentiality agreements.
- Regulatory bodies and law enforcement: When required by law, court order, or a legitimate request from the relevant authorities.
- Anti-money laundering (AML): Relevant financial authorities where reporting obligations exist under AML/CFT laws.
All third parties with whom we share data are required to uphold data protection standards equivalent to those of crown88. We execute comprehensive data processing agreements with each of our service partners to ensure your data remains protected at all times.
Encryption, Security and Technical Safeguards
Crown88 continuously invests in industry-grade security infrastructure to keep your personal data safe at all times. We employ a multi-layered security approach covering technical, organisational, and operational safeguards.
Our technical security measures:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and crown88 servers is encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept your communications.
- Data-at-rest encryption: Sensitive data stored in our databases, including financial and personal identification information, is encrypted using AES-256 standards.
- Two-factor authentication (2FA): The 2FA system is available to all members to add an extra layer of protection to their accounts.
- Firewall and IDS/IPS: Our infrastructure is protected by next-generation firewalls and real-time intrusion detection/prevention systems.
- 24/7 Monitoring: Our cybersecurity team monitors the platform around the clock to detect and respond to any threats promptly.
- Regular security audits: We conduct regular penetration testing and vulnerability assessments carried out by independent security experts.
- Role-based access control: crown88 internal staff only have access to the data required for their role — the principle of least privilege is strictly observed.
Cookies, Tracking Technologies, and Your Choices
Crown88 uses cookies and similar tracking technologies to enhance your experience, analyse platform traffic, and ensure account security. The following are the types of cookies we use:
- Essential cookies (required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as the platform will not function properly without them.
- Performance and analytics cookies: Collect information about how you use our platform to help us understand usage patterns and improve performance. This data is analyzed in aggregate and does not identify individuals.
- Functional cookies: Remember your preferences such as language, display settings, and login details for your convenience.
- Security cookies: Used to detect suspicious login attempts, identify bots, and protect your account from unauthorised access.
You can manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies in your browser, please refer to your browser's help documentation.
Your Rights Regarding Personal Data
As a crown88 member and data subject under applicable data protection laws, you have various rights regarding your personal information. crown88 respects and facilitates the exercise of these rights:
Request a copy of the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data under certain circumstances
Restrict the processing of your data in certain situations
Receive your data in a structured, machine-readable format
Object to data processing for direct marketing purposes
To exercise any of the above rights, please contact our data protection team via official email or the platform's live chat. We will process your request within 30 working days from the date of receipt. For complex cases, this period may be extended with prior notice to you.
Data Retention Period
Crown88 retains your personal data for as long as necessary for the purposes stated in this policy or as required by law. We do not keep data longer than necessary.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Active account information | For as long as the account is active | Contract performance |
| Financial transaction records | 7 years after transaction | Legal requirements (AML/tax) |
| Game activity logs | 5 years | Regulatory audit |
| KYC documents | 5 years after account closure | PDPA & AML Compliance |
| Support communication logs | 3 years | Legitimate interest (dispute resolution) |
| Marketing data (with consent) | Until consent is withdrawn | Consent |
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be associated with your identity. Our deletion process adheres to recognised security standards.
Protection of Minors and Vulnerable Individuals
The crown88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.
During the registration process, we implement strict age verification measures to ensure compliance with this requirement. If we discover that we have inadvertently collected information from an underage individual, we will promptly delete that information and close the account in question.
- All registration applications are subject to age verification checks.
- KYC documents showing date of birth are required before any withdrawal is processed.
- If you become aware that a minor has registered an account on our platform, please contact us immediately.
Parents or guardians concerned about their children's use of online gaming platforms are encouraged to use parental control software and have open conversations about the risks of online gaming.
Contact Us & Privacy Complaints
If you have any questions, concerns, or complaints regarding this Privacy Policy or how crown88 handles your personal data, we encourage you to contact us directly. Our data protection team is ready to assist you.
- Official email: [email protected]
- Live chat: Available 24/7 via the crown88 platform
- Response time: Privacy-related enquiries are answered within 3–5 business days
If you are dissatisfied with how we handle your privacy complaint, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.