Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by Crown888 ("Crown888", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://crown888.cam ("the Platform"). This Policy describes how Crown888 collects, uses, stores, discloses, and safeguards the personal data of individuals ("Players", "Users", "you") who access or use the Platform.

Crown888 recognises that the privacy of our players is of the utmost importance. We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws and best practices, including principles consistent with Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable to our operations and our Malaysian player base.

By registering an account on Crown888, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must cease using the Platform immediately.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means Crown888 in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Crown888 under a contractual arrangement — including payment processors, KYC verification providers, and cloud infrastructure providers.
• "Consent" means freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document verification process required before certain account functions are activated.
• "PDPA" means Malaysia's Personal Data Protection Act 2010, which regulates the processing of personal data in commercial transactions.
• "Sensitive Personal Data" means categories of data that require heightened protection, including financial data, identification document data, and data related to health or criminal record.

3 Data We Collect

Crown888 collects the following categories of personal data in the course of providing its services to players. We collect only what is necessary for the purposes described in this Policy.

3.1 Identity and Registration Data

• Full legal name as stated on your national identity document or passport;
• Date of birth (for the purpose of age verification — you must be aged 21 or above);
• Gender (optional, for personalisation purposes);
• Nationality and country of residence.

3.2 Contact Data

• Email address (primary account communication channel);
• Malaysian mobile phone number (for two-factor authentication and account alerts);
• Residential address (required for KYC verification and high-value withdrawal processing).

3.3 Identity Verification (KYC) Documents

• Copy of Malaysian National Identity Card (MyKad) or valid international passport;
• Proof of address — utility bill, bank statement, or official correspondence dated within three months;
• Proof of payment method ownership (e.g., screenshot of registered e-wallet account showing name match).

3.4 Financial and Transaction Data

• Deposit and withdrawal history, including amounts, timestamps, and payment methods used;
• Payment method identifiers (e.g., masked bank account numbers, e-wallet registered phone numbers) — Crown888 does not store full card numbers;
• Currency and exchange rate data for cryptocurrency transactions (BTC, ETH, USDT, LTC);
• Account balance history and wagering activity.

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session duration, login timestamps, and platform navigation data;
• Cookie and tracking pixel data (see Section 10 for full cookie details).

3.6 Communications Data

• Records of live chat conversations with our customer support team;
• Email correspondence sent to or received from Crown888;
• Details of complaints, responsible gambling requests, and self-exclusion applications.

4 How We Collect Your Data

Crown888 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotion;
• Automatically through the Platform — via cookies, server logs, and session tracking technologies when you access and navigate the website;
• From payment service providers — when you make transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or supported cryptocurrency networks, transactional confirmation data is shared with Crown888 by the respective payment processor;
• From identity verification services — Crown888 may use authorised third-party KYC service providers to verify the authenticity of identity documents submitted during registration;
• From fraud prevention and AML services — transaction monitoring services may provide Crown888 with risk signals associated with specific transactions or accounts.

5 Data Processing & Use

Crown888 processes your personal data for the following specific purposes:

6 Legal Basis for Processing

Crown888 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to register your account, process your deposits and withdrawals, and deliver the gaming and betting services you have contracted for;
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, age verification obligations, financial reporting requirements, and regulatory mandates;
• Legitimate Interests: Processing carried out in the legitimate interests of Crown888 — including fraud prevention, platform security, responsible gambling monitoring, and platform analytics — where those interests are not overridden by your fundamental rights and freedoms;
• Consent: Where we rely on your freely given consent — for example, to send you marketing and promotional communications — you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

7 Data Sharing & Disclosure

Crown888 does not sell your personal data. We may share your data with the following categories of third parties where necessary for the stated purposes:

7.1 Payment Service Providers

To process your deposits and withdrawals, Crown888 shares necessary transaction data with your chosen payment service provider — which may include Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX operators, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank, or cryptocurrency network processors. Data shared is limited to what is required to execute and confirm the transaction.

7.2 Identity Verification (KYC) Providers

Crown888 uses authorised third-party KYC verification services to authenticate identity documents. These providers process your identity data under strict confidentiality agreements and data processing terms consistent with applicable privacy law.

7.3 Regulatory and Law Enforcement Authorities

Crown888 may be required by applicable law to disclose personal data to regulatory authorities, law enforcement agencies, or other governmental bodies. Such disclosures will only be made to the extent required by applicable legal obligation, court order, or regulatory direction.

7.4 Anti-Fraud and AML Service Providers

Crown888 may share transaction and identity data with authorised anti-fraud and anti-money laundering screening services for the purpose of identifying and preventing financial crime. All such providers are bound by contractual data protection obligations.

7.5 Cloud Infrastructure and Technology Providers

Crown888's Platform is hosted on secure cloud infrastructure. Our hosting providers may process personal data solely as data processors acting on Crown888's instructions, under binding data processing agreements that prohibit any independent use of the data.

8 International Data Transfers

Crown888 operates internationally and may transfer personal data to service providers located outside of Malaysia. Where personal data is transferred to a jurisdiction outside Malaysia, Crown888 implements appropriate safeguards to ensure the data receives a level of protection equivalent to Malaysian PDPA standards, including:

• Standard contractual clauses or data processing agreements that obligate recipients to protect data to equivalent standards;
• Transfer to jurisdictions assessed to provide adequate data protection under applicable standards;
• Use of encryption and access controls to limit the exposure of personal data during transfer and at rest.

By using Crown888, you consent to the transfer of your personal data to other jurisdictions where our service providers are located, subject to the safeguards described above.

9 Data Retention

Crown888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. Our general retention approach is as follows:

Following the expiry of the applicable retention period, Crown888 will securely delete or anonymise personal data in a manner that prevents reconstruction or identification.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the Crown888 Platform when you visit. They allow the Platform to recognise your device, remember your preferences, maintain your session security, and collect analytical data about how the Platform is used.

10.2 Types of Cookies Used

• Essential Cookies: Required for the Platform to function correctly — these include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously selected payment methods to improve your experience.
• Analytics Cookies: Collect anonymised or aggregated data about Platform usage patterns — such as which pages are visited most frequently and where users navigate after landing. This helps us improve the Platform experience for all Malaysian players.
• Security Cookies: Used for fraud detection, bot prevention, and session integrity verification.

10.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Crown888 Platform. Instructions for managing cookies are available in the help documentation of all major browsers. Crown888 does not use third-party advertising or cross-site tracking cookies.

11 Data Security

Crown888 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS Encryption applied to all data in transit between your device and Crown888 servers;
• Encryption at rest for sensitive data categories including identity documents and financial records stored on Crown888 infrastructure;
• Two-factor authentication (2FA) available and recommended for all player accounts — adding an additional layer of protection to your Crown888 login;
• Access controls — internal access to personal data is restricted on a strict need-to-know basis; Crown888 staff do not have unrestricted access to player personal data;
• Regular security audits and penetration testing conducted by independent third-party security specialists;
• Intrusion detection systems and real-time monitoring to identify and respond to potential security incidents.

While Crown888 takes all reasonable steps to protect your personal data, no internet transmission or digital storage system is entirely immune from risk. In the event of a data breach that affects your personal data, Crown888 will notify affected players and relevant regulatory authorities in accordance with applicable legal requirements and without undue delay.

12 Your User Rights

As a Crown888 player and a data subject under applicable privacy law, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be submitted to [email protected] with the subject line "Privacy Rights Request" and will be acknowledged within 5 business days.

Crown888 will respond to all verified rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason.

13 Minors & Age Verification

If you believe that a minor may have registered an account on Crown888 using false age information, please contact us immediately at [email protected] so that we can take appropriate action. Crown888 takes underage gambling prevention extremely seriously and cooperates fully with guardians and relevant authorities in such matters.

14 Policy Amendments

Crown888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as a change in data categories collected, a new processing purpose, or a change in third-party sharing arrangements — Crown888 will provide reasonable advance notice via the Platform and by email to your registered address.

The "Last Updated" date at the top of this page reflects the date on which the current version became effective. Previous versions of the Privacy Policy are available upon request by contacting [email protected].

Your continued use of the Crown888 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated terms, you must close your account in accordance with Section 10.2 of Crown888's Terms and Conditions.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or Crown888's handling of your personal data, please contact our Privacy team through the following channels:

If you are unsatisfied with Crown888's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection regulatory authority in your jurisdiction.

For related policies and information, please visit our Terms & Conditions and Responsible Gambling pages.