Crown888 Privacy Policy –
Our Commitment to Protecting Your Data

This Privacy Policy ("Policy") is published by Crown888, an online entertainment and casino platform operating in Malaysia. This document explains how Crown888 manages members' personal data responsibly, in accordance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.

At Crown888, we understand that trust is the foundation of the relationship between a platform and its members. When you entrust your personal information to us — whether during account registration, when making a deposit via Touch 'n Go eWallet or GrabPay, or when interacting with our support team — you have every right to know exactly how that information is used and protected.

This Policy applies to all users and members who access or use the Crown888 platform through our website. By using Crown888's services, you confirm that you have read and understood this Privacy Policy.

Crown888 only collects data that is strictly necessary to provide our members with a safe, compliant, and high-quality service. The data we collect can be grouped into the following categories:

Identity Data:

Contact Data:

Financial & Transaction Data:

Technical & Usage Data:

Crown888 collects personal data through several channels, always with your knowledge and consent:

• Account Registration: When you register a Crown888 account, you voluntarily provide basic information such as your name, email address, and Malaysian phone number.
• KYC Verification: To comply with anti-money laundering (AML) requirements, Crown888 requires a copy of an identity document such as your MyKad to verify a member's identity prior to their first withdrawal.
• Financial Transactions: Every deposit and withdrawal made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks generates a transaction record that Crown888 retains for accounting and security purposes.
• Platform Usage: Crown888's systems automatically record technical data such as your IP address, device type, and activity logs while you use the platform — this helps us detect and prevent fraud.
• Customer Support Interactions: When you contact Crown888 support via Live Chat or email, those conversations may be retained for staff training and service improvement purposes.
• Cookies & Tracking Technologies: Crown888 uses cookies to enhance user experience and analyse platform usage patterns. Full details are outlined in Clause 8.

Crown888 uses members' personal data only for the following legitimate and necessary purposes:

Crown888 never sells, rents, or trades members' personal data to any third party for commercial or marketing purposes. However, to operate our services effectively, Crown888 may share data with the following parties under limited and controlled circumstances:

• Payment Processing Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, the necessary transaction data is shared with the respective providers. These providers are bound by strict confidentiality agreements.
• Game Providers: Crown888's game software providers, such as Pragmatic Play and live casino providers, may receive the minimum technical data required to deliver their gaming services.
• Identity Verification Services: For KYC purposes, Crown888 uses third-party verification services that comply with international data protection standards.
• Law Enforcement Agencies: Crown888 will disclose personal data to the relevant authorities (such as the Royal Malaysia Police or Bank Negara Malaysia) when required by a valid court order or applicable law.
• Professional Advisors: In certain circumstances, Crown888 may share limited data with lawyers, accountants, or auditors for legal compliance and audit purposes.

All third parties that receive Crown888 data are required to adhere to data protection standards equivalent to, or stricter than, this Privacy Policy.

Crown888 takes data security infrastructure seriously to safeguard the personal information of all our Malaysian members. The security measures we employ include:

• 256-bit SSL Encryption: All communications between your browser and Crown888's servers are encrypted using 256-bit SSL technology — the same standard adopted by leading Malaysian banking institutions.
• Storage Data Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted format on Crown888's secure servers.
• Strict Access Controls: Only authorised Crown888 personnel who require access to specific data in order to carry out their duties may access that information — in accordance with the principle of least privilege.
• Two-Factor Authentication (2FA): Crown888 offers 2FA as an option to all members for an added layer of account security.
• Continuous Monitoring: Crown888's systems are monitored 24/7 to detect suspicious activity or unauthorised access attempts.
• Regular Security Audits: Crown888 undergoes periodic independent security audits to identify and address any system vulnerabilities.

Crown888 retains members' personal data only for as long as necessary for the purposes set out in this Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your Crown888 account remains active, plus any additional period required following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and accounting legal requirements, including AML/CFT obligations.
• KYC Documents: Retained for the period required under Malaysia's anti-money laundering compliance laws.
• Customer Service Log: Retained for 3 years from the date of interaction for reference and service improvement purposes.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period has elapsed, Crown888 will securely delete or anonymise your personal data in accordance with industry-standard procedures.

Crown888 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and maintain platform security. The following are the types of cookies used by Crown888:

You may manage or disable cookies through your web browser settings. However, disabling certain cookies (particularly security and session cookies) may affect the functionality of the Crown888 platform and your overall gaming experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), you as a Crown888 member have the following rights regarding your personal data:

Crown888 strictly prohibits the use of its platform by individuals under the age of 18. We do not knowingly collect any personal data from children or underage minors.

Should Crown888 discover that personal data of an individual under 18 years of age has been collected without our knowledge (for example, through false information provided during registration), we will take immediate steps to:

• Closing the account in question immediately.
• Deleting all personal data of the individual from Crown888's systems.
• Returning any associated financial balance to its original source.

If you become aware that someone under the age of 18 has registered a Crown888 account, please contact us immediately at support@crown888.biz.

In the course of our operations, there may be instances where Crown888 members' personal data is transferred to, or processed in, countries outside Malaysia — for example, when utilising the services of international game providers or cloud server infrastructure.

Crown888 ensures that any international data transfers are protected by:

• Data transfer agreements that meet or exceed the data protection standards required under Malaysia's PDPA 2010.
• Standard contractual clauses that bind data recipients to maintain adequate levels of protection.
• Selection of partners operating in jurisdictions with internationally recognised data protection laws.

Crown888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or the way we provide services to our Malaysian members.

When significant changes are made to this Policy, Crown888 will:

• Updating the "Last Updated" date shown at the top of this document.
• Sending email notifications to all active Crown888 members regarding the changes.
• Displaying a prominent notice on the Crown888 platform at least 14 days before the changes take effect.

Continued use of the Crown888 platform after the effective date of any changes will be considered acceptance of the amended Privacy Policy. If you do not agree with the changes, please contact us to discuss your options.

Crown888 has appointed a Data Protection Officer to ensure compliance with this Privacy Policy and Malaysia's Personal Data Protection Act (PDPA) 2010. If you have any questions, concerns, or complaints regarding your privacy or how Crown888 handles your personal data, please contact us:

• Privacy Email: privacy@crown888.biz — dedicated to personal data enquiries and requests.
• General Support Email: support@crown888.biz
• Live Chat: Available 24/7 on the Crown888 platform — in Bahasa Melayu.

Crown888 aims to respond to all privacy-related enquiries within 5 business days, and resolving more complex requests within 21 working days in accordance with the requirements of PDPA 2010.