crown99 Privacy Policy for Malaysian Users

crown99 respects the privacy of its users and recognises the importance of handling personal data fairly, transparently and securely. This Privacy Policy describes the categories of information crown99 may collect, the reasons for processing that information, the parties with whom it may be shared and the choices available to users.

By accessing crown99, creating an account or using any available sports betting, casino, payment or support function, you acknowledge that your personal data may be processed as described in this Policy. Where consent is legally required for a particular activity, crown99 will request it separately and allow you to withdraw that consent, subject to any continuing lawful basis.

This Policy applies to information collected through the crown99 website, account tools, customer support interactions and related services. It covers registered members, visitors and individuals who communicate with crown99 about an account or privacy matter.

For information processed in connection with the crown99 platform, the relevant international operator acts as the data controller and determines why and how personal data is used. crown99 does not claim to be regulated by a Malaysian government authority. Malaysian users remain responsible for understanding the laws that apply to their access to online gambling services.

crown99 may collect information directly from you, automatically through your device, or from approved identity, payment and fraud-prevention providers. The categories depend on how you use crown99.

You provide information when you register, complete KYC, update your crown99 profile, deposit or withdraw funds, set responsible-gambling controls or contact support. Users must ensure that submitted information is accurate and belongs to them.

Technical information may be collected automatically when you visit crown99 from a phone, tablet or computer in Kuala Lumpur, Penang, Johor Bahru or another location. This may include device and session information needed to protect accounts, diagnose errors and keep the platform stable.

crown99 may also receive verification results from service providers that confirm whether identity documents, bank accounts or eWallet details are valid. Such providers should return only the data needed for the relevant check.

crown99 may process personal data to:

• Create, authenticate, manage and secure a crown99 account;
• Confirm that a user is aged 21 or above and complete KYC checks;
• Display account balances and process eligible deposits and withdrawals;
• Provide EPL, Liga Super Malaysia, UFC, casino and live-game services selected by users;
• Apply deposit limits, time-outs, self-exclusion requests and other responsible-gambling controls;
• Detect duplicate accounts, unauthorised access, bonus abuse, fraud and money laundering;
• Resolve complaints, transaction queries, settlement disputes and technical problems;
• Maintain business, financial, security and regulatory records;
• Improve crown99 navigation, reliability and content presentation;
• Send permitted service messages and optional marketing communications.

Depending on the activity and applicable law, crown99 processes personal data because it is necessary to perform an agreement with the user, comply with a legal obligation, pursue a legitimate interest, protect vital interests or act on valid consent.

Legitimate interests may include securing crown99 accounts, preventing fraud, understanding platform performance and maintaining accurate transaction records. Crown99 considers the effect on users before relying on legitimate interests and applies safeguards where processing may present a higher privacy risk.

MYR transactions may involve Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost or GrabPay where those methods are available. Cryptocurrency transactions may involve public blockchain records. Availability varies and crown99 does not control the independent privacy practices of a user's financial institution.

crown99 generally records payment method identifiers, transaction status, amount, date and account ownership verification. Full payment credentials should be handled by the relevant payment provider where technically possible. Users must not deposit from or withdraw to an account belonging to another person.

crown99 does not sell personal data as a standalone product. Information may be disclosed only where necessary and subject to appropriate contractual, technical or legal safeguards. Recipients may include:

• Identity and age-verification providers supporting KYC checks;
• Payment processors, banks and eWallet operators involved in a requested transaction;
• Hosting, cybersecurity, communications and customer-support providers;
• Game, odds and platform suppliers where limited data is required to deliver a selected service;
• Professional advisers, auditors and insurers operating under confidentiality obligations;
• Competent courts, law-enforcement bodies or international regulatory authorities where disclosure is legally required;
• A lawful buyer or successor if the crown99 business undergoes a merger, restructuring or transfer.

Service providers are permitted to use personal data only for authorised purposes and must apply security measures appropriate to the information handled.

As crown99 operates in an international environment, personal data may be stored or processed outside Malaysia. Privacy laws in another country may differ from Malaysian requirements.

Where required, crown99 uses recognised transfer mechanisms, contractual protections, access restrictions and security assessments to protect data transferred internationally. No transfer mechanism can remove every risk, but crown99 aims to maintain a consistent level of protection.

crown99 uses technical and organisational measures designed to protect personal data against unauthorised access, disclosure, loss, alteration and destruction. Measures may include encrypted connections, access controls, monitoring, system logging, staff confidentiality requirements and incident-response procedures.

If a personal data incident presents a material risk, crown99 will investigate, limit the impact and provide notifications to affected users or competent authorities where required by applicable law.

crown99 retains personal data for as long as an account remains active and for an appropriate period after closure. Retention periods are determined by the original processing purpose, contractual needs, dispute deadlines and applicable anti-money-laundering, accounting and regulatory duties.

Some identity, transaction, self-exclusion and security records may need to remain after a deletion request to meet legal obligations, prevent a self-excluded account from being reopened or establish and defend legal claims. Data that is no longer required is securely deleted or irreversibly anonymised.

crown99 may use cookies and similar technologies to maintain a signed-in session, remember language or display preferences, prevent abuse, measure performance and understand how visitors navigate the website. Strictly necessary technologies support core security and account functions.

Where consent is required, optional analytics or preference technologies should not be activated until the user has made a choice. Browser settings may block or remove cookies, although disabling essential cookies can prevent some crown99 functions from operating correctly.

Subject to applicable law and any lawful exemption, a crown99 user may request access to personal data and information about its processing. Other rights may include correction, deletion, restriction, objection, withdrawal of consent and receipt of portable data.

crown99 may ask for sufficient information to verify the identity of the person making a request. Requests are handled within the period required by applicable law, although complex or repeated requests may require additional time.

Where legally permitted, crown99 may send information about promotions, sports events or casino features based on a user's communication choices. Service notices about security, policy changes, transactions and responsible-gambling controls are not marketing and may still be sent when necessary.

Users may change marketing preferences through available account settings or by contacting crown99. An opt-out request does not prevent the processing of information required to maintain an account or comply with legal obligations.

crown99 uses age and identity verification measures intended to prevent underage account access. If we reasonably believe that information belongs to an individual under 21, the relevant account will be restricted while the matter is investigated. Personal data may be retained where needed to document the restriction, meet a legal duty or prevent re-registration.

crown99 may update this Privacy Policy to reflect changes in operations, technology, legal duties or security practices. The revised version will show an updated effective date. Where a change materially affects how personal data is used, crown99 will provide a prominent notice or another appropriate form of communication.

Users should review this page periodically. Continued use of crown99 after an update does not replace any consent that applicable law requires crown99 to obtain separately.