Privacy Policy Crown9 — Your Personal Data Protection

Crown9 is an online betting and casino platform operating for members in Malaysia. We understand that privacy is more than a legal requirement — it is the foundation of the trust you place in us every time you register, deposit funds, or play on our platform.

This Privacy Policy is drafted in accordance with sound data protection principles and reflects Crown9's commitment to handling your personal information responsibly, transparently, and securely. We do not collect more data than necessary, and we do not use it for purposes you would not expect.

Crown9 collects various types of information depending on how you interact with our platform. Below are the main categories of data we collect:

We also collect data automatically when you browse our platform through cookies and similar tracking technologies. This data helps us understand how users interact with the platform so we can continuously improve it.

The information we collect is used for the following purposes, all directly related to delivering a secure and high-quality crown9 service:

• Account Management: Creating, verifying, and maintaining your user account, including mandatory KYC processes.
• Transaction Processing: Securely processing deposits, withdrawals, and bonus payments through approved payment partners.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account use, and other suspicious activities.
• Customer Support: Handling inquiries, complaints, and support requests more effectively when we have context about your account.
• Responsible Gaming: Monitoring gaming behaviour to identify users who may need assistance or additional limits.
• Platform Communications: Sending important notifications about your account, promotions you have opted into, and policy updates.
• Service Improvement: Analysing usage patterns in aggregate to improve the overall user experience.
• Legal Compliance: Fulfilling reporting obligations and compliance requirements with relevant regulatory bodies.

Crown9 does not use your information to make automated decisions that significantly affect you without human review. Any risk assessments or account restrictions involve review by our team.

Crown9 does not sell or rent your personal data to any third party. However, there are limited situations where we need to share your information with trusted parties to enable our services to function:

• Payment Processors: Payment partners such as DuitNow, FPX, and digital wallet service providers require certain transaction information to process your deposits and withdrawals.
• Technical Service Providers: Companies providing cloud computing, cybersecurity, and technical infrastructure services to crown9 are subject to strict data protection agreements.
• Game Providers: Third-party game providers may receive session data required to deliver a seamless gaming experience.
• Regulatory & Law Enforcement Bodies: Crown9 will disclose required information when mandated by a valid court order, warrant, or regulatory directive.

Crown9 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL Encryption: All communications between your browser and the crown9 server are protected with unbreakable encryption.
• Stored Data Encryption: Sensitive data such as passwords and bank account numbers are stored in encrypted form using the latest industry-standard encryption algorithms.
• Internal Access Controls: Only staff who require access to specific data to carry out their duties are permitted to do so.
• 24/7 Security Monitoring: Our automated monitoring system detects suspicious activity in real time and takes immediate action when required.
• Regular Security Audits: Crown9 undergoes regular security assessments by independent third parties to identify and address vulnerabilities.
• Two-Factor Authentication (2FA): We provide 2FA options for all accounts to add an extra layer of protection.

While we take reasonable steps to protect your data, no security system is entirely perfect. We encourage you to play your part by using a strong password and not sharing your login credentials.

Crown9 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for the platform to function properly, including maintaining login sessions and security settings. These cookies cannot be disabled.
• Functional Cookies: Storing your preferences such as language, display settings, and game choices to deliver a more personalised experience.
• Analytics Cookies: Helping us understand how users engage with the platform so we can improve it. This data is collected in aggregate and does not personally identify you.
• Security Cookies: Used to detect suspicious activity and protect the platform from unauthorised access.

You can manage or disable non-essential cookies through your browser settings. However, disabling certain cookies may affect platform functionality. For more details, please refer to your browser's documentation.

As a crown9 user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the crown9 support team via live chat or our official email. We will process your request within the timeframe required by applicable law, typically within 30 working days.

Crown9 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Below is a general guide to our data retention periods:

• Active Account Data: Retained for as long as your account is active and for the post-closure period required for compliance.
• Financial Transaction Records: Retained for a minimum of seven (7) years after a transaction occurs, in line with financial and tax legal requirements.
• KYC Documents: Retained for the duration of the active account and for the prescribed period after account closure to fulfil anti-money laundering obligations.
• Security Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Support Communications: Retained for 24 months to allow historical reference in follow-up cases.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with accepted industry-standard procedures.

Crown9 reserves the right to update or modify this Privacy Policy at any time. Any changes will take effect immediately upon posting on our official website. We will notify you of significant changes through:

• In-platform notifications on crown9 during login.
• Email notification to your registered email address.
• Updates the "Last Updated" date at the top of this document.

Continued use of the crown9 platform after notification of changes constitutes your acceptance of the updated policy. If you disagree with the changes, you have the right to close your account before they take effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Crown9 handles your personal data, we are ready to listen and assist. The best ways to reach us:

• Live Chat 24/7: The fastest way — go directly to the Crown9 platform and click the live chat icon.
• Privacy Email: [email protected]
• General Support Email: [email protected]

For requests related to personal data rights such as access, correction, or deletion, please clearly state the type of request and include sufficient identity verification information so we can process your request securely and efficiently.

We are committed to responding to all privacy-related inquiries within the stipulated timeframe 14 working days from the date your request is received.