Crown88 Privacy Policy — Our Commitment to Malaysian Players

1 Introduction & Scope of Privacy Policy

Crown88 ("we", "the Company") respects the privacy of every individual who uses our platform. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information when you register as a Crown88 member, use our services, or interact with our platform in any way.

This Crown88 Privacy Policy has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the processing of individuals' personal data in the context of commercial activities in Malaysia. As a platform serving Malaysian players, Crown88 takes this responsibility seriously.

By continuing to use the Crown88 platform after reading this Privacy Policy, you confirm that you understand and agree to how we process your personal data as described herein. If you do not agree, please discontinue use of the platform and contact us to request account deletion.

2 Types of Personal Data We Collect

Crown88 collects the personal data necessary to provide a safe, legitimate, and high-quality service. The following are the categories of data we collect:

3 Purpose of Data Collection & Use

Crown88 collects and uses your personal data solely for lawful, stated purposes. We do not use your data for any other purpose without your additional consent:

• Account Management: Creating, verifying, and managing your Crown88 account, including KYC processes and age verification to ensure only eligible members access the platform.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other payment methods, as well as withdrawals of winnings to your bank account or e-wallet.
• Service Provision: Provides access to the slots, Live Casino, table games, and Sports Betting available on Crown88.
• Customer Support: Providing technical assistance, answering enquiries, and resolving Crown88 member complaints promptly and efficiently.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and misuse of the Crown88 platform.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements.
• Marketing Communications: Sending information about Crown88's latest promotions, bonuses, and offers — exclusively to members who have consented to receive such communications.
• Platform Improvement: Analysing usage patterns to improve user experience, platform performance, and the range of games offered.

4 Legal Basis for Data Processing

Crown88 processes your personal data on the following lawful bases as provided under Malaysia's PDPA 2010:

• Consent: You provided explicit consent during the Crown88 account registration process. This consent may be withdrawn at any time, though doing so may affect our ability to provide certain services.
• Contract Performance: Processing is necessary to fulfil the agreement between you and Crown88, including the Terms & Conditions you agreed to upon registration.
• Legal Obligation: Some data processing is mandatory for Crown88 to meet Malaysia's legal requirements, including anti-money laundering laws and identity verification obligations.
• Legitimate Interest: We process certain data on the basis of our legitimate interests, such as fraud detection and ensuring platform security, provided these interests do not override your fundamental right to privacy.

5 Data Sharing & Disclosure to Third Parties

Crown88 does not sell or rent members' personal data to any third party. However, we may share your personal data with the following categories of third parties under strictly limited and controlled circumstances:

• Payment Service Providers: Providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-affiliated banks receive the transaction data necessary to process your deposits and withdrawals.
• Game Software Providers: Companies that provide slots, Live Casino, and table game platforms may receive the minimum technical data required for their services to function.
• Identity Verification Providers: Third-party KYC services that assist us in verifying the identity and age of new Crown88 members.
• Regulatory Authorities: We may be required by law to disclose certain information to law enforcement agencies or relevant regulatory bodies.
• Cloud Service Providers: Technology infrastructure providers that store and process data on behalf of Crown88, subject to strict data protection agreements.

6 Data Storage & Retention Period

Crown88 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data: Your personal data will be retained for as long as your Crown88 account remains active and you continue to use our services.
• After Account Closure: Upon account closure, Crown88 will retain the necessary data for a minimum of 7 years to meet legal and financial audit requirements.
• Transaction Records: Deposit, withdrawal, and financial activity records are retained for 7 years in accordance with Malaysia's accounting and AML legal requirements.
• Communication Logs: Customer support communication records are retained for 3 years for reference and dispute resolution purposes.

Once the applicable retention period has expired, Crown88 will delete or destroy your personal data securely, using data erasure methods that ensure the data cannot be recovered.

7 Data Security Measures

Crown88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• Data Encryption: All data transmitted between you and the Crown88 platform is protected with 256-bit TLS/SSL encryption. Sensitive data at rest is also encrypted using the latest industry standards.
• Access Controls: Access to member personal data is restricted on a need-to-know basis. Only authorised personnel may access such data, and all access is logged for audit purposes.
• Two-Factor Authentication (2FA): Crown88 offers a two-factor authentication option for member accounts as an additional layer of security. We encourage all members to enable this feature.
• Continuous Monitoring: A real-time threat monitoring system watches for suspicious activity 24/7 and will take immediate action upon detecting any threat.
• Regular Security Audits: Crown88 conducts regular security audits and independent penetration testing to identify and address vulnerabilities before they can be exploited.

8 Cookies & Tracking Technologies

The Crown88 platform uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and ensure the platform operates correctly. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core Crown88 platform functions such as login session management, security, and basic preferences. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helps us understand how members use the Crown88 platform — which pages are visited most, where errors occur, and so on — for continuous improvement purposes.
• Functional Cookies: Saves your preferences such as display language, draw format, and other settings so you don't have to reconfigure them each time you log in to Crown88.
• Marketing Cookies: Used to display promotions and advertisements relevant to your interests. You may opt out of these cookies through your web browser settings.

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies. Please note that disabling certain cookies may affect your experience on the Crown88 platform.

9 Your Rights Regarding Personal Data

As a Crown88 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the Crown88 support team by email at support@crown88.link or via the platform's live chat. We will respond to your request within 21 business days. Some requests may be subject to identity verification beforehand to safeguard the security of your account.

10 Child Protection

Crown88 is an online gambling platform intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we determine that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. If you become aware that a minor has registered a Crown88 account, please contact us immediately at support@crown88.link so we can take the appropriate action.

11 Privacy Policy Amendments

Crown88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The "Updated" date at the top of this document indicates when the latest revision was made.

For material amendments, Crown88 will endeavour to notify you via your registered email or through a prominent in-platform notification before the changes take effect. It remains your responsibility, however, to review this Privacy Policy periodically. Continued use of the Crown88 platform after any amendments are posted constitutes acceptance of the updated policy.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Crown88 handles your personal data, please contact us through the following channels:

• Email: support@crown88.link — We aim to respond within 24 business hours.
• Live Chat: Available 24/7 directly on the Crown88 platform for immediate enquiries.

You also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe Crown88 has violated your rights under PDPA 2010. We do, however, encourage you to contact us first so that we may address your concerns directly and thoroughly.