Crown9 Privacy Policy – How We Protect the Data & Privacy of Every Malaysian Member

Crown9 ("we", "platform", or "Company") is committed to protecting and respecting the privacy of every individual who interacts with our services. This Privacy Policy clearly and transparently explains how we handle your personal data as a member of Crown9's online casino and Sports Betting platform.

This policy applies to all data collected through the crown9.ws website, the crown9 mobile app, email communications, customer support services, and any other channels through which crown9 operates. It also applies to all data processing that takes place before, during, and after your membership with crown9.

Crown9 acts as both "Data Processor" and "Data Controller" under Malaysia's Personal Data Protection Act (PDPA) 2010. We take full responsibility for ensuring that your personal data is processed lawfully, fairly, and transparently.

Crown9 collects various types of data depending on how you interact with our platform. Our principle is simple: we only collect what is strictly necessary — nothing more.

We do not collect sensitive data such as medical information, religious beliefs, or political affiliations. We also do not process financial data such as credit card numbers — all payments are handled directly by e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) or banks (Maybank2u, CIMB Clicks), each of which maintains its own security infrastructure.

Crown9 uses your personal data only for legitimate and reasonable purposes. The following are the primary purposes for which Crown9 uses your data:

• Account Management: Creating, verifying, and maintaining your Crown9 account. This includes age and identity verification to ensure the platform is used only by eligible individuals.
• Transaction Processing: Processing all your deposits (via Touch 'n Go eWallet, GrabPay, DuitNow, FPX) and withdrawal of winnings in Malaysian Ringgit (RM).
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, or unauthorised access to your account.
• Legal Compliance: To fulfil legal obligations under PDPA 2010, the Anti-Money Laundering Act (AMLA), and the requirements of other relevant regulatory bodies.
• Customer Support: To provide accurate and effective technical support and customer service when you reach out to us via live chat or email.
• Service Improvement: To analyse aggregated, anonymised usage patterns in order to improve crown9's platform, games, and overall user experience.
• Marketing Communications: To send you relevant bonus offers, promotions, and crown9 news — but only if you have consented to receive such communications.
• Responsible Gambling: To monitor gaming patterns in order to identify signs of problem gambling and provide appropriate support to members who may need it.

Crown9 does not sell, rent, or disclose your personal data to third parties for commercial gain. However, in the course of operating the platform, there are limited circumstances in which your data may be shared:

• Payment Providers: Information required to process your transactions is shared with the e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (via FPX/DuitNow) that you use. Such sharing is governed by the respective privacy policies of each provider.
• Game Software Provider: Required game session information is shared with third-party game providers operating within the Crown9 platform. All such providers are bound by strict confidentiality agreements.
• Regulatory Authority: Crown9 will disclose data when required to do so by law, court order, or a valid request from a Malaysian law enforcement authority.
• Audit & Security Services: Independent audit bodies such as eCOGRA and GLI may access data required for the game fairness certification process. All access is subject to strict confidentiality agreements.

Data security is crown9's highest priority. We continuously invest in the latest security technologies and processes to keep your data protected at all times. Key security measures we have in place:

• Transmission Encryption: All data transmitted between your browser/app and Crown9 servers uses TLS 1.3 protocol with 256-bit encryption.
• Storage Encryption: Sensitive data stored in crown9's databases is encrypted using AES-256 standard.
• Layered Access Controls: A role-based access control (RBAC) system ensures that only authorised staff can access specific data.
• 24/7 Monitoring: A real-time threat detection system monitors all suspicious activity around the clock.
• Regular Security Testing: Independent penetration testing and security audits are conducted at least twice a year.
• Staff Training: All crown9 staff undergo rigorous data security training before being granted access to any system.

Under Malaysia's PDPA and crown9's internal policies, you have the following privacy rights, which you may exercise at any time:

To exercise any of the rights above, contact us at support@crown9.ws with the subject line "Privacy Rights Request". We will verify your identity before processing any request.

Crown9 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. Your current cookie settings:

Crown9 takes the protection of minors extremely seriously. The crown9 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that data belonging to an individual under the age of 18 has been inadvertently collected, we will delete that data immediately and terminate the associated account. Parents or guardians who suspect their child has registered with Crown9 are urged to contact us at support@crown9.ws without delay.

As an internationally operating platform, your data may in some cases be stored or processed on servers located outside Malaysia. This may occur when:

• Using cloud computing services whose primary servers are located in other regions;
• Third-party game providers operating from different jurisdictions access game session data;
• International audit bodies require access to certain data for certification purposes.

Crown9 ensures that all cross-border data transfers are safeguarded by appropriate protection mechanisms, including standard contractual clauses and data transfer agreements that comply with Malaysia's PDPA requirements.

The crown9 platform may contain links to third-party websites or services, such as e-wallet providers (Touch 'n Go, GrabPay) or banking networks (Maybank2u, CIMB Clicks). When you click these links, you leave the crown9 platform and interact directly with those third-party platforms.

Crown9 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every platform you visit. Your agreement to use any third-party service is a direct arrangement between you and that provider.

Crown9 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will:

• Sending email notifications to all registered Crown9 members;
• Displaying a clear notice within our platform;
• Updating the "Last Updated" date at the top of this document.

Continued use of the Crown9 platform after a change notice is posted will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account.

For any enquiries, requests, or complaints relating to your privacy and personal data protection at crown9, please contact our Data Protection Officer:

We aim to respond to all privacy enquiries within 5 business days. For more complex requests such as full data access or data deletion, the processing period is up to 30 business days.