Privacy Policy Crown66 –
Personal Data Protection for Malaysia Members

Crown66 takes personal data protection very seriously. We understand that your trust in us depends not only on the quality of our games and the speed of payouts, but also on how we handle the personal information you entrust to us.

This Privacy Policy explains the types of data we collect, why we need it, how we use it, how long we retain it, and your rights in relation to that data. This document is drawn up in accordance with the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

By registering or using Crown66 services, you agree to the processing of your personal data as described in this policy. If you disagree with any part of this policy, please contact us for further clarification before continuing to use the platform.

Crown66 collects your personal data through various channels throughout your use of our platform. Below are the categories of data we may collect and store.

Every piece of data we collect has a clear and legitimate purpose. crown66 does not use your data arbitrarily. The following are the primary purposes for which your personal data is used.

• Account Management: Create and maintain your account, process registrations and manage your profile information.
• Transaction Processing: Process deposits, withdrawals and any financial transactions you make within the crown66 platform.
• Identity Verification (KYC): Verify your identity to meet legal requirements and prevent fraud and money laundering.
• Platform Security: Detect and prevent unauthorized access, fraudulent activity and any security threats to your account.
• Service Communications: Send important notifications regarding your account, transactions, promotions you have opted in to receive, and platform updates.
• Platform Improvement: Analyze usage patterns in aggregate to help us improve the user experience and develop better new features.
• Legal Compliance: Comply with legal and regulatory obligations applicable in Malaysia, including financial reporting and anti-money laundering requirements.

Crown66 does not sell or rent your personal data to any third party. However, in certain situations, we may need to share some of your information with trusted business partners or relevant authorities. This is done within a strict and limited framework.

• Payment Providers: Required transaction information is shared with registered payment processors to enable deposits and withdrawals to be processed securely.
• Identity Verification Provider: KYC information is shared with licensed identity verification services to complete your document review process.
• Legal Authority: In cases where the law requires or upon a valid court order, Crown66 will disclose the necessary information to the relevant authorities.
• Technical Service Provider: Infrastructure and hosting providers who have signed strict confidentiality agreements with crown66 may access limited technical data for system maintenance purposes.

Crown66 continuously invests in security infrastructure to ensure members' personal data is always protected against cyber threats, unauthorized access, and data breaches.

• 256-bit SSL Encryption: All data communications between your browser or app and crown66 servers are encrypted using the latest TLS protocol.
• Multi-Layer Firewall: Our server infrastructure is protected by a multi-layered firewall system that continuously monitors and filters network traffic.
• Internal Access Control: Only authorized crown66 staff who require access to specific data may view it – based on the "least privilege" principle.
• Two-Factor Authentication (2FA): Two-factor authentication is available and encouraged for all member accounts as an added layer of security.
• 24/7 Monitoring: Our security team continuously monitors systems to detect and respond swiftly to any threats or anomalies.
• Regular Security Audits: Crown66 conducts regular internal and external security audits to ensure our systems consistently meet current security standards.

While we take all reasonable measures to protect your data, no system can be guaranteed 100% secure. We therefore also encourage you to play an active role in protecting your own crown66 account by using a strong password and never sharing it with anyone.

As a crown66 member and data subject under Malaysia's PDPA, you hold certain rights regarding the personal data we store. crown66 fully respects and supports these rights.

To exercise any of the above rights, contact the crown66 customer support team via the in-platform live chat. We will process your request within 30 business days from the date we receive a complete request.

The crown66 website and app use cookies and similar tracking technologies to enhance your browsing experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for the platform to function properly, including maintaining your login session. Cannot be disabled.
• Preference Cookies: Save your preferences such as language, display settings and game preferences for a more personalized experience.
• Analytics Cookies: Help us understand how members use the platform for improvement purposes. Data is collected in aggregate and anonymized form.
• Security Cookies: Used to detect and prevent fraudulent activity and to ensure the security of your session.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the Crown66 platform.

Crown66 does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements.

• Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure for audit and legal compliance purposes.
• Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and taxation legislative requirements.
• KYC Data: Retained for 5 years after account closure in accordance with anti-money laundering (AML) requirements.
• Security Logs: Retained for 2 years for security investigation and fraud prevention purposes.
• Marketing Data: Deleted immediately upon withdrawal of your consent to receive marketing communications.

In the context of Crown66 platform operations, some technical data may be processed or stored on servers located outside Malaysia — particularly within cloud computing infrastructure. However, all such data transfers are carried out with adequate safeguards.

Crown66 ensures that any transfer of personal data outside Malaysia is only made to countries or entities that provide an equivalent or higher level of data protection than that required under Malaysia's PDPA. Binding data processing agreements are used to safeguard your data in all cross-border transfer scenarios.

Crown66 services are strictly for individuals aged 18 and above. crown66 does not intentionally collect or process personal data from minors. Should we discover that a minor's personal data has been collected inadvertently, we will take immediate steps to delete that data and terminate the account in question.

If you are a parent or guardian and believe that your underage child has registered a crown66 account, please contact our support team immediately so that prompt action can be taken.

Crown66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or relevant technological developments.

When significant changes are made to this policy, we will notify you via your registered email or in-platform notification before the changes take effect. The "Last Updated" date at the top of this document will be updated whenever any changes are made.

We encourage you to review this policy periodically to stay informed on how crown66 protects your personal data. Continued use of the platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns or complaints regarding how crown66 handles your personal data, you may contact our privacy team directly. We are committed to providing a clear and satisfactory response within a reasonable timeframe.

• Use the live chat function within the Crown66 platform for immediate inquiries
• Send an email to our support address with the subject "Privacy Inquiry" for issues that require a written explanation
• Crown66 will respond within 5 business days for general inquiries and 30 business days for formal data rights requests