icrown Privacy Policy

1. Introduction

Welcome to icrown ("icrown", "we", "us", "our"). icrown operates the website icrown.lat and any associated mobile applications or digital platforms (collectively, the "Platform"). We are committed to protecting the privacy and personal data of every user who accesses or registers on our Platform.

This Privacy Policy ("Policy") describes how icrown collects, processes, stores, shares, and protects the personal information of users ("you", "your") in connection with your use of our online casino, sportsbook, slots, and live gaming services. It also outlines the rights available to you under applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree, please discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of icrown.

2. Personal Data We Collect

icrown collects personal data that you voluntarily provide, as well as certain data collected automatically during your use of the Platform. The categories of data we collect include:

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, username, password (stored as a hashed value), mobile phone number, and country of residence.
• Identity verification (KYC) data: Government-issued identification document (MyKad, passport, or driver's licence), selfie photograph, and proof of address documents such as a utility bill or bank statement.
• Financial data: Bank account details, preferred payment method (e.g., Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, DuitNow, FPX, or cryptocurrency wallet addresses) for the processing of deposits and withdrawals in MYR or supported digital currencies.
• Support communications: Any messages, chat logs, or documents submitted to our customer support team via live chat or email.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preference settings.
• Usage and gameplay data: Pages visited, games played, bet amounts, session durations, login timestamps, and transaction history within the Platform.
• Cookies and tracking data: See Section 5 (Cookies Policy) for full details on the cookies we use and how to manage them.

2.3 Data From Third Parties

• Payment processors: Transaction confirmation data and fraud risk scores returned by our payment gateway partners (e.g., FPX network operators, e-wallet providers).
• Identity verification providers: Results of automated KYC checks performed by our licensed verification partners to confirm your identity and age.
• Fraud prevention services: Device fingerprint scores and risk indicators from third-party anti-fraud tools used to protect the integrity of our Platform.

3. How We Use Your Personal Data

icrown processes your personal data only for lawful, specified, and legitimate purposes. The primary purposes for which we use your data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your profile, and provide access to all platform features.
• Service delivery: To operate casino games, sportsbook markets, slots, live dealer tables, and all other gaming and betting services available on icrown.
• Financial transactions: To process deposits, withdrawals, bonuses, and refunds accurately and securely in MYR and supported cryptocurrencies.
• Legal and regulatory compliance: To comply with applicable laws, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any requests from lawfully authorised regulatory or law enforcement bodies.
• Responsible gaming: To monitor gameplay patterns, identify potential problem gambling behaviour, apply self-exclusion tools, and enforce responsible gaming limits in line with our Responsible Gaming Policy.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other security threats.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat or email.
• Platform improvement: To analyse aggregated usage data, fix bugs, optimise game performance, and improve the overall user experience for members across Malaysia.
• Marketing communications: To send you promotional offers, bonus alerts, and product updates where you have provided consent or where we have a legitimate interest. You may opt out at any time via your account settings.

4. Sharing & Disclosure of Personal Data

icrown does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients in the circumstances described below:

• Payment service providers: Banks, e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX, DuitNow, and cryptocurrency processors require certain financial and identity data to execute transactions on your behalf.
• Identity and KYC verification partners: Licensed third-party providers who conduct document verification and liveness checks to confirm your identity and that you meet the minimum age requirement of 21 years.
• Game content providers: Software providers who supply live casino, slots, and sportsbook data feeds may receive anonymised session data necessary to operate their games on our Platform.
• Fraud and security vendors: Third-party risk management and anti-fraud services that help us protect users and maintain the integrity of the Platform.
• Legal and regulatory authorities: Where required by law, court order, or legitimate regulatory request, we may be obliged to disclose your personal data to relevant government agencies, regulators, or law enforcement bodies.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction, subject to equivalent privacy protections being in place.

All third-party service providers engaged by icrown are contractually obligated to process personal data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

5. Cookies Policy

icrown uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, maintain session continuity, and gather analytics data that helps us improve our services.

Types of cookies we use:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection tokens, and shopping cart equivalents for bonus selections. These cannot be disabled.
• Performance and analytics cookies: Collect anonymised information about how visitors use our Platform — which pages are visited most, where users drop off, and how fast pages load. This data helps us optimise the experience for mobile users across Malaysia.
• Functional cookies: Remember your preferences, such as language settings, preferred currency (MYR), and last-visited game category, so your next session feels seamless.
• Marketing cookies: Used (with your consent) to deliver relevant promotional content. We do not serve third-party advertising on our Platform; marketing cookies are used solely for icrown's own communications.

You can manage or withdraw consent for non-essential cookies at any time via your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in or use certain Platform features.

6. Data Retention

icrown retains your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. Our standard retention periods are:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to comply with AML and KYC record-keeping obligations.
• Transaction records: Financial transaction logs are retained for a minimum of seven (7) years in line with standard accounting and regulatory requirements.
• Support communications: Customer service records are retained for three (3) years from the date of the last interaction.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.
• Cookie and analytics data: Anonymised analytics data is typically retained for up to 26 months from collection.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

7. Security Measures

icrown takes the security of your personal data seriously. We have implemented a layered set of technical and organisational measures to protect against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end TLS 1.3 encryption for all data in transit between your browser or app and our servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication (MFA) options available for all registered accounts, strongly recommended for users in Malaysia and internationally.
• Regular penetration testing and independent security audits conducted by qualified cybersecurity professionals.
• Strict role-based access controls (RBAC) ensuring that only authorised icrown personnel can access personal data, and only to the extent required for their role.
• 24/7 intrusion detection and monitoring systems that alert our security team to anomalous activity in real time.
• Data breach response procedures: In the unlikely event of a data breach that affects your personal information, icrown will notify affected users and relevant authorities in accordance with applicable laws, including the PDPA.

While we take all reasonable precautions, no system is completely immune to risk. We encourage you to use a strong, unique password for your icrown account and to enable MFA for additional protection.

8. Your Data Rights

As a user of icrown, and as a data subject under Malaysia's PDPA and other applicable international data protection frameworks, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data icrown holds about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations we are required to fulfil.
• Right to restrict processing: In certain circumstances, you may request that we limit the processing of your data — for example, while a dispute or accuracy challenge is being resolved.
• Right to data portability: Where technically feasible, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time; we will cease processing upon receipt of such an objection.

To exercise any of the above rights, please contact our support team at [email protected]. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days. We may need to verify your identity before processing certain requests.

9. Minors & Age Restriction Policy

icrown is strictly an adult platform. You must be 21 years of age or older to register an account, access our casino games, place sports bets, or use any feature of the Platform. This applies to all users, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and all other regions of Malaysia.

We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory date-of-birth verification, and all accounts are subject to KYC identity checks that confirm the user's age before deposits or withdrawals are permitted.

If we become aware that personal data has been inadvertently collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our Platform, please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control software and to maintain open conversations with young adults about responsible attitudes toward gambling. Further guidance is available on our Responsible Gaming page.

10. Changes to This Policy

icrown reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Display a prominent notice on the Platform's homepage or via your registered email address, giving you adequate notice before the changes take effect.
• Where required by law, seek your renewed consent for any new processing activities.

Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how icrown protects your information.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way icrown handles your personal data, please get in touch with our Data Protection team:

• Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon visible on any page of our Platform — our team can assist in English, Bahasa Melayu, and Mandarin.
• Response time: We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) calendar days.

For general platform support, account queries, or gameplay assistance, you can also visit our FAQ page for answers to the most commonly asked questions by icrown users across Malaysia.