Privacy Policy

1. Who we are

CrownPlay (“we”, “us”) operates the CrownPlay online casino and sportsbook and the information website au.casinocrownplay.org. We are the data controller for the personal information described in this policy. Questions can be sent to [email protected].

2. Information we collect

We collect information you provide directly and information generated by your use of the service:

• Account data: name, date of birth, address, email, phone number, username and password hash.
• Verification data: copies of identity documents, proof of address and, where required, source-of-funds documents.
• Transaction data: deposits, withdrawals, payment method identifiers (never full card numbers), bets and game history.
• Technical data: IP address, device type, browser, operating system, approximate location and cookie identifiers.
• Communications: live-chat transcripts, emails and call recordings with our support team.

3. How we use your information

• To create and manage your account and process payments.
• To verify your identity and age and to comply with anti-money-laundering and gambling regulations.
• To detect fraud, bonus abuse and multiple accounts.
• To provide responsible-gambling tools and intervene where we detect signs of harm.
• To send service messages and, with your consent, promotional offers you can opt out of at any time.
• To improve the website and games through aggregated analytics.

4. Legal basis and retention

We process data to perform our contract with you, to meet legal obligations (licensing, AML, tax), for our legitimate interests in security and fraud prevention, and where you have given consent for marketing. Account and transaction records are retained for at least five years after account closure as required by our licence; marketing preferences are deleted when you withdraw consent.

5. Sharing of information

We share data only where necessary: with payment providers to process transactions, with identity-verification and fraud-prevention services, with game providers for game session data, with regulators and law enforcement where legally required, and with service providers who host or support our platform under strict confidentiality agreements. We never sell personal data.

6. Cookies

This website uses strictly necessary cookies to remember your cookie choice and language, and — if you accept all cookies — analytics cookies that help us understand which pages are useful. You can change your choice at any time in your browser settings; disabling necessary cookies may affect how the site works. Affiliate tracking uses a first-party cookie valid for 30 days.

7. Security

All data is transmitted over 256-bit TLS and stored on encrypted servers with access limited to staff who need it for their role. We run regular penetration tests and our payment processing is PCI DSS compliant. In the unlikely event of a data breach affecting you, we will notify you and the relevant authority without undue delay.

8. Your rights

Under the Australian Privacy Act 1988 and, where applicable, the GDPR, you may request access to the personal information we hold about you, ask us to correct inaccurate data, request deletion where we have no legal duty to keep it, object to or restrict certain processing, and withdraw marketing consent at any time using the unsubscribe link or your account settings. To exercise these rights email [email protected]; we respond within 30 days. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Children

Our services are for adults aged 18 and over. We do not knowingly collect data from minors and close any account we discover belongs to a person under 18.

10. Changes to this policy

We may update this policy to reflect changes in law or our services. Material changes are announced on the website and by email to registered players at least 14 days before they take effect.