Privacy Policy

This Privacy Policy explains how CrownPlay (“we”, “us”, “our”) processes personal data when you visit or use https://crownplay.gg and related services (the “Platform”).

For privacy requests, contact privacy@crownplay.gg. For general support, use support@crownplay.gg. We will publish a Data Protection Officer (DPO) contact if/when one is appointed under applicable law.

This Policy should be read with our Terms of Service, Cookie Policy, and AML & KYC Policy.

We act as a controller for account, wallet, gameplay, support, and marketing data we determine the purposes for. Identity verification may involve processors such as our KYC provider (e.g. Didit). Game aggregators and live casino providers may receive limited session/wallet callback data as independent controllers or processors depending on the integration.

Depending on how you use the Platform, we may process:

• Identity & contact: username, email, password hash, Discord linked ID, language preference, date of birth / age confirmation (when collected), KYC documents (ID, selfie, address proof).
• Account & profile: VIP tier, preferences, referral/affiliate codes, security events, login history.
• Financial & crypto: deposit/withdrawal amounts, Crowns (CR) / Gold Coins (GC) balances and ledger entries, wallet addresses, transaction hashes, network fees, fraud scores.
• Gameplay: bets, outcomes, game IDs, seeds/nonces for originals, provider round IDs, bonus wagering progress, race participation.
• Technical: IP address, approximate geolocation derived from IP, device/browser info, cookies and similar technologies, diagnostics, anti-abuse signals.
• Communications: support tickets, chat messages, emails, Discord interactions related to your account.
• Marketing: newsletter preferences, campaign engagement (where consented or otherwise permitted).

We do not intentionally collect data from children under 18. If we learn an underage account exists, we will close it and delete or restrict data as required by law (subject to AML retention where mandatory).

• Directly from you (registration, KYC uploads, support, chat);
• Automatically from your device and our logs/cookies;
• From payment/blockchain networks and price oracles when you deposit or withdraw;
• From KYC, fraud, and sanctions screening providers;
• From game providers via seamless wallet callbacks;
• From affiliates/streamers when attribution codes are used.

We process personal data for the following purposes and bases (GDPR-style mapping):

• Provide the Platform (account, games, wallet) — contract performance.
• KYC/AML, fraud prevention, sanctions, age & geo controls — legal obligation and/or legitimate interests / public interest where applicable.
• Security, abuse detection, audit logs — legitimate interests.
• Customer support & complaints — contract / legitimate interests.
• Responsible gaming interventions — legitimate interests and legal obligation where required.
• Analytics to improve UX and game performance — legitimate interests or consent where required for non-essential cookies.
• Marketing emails / offers — consent or soft opt-in where lawful; you may opt out anytime.
• Legal claims and regulatory requests — legitimate interests / legal obligation.

We may share data with:

• Infrastructure providers (hosting, databases, email delivery such as Postal/Resend);
• KYC / identity verification vendors;
• Game aggregators and studios (session tokens, balance callbacks, nickname as configured);
• Blockchain networks (inherently public transaction data when you transact);
• Professional advisers (legal, audit) under confidentiality;
• Authorities when legally required or to protect rights and safety;
• Successors in a merger, acquisition, or asset transfer (with notice where required).

Data may be processed in countries outside your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for restricted transfers.

We do not sell personal information for money. If “sale” or “sharing” under CCPA/CPRA is interpreted to include certain advertising cookies, you may opt out via privacy@crownplay.gg and cookie controls described in our Cookie Policy.

We keep data only as long as needed for the purposes above, then delete or anonymize it — except where longer retention is required (notably AML/CFT transaction and KYC records, typically five (5) years or longer after the end of the business relationship, depending on applicable law).

• Account & gameplay ledgers: for the life of the account + AML retention period;
• Support tickets: generally up to 3 years after closure, unless needed longer for disputes;
• Marketing consents/opt-outs: for as long as needed to honor your choice;
• Technical logs: typically 30–180 days unless elevated for security investigations;
• KYC documents: per AML schedule even if you request erasure of other data.

Where GDPR erasure rights conflict with AML retention duties, AML retention prevails for the affected records; we will restrict processing to compliance purposes.

We implement technical and organizational measures appropriate to risk, including TLS in transit, access controls, segregated signing for crypto withdrawals, password hashing, rate limiting, audit logging, and staff access minimization. No method of transmission or storage is 100% secure; you must also protect your credentials and devices.

Depending on your location, you may have rights to:

1. Access a copy of your personal data;
2. Rectify inaccurate data;
3. Erase data (subject to legal exceptions such as AML);
4. Restrict or object to certain processing;
5. Data portability for data you provided where processing is automated and consent/contract based;
6. Withdraw consent without affecting prior lawful processing;
7. Lodge a complaint with a supervisory authority;
8. Under CCPA/CPRA-style laws: know, delete, correct, and non-discrimination for exercising rights; opt out of sale/sharing.

To exercise rights, email privacy@crownplay.gg from your registered email with sufficient detail to verify your identity. We will respond within the timelines required by law (generally 30 days under GDPR, subject to extensions).

We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are required for login and security. Analytics/marketing cookies are used only where permitted (consent or applicable opt-out model).

We use automated and semi-automated fraud, bonus-abuse, and withdrawal-risk scoring. These systems may delay or block withdrawals or require manual review. You may contact support to request human review of a decision that significantly affects you, where required by law.

The Platform is strictly 18+. We do not knowingly offer services to minors. Parents or guardians who believe a minor provided data should contact privacy@crownplay.gg.

We may update this Policy to reflect product, legal, or operational changes. The “Last updated” date will change accordingly. Significant changes may be notified by email or Platform banner where appropriate.