Crown 99 Privacy Policy – Malaysia Personal Data Protection

Crown 99 ("we", "our platform") takes the responsibility of protecting its members' personal data very seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information that you provide to us or that we collect when you use the Crown 99 platform at https://crown99.im.

This policy applies to all Crown 99 platform users, including website visitors and registered members using Sports Betting, Live Casino, poker, e-sports, badminton, virtual sports, and all other services provided by Crown 99.

This Privacy Policy has been drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia. Should any conflict arise between this Privacy Policy and applicable legal requirements, the legal requirements shall prevail.

Crown 99 only collects personal data that is necessary to provide our services to you. The types of data we collect include:

Crown 99 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data without your explicit consent.

Crown 99 collects your personal data through the following means:

• Account Registration: When you register a new account at Crown 99, you voluntarily provide your personal information, including your name, phone number, and email address.
• Platform Usage: When you use the Crown 99 platform to place bets on Malaysia Super League football, BWF badminton, Live Casino, poker, e-sports, or virtual sports, our systems automatically record the relevant activity.
• Financial Transactions: Deposit and withdrawal details made via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX through Maybank2u or CIMB Clicks are collected for processing and compliance purposes.
• Contact Support: When you contact Crown 99 customer support via live chat, email, or WhatsApp, we retain a record of that communication.
• Cookies & Tracking Technologies: The Crown 99 website uses cookies and similar technologies to enhance your browsing experience (see Section 8 for more details).
• Identity Verification (KYC): Where identity verification is required, you may be asked to upload documents such as a copy of your MyKad or proof of address.

Crown 99 uses your personal data solely for the following purposes:

• Account Management: To create, verify, and manage your Crown 99 account — including the login process, password recovery, and two-factor authentication.
• Transaction Processing: To process all deposits and withdrawals you make via the Malaysian payment methods available on Crown 99.
• Service Provision: To deliver all Crown 99 services you use — Sports Betting, Live Casino, poker, e-sports, virtual sports, and badminton.
• Service Communications: To send you important notifications regarding your account, transactions, security, and policy updates.
• Marketing (with consent): To send you Crown 99 promotional information, bonuses, and special offers — only where you have given consent to receive marketing communications.
• Legal Compliance: To comply with applicable legal requirements, regulations, and regulatory directives, including anti-money laundering (AML) and KYC obligations.
• Platform Security: To detect, investigate, and prevent fraud, identity theft, and unlawful activity on the Crown 99 platform.
• Service Improvement: To analyse aggregated usage patterns for the purpose of improving the user experience on the Crown 99 platform.

Crown 99 does not sell, rent, or trade members' personal data to third parties. However, we may share certain data with the following parties for limited and legitimate purposes:

• Payment Providers: Information required to process transactions is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and Malaysian banking institutions (Maybank, CIMB) that support FPX. Such sharing is strictly limited to the data necessary to complete each transaction.
• Game Software Providers: Certain gameplay information may be shared with licensed game software providers that supply live casino games, slots, and other games on Crown 99. All such providers are bound by strict confidentiality agreements.
• Authorities: Crown 99 may disclose personal data to Malaysian law enforcement authorities (such as the police or regulatory bodies) when required by law or a valid court order.
• Professional Advisors: Lawyers, accountants, or auditors providing professional services to Crown 99, subject to confidentiality obligations.
• Business Succession: Should Crown 99 be involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, with appropriate notice given to members.

All third parties that receive data from Crown 99 are bound by appropriate data protection obligations and may only use such data for permitted purposes.

Crown 99 implements a range of technical and organisational security measures to protect members' personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All communications between your browser and Crown 99's servers are encrypted using 256-bit TLS/SSL protocol, ensuring data cannot be intercepted.
• Data-at-Rest Encryption: Sensitive data stored in the Crown 99 database is also encrypted for additional protection.
• Strict Access Controls: Only Crown 99 staff with a legitimate business need and who have undergone background checks are permitted to access member data.
• 24/7 Monitoring: Crown 99's systems are continuously monitored to detect any suspicious activity or intrusion attempts.
• Multi-Layer Firewall: Crown 99's infrastructure is protected by multiple layers of firewalls and intrusion prevention systems (IPS).
• Two-Factor Authentication (2FA): Crown 99 members are encouraged to enable two-factor authentication for added protection against unauthorised access.
• Regular Security Audits: Crown 99 conducts regular penetration testing and security audits carried out by independent security experts.

While we implement comprehensive security measures, no security system can be guaranteed to be 100% secure. In the event of a data security incident involving your personal information, Crown 99 will notify you within a reasonable timeframe in accordance with applicable legal requirements.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Crown 99:

To exercise any of the rights above, please contact Crown 99's Data Protection Officer by email at support@crown99.im by clearly stating your request. We will process your request within 14 working days. For complex cases, this period may be extended by up to 30 days with prior notice.

The Crown 99 website uses cookies — small text files stored on your device — to enhance your user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage and delete cookies through your browser settings. Please note, however, that disabling all cookies may affect the functionality of the Crown 99 platform.

Crown 99 takes child protection very seriously. Our platform is strictly for individuals aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected inadvertently, we will promptly delete that information and close the relevant account. Parents or guardians who become aware that their child has registered on Crown 99 are advised to contact us immediately at support@crown99.im.

In the course of operating Crown 99, your personal data may be transferred to, stored in, or processed at locations outside Malaysia under certain circumstances — for example, when using international cloud servers or global technology service providers.

Crown 99 ensures that all cross-border data transfers are carried out with appropriate safeguards in place, including:

• Ensuring the destination country maintains a level of data protection comparable to Malaysia
• Using standard contractual clauses that require data recipients to comply with appropriate data protection standards
• Obtaining your consent where required by law

All such data transfers are carried out in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Crown 99 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law:

• Active Account Data: For as long as your account remains active on Crown 99.
• Financial Transaction Data: A minimum of 7 years from the transaction date, in accordance with Malaysian financial legal requirements.
• KYC (Identity Verification) Data: A minimum of 5 years after account closure, in compliance with Malaysian AML/KYC requirements.
• Support Communication Logs: 2 years from the date of last communication.
• After Account Closure: Certain data is retained for periods prescribed by law even after an account is closed. Once the mandatory retention period has lapsed, data will be permanently deleted or irreversibly anonymised.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Crown 99 handles your personal data, please do not hesitate to contact us:

If you are not satisfied with how Crown 99 handles your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia under the Malaysian Ministry of Communications and Digital.