Personal Data Protection

Privacy Policy Crown2u

Crown2u is fully committed to protecting the privacy and security of your personal data. This Privacy Policy clearly explains how we collect, use, store and safeguard your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026

Crown2u's Six Data Protection Principles

We believe every player has the right to know how their data is handled. The following are the six core principles that underpin Crown2u's Privacy Policy.

Minimum Collection

Crown2u only collects data that is strictly necessary to provide its services. No excessive or irrelevant data is collected without a clear and legitimate purpose.

256-bit SSL Encryption

All data transmitted between your device and Crown2u's servers is protected by 256-bit SSL encryption — the same level of security used by Malaysia's leading banking institutions.

Full User Control

You have the right to access, correct, or delete your personal data at any time. Crown2u provides a straightforward process for managing your privacy preferences.

Consent Comes First

Crown2u will not share your data with third parties for marketing purposes without first obtaining your explicit consent. No data is sold to advertisers.

Malaysia PDPA Compliance

All of Crown2u's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the guidelines issued by the Personal Data Protection Commissioner.

No Excessive Monitoring

Crown2u does not sell, rent, or disclose your personal data to any third party unrelated to the platform's operations or without your consent.

SECTION 01

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by Crown2u and applies to all users who access or use the Crown2u platform via crown2u.ws, its mobile application, or any related service channels. It sets out in detail how Crown2u collects, processes, stores, discloses, and protects your personal information.

This document is prepared in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia to ensure your privacy rights as a user are always protected and respected. By using the Crown2u platform, you agree to the terms set out in this Privacy Policy.

This Privacy Policy applies to all activities you carry out on the Crown2u platform, including account registration, login, deposits and withdrawals, live casino gameplay, Sports Betting, lottery purchases, jackpot usage, and any communications with our customer support team.

If you do not agree with any part of this Privacy Policy, please discontinue your use of the Crown2u platform and contact us to close your account.
SECTION 02

Personal Data We Collect

Crown2u collects various types of personal information depending on how you interact with our platform. This data collection is necessary to enable us to provide services that are secure, transparent and compliant with applicable regulations in Malaysia.

Data Category Type of Information Primary Purpose
Identity Full name, date of birth, MyKad/passport number KYC & Age Verification
Contact Phone number, email address Communications & account security
Financial Bank account number, account holder name, e-wallet name Deposits, withdrawals & payment verification
Technical IP address, device type, web browser, session ID Security & Fraud Detection
Behaviour Game records, betting history, game preferences Responsible gaming & personalisation
Communications Support correspondence, feedback & complaints Service improvements

We may also collect information automatically as you browse the Crown2u platform, including cookie data, server logs, and analytics information that helps us understand usage patterns for continuous improvement purposes.

Crown2u will not request your password, PIN or full credit card details via email, SMS or live chat. Please be vigilant against fraudulent attempts claiming to be from Crown2u.
SECTION 03

How We Use Your Personal Data

Crown2u uses collected personal data solely for legitimate and transparent purposes. Every use of your data rests on a sound legal basis — whether contractual necessity, a legal obligation, Crown2u's legitimate interests, or your explicit consent.

The primary purposes for which your data is used are as follows:

  • Account Management: Creating, verifying, and managing your Crown2u account, including the KYC process and age verification (must be 18 years or above)
  • Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your bank account or e-wallet
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and platform abuse
  • Legal Compliance: Fulfil reporting and record-keeping obligations required under Malaysian law
  • Personalise Your Experience: Personalising content, promotional offers and game recommendations based on your preferences
  • Service Communications: Sending important notifications relating to your account, transactions, promotions, and policy updates
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support
  • Product Improvements: Analysing aggregated usage data to improve the performance and experience of the Crown2u platform
Crown2u will not use your data for purposes not stated in this Privacy Policy without first obtaining fresh consent from you.
SECTION 04

Data Sharing With Third Parties

Crown2u does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. However, there are certain situations where Crown2u may need to share your information with specific parties in order for the platform to operate properly and securely.

The parties who may receive your data and the reasons for doing so are as follows:

  • Payment Service Providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay providers for the secure processing of your financial transactions
  • Game Providers: Licensed gaming software companies that supply slots, live casino, Sports Betting and lottery on the Crown2u platform — solely for necessary technical verification purposes
  • Identity Verification Partners: Third-party KYC service providers that assist in verifying users' identity documents and age
  • Legal Authorities: Bank Negara Malaysia, the Financial Intelligence and Enforcement Department (FIED), the police or courts where required by law or court order
  • Audit & Compliance Firms: Independent auditors and compliance firms that review Crown2u's operations for quality control and regulatory compliance purposes

All third parties who receive your data are bound by strict confidentiality agreements and are prohibited from using that data for any purpose beyond the scope agreed upon with Crown2u.

Should your data need to be transferred outside Malaysia, Crown2u will ensure it receives a level of protection equal to or greater than that required under Malaysia's PDPA.
SECTION 05

Data Security

Crown2u continually invests in cutting-edge security infrastructure to protect the personal data of all its users. We employ a layered "defense in depth" approach that combines multiple technical and organisational security controls.

Key security measures implemented by Crown2u include:

  • Data Encryption in Transit: TLS 1.3 protocol with 256-bit SSL certification ensures all communications between your device and Crown2u's servers are fully encrypted
  • Data Encryption at Rest: Sensitive data such as bank account numbers and identity information is encrypted at rest on our servers using AES-256
  • Two-Factor Authentication (2FA): Users are encouraged to enable 2FA to add an extra layer of protection to their account
  • 24/7 Monitoring: Round-the-clock security monitoring to detect and respond to any suspicious activity
  • Regular Penetration Testing: Crown2u conducts regular security assessments by independent cybersecurity specialists to identify and address vulnerabilities
  • Internal Access Controls: Only authorised Crown2u staff may access user data, and all access is logged for audit purposes
While Crown2u takes all reasonable precautions, no system can guarantee absolute security. You are also responsible for keeping your account password confidential.
SECTION 06

Cookies & Tracking Technologies

The Crown2u platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how the platform is used. Cookies are small text files stored on your device when you visit crown2u.ws.

The types of cookies Crown2u uses are:

  • Essential Cookies: Required for the platform to function properly — including login session authentication, cart management, and language preferences. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how pages are visited and errors that occur to help Crown2u improve platform performance.
  • Functional Cookies: Storing your preferences such as language settings and preferred currency denomination to deliver a more personalised experience.
  • Analytics Cookies: Used in conjunction with Crown2u's internal analytics services to understand traffic patterns and user behaviour in an aggregated, anonymised manner.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some features on the Crown2u platform. For more information on managing cookies, refer to your web browser's help documentation.

SECTION 07

Your Rights as a Data Subject

As a Crown2u user and data subject under Malaysia's PDPA, you have specific rights regarding your personal data. Crown2u is committed to fully respecting and facilitating the exercise of those rights.

Right of Access
Request a copy of the personal data we hold about you at any time.
Right to Rectification
Correct any inaccurate or incomplete personal data in your account.
Right to Erasure
Request the deletion of your personal data, subject to statutory retention obligations.
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
Right to Portability
Receive your data in a structured, machine-readable format for portability purposes.
Right to Restriction
Request the restriction of your personal data processing under circumstances permitted by law.

To exercise any of the above rights, please contact the Crown2u privacy team by email at support@crown2u.ws stating the right you wish to exercise and your account details. Crown2u will respond to your request within 14 business days.

SECTION 08

Data Retention & Deletion

Crown2u retains your personal data for as long as your account remains active or as long as it is needed to provide our services. Once your account is closed, Crown2u will retain your data for the period required under Malaysian law before it is securely deleted or anonymised.

Data retention periods are based on the following categories:

  • Financial Transaction Records: Minimum 7 years from the date of transaction as required by Malaysian financial legislation and anti-money laundering requirements
  • Identity Verification Documents (KYC): 5 years after account closure or end of business relationship
  • Support Communication Logs: 3 years from the date of last communication
  • Analytics & Gaming Behaviour Data: 2 years in identifiable form, after which it is anonymised for research purposes
  • Cookies & Session Data: Between 30 minutes (session) to 12 months (preference cookies) depending on cookie type

Upon expiry of the retention period, Crown2u will securely delete your data using industry-standard deletion methods, ensuring the data cannot be recovered or misused.

SECTION 09

Children's Privacy

The Crown2u platform is exclusively for individuals who are 18 years and above only. Crown2u does not knowingly collect, process or store any personal information from individuals under the age of 18.

Every new account registration requires age verification through a rigorous KYC process, including submission of a Malaysian identity card (MyKad) or other valid identification document. Crown2u employs automated verification technology to help detect registration attempts by underage individuals.

If Crown2u discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will promptly delete that data and close the account in question without prior notice.

Parents or guardians who become aware that their child has registered on the Crown2u platform are urged to contact us immediately at support@crown2u.ws so that prompt action can be taken.

SECTION 10

Changes to the Privacy Policy

Crown2u reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or service improvements. Users will be notified of any material changes through the following channels:

  • Pop-up notification upon your next login to your Crown2u account
  • Email notification to the address registered to your account
  • Updates to this Privacy Policy page with a revised "Last Updated" date

Your continued use of the Crown2u platform after any changes to this Privacy Policy take effect will be deemed acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and stop using the platform.

We recommend reviewing this Privacy Policy page periodically — at least once every three months — to stay informed about how your data is handled.
SECTION 11

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Crown2u handles your personal data, our privacy team is ready to assist you through the following channels:

  • Privacy Email: support@crown2u.ws — please include "Privacy Enquiry" in the subject line for priority handling
  • Live Chat: Available 24/7 directly on the Crown2u platform for immediate assistance
  • FAQs: Visit the Frequently Asked Questions us for answers to commonly asked privacy questions

Crown2u is committed to responding to all privacy-related enquiries within 3 to 5 business days. For more complex complaints requiring in-depth investigation, the resolution period may take up to 14 business days.

If you are not satisfied with Crown2u's response to your privacy complaint, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia which is responsible for overseeing PDPA compliance in the country.

This Privacy Policy is the latest version and is effective from 1 January 2026. We appreciate your trust in Crown2u and are committed to protecting your privacy at all times.

Join Crown2u — Safe, Licensed & Trusted

Your data is protected, your privacy is respected. Register a Crown2u account today and enjoy a fully secure online casino, Sports Betting, and lottery experience in Malaysia.

For players aged 18 and above only  |  Licensed Platform  |  PDPA-Protected Data

Bahasa Melayu