CrownGold Online Casino Privacy Policy

1. Introduction

This Privacy Policy outlines how CrownGold Online Casino (“CrownGold”, “we”, “our”, or “us”) collects, processes, stores, and protects the personal data of users in Australia. It applies to all users who access our services via desktop, mobile, or any other digital platform. This document has been developed in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and any other applicable data protection regulations.

By accessing or using our platform, users acknowledge that they have read and understood this Privacy Policy. If a user disagrees with any provision outlined herein, the appropriate course of action is to discontinue the use of our services.

The information provided in this document is intended to offer transparency concerning our data handling practices. We reserve the right to update this policy at our discretion. Updates take effect from the date of publication on our platform. Users are responsible for checking the Privacy Policy periodically to stay informed of any changes.

2. Types of Information Collected

CrownGold Australia collect two primary categories of information from users: personal information and technical usage data.

Personal information includes any data that identifies or can be reasonably linked to an individual. This may include, but is not limited to, full name, residential address, date of birth, email address, phone number, and payment details. This data is collected when users register an account, verify identity, deposit or withdraw funds, participate in promotions, or contact customer support.

Technical usage data includes non-personal information such as device type, browser version, IP address, location data, operating system, referral URLs, and on-site behaviour. This data is collected through cookies, server logs, and analytics tools to support platform optimisation and fraud detection.

We may also collect certain optional data through surveys or feedback forms, but participation in these activities is voluntary and not a condition of using the platform.

3. Purpose of Data Collection

All data collected is used solely for legitimate operational purposes in line with the delivery of regulated online casino services in Australia. The primary purposes for data collection include:

Verifying user identity to prevent fraudulent or unauthorised access
Facilitating deposits, withdrawals, and other financial transactions
Complying with regulatory obligations such as anti-money laundering (AML) and know your customer (KYC) laws
Ensuring account security and risk management
Providing customer support and resolving disputes
Managing responsible gambling features and self-exclusion tools
Analysing system performance and user engagement
Communicating service updates, promotional offers, and account-related notices

Data is not collected or processed for any purpose beyond what is described in this section unless explicit user consent is obtained.

4. Legal Basis for Processing Personal Data

We process personal information in accordance with applicable laws and based on several lawful grounds:

Contractual necessity: When processing is required to provide services under the terms of use agreed upon at account registration.
Legal obligation: Where processing is required to comply with applicable laws, including AML and KYC regulations.
Legitimate interests: For platform maintenance, service improvement, and fraud prevention, provided such interests do not override individual privacy rights.
Consent: When a user has voluntarily agreed to a specific type of data processing, such as receiving marketing emails or participating in optional surveys.

Each category of processing is assessed to ensure it complies with the relevant legal requirements and minimises risk to user privacy.

5. Storage and Retention of Personal Data

CrownGold uses encrypted, access-controlled servers located in data centres compliant with industry standards to store user data. We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and internal policy requirements.

Retention periods vary depending on the nature of the data and legal obligations. For example:

Account identification data is retained for at least seven years following account closure, as required by AML laws.
Payment and transaction data may be stored for a similar period to support audits and chargeback inquiries.
Communication records, including chat logs and support tickets, are stored for customer service and dispute resolution purposes.

Once data is no longer required, it is securely deleted or anonymised to remove all identifiable attributes.

6. Data Disclosure and Sharing

We do not sell or rent personal data to third parties under any circumstances. However, in the course of delivering services, we may disclose user data to third parties in the following cases:

Service providers: We engage third-party vendors to support areas such as payment processing, data analytics, identity verification, and email delivery. These providers only access data to perform specific tasks under strict contractual obligations.
Regulatory authorities: When required by law, we disclose information to regulators, law enforcement, or tax authorities. This may include reporting suspicious activities or responding to court orders.
Corporate transactions: In the event of a business merger, acquisition, or restructuring, data may be transferred as part of the company’s assets under confidentiality agreements.
Dispute resolution: If necessary for legal claims or investigations, we may share data with legal advisers or third parties involved in the resolution process.

All disclosures are limited to what is necessary, and we take reasonable steps to ensure recipient compliance with data protection obligations.

7. International Data Transfers

In certain cases, personal data may be transferred to and processed in countries outside Australia. These countries may not offer the same level of data protection as under Australian law. Before such transfers occur, we assess the adequacy of safeguards in place and implement appropriate protective measures, such as standard contractual clauses or binding corporate rules.

All international data transfers are executed in compliance with applicable legal frameworks. By using our services, users acknowledge and consent to the possibility of such cross-border transfers for operational purposes.

8. Security of Personal Information

We implement comprehensive technical and organisational measures to secure user data against accidental loss, unauthorised access, misuse, or modification. These measures include:

End-to-end encryption of data in transit and at rest
Access control mechanisms and multi-factor authentication
Network firewalls and anti-malware protection
Regular vulnerability scans and penetration testing
Staff training on privacy and data handling policies
Incident response protocols and data breach notification processes

Despite these precautions, no method of data transmission or storage is entirely secure. Users are advised to take personal measures, such as safeguarding login credentials, to contribute to overall data security.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to collect technical information and enhance user interaction with our platform. Cookies are small data files stored on a user’s device that enable functionality such as account login, preference retention, and activity monitoring.

Types of cookies in use include:

Essential cookies: Required for basic platform operation and navigation
Performance cookies: Gather data on user interactions for system analysis
Functional cookies: Remember user preferences and improve usability
Marketing cookies: Track user behaviour for targeted promotional content

Users can manage cookie settings through their browser configuration or opt out of certain tracking activities. Disabling cookies may impact platform functionality.

10. User Rights and Control

In accordance with Australian privacy laws, users have the right to access and control their personal information. These rights include:

Access: Users may request a copy of personal data we hold about them.
Correction: If any data is incorrect or outdated, users may request corrections.
Withdrawal of consent: Users may revoke previously granted consents, such as unsubscribing from promotional emails.
Deletion: Under certain conditions, users may request deletion of their data. Legal retention obligations may limit this right.
Objection: Users may object to specific types of processing based on legitimate interests or direct marketing.

Requests to exercise these rights can be submitted to our Privacy Officer via the contact information provided in this policy. Verification of identity may be required to process such requests.