Privacy Policy
iCrown is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your own data.
Six Things iCrown Promises About Your Data
Before you read the full policy below, here is a plain-English summary of the commitments we make to every player.
We collect only the personal data necessary to operate your Account, process payments in MYR, comply with our KYC obligations, and provide customer support. We do not collect data for its own sake.
iCrown does not sell, rent, or trade your personal information to any third party for their independent marketing or commercial purposes. Your data is not a product.
All data transmitted between your device and our servers is protected by 256-bit TLS encryption. Payment credentials are tokenised and never stored on iCrown's own infrastructure.
You have the right to access, correct, restrict, port, and request deletion of your personal data at any time, subject to our legal retention obligations. Contact our support team to exercise any of these rights.
We share data only with verified payment partners (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong), our licensing authority, and service providers bound by data protection agreements.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following Account closure for regulatory compliance.
- 1.Introduction
- 2.Definitions
- 3.Data We Collect
- 4.How We Collect Data
- 5.Purposes of Data Processing
- 6.Legal Basis for Processing
- 7.Third-Party Disclosure
- 8.International Data Transfers
- 9.Data Retention
- 10.Cookies & Tracking
- 11.User Rights
- 12.Data Security
- 13.Children's Privacy
- 14.Amendments
- 15.Contact Us
Plain-Language Notice: This Privacy Policy is a legally binding document. The sections below are written in formal legal-register English as required by data protection principles. If you have any questions about how your data is handled, please contact our support team — we are happy to explain anything in plain language via live chat in English, Bahasa Melayu, or Mandarin.
1Introduction
This Privacy Policy ("Policy") is issued by iCrown ("iCrown", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://icrown.cam (the "Platform"). iCrown is committed to processing personal data in accordance with applicable data protection legislation and the principles of transparency, proportionality, and data minimisation.
This Policy describes the categories of personal data we collect from players and visitors ("you", "your", "Data Subject"), the purposes for which we process that data, the lawful bases upon which such processing rests, and the rights available to you as a Data Subject. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall contractual relationship between you and iCrown.
By registering for an Account on the Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, where consent is the applicable legal basis. Where processing is based on other legal grounds (such as contractual necessity or legal obligation), your continued use of the Platform does not constitute consent but rather acknowledgement that such processing will occur.
2Definitions
For the purposes of this Policy, the following definitions shall apply:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly, including name, identification number, location data, and online identifiers. |
| Processing | Any operation performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| Data Controller | iCrown, which determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | A third party engaged by iCrown to process personal data on iCrown's behalf under a data processing agreement (e.g., payment gateway providers, cloud hosting providers). |
| Sensitive Personal Data | A special category of personal data requiring heightened protection, including data relating to health, financial circumstances, and identity documents submitted for KYC purposes. |
| KYC Data | Identity verification documentation submitted by Players during the Know Your Customer process, including government-issued identification and proof of address. |
| Cookie | A small text file stored on your device by the Platform for the purpose of recording session information, preferences, or tracking data as described in Section 10. |
3Categories of Personal Data We Collect
iCrown collects the following categories of personal data in the course of providing the Platform and its associated services:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued identification number (MyKad or passport number), and copies of identity documents submitted for KYC verification. |
| Contact Data | Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam), email address, and telephone number. |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e.g., e-wallet account reference, bank account name — not full account numbers), transaction history, and MYR account balance history. |
| Account Data | Username, hashed password, Account creation date, login history, Account status, bonus and promotion participation records, and Crown Loyalty Programme tier and points data. |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, sports betting selections (including Liga Super Malaysia, EPL, and other markets), and session duration data. |
| Technical Data | IP address, device type, operating system, browser type and version, time zone, and referral URL. |
| Communications Data | Transcripts of live chat sessions, email correspondence with our support team, and records of any complaints or disputes raised. |
| Responsible Gambling Data | Self-imposed deposit limits, loss limits, session time limits, and self-exclusion status and duration, where applicable. |
4How We Collect Personal Data
iCrown collects personal data through the following means:
- Direct Collection: Data you provide directly during Account registration, KYC verification, deposit and withdrawal processing, support interactions, and completion of any forms on the Platform.
- Automated Technical Collection: Technical Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar technologies as described in Section 10.
- Payment Partners: Confirmation and reference data received from Malaysian payment processors (DuitNow, FPX-participating banks including Maybank, CIMB Clicks, Public Bank, Hong Leong Connect, and e-wallet providers including Touch 'n Go eWallet, Boost, and GrabPay) upon successful processing of a transaction.
- Third-Party Verification Services: Identity verification data from KYC service providers engaged to assist in confirming the authenticity of identity documents submitted by Players.
- Licensing Authority: In limited circumstances, data may be received from our licensing authority in connection with regulatory oversight obligations.
5Purposes of Data Processing
iCrown processes personal data for the following specific, explicit, and legitimate purposes:
- Account Management: To create, maintain, verify, and manage your player Account, including authentication and access control.
- Service Delivery: To provide the gaming and betting services you have requested, including processing wagers, calculating outcomes, and crediting winnings to your Account in MYR.
- Payment Processing: To facilitate deposits and withdrawals through Malaysian payment channels, to verify payment method ownership, and to maintain financial transaction records.
- Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with our licensing obligations and anti-money laundering (AML) requirements.
- Regulatory Compliance: To comply with applicable laws, regulatory requirements issued by our licensing authority, and requests from competent authorities.
- Anti-Fraud and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised Account access, and other prohibited conduct.
- Responsible Gambling: To implement and monitor responsible gambling tools including deposit limits, loss limits, and self-exclusion status, and to identify patterns of potentially harmful gambling behaviour.
- Customer Support: To respond to your enquiries, complaints, and requests via live chat, email, and WhatsApp in English, Bahasa Melayu, and Mandarin.
- Platform Improvement: To analyse aggregated and anonymised usage data to improve the Platform's functionality, performance, and user experience.
- Marketing Communications: Where you have provided explicit consent, to send you promotional communications about iCrown offers, bonuses, and events relevant to your gaming activity. You may withdraw this consent at any time.
6Legal Basis for Processing
iCrown processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Processing necessary to perform the contract between you and iCrown — including Account management, payment processing, and service delivery — is carried out on the basis that it is necessary for the performance of that contract.
- Legal Obligation: Processing required to comply with our legal obligations under anti-money laundering legislation, our licensing authority's requirements, and applicable data protection law.
- Legitimate Interests: Processing carried out on the basis of iCrown's legitimate interests in preventing fraud, securing the Platform, and improving our services, where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for direct marketing communications, and for certain non-essential cookies, is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7Third-Party Disclosure
iCrown does not sell, rent, or trade your personal data to any third party. We disclose personal data to the following categories of recipients only where strictly necessary:
- Payment Service Providers: Malaysian payment partners including DuitNow, FPX network banks (Maybank, CIMB, Public Bank, Hong Leong Connect), Touch 'n Go eWallet, Boost, and GrabPay — solely for the purpose of processing your financial transactions.
- KYC and Identity Verification Providers: Third-party services engaged to verify the authenticity of identity documents submitted during the KYC process. These providers are bound by data processing agreements and are prohibited from using your data for any independent purpose.
- Cloud Infrastructure and Hosting Providers: Providers of server infrastructure and cloud services used to host the Platform. Such providers process data only on iCrown's instructions under binding data processing agreements.
- Game Software Providers: Suppliers of casino game software may receive anonymised session data necessary for the operation of their games. No personally identifiable information is shared with game studios beyond what is technically necessary.
- Licensing Authority: Our international gaming licensing authority may request access to player data in the course of its regulatory oversight. iCrown will comply with any lawfully issued regulatory request.
- Law Enforcement and Regulatory Authorities: Where required by law, court order, or other legally binding process, iCrown will disclose personal data to competent authorities.
8International Data Transfers
iCrown may transfer personal data to servers or service providers located outside of Malaysia in the course of operating the Platform. Where such transfers occur, iCrown takes steps to ensure that an adequate level of protection is applied to your personal data, including through contractual safeguards such as standard data protection clauses incorporated into agreements with Data Processors.
By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia, including countries that may not have data protection laws equivalent to those in Malaysia. iCrown will at all times apply the protections described in this Policy regardless of where data is processed.
9Data Retention
iCrown retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of Account plus a minimum of 5 years following Account closure, in accordance with AML and licensing requirements. |
| KYC Documents | Minimum of 5 years from date of verification, or as required by our licensing authority. |
| Financial Transaction Records | Minimum of 7 years from the date of the transaction, in compliance with financial record-keeping obligations. |
| Gaming Activity Logs | Minimum of 5 years from the date of the session, for dispute resolution and regulatory purposes. |
| Support Communications | 3 years from the date of the interaction, for quality assurance and dispute management purposes. |
| Marketing Consent Records | For the duration of the Account and 2 years following Account closure, as evidence of consent and opt-out history. |
| Technical & Cookie Data | Up to 13 months from the date of collection, subject to cookie category and applicable consent settings. |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.
10Cookies & Tracking Technologies
iCrown uses cookies and similar tracking technologies to operate the Platform effectively. The following categories of cookies are used:
- Strictly Necessary Cookies: Required for the Platform to function. These enable session management, authentication, and security functions. These cookies cannot be disabled.
- Functional Cookies: Store your preferences such as language selection and display settings to provide a more personalised experience.
- Performance and Analytics Cookies: Collect anonymised data about how visitors use the Platform, which pages are most visited, and how users navigate between sections. This data is used to improve the Platform and is not linked to individual identities.
- Responsible Gambling Tracking: Session duration and login frequency data collected to support our responsible gambling monitoring obligations.
You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. iCrown does not use third-party advertising or behavioural targeting cookies.
11Your Data Rights
Subject to applicable law and any overriding legal obligations, you have the following rights with respect to your personal data held by iCrown. To exercise any of these rights, please contact our support team via live chat or email at [email protected].
You may request a copy of the personal data iCrown holds about you, together with information about how it is processed. We will respond within 30 days.
You may request correction of any inaccurate or incomplete personal data we hold about you. Some corrections may require supporting documentation.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations under AML and licensing law.
You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes at any time. We will cease such processing unless compelling grounds exist.
12Data Security
iCrown implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:
- 256-bit TLS encryption for all data transmitted between your device and our servers
- Tokenised payment processing — card and e-wallet credentials are never stored on iCrown's servers
- Access control policies limiting staff access to personal data on a strict need-to-know basis
- Regular security audits and vulnerability assessments of Platform infrastructure
- Mandatory two-factor authentication for all administrative access to systems holding personal data
- Data breach response procedures, including notification to affected individuals and regulatory authorities as required by applicable law
Notwithstanding the above, no method of electronic transmission or storage is entirely without risk. iCrown cannot guarantee the absolute security of data transmitted over the internet and encourages Players to take responsibility for maintaining the confidentiality of their Account credentials.
13Children's Privacy
The Platform is strictly for individuals aged 21 years and above. iCrown does not knowingly collect personal data from persons under the age of 21. The Platform employs mandatory KYC verification to enforce this requirement. If iCrown becomes aware that personal data has been collected from a person under the age of 21, the associated Account will be immediately closed, all data deleted (subject to any retention obligations), and any funds held will be dealt with in accordance with our Terms and Conditions.
If you believe that a person under the age of 21 has registered on the Platform, please notify iCrown immediately via live chat or at [email protected].
14Amendments to This Policy
iCrown reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The revised Policy will be published on this page with an updated effective date. Where material changes are made that affect the rights of existing Players, iCrown will endeavour to provide reasonable prior notice via the Platform or via the email address registered to your Account.
Continued use of the Platform following the publication of an amended Policy constitutes acknowledgement of the changes. We encourage you to review this page periodically to remain informed of how iCrown protects your personal data.
15Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact iCrown through any of the following channels:
Available 24/7 on-site. Supported in English, Bahasa Melayu, and Mandarin. Average response under 3 minutes.
Data protection enquiries: [email protected]. Responses within 5 business days for data subject requests.
Available via the Live Chat widget on the Platform. For general support queries. Data subject requests should be submitted via email for record-keeping purposes.
Play on iCrown With Confidence
Your personal data is protected by industry-standard encryption, strict access controls, and a Privacy Policy designed to give you full transparency and control. That is the iCrown standard.
For players aged 21 and above only. Please gamble responsibly. Responsible Gambling Policy