This Privacy Policy explains how the Crown online casino collects, uses, stores, and shares your personal information when you use the platform. By registering an account or accessing the platform, you confirm that you have read and understood this policy. If you do not agree with how your information is handled, do not register or continue using the platform.
This policy is reviewed periodically and updated where required by changes in applicable law or operational practice. The current version is always available on this page.
1. Who We Are
The platform is operated under a licence issued by the Malta Gaming Authority (MGA). As the data controller, the operator is responsible for determining how and why your personal information is processed. For all privacy-related enquiries, contact the support team through the contact form in your account dashboard.
2. Information We Collect
Crown Casino Australia collects personal information in the following categories:
Identity information
- Full legal name, date of birth, gender, and nationality
- Government-issued identification documents provided during KYC verification
Contact information
- Email address, residential address, and phone number provided at registration or updated in account settings
Financial information
- Payment method details, transaction history, deposit and withdrawal records
- Source of funds documentation requested during enhanced due diligence
Account and gaming information
- Login credentials, session data, game history, betting patterns, and account preferences
- Rewards tier status, Points balance, and redemption history where applicable
Technical information
- IP address, device type, browser type, operating system, and access timestamps
- Cookie data and platform interaction data collected during your sessions
Communications
- Records of support interactions, complaints, and correspondence with the operator
3. How We Use Your Information
At Crown Casino online, your personal information is used for the following purposes:
- Account management: Creating, maintaining, and administering your account
- Identity verification: Confirming your identity and age in compliance with MGA licence requirements and Australian anti-money laundering obligations
- Transaction processing: Handling deposits, withdrawals, and bonus allocations
- Regulatory compliance: Meeting reporting obligations to the Malta Gaming Authority and relevant financial intelligence authorities
- Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and misuse of the platform
- Responsible gambling: Monitoring gaming behaviour to identify potential problem gambling indicators and applying appropriate safeguards
- Service improvement: Analysing platform usage to improve game offerings, user experience, and technical performance
- Marketing communications: Sending promotional offers and newsletter content to players who have opted in - unsubscribe at any time through your account settings or via the link in any marketing email
4. Legal Basis for Processing
Crown Australia processes your personal information on the following legal grounds:
- Contractual necessity: Processing required to deliver the services you have registered for, including account management and transaction processing
- Legal obligation: Processing required to comply with MGA licence conditions, anti-money laundering legislation, and applicable Australian law
- Legitimate interests: Processing conducted for fraud prevention, platform security, and service improvement where these interests are not overridden by your privacy rights
- Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time
5. Who We Share Your Information With
At Crown online casino, your personal information is shared only where necessary and with parties bound by appropriate data protection obligations:
- Identity verification providers: Third-party KYC and anti-money laundering service providers used to verify your identity and comply with regulatory requirements
- Payment processors: Payment service providers required to process your deposits and withdrawals - data shared is limited to what is necessary for transaction completion
- Regulatory authorities: The Malta Gaming Authority and, where legally required, Australian financial intelligence authorities including AUSTRAC
- Technology providers: Platform infrastructure, hosting, and analytics providers operating under data processing agreements with the operator
- Responsible gambling organisations: Where required under MGA licence conditions or where a player has requested referral to a support service
The operator does not sell personal data to third parties for commercial purposes.
6. Cookies and Tracking Technologies
Crown Casino Australia uses cookies and similar tracking technologies to operate and improve the service. Cookies are small data files stored on your device when you access the platform.
The following categories of cookies are used:
- Strictly necessary cookies: Required for the platform to function - login sessions, security tokens, and basic functionality. These cannot be disabled.
- Performance cookies: Collect anonymised data on how players interact with the platform, used to improve technical performance and user experience
- Functionality cookies: Remember your preferences such as language settings and display options
- Marketing cookies: Track your activity to deliver relevant promotional offers - these are only placed with your consent
Manage your cookie preferences through the cookie settings panel on the platform. Blocking certain cookies may affect platform functionality.
7. Data Retention
At Crown online casino, personal information is retained for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Account data: Retained for a minimum of five years following account closure, as required under MGA licence conditions and anti-money laundering legislation
- Transaction records: Retained for a minimum of five years from the date of each transaction
- KYC documents: Retained for a minimum of five years following the completion of the verification process
- Marketing data: Retained until you withdraw consent or for a maximum of two years following your last interaction with marketing communications, whichever is earlier
Following the applicable retention period, personal data is securely deleted or anonymised.
8. Data Security
Crown Casino Australia implements technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction.
These measures include:
- SSL encryption across all platform connections
- Secure storage of personal and financial data on access-controlled servers
- Regular security audits and penetration testing
- Staff training on data protection obligations and access controls
- Multi-factor authentication options for account login
No data transmission over the internet is completely secure. While the operator takes all reasonable steps to protect your information, absolute security cannot be guaranteed. Report any suspected security incident to the support team immediately.
9. International Data Transfers
Crown Casino online is based in Malta and processes data within the European Economic Area (EEA). Where personal data is transferred outside the EEA - including to service providers in Australia or other jurisdictions - the operator ensures appropriate safeguards are in place, including standard contractual clauses approved by the European Commission or equivalent protections recognised under applicable data protection law.
Australian players' data may be processed in Malta and other jurisdictions where the operator's technology providers are located. All such transfers are conducted under contractual arrangements that maintain data protection standards consistent with MGA requirements.
10. Your Rights
Depending on your jurisdiction, at Crown Australia you may have the following rights in relation to your personal information:
- Right of access: Request a copy of the personal information the operator holds about you
- Right to rectification: Request correction of inaccurate or incomplete personal information
- Right to erasure: Request deletion of your personal information where it is no longer required for the purposes for which it was collected, subject to legal retention obligations
- Right to restriction: Request that processing of your personal information be restricted in certain circumstances
- Right to data portability: Request a copy of your personal information in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing
Submit any rights request through the contact form in your account dashboard. Crown online casino will respond within 30 days. Where a request cannot be fulfilled - for example, where retention is required by law - the operator will explain the reason in writing.
Australian players may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if they believe their privacy rights have been breached.