Privacy Policy

Version: 1.0  |  Last Updated: 30 July 2025

Crownplay (“we”, “us”, or “our”) operates the online gaming platform accessible at crownplaylogin.com (the “Platform”). We are committed to protecting the privacy and personal data of all individuals who visit or use our Platform. This Privacy Policy explains how we collect, use, process, store, share, and protect your personal data in connection with the Services we provide.

This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gaming Policy. By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

1.1. Scope

This Privacy Policy applies to all personal data collected by Crownplay through the Platform, including data collected via account registration, gameplay, financial transactions, customer support interactions, and marketing communications. It applies to all users of the Platform, regardless of the device or method used to access the Services.

1.2. Data Controller

Crownplay acts as the Data Controller in respect of personal data processed in connection with the Services offered through crownplaylogin.com. As Data Controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

1.3. Compliance

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and all other applicable data protection laws. Where required by law, we maintain appropriate records of processing activities.

2. Data We Collect

2.1. Data You Provide Directly

When you register an Account, use our Services, or communicate with us, we collect personal data that you voluntarily provide, including:

• Identity Data: full name, date of birth, nationality, gender;
• Contact Data: email address, telephone number, residential address;
• Verification Data: copies of government-issued identification documents, proof of address documents, source of funds documentation;
• Account Data: username, password (stored in encrypted form), account preferences, communication preferences;
• Financial Data: payment method details (card type, masked card number, e-wallet identifiers), transaction history, deposit and withdrawal records;
• Communications Data: records of live chat conversations, support emails, complaints, and any other correspondence with our team.

2.2. Data We Collect Automatically

When you access and use the Platform, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, device identifiers;
• Usage Data: pages visited, time spent on pages, links clicked, game sessions played, betting history, wager amounts, session duration;
• Location Data: approximate geographic location derived from your IP address;
• Log Data: server logs, error reports, access timestamps, and other diagnostic data.

2.3. Data from Third Parties

We may also receive personal data about you from third parties in limited circumstances, including:

• Identity verification and KYC service providers who assist us in verifying your identity and age;
• Payment processors and financial institutions who facilitate your transactions;
• Fraud prevention and anti-money laundering (AML) databases and screening services;
• Analytics and marketing partners (see Section 6 — Cookies & Tracking Technologies).

3. How We Use Your Data

3.1. Purposes of Processing

We use the personal data we collect for the following purposes:

• Account Creation & Management: to register, verify, and maintain your Account and to provide the Services as described in our Terms and Conditions;
• Identity Verification (KYC): to verify your identity, age (minimum 21 years), and eligibility to use the Services, and to comply with our legal obligations;
• Transaction Processing: to process deposits, withdrawals, and other financial transactions on your Account;
• Customer Support: to respond to your enquiries, process complaints, and provide assistance;
• Fraud Prevention & Security: to detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal conduct;
• Responsible Gaming: to monitor gambling behaviour and implement player protection measures in accordance with our Responsible Gaming Policy;
• Legal Compliance: to comply with applicable laws and regulations, including AML obligations, data retention requirements, and regulatory requests;
• Marketing & Communications: to send you promotional offers, newsletters, and information about new games or features — but only where you have given your consent or where we have a legitimate interest to do so, and always with a right to opt out;
• Platform Improvement: to analyse usage patterns, conduct research, and improve the functionality and quality of the Platform and Services;
• Dispute Resolution: to investigate and resolve disputes, enforce our Terms and Conditions, and exercise or defend legal claims.

4. Legal Bases for Processing

4.1. Legal Bases under GDPR

We rely on the following legal bases to process your personal data:

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to provide the Services you have requested, including account creation, game access, and financial transaction processing;
• Legal Obligation (Art. 6(1)(c) GDPR): Processing is necessary to comply with applicable legal obligations, including KYC requirements, AML regulations, and tax reporting duties;
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of our legitimate interests, such as fraud prevention, IT security, improving our Services, and direct marketing (where not overridden by your interests);
• Consent (Art. 6(1)(a) GDPR): Where we rely on your consent — for example, for non-essential cookies or certain marketing communications — you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: to process deposits, withdrawals, and other financial transactions;
• KYC & AML Verification Providers: to fulfil our identity verification and compliance obligations;
• Game Software Providers: third-party game developers whose games are hosted on or integrated into our Platform;
• IT Infrastructure & Cloud Service Providers: who host, maintain, and secure our Platform and databases;
• Customer Support Tools: third-party platforms used to manage and respond to Player enquiries and complaints;
• Marketing & Analytics Providers: to deliver targeted communications and analyse Platform usage (subject to applicable consent where required);
• Fraud Prevention & Security Services: who assist us in detecting and preventing fraudulent activity;
• Legal and Professional Advisors: including lawyers, auditors, and accountants, subject to strict confidentiality obligations.

5.2. Legal Disclosures

We may also disclose your personal data to competent regulatory authorities, law enforcement agencies, courts, or other public bodies where we are legally required to do so, or where such disclosure is necessary to protect the rights, safety, or property of Crownplay, our Players, or the public.

5.3. No Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files that are placed on your Device when you access a website. They serve a variety of functions, including storing your preferences, maintaining your login session, enabling certain Platform features, and helping us understand how you use the Platform.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable core features such as secure login, session management, and fraud prevention. These cookies do not require your consent and cannot be disabled.
• Functional Cookies: These remember your preferences and settings (e.g., language, preferred currency) to provide a more personalised experience.
• Analytics & Performance Cookies: These help us understand how Players interact with the Platform by collecting aggregated data on page views, session lengths, and navigation paths. This information is used to improve the Platform.
• Marketing & Targeting Cookies: These are used to deliver relevant advertisements and promotional messages. They may track your activity across different websites. We will seek your consent before placing these cookies.

6.3. Managing Cookies

You can manage and control cookies through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of the Platform. For further information, please refer to your browser’s help documentation. You may also opt out of interest-based advertising through standard industry opt-out tools.

7. Data Security

7.1. Technical and Organisational Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your Device and our Platform;
• Encryption at rest for sensitive data held in our databases;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• PCI-DSS compliance for all payment card data processing;
• Regular security audits and penetration testing by qualified third-party security professionals;
• Incident response procedures to manage and mitigate the impact of any potential data breach.

7.2. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required, notify you directly as prescribed by applicable data protection law.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

After the applicable retention period expires, personal data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9. Your Rights

9.1. Rights under GDPR

As a data subject under the GDPR, you have the following rights in relation to your personal data:

• Right of Access (Art. 15): You have the right to obtain a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification (Art. 16): You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Art. 17): In certain circumstances, you have the right to request the deletion of your personal data (“right to be forgotten”), subject to applicable legal obligations requiring its retention.
• Right to Restriction of Processing (Art. 18): You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute is being resolved.
• Right to Data Portability (Art. 20): Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): You have the right to object to the processing of your personal data where such processing is based on legitimate interests, including for direct marketing purposes.
• Rights Related to Automated Decision-Making (Art. 22): You have the right not to be subject to decisions made solely by automated means that produce significant legal or similar effects, unless such processing is necessary for a contract or authorised by law.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9.2. Exercising Your Rights

To exercise any of the above rights, please submit a written request to our Data Protection Officer at:

• Email: [email protected]

We will respond to your request within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. We may request proof of your identity before processing your request.

9.3. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority in your country of residence. In Greece, the supervisory authority is the Hellenic Data Protection Authority (HDPA), accessible at www.dpa.gr.

10. International Data Transfers

10.1. Transfer Safeguards

Some of our service providers and partners are located outside the European Economic Area (EEA). Where we transfer personal data to countries that do not benefit from an adequacy decision from the European Commission, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) where applicable;
• Other legally recognised transfer mechanisms as permitted under GDPR.

You may request further information about the specific safeguards applicable to any such transfers by contacting us at [email protected].

11. Minors

11.1. Age Restriction

Our Services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such data and close the associated Account.

11.2. Parental Awareness

We strongly encourage parents and guardians to actively monitor and supervise their children’s online activity. If you believe your child has accessed our Platform or provided us with personal data without your consent, please contact us immediately at [email protected]. Further information about protecting minors from online gambling is available on our Responsible Gaming page.

12. Changes to This Policy

12.1. Policy Updates

Crownplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory obligations. Any material changes will be notified to registered Players via email or a prominent notice on the Platform. The updated version will be identified by a new version number and effective date at the top of this page.

12.2. Continued Use

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

13. Contact Information

13.1. General Enquiries

For any general questions about our Services, please contact our customer support team at:

• Email: [email protected]
• Website: crownplaylogin.com

13.2. Data Protection Officer (DPO)

For any questions, concerns, or requests relating to the processing of your personal data, or to exercise your data subject rights, please contact our Data Protection Officer directly:

• Email: [email protected]

We take all privacy enquiries seriously and will endeavour to respond promptly and thoroughly to all requests and concerns.