Crown Australia Privacy Policy - How We Protect Your Data

This Privacy Policy explains how we collect, use, store, and protect your personal information when you access our platform, register an account, or engage with any of our services. By using Crown Casino Australia, you consent to the data practices described in this document. We encourage you to read this policy carefully and contact our support team if you have any questions.

1. Who We Are

We operate both land-based gaming venues in Melbourne, Perth, and Sydney, and an online platform licensed by the Curacao Gaming Authority. For this Privacy Policy, "we", "us", and "our" refer to the platform as the data controller responsible for your personal information collected through the digital platform. Land-based properties operate under separate privacy frameworks governed by their respective state-based regulatory authorities.

2. Information We Collect

Crown online casino collects personal information through several channels during your interaction with the platform.

The categories of data we collect include:

• Identity information: full legal name, date of birth, gender, and nationality
• Contact details: email address, phone number, and residential address
• Financial information: payment method details, transaction history, deposit and withdrawal records
• Account activity: login history, game sessions, wagering patterns, and bonus usage
• Device and technical data: IP address, browser type, operating system, and device identifiers
• Verification documents: copies of government-issued identification and proof of address submitted during KYC procedures
• Communications: records of live chat sessions, email correspondence, and support interactions

We collect only the information necessary to operate the platform, fulfil regulatory obligations, and deliver a secure gaming experience.

3. How We Use Your Information

Crown Casino AU uses your personal information for the following purposes:

• Creating and managing your player account
• Processing deposits, withdrawals, and progressive jackpot payouts
• Verifying your identity and age in accordance with KYC requirements
• Detecting and preventing fraud, money laundering, and bonus abuse
• Delivering customer support across live chat and other available channels
• Sending account-related communications, including transaction confirmations and security alerts
• Administering bonuses, promotions, and the VIP programme
• Improving platform performance, game catalogue, and user experience
• Complying with legal and regulatory obligations under applicable law

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

4. Legal Basis for Processing

Crown Australia processes your personal data on the following legal grounds:

• Contractual necessity: processing required to fulfil the Terms and Conditions you agreed to upon registration
• Legal obligation: compliance with anti-money laundering regulations, KYC requirements, and reporting duties
• Legitimate interests: fraud prevention, platform security, and service improvement where these do not override your fundamental rights
• Consent: where you have specifically agreed to receive marketing communications or optional data processing activities

You may withdraw consent at any time by contacting our support team, though this will not affect the lawfulness of processing carried out before withdrawal.

5. Who We Share Your Information With

Crown online casino does not sell your personal data to third parties under any circumstances. We may share your information with the following categories of recipients where necessary:

• Payment processors and banking partners to facilitate deposits and withdrawals
• Identity verification and KYC service providers to fulfil regulatory obligations
• Game software developers where required for technical support or dispute resolution
• Regulatory and law enforcement authorities where disclosure is required by law
• Fraud prevention agencies and responsible gambling organisations where player welfare is at risk
• IT service providers and platform infrastructure partners operating under strict data processing agreements

All third parties who handle your data on our behalf are bound by confidentiality obligations and are permitted to use your information only for the specified purpose.

6. Cookies and Tracking Technologies

Crown Casino Australia uses cookies and similar tracking technologies to maintain platform functionality, analyse user behaviour, and deliver a personalised experience. The types of cookies we deploy include:

• Essential cookies: required for account login, session management, and core platform operation
• Analytical cookies: used to monitor traffic patterns, game performance, and platform usage statistics
• Preference cookies: storing your language, currency, and display settings between sessions
• Marketing cookies: used only where you have provided explicit consent to receive targeted communications

You may manage cookie preferences through your browser settings at any time. Disabling essential cookies may affect platform functionality and account access. A full cookie policy is available on request through our support team.

7. Data Retention

We retain your personal information for as long as your account remains active and for a minimum of 5 years following account closure, in accordance with anti-money laundering legislation and regulatory record-keeping requirements. Transaction records, KYC documents, and correspondence may be retained for up to 7 years where required by applicable law. Data that is no longer required for legal or operational purposes is securely deleted or anonymised.

8. Data Security

Crown Casino AU implements industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL encryption across all data transmissions between your device and our platform
• Secure storage of financial and identity documents with restricted internal access
• Regular security audits and vulnerability assessments conducted by independent specialists
• Staff training on data protection obligations and information handling procedures
• Two-factor authentication options available to players for account protection

No data transmission over the internet can be guaranteed as entirely secure. While we take every reasonable precaution, you access the platform at your own risk and are responsible for maintaining the security of your login credentials.

9. International Data Transfers

Crown online casino may transfer your personal data to servers or service providers located outside Australia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable privacy legislation. This may include data processing agreements, standard contractual clauses, or transfers to jurisdictions recognised as providing adequate levels of data protection. By using the platform, you acknowledge that your data may be processed outside your country of residence.

10. Your Rights

As a registered player, you hold the following rights in relation to your personal data held by Crown Casino Australia:

• Right of access: request a copy of the personal information we hold about you
• Right to correction: request that inaccurate or incomplete data be updated
• Right to deletion: request erasure of your data where it is no longer required for legal or operational purposes
• Right to restriction: request that we limit processing of your data in certain circumstances
• Right to object: object to processing carried out based on legitimate interests
• Right to withdraw consent: withdraw previously granted consent for optional data processing activities

To exercise any of these rights, contact our support team through the live chat function available 24/7 on the platform. We will respond to all valid requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days with prior notification.