Our Privacy Policy at Crownz Casino

This Privacy Policy explains what personal data we collect when you register, play or contact us, why we process it, how long we keep it and the rights you have over it. We launched in 2023 and have processed player data under this framework ever since.

Data We Collect From You

We collect only the data we need to run your account, verify your identity and meet our legal obligations. The categories below cover everything we hold about you.

• Identity data: title, full name, date of birth, gender, email address, telephone number.
• Verification documents: photo ID (passport or driving licence), proof of address dated within the last three months, and proof of payment method.
• Transaction data: deposits, withdrawals, bonuses claimed, wagering history and payment method details.
• Technical data: IP address, device type, operating system, browser type, and approximate location derived from your IP.
• Gameplay behaviour: games played, stakes, session duration, win and loss records, and chat messages where a chat feature is used.
• Marketing preferences: which channels you consent to (email, SMS) and how you interact with our promotions.

Why We Process Your Data

Every processing activity we carry out serves a specific purpose tied to running your account. Creating and maintaining your player account, processing your deposits and withdrawals of £20 or more, and delivering the 150% welcome bonus up to £900 all require us to use your data.

We also verify your identity before your first withdrawal, monitor transactions for fraud and money laundering, and run responsible-gambling checks such as tracking deposits against the limits you set. Marketing messages go out only where you have consented, and you can withdraw that consent at any time.

Finally, we comply with accounting rules, tax obligations and any requests from our licensing authority, which may require us to report suspicious activity or provide transaction records.

Legal Bases We Rely On

Contract: we process identity and transaction data to enter into and perform our agreement with you. Without it, we cannot open an account or pay out winnings.

Legal obligation: verification, anti-money-laundering checks and record keeping are required by law. We cannot offer you a choice about these.

Legitimate interest: fraud prevention, site security and aggregate analytics help us protect players and our business. We balance this interest against your rights and only process what is necessary.

Consent: marketing emails, SMS and non-essential cookies run on your consent alone. You can withdraw it at any time without affecting your account.

Retention Periods for Your Data

We keep each category of data only as long as we have a reason to. Gambling regulations require us to retain transaction and verification records for at least five years after your account closes; other categories go sooner.

• Identity and account data: for the life of your account, then up to five years where required for record keeping.
• Verification documents: five years after account closure, in line with anti-money-laundering rules.
• Transaction and gameplay data: a minimum of five years, after which they are deleted or anonymised.
• Marketing preferences: until you withdraw consent or ask us to delete them.
• Technical logs: up to 12 months for security and troubleshooting.
• Live chat transcripts: up to 12 months for dispute resolution.

Who Receives Your Data

We never sell your data. We share it only with categories of processors who need it to deliver our service: payment processors handling your Visa, Skrill, Neteller or crypto transactions; identity verification and AML screening providers; our live casino and game suppliers so your bets register correctly; analytics and hosting providers; and regulators or law enforcement when we are legally obliged to respond.

Where a provider sits outside the UK or EEA, we rely on adequacy decisions or standard contractual clauses, and we assess each transfer for the safeguards it offers your data.

Your Rights Under GDPR

You control your data. In most cases we respond to a request within one month, and we may ask for proof of identity before acting on it.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct anything inaccurate or incomplete.
• Erasure: ask us to delete data we no longer have a lawful reason to keep, noting that transaction records must legally survive for five years.
• Portability: receive your account data in a machine-readable format.
• Objection: object to processing based on legitimate interest, including profiling.
• Withdraw consent: stop marketing at any time via account settings or the unsubscribe link in every email.
• Complain: escalate to the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.

Contacting our DPO

Our Data Protection Officer answers privacy questions and handles rights requests. Write to [email protected] and we will acknowledge your message within 72 hours.

Cookies and Tracking Technologies

We use essential cookies to keep you logged in and remember your session, plus optional analytics and marketing cookies that load only if you accept them in the consent banner. The full breakdown of each cookie, its purpose and its lifespan sits on our dedicated Cookies Policy page, which also explains how to change your choices later.

You can withdraw cookie consent at any time from the cookie settings link in the site footer.

Security Measures We Apply

All traffic between your device and our servers runs over TLS encryption, and payment credentials are handled exclusively by certified payment processors rather than stored on our own systems. Access to player data is limited to staff who need it for their role, protected by multi-factor authentication and logged for audit.

We test our systems regularly and keep an incident response plan. If a breach ever puts your data at high risk, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it.

If you spot anything suspicious on your account, contact [email protected] straight away; our live chat is staffed 24/7.

Frequently Asked Questions

Can I play at Crownz Casino without giving you my personal data?

No. We need identity and verification data to open an account, confirm you are of legal age and pay out winnings. You can browse the site without an account, but real-money play requires registration and KYC.

How do I stop marketing emails?

Use the unsubscribe link in any marketing email, edit your preferences in your account settings, or email [email protected]. We stop sending marketing messages immediately after you withdraw consent.

Why do you keep my data after I close my account?

Gambling regulations require us to retain verification and transaction records for at least five years after account closure. After that period we delete or anonymise everything.

Do you share my data with third parties for advertising?

No. We do not sell or rent your data. Marketing cookies and analytics providers process data only under our instructions, and only where you have consented.