This Privacy Policy explains how Crown Casino (referred to as “Crown Casino”, “we”, “us” or “our”) collects, uses, discloses and protects personal information of users located in Australia who access or use our online casino website and related services (collectively, the “Services”). By using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the handling of your personal information as described herein, in accordance with applicable Australian privacy and data protection laws.
1. Scope and Definitions
This Privacy Policy applies to personal information that we collect through our product website, registration forms, payment interfaces, communication channels and any other online tools operated by Crown Casino for Australian residents. For the purposes of this Privacy Policy, “personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether it is recorded in a material form or not.
2. Categories of Personal Information We Collect
We may collect the following categories of personal information when you access or use the Services: (a) Identification data, such as full name, date of birth, residential address, nationality and government-issued identification details where required for verification and compliance; (b) Contact details, such as email address, phone number and preferred communication language; (c) Account information, such as username, encrypted password, security questions, account settings and activity logs; (d) Financial and transactional data, such as selected payment method, partial payment card details as permitted, transaction history, deposit and withdrawal records and currency preferences; (e) Technical and usage data, such as IP address, device identifiers, browser type, operating system, access times, referring URLs, page views, clickstream data and interaction with website features; (f) Compliance and risk data, such as records related to identity verification, age verification, anti-money laundering and counter-terrorism financing assessments, responsible gambling controls and account restrictions; (g) Communication data, such as records of your communications with us, including emails, online chats, support requests and any feedback you provide.
3. Methods of Data Collection
We collect personal information directly from you when you create an account, submit forms, make a payment, contact customer support or otherwise interact with the Services. We may also collect information automatically through the use of cookies, web beacons, tracking pixels and similar technologies when you browse or use our website. In some cases, we may receive personal information from third parties, including identity verification providers, payment service providers, analytics partners and regulatory or law enforcement bodies, where this is necessary for the provision of the Services or compliance with legal obligations.
4. Legal Basis and Purposes of Processing
We process your personal information for purposes that are necessary and lawful in the context of providing online casino services to users in Australia. The main purposes include: (a) account registration, authentication and management; (b) provision, operation and administration of the Services, including processing of deposits, wagers and withdrawals; (c) compliance with legal and regulatory obligations, including those relating to anti-money laundering, counter-terrorism financing, sanctions, age verification, responsible gambling and reporting requirements; (d) fraud prevention, security monitoring, risk management and investigation of suspicious or prohibited activities; (e) responding to your enquiries, requests and complaints and providing customer support; (f) sending service-related communications, such as changes to terms, updates to this Privacy Policy and important notices regarding your account or the Services; (g) conducting analytics, reporting and service improvement, including measurement of website performance, user behaviour and functionality; (h) providing marketing communications and personalised content where permitted by applicable law and your communication preferences.
5. Cookies and Similar Technologies
We use cookies and similar technologies to ensure the proper functioning of our website, to maintain your session, to remember your preferences and to analyse the performance and usage of the Services. Cookies may be categorised as strictly necessary, performance, functionality or targeting cookies. You can manage or disable cookies through your browser settings; however, certain features of the Services may not function properly if cookies are disabled. By continuing to use the Services without adjusting your cookie settings, you consent to our use of cookies in accordance with this Privacy Policy and any applicable Australian regulations.
6. Disclosure of Personal Information
We may disclose your personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy or where we are legally required or authorised to do so. Categories of recipients may include: (a) payment processors and financial institutions involved in processing your transactions; (b) identity verification and compliance service providers assisting us with know-your-customer, age verification and anti-money laundering obligations; (c) IT, hosting, security, analytics and other technical service providers who support the operation and maintenance of our website and systems; (d) professional advisers, including legal, financial and compliance consultants, where disclosure is required for advice or representation; (e) regulatory authorities, law enforcement agencies, courts and government bodies in Australia or other relevant jurisdictions, where required or authorised by law, regulation or court order; (f) entities involved in a merger, acquisition, corporate reorganisation or sale of assets, subject to appropriate confidentiality and data protection safeguards.
7. Cross-Border Data Transfers
Your personal information may be transferred to and processed in countries outside Australia where some of our service providers or systems are located. In such cases, we take reasonable steps to ensure that any overseas recipient will handle your personal information in a manner consistent with this Privacy Policy and applicable Australian privacy laws, including by implementing contractual safeguards or relying on other lawful transfer mechanisms where appropriate.
8. Data Retention
We retain personal information for as long as it is reasonably necessary to fulfil the purposes for which it was collected, to operate the Services, to comply with legal and regulatory requirements, to resolve disputes and to enforce our agreements. Retention periods may vary depending on the category of information and the applicable legal obligations, including record-keeping requirements relating to gambling, financial transactions and anti-money laundering laws. When personal information is no longer required for these purposes, we will take reasonable steps to securely delete, anonymise or de-identify it.
9. Data Security Measures
We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, modification, disclosure, loss or misuse. Such measures may include encryption, access controls, network security controls, secure data storage, monitoring and regular review of our security practices. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for promptly notifying us of any suspected unauthorised use of your account.
10. Your Privacy Rights
Subject to applicable Australian privacy laws and certain exemptions, you may have the right to request access to the personal information we hold about you, to request correction of inaccurate, incomplete or outdated information, and to raise concerns about our handling of your personal information. In some circumstances, you may also be able to object to certain processing activities or withdraw consent where processing is based on your consent, noting that withdrawal will not affect the lawfulness of processing prior to such withdrawal and may limit your ability to use certain aspects of the Services.
11. Direct Marketing Communications
We may use your contact details to send you direct marketing communications about our services or related offerings, in accordance with applicable Australian spam and privacy laws and your preferences. You may opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or by contacting us through the channels provided on the website. Even if you opt out of marketing, we may still send you non-marketing communications that are necessary for the operation of your account or the Services.
12. Responsible Gambling and Age Restrictions
Our Services are intended for individuals who are at least 18 years of age or the minimum legal gambling age in their Australian jurisdiction, whichever is higher. We may collect and process personal information for the purpose of verifying your age and identity and for implementing responsible gambling measures, including self-exclusion, deposit limits and activity monitoring. Failure to provide accurate information may result in restrictions on your access to the Services or closure of your account in accordance with our terms and applicable law.
13. Third-Party Websites and Services
The Services may contain links to third-party websites, content or services that are not owned or controlled by Crown Casino. This Privacy Policy does not apply to such third-party properties, and we are not responsible for the privacy practices, content or security of those third parties. We encourage you to review the privacy policies of any external websites or services that you access via links from our website.
14. Updates to This Privacy Policy
We may update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the Services. The updated version will be posted on our website with a revised effective date. You are encouraged to review this Privacy Policy periodically to remain informed about how we handle personal information. Continued use of the Services after publication of an updated Privacy Policy will constitute your acknowledgement of the changes.
15. Contact and Complaints
If you have questions about this Privacy Policy, wish to exercise your privacy rights or wish to lodge a complaint about our handling of your personal information, you may contact us using the contact details provided on the Crown Casino website, clearly marking your communication as a privacy enquiry. We will review and respond to your request or complaint within a reasonable timeframe and in accordance with applicable Australian privacy laws. If you are not satisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner or another relevant supervisory authority.