This Privacy Policy explains how Crown Casino Online (Crown Casino, we, us, our) collects, uses, discloses, stores and protects personal information of users located in Australia who access our website, mobile applications and related online services (collectively, Services). By using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the handling of your personal information as described in this document, subject to your rights under applicable Australian privacy and data protection laws.
1. Scope and legal basis
This Privacy Policy applies to personal information we collect about identifiable individuals who visit, register or otherwise use the Crown Casino online platform from within Australia. We process personal information in accordance with the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles, and any other applicable state and territory regulations relating to online gambling and data protection. We only collect, use and disclose personal information where we have a lawful basis, which may include your consent, the performance of a contract with you, compliance with legal obligations, and our legitimate interests such as fraud prevention and service security.
2. Types of information we collect
We may collect and process different categories of personal information, including but not limited to identification data such as full name, date of birth, residential address, nationality and government-issued identification documents; contact details such as email address, phone number and preferred communication language; account and transaction data such as username, account number, passwords in encrypted form, deposit and withdrawal history, wagering activity, bonuses, loyalty points and account settings; financial information such as partial payment card details, bank account identifiers, e-wallet information and transaction confirmations, processed via secure payment providers; technical and usage data such as IP address, device identifiers, browser type, operating system, access times, referring URLs, pages viewed, session duration and interaction logs; and compliance and risk data such as verification records, sanctions and politically exposed person screening results, responsible gambling limits, self-exclusion status and records of suspicious activity reports where required by law.
3. Methods of data collection
We collect personal information directly from you when you create an account, submit verification documents, update your profile, communicate with our support team, participate in promotions or complete payment transactions. We also collect information automatically through cookies, pixels, log files and similar tracking technologies when you access or interact with our Services. In addition, we may obtain information from third parties such as identity verification providers, payment processors, credit and fraud prevention agencies, marketing partners, affiliates and regulators, where permitted by law and necessary for the operation of our Services.
4. Use of cookies and tracking technologies
Our website and applications use cookies and comparable technologies to ensure secure and efficient operation of the Services, to remember your preferences, to improve performance and to analyse how users interact with our content. Necessary cookies are used to maintain sessions, support authentication and enable core features such as account login and payment processing. Functional and analytics cookies help us understand usage patterns, diagnose technical issues and optimise the user experience. Subject to applicable law, certain cookies may be used for tailoring content or limiting the repetition of promotional messages. You can manage cookie preferences through your browser settings; however, blocking certain cookies may affect the functionality and availability of some features.
5. Purposes of processing personal information
We process personal information for clearly defined purposes, including creating, administering and maintaining your Crown Casino account; verifying your identity, age and eligibility to use our Services in accordance with Australian gambling and anti-money laundering regulations; processing deposits, withdrawals and other financial transactions securely and efficiently; providing, operating and personalising our gaming and betting services; communicating with you regarding account management, service updates, security alerts and regulatory notifications; monitoring gameplay and transactions to detect, investigate and prevent fraud, money laundering, abuse and other prohibited conduct; supporting responsible gambling measures including self-exclusion, setting limits and conducting welfare checks where appropriate; complying with legal and regulatory obligations, including reporting requirements to relevant authorities; and conducting statistical analysis, service improvement and internal reporting on an aggregated or de-identified basis where possible.
6. Legal obligations and regulatory compliance
As an online gambling service provider, Crown Casino is subject to extensive regulatory requirements in Australia. We may be legally required to collect, verify and retain certain personal information to comply with anti-money laundering and counter-terrorism financing laws, know-your-customer obligations, taxation rules, sanctions screening and responsible gambling regulations. Where mandated, we may be obliged to share specific data with regulators, law enforcement bodies, courts or other authorised public authorities. Such processing is carried out strictly to the extent necessary to fulfil legal obligations and in accordance with applicable statutory retention and disclosure requirements.
7. Disclosure of information to third parties
We may disclose personal information to selected third parties for the purposes described in this Privacy Policy, subject to appropriate contractual and security safeguards. These third parties may include payment service providers and banks involved in processing your financial transactions; identity verification and age-check providers assisting with KYC and AML compliance; technology and hosting providers who support the operation, maintenance and security of our platforms; analytics and risk management partners who help us detect fraud, security threats and irregular behaviour; professional advisers such as legal, compliance and auditing firms; and regulators, law enforcement agencies and dispute resolution bodies when disclosure is required or authorised by law. We do not sell personal information to third parties for their independent marketing purposes.
8. International transfers of personal data
Some of our service providers or group entities may be located outside Australia, which may involve cross-border transfers of personal information. Where personal information is transferred to recipients in other jurisdictions, we take reasonable steps to ensure that an equivalent level of protection is provided, for example by implementing contractual safeguards, conducting due diligence on recipients and applying internal policies consistent with Australian privacy standards. By using our Services, you acknowledge that such international transfers may occur, while retaining your rights under applicable Australian law.
9. Data security measures
We implement technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include encryption in transit and at rest where appropriate, access controls based on job role and necessity, secure server infrastructure, multi-factor authentication for administrative access, regular security assessments and monitoring, and staff training on privacy and data protection obligations. Despite these precautions, no online system can be guaranteed as entirely secure, and you are responsible for maintaining the confidentiality of your login credentials and for notifying us promptly of any suspected unauthorised use of your account.
10. Data retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, to maintain accurate business and transactional records, and to comply with legal, regulatory and reporting obligations. Retention periods may vary depending on the category of information and applicable law, including requirements under gambling, anti-money laundering and taxation legislation in Australia. When personal information is no longer required for these purposes, we will take reasonable steps to delete, anonymise or securely de-identify it, subject to any statutory obligations requiring continued storage.
11. Your rights and choices
Subject to applicable law, individuals in Australia may have rights in relation to their personal information, including the right to request access to personal information we hold about you; the right to request correction of inaccurate, incomplete or outdated information; the right to withdraw consent where processing is based on your consent, without affecting the lawfulness of processing that occurred prior to withdrawal; and the right to complain if you believe your privacy rights have been infringed. We may need to verify your identity before responding to certain requests and may refuse requests in limited circumstances permitted by law, such as where disclosure would impact the privacy of others or interfere with law enforcement activities.
12. Direct marketing communications
Where permitted by law and subject to your preferences, we may use your contact details to send information about our services, features, promotions or updates that may be relevant to you. You may opt out of receiving electronic marketing communications at any time by following the unsubscribe instructions included in each message or by adjusting your account settings where such functionality is available. Even if you opt out of marketing, we may still send you non-promotional communications relating to your account, transactions, security or legal notices.
13. Third-party websites and services
Our Services may contain links to third-party websites, applications or services that are not owned or controlled by Crown Casino. This Privacy Policy does not apply to such external services, and we are not responsible for their content, security or privacy practices. When you follow a link or engage with third-party content, you should review the applicable privacy policies and terms of use of those providers before submitting any personal information or continuing your interaction.
14. Children and restricted users
Our Services are intended solely for individuals who are at least 18 years of age or older as required by applicable Australian gambling laws. We do not knowingly collect personal information from persons under the legal age for gambling or from individuals who are otherwise prohibited from using our Services. If we become aware that personal information has been collected from an ineligible individual, we will take reasonable steps to close the account, restrict access and delete or de-identify the relevant information, subject to any legal obligations requiring retention.
15. Updates to this Privacy Policy
We may amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. The revised version will be posted on our website with an updated effective date. Where required by law, we will provide additional notice of material changes or seek your consent to such changes. Your continued use of the Services after the effective date of an updated Privacy Policy will constitute your acknowledgement of the revised terms, to the extent permitted by applicable law.
16. Contact and complaints
If you have questions about this Privacy Policy, wish to exercise your privacy rights or intend to lodge a complaint regarding the handling of your personal information, you may contact our privacy team using the contact details provided on the Crown Casino website. We will review and respond to your enquiry within a reasonable time frame in accordance with our internal procedures and applicable Australian privacy law. If you are not satisfied with our response, you may have the right to escalate your complaint to the Office of the Australian Information Commissioner or another competent supervisory authority.