ICrown Privacy Policy — Data Security Malaysia Players

1 Introduction & Scope of This Policy

ICrown ("we", "our platform") values the privacy of every player who uses our services. This Privacy Policy clearly explains how we collect, process, store, and protect your personal information when you use the iCrown platform — including the website, mobile app, and all related services.

This policy applies to all individuals who register an account, make deposits or withdrawals, use games, or simply browse the iCrown platform. It is to be read together with Terms and Conditions iCrown, which forms part of the overarching agreement between you and our platform.

ICrown operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to ensuring your personal information is processed lawfully, fairly, and transparently at all times.

2 Types of Personal Data We Collect

ICrown only collects data that is strictly necessary to provide a secure, fair, and quality service. The following are the categories of data we collect:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

• IP address, device type, and operating system used.
• Browser information and mobile app version.
• Platform activity logs including games played, session duration, and betting records.
• Country-level geolocation data for permitted region verification.
• Cookie data and tracking technologies to improve the user experience.

2.3 Data from Third Parties

In certain cases, we may receive additional information about you from payment service providers, third-party identity verification bodies, or law enforcement agencies in connection with a lawful investigation.

3 How We Use Your Personal Data

The data we collect is used for specific and lawful purposes. We do not use your data for purposes beyond the scope stated here without first obtaining your consent:

• Account Management: Securely creating, verifying, and managing player accounts.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform.
• Identity Verification (KYC): Meeting legal requirements and preventing fraud and money laundering.
• Customer Support: Providing technical support and resolving disputes or complaints more effectively.
• Platform Security: Detecting and preventing fraudulent activity, hacking, and platform abuse.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance and early intervention.
• Marketing Communications: Sending promotional offers, bonuses, and platform updates — only where you have given your consent.
• Platform Improvement: Analysing aggregated usage data (without identifying individuals) to improve platform quality and experience.

4 Legal Basis for Data Processing

All personal data processing by iCrown is based on a solid legal foundation under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You provide explicit consent during account registration and for optional marketing communications.
• Contract Fulfilment: Processing is required to fulfil the service agreement between iCrown and you as a player.
• Legal Obligation: Certain data must be processed to comply with legal requirements such as anti-money laundering (AML) and KYC.
• Legitimate Interest: Processing for the purposes of platform security, fraud prevention, and service improvement based on iCrown's legitimate interests, which do not override players' fundamental rights.

5 Data Sharing & Disclosure

ICrown does not sell players' personal data to any third party. However, in certain situations, we share necessary information with the following parties:

5.1 Trusted Service Providers

We work with carefully selected third-party companies to support platform operations — including payment processors, identity verification service providers, and technology infrastructure providers. All parties are bound by strict confidentiality agreements and may only use your data for purposes directed by iCrown.

5.2 Legal Requirements

ICrown will disclose personal data to relevant authorities when required by law, court order, or direction from a legitimate regulatory body. This includes investigations related to fraud, money laundering, or other financial crimes.

5.3 Protection of iCrown's Rights

In cases of legal disputes, confirmed fraud, or serious security threats, iCrown may share necessary data with legal counsel or relevant authorities to protect the legitimate interests of the platform and other players.

6 Data Security Measures

ICrown invests seriously in security infrastructure to ensure your personal and financial data is always protected. The measures we employ include:

• End-to-End Encryption: All data transmitted between your device and iCrown servers is protected with TLS 1.3 protocol and AES-256 encryption.
• Layered Access Control: Access to player data within iCrown's internal systems is restricted to authorized personnel only, based on the principle of least privilege.
• Two-Factor Authentication: iCrown's internal systems require 2FA for all staff access, and players are encouraged to enable 2FA on their accounts.
• Real-Time Monitoring: Our anomaly detection system monitors for unusual activity 24/7 and will issue an immediate alert if any suspicious access is detected.
• Regular Security Audits: Periodic penetration testing and independent security audits are conducted to identify and remediate any vulnerabilities.
• Secure Data Backup: Data is regularly backed up to a separate, encrypted location to ensure recovery is possible in the event of an unexpected incident.

While iCrown takes all reasonable precautions, no system in the world is truly 100% breach-proof. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

7 Data Retention Period

ICrown retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with legal requirements. General data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure, in line with AML legal requirements.
• Transaction Records: All deposit records, withdrawals, and wagering history are retained for a minimum of 7 years in line with financial reporting requirements.
• KYC Documents: Identity verification documents are retained for the duration of the active account plus 5 years after closure.
• Communication Logs: Records of interactions with the support team are retained for 2 years for reference and dispute resolution purposes.
• Marketing Data: If you withdraw consent for marketing communications, the relevant data will be deleted within 30 days.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8 Player Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by iCrown:

To exercise any of the above rights, contact the iCrown support team via live chat within the platform. We will process your request within 30 business days. Some requests may require identity verification first to ensure the security of your account.

9 Cookies & Tracking Technologies

The iCrown platform uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how players use our platform.

9.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collecting anonymised usage data to help us understand which parts of the platform are most frequently used and to improve its performance.
• Functional Cookies: Saving user preferences such as language, theme, and display settings for a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotions to players based on their interests and usage patterns — only with your consent.

9.2 Managing Cookies

You can manage and delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the iCrown platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

10 International Data Transfers

In the course of operating the iCrown platform, your personal data may be transferred to and processed outside Malaysia — for example, at locations where our server infrastructure or service providers operate. In all such cases, iCrown ensures that:

• Data transfers only occur to countries or regions with an adequate level of data protection.
• Appropriate data transfer agreements (such as Standard Contractual Clauses) have been established with data recipients outside Malaysia.
• All overseas service providers are bound by data processing agreements that comply with Malaysia's PDPA standards.

By using the iCrown platform, you agree to the transfer of your personal data as described in this section, with the assurance that iCrown will always protect your data in accordance with the standards set out in this Privacy Policy.

11 Child Protection

The iCrown platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data of minors. If we discover that a child's personal data has been collected without our knowledge, it will be deleted immediately and the associated account will be terminated.

If you are a parent or guardian who believes your underage child has registered an iCrown account, please contact us immediately through the in-platform support channel and we will take prompt action.

12 Privacy Policy Amendments

ICrown reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When material changes occur, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying notices within the iCrown platform for significant changes.
• Sending email or in-platform message notifications to registered players for changes that directly affect their rights.

Continued use of the iCrown platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.