Privacy Policy rcrown – Protecting Your Personal Data is Our Priority

Rcrown collects personal information only when necessary and relevant to providing our platform services. The following are the categories of information we collect:

Account Registration Information

• Full name as shown on official identification documents
• An active, reachable email address
• Malaysia mobile phone number
• Date of birth for age verification (18 years and above)
• Username and chosen password (passwords are stored as irreversible hashes)

Identity Verification (KYC) Information

• Copy of national identity card (MyKad) or valid passport
• Proof of address such as a utility bill or recent bank statement
• Bank account details for withdrawal verification purposes
• In certain cases, a selfie with your identification document

Financial & Transaction Information

• Payment method details used (bank account number, digital wallet)
• Deposit, withdrawal, and wagering history
• Complete transaction records for AML compliance purposes

Technical & Usage Information

• IP address and general location data (state/city)
• Device type, operating system and web browser version
• Platform activity logs including pages visited and games played
• Cookie data and related tracking technologies (see Section 5)

Rcrown processes your personal data on a valid legal basis. Each data category is collected for a specific purpose and is not used beyond the stated scope:

In short, rcrown uses your data to: manage your account, process financial transactions, meet legal requirements, improve the platform experience, prevent fraud and illegal activity, and send relevant service communications.

Rcrown invests seriously in security infrastructure to ensure your personal data is kept safe at all times. The following are the key security measures we implement:

• 256-bit SSL Encryption — All data transmitted between your device and rcrown's servers is encrypted using 256-bit TLS/SSL protocol, the same standard used by major banking institutions in Malaysia.
• Hashed Passwords — Your password is never stored in plain text. rcrown uses a one-way hashing algorithm (bcrypt), meaning no one — including rcrown staff — can read your password.
• Layered Access Control — Access to member personal data within rcrown's internal systems is restricted to staff who genuinely require it to carry out their duties, based on the principle of least privilege.
• 24/7 Monitoring — rcrown's security systems continuously monitor for suspicious activity and respond automatically to detected threats.
• Regular Security Audits — rcrown's security infrastructure undergoes independent third-party audits on a regular basis to identify and address any vulnerabilities.

Rcrown does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in the course of platform operations, there are situations where data may need to be shared with certain parties:

• Payment Processors — Required transaction information is shared with payment service providers (banks, FPX operators, digital wallets) to process your deposits and withdrawals.
• Game Software Providers — Basic game data is shared with software providers (Evolution, Pragmatic, SA Gaming, etc.) to enable gameplay. These providers are bound by strict confidentiality agreements.
• Legal Authorities — rcrown will disclose information if required by court order, request from law enforcement agencies, or the relevant regulatory body.
• Technical Service Providers — Cloud infrastructure providers, customer support services, and analytics tools that help us manage the platform may process your data as data processors on behalf of rcrown.

All third parties handling rcrown member data are bound by data protection agreements requiring them to safeguard your information to standards no less stringent than those of rcrown itself.

Rcrown uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. The following are the types of cookies we use:

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect platform functionality and your login experience.

Under Malaysia's PDPA and international privacy standards, you have the following rights regarding your personal data held by rcrown:

To exercise any of the rights above, contact the rcrown customer support team via live chat or email. rcrown will respond within 14 business days from the date the request is received.

The rcrown platform is strictly for individuals aged 18 and above. rcrown does not knowingly collect any personal data from minors.

If rcrown determines that a minor's data has been collected without proper age verification, we will promptly delete that data and close the account in question. If you believe someone under 18 has registered on the rcrown platform, please contact us immediately.

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs when we use cloud infrastructure services, international game software providers, or customer support tools.

Rcrown ensures that any cross-border data transfers are carried out with adequate safeguards in place:

• Data is only transferred to countries or entities that provide an equivalent or higher level of data protection
• Valid data transfer agreements exist between rcrown and all data recipients outside Malaysia
• Encryption is applied during transmission to protect data from unauthorized access

Rcrown retains your personal data for as long as your account is active and for the required period thereafter, based on legal and business obligations:

• Active Account Data — Retained throughout the active account period plus 7 years after account closure (AML and tax compliance requirements)
• Transaction Records — Retained for a minimum of 7 years in accordance with financial reporting requirements in Malaysia
• Activity & Security Logs — Retained for 2 years for forensic and fraud detection purposes
• Support Communication Data — Retained for 3 years for service reference and improvement
• Marketing Data — Retained until you unsubscribe or request deletion

After the relevant retention period expires, data is securely deleted or anonymized so it can no longer be identified as yours.

If you have any questions, concerns, or complaints about how rcrown handles your personal data, we encourage you to contact us directly. The rcrown privacy team is here to help.

If you are not satisfied with rcrown's response to your privacy complaint, you have the right to refer the matter to the Personal Data Protection Department (JPDP) Malaysia for further investigation.

Rcrown reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or other relevant reasons.

Any significant changes will be communicated to you via in-platform notification or your registered email before the changes take effect. Continued use of the rcrown platform after a change notice means you accept the updated Privacy Policy.