Privacy Policy at Crownplay Casino

This Privacy Policy explains what personal data we collect when you play at Crownplay Casino, why we collect it, how long we keep it and the rights you hold over it. It applies to every visitor, registered player and account holder on crownplay.com.

Data We Collect From You

We collect only the data needed to run your account, meet our Curaçao Gaming Control Board licence conditions (8048/JAZ2023-056) and keep gambling safe. Below is the full picture by category.

  • Identity data: full name, date of birth, email address, phone number, residential address.
  • Verification documents: passport, photo ID, proof of address no older than 3 months, proof of payment method ownership.
  • Transaction data: deposits, withdrawals, payment method details, crypto wallet addresses, currency balances.
  • Technical data: IP address, device type, browser, operating system, session logs.
  • Gameplay behaviour: bets placed, games played, win and loss history, bonus usage.
  • Marketing preferences: which promotions you opt into, communication channels and consent records.

How We Use Your Data

We process your data for seven defined purposes and nothing else. Each purpose ties back to a legal basis in the next section.

  • Creating and managing your player account.
  • Verifying your identity before your first withdrawal (KYC).
  • Processing deposits and withdrawals, including crypto payouts within 0–24 hours.
  • Preventing fraud, money laundering and bonus abuse.
  • Monitoring gambling behaviour for responsible-gaming purposes.
  • Sending marketing offers where you have given consent.
  • Meeting legal, regulatory and audit obligations under our licence.

Contract: we process identity and transaction data to open your account and pay your winnings. Without it we cannot offer you the service.

Legal obligation: our licence requires KYC checks, AML monitoring and retention of transaction records for at least 5 years. We cannot waive these duties.

Legitimate interest: we use technical logs and gameplay data to detect fraud, secure our platform and improve game and site performance. We weigh this interest against your privacy and limit the data to what is necessary.

Consent: marketing emails, SMS and bonus alerts run only on your opt-in. You can withdraw consent at any time without losing account access.

How Long We Keep Data

We do not hold your data forever. Each category has a fixed clock, set by regulation or by the purpose of processing.

Data categoryRetention period
Identity and account dataFor the life of the account, then 5 years after closure
Verification (KYC) documents5 years after account closure, per regulatory requirement
Transaction and gameplay recordsAt least 5 years
Fraud and AML investigation files5 years after case closure
Marketing consent recordsUntil you withdraw consent, then proof of withdrawal for 3 years
Technical logsUp to 12 months

Who We Share Data With

We never sell your personal data. We share it only with categories of partners who perform a job we cannot do ourselves, under data-processing agreements.

  • Payment processors handling Visa, Mastercard, Skrill, MiFinity, Jeton, PayID and crypto transactions.
  • KYC and AML verification providers that check your documents against sanctions and identity databases.
  • Game and platform providers that host our 9,000+ titles and receive your player ID, not your full profile.
  • Regulators and law-enforcement bodies where legally required.
  • Analytics and IT-security services that keep the site fast and protected.

Your Rights Over Your Data

You control your data. Whatever your location, we apply the same strong set of rights, and we answer every request within 30 days.

  • Access: get a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or outdated details.
  • Erasure: request deletion where no legal retention duty applies.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interest.
  • Withdraw consent: switch off marketing at any time from account settings or a support request.
  • Complain: raise a complaint with our data protection officer or your local data protection authority.

Cookies and Tracking Tools

We use essential cookies to keep you logged in, hold your session and remember your currency. Analytics and optional marketing cookies load only after you accept them in the cookie banner. Full details, including how to switch cookies off in your browser, sit on our dedicated Cookies Policy page.

How We Protect Your Data

Your data travels over TLS encryption, and stored verification documents sit in encrypted storage with strict access controls. Only trained staff who need access for KYC, payments or support can reach it, and every access is logged.

If a data breach occurs that risks your rights, we notify the relevant regulator within 72 hours and inform affected players directly about what happened and what we are doing about it.

Contact Our Data Team

Questions about this policy or your data? Email our data protection officer at [email protected] or reach support 24/7 via live chat and [email protected]. You can also write to Crownplay N.V. with our licence reference 8048/JAZ2023-056 quoted in your message.

Frequently Asked Questions

Does Crownplay Casino sell my personal data?

No. We share data only with payment processors, KYC/AML providers, game hosts, regulators and security services, always under strict processing agreements.

How long do you keep my verification documents?

Five years after your account closes, because our Curaçao Gaming Control Board licence requires it. We then delete them.

Can I play without giving marketing consent?

Yes. Marketing is fully opt-in and withdrawing consent never affects your account, bonuses or withdrawals.

How do I request a copy of my data?

Email [email protected] or use 24/7 live chat. We deliver your data in a machine-readable format within 30 days.

What happens if there is a data breach?

We notify the relevant regulator within 72 hours and contact affected players directly with details and remediation steps.