crownph Privacy Policy

crownph takes privacy seriously — not because it is required to, but because we understand that Filipino players are sharing real personal and financial information with us, and that this information deserves to be treated with genuine care and responsibility.

We have designed this Privacy Policy to be as clear and readable as possible. We have avoided, where we can, the kind of dense legalese that makes privacy policies effectively unreadable. That said, the full text of this Policy is legally binding, and we encourage you to read it in its entirety before registering your crownph account.

This Policy applies to all data collected through the crownph website at crownph.club, the crownph mobile web experience, and any communication channels operated by crownph, including Live Chat and email support.

2.1 For the purposes of the Data Privacy Act of 2012, crownph operates as the Personal Information Controller in respect of the personal data it collects and processes in connection with the crownph platform.

2.2 crownph operates under PAGCOR's regulatory framework for online gaming in the Philippines. Certain data processing activities are carried out jointly with licensed game content providers, payment processors, and technology partners — in each case, subject to appropriate data processing agreements that bind those third parties to standards consistent with Philippine data privacy law.

2.3 Details of crownph's designated Data Protection Officer (DPO) are set out in Section 14 of this Policy. The DPO is responsible for overseeing crownph's compliance with the Data Privacy Act and can be contacted directly with any privacy-related questions or concerns.

3.1 crownph collects the following categories of personal data about you:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations);
• Philippine residential address;
• Valid email address;
• Philippine mobile number (+63 format);
• Government-issued identification document type and number (e.g., PhilSys ID, UMID, passport, driver's license).

• GCash mobile number, Maya account identifier, or other e-wallet reference associated with your account;
• Bank account details provided for withdrawal purposes (account name, account number, bank name);
• Transaction records including deposit amounts, dates, and payment method references;
• Withdrawal requests and payout records.

• crownph username, encrypted password, account creation date;
• Complete gaming history including games played, stakes, outcomes, and session durations;
• Bonus usage and wagering progress records;
• Responsible gaming settings including any limits, cool-off periods, or exclusion instructions you have set.

• IP address, device type, operating system, and browser type;
• Geolocation data at the time of login (country and region level);
• Session logs, login timestamps, and pages visited;
• Device identifiers and session tokens used for authentication.

• Records of Live Chat conversations with crownph support;
• Email correspondence with crownph;
• Any documentation or information you voluntarily provide when making a complaint or support request.

3.2 crownph does not intentionally collect sensitive personal information (as defined under Section 3(l) of RA 10173) beyond what is strictly required for identity verification and AML compliance purposes. We do not collect information about race, religion, political affiliation, health, or biometric data in the ordinary course of operating the Platform.

4.1 crownph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use Live Chat or email support, or update your account settings;
• Automatically — through your use of the crownph website and gaming platform (see Section 10 on Cookies for more detail);
• From payment providers — such as GCash, Maya, and Philippine banks, in connection with processing your deposits and withdrawals;
• From identity verification services — when we use third-party services to validate KYC documents, as required by PAGCOR.

4.2 crownph does not purchase personal data from data brokers or third-party marketing databases.

5.1 The table below sets out the purposes for which crownph uses your personal data and the categories of data involved in each purpose:

5.2 crownph will not use your personal data for purposes materially different from those listed above without providing prior notice and, where required by law, obtaining your consent.

6.1 Under the Data Privacy Act of 2012, crownph processes your personal data on the following legal bases:

• Contractual necessity — processing necessary to perform our obligations under the crownph Terms & Conditions (e.g., account management, payments, support);
• Legal obligation — processing required to comply with PAGCOR regulations, anti-money laundering laws, and other applicable Philippine legislation;
• Legitimate interests — processing necessary for fraud detection, platform security, and improving our services, where such interests are not overridden by your rights and interests;
• Consent — where we rely on your consent for specific processing activities (such as marketing communications), we will obtain this separately and you may withdraw it at any time without affecting the lawfulness of prior processing.

7.1 crownph may share your personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, Metrobank, etc.) — to process your deposits and withdrawals;
• Identity verification service providers — to validate KYC documents as required by PAGCOR;
• Game content providers — who operate the live dealer tables and slot games accessible through the crownph platform. These providers may receive pseudonymised session data necessary to deliver and audit game outcomes;
• Cloud hosting and infrastructure providers — who store and process data on crownph's behalf under binding data processing agreements;
• PAGCOR and government authorities — when required by law, court order, or regulatory directive;
• Law enforcement agencies — when required by applicable Philippine law or to protect the safety of crownph players and staff.

7.2 All third-party service providers who process personal data on crownph's behalf are bound by written agreements that require them to maintain data security standards consistent with Philippine data privacy law and to use the data solely for the purposes specified by crownph.

8.1 crownph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and KYC records: Retained for a minimum of 5 years following account closure, as required under Philippine AML legislation (Republic Act 9160 as amended);
• Financial transaction records: Retained for a minimum of 5 years following each transaction;
• Gaming history: Retained for a minimum of 3 years following each session, or longer where required by PAGCOR;
• Communications records: Retained for a minimum of 2 years following closure of the relevant support interaction.

8.2 Where retention beyond these minimum periods is not required by law or PAGCOR regulations, crownph will delete or permanently anonymise your personal data within a reasonable period following the end of the applicable retention window.

8.3 Anonymised or aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and platform improvement purposes.

9.1 crownph implements the following technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS encryption on all data in transit between your device and crownph's servers;
• Encryption at rest for sensitive data stored in crownph's databases;
• Hashed and salted password storage — crownph staff cannot view your password in plaintext;
• Two-factor authentication (2FA) available for all player accounts and enforced for all internal administrative access;
• Role-based access controls — crownph staff access to personal data is limited to what is necessary for each person's role;
• Regular security audits and penetration testing by independent third-party security specialists;
• Intrusion detection and monitoring systems that alert the security team to anomalous access patterns in real time.

10.1 crownph uses cookies and similar web technologies to operate the Platform, enhance your experience, and collect analytics data. The categories of cookies crownph uses are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in. You cannot opt out of these without preventing access to the Platform.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming limits) to personalise your experience.
• Analytics cookies: Collect anonymised information about how Players use the crownph Platform — such as which pages are visited most frequently — to help us improve the service. This data does not identify individual users.
• Security cookies: Used for fraud detection and to protect accounts from unauthorised access attempts.

10.2 crownph does not use third-party advertising or retargeting cookies. You will not be tracked across other websites for advertising purposes by crownph.

10.3 You can manage cookie settings through your browser. Note that disabling certain cookies may affect Platform functionality. For detailed information on managing cookies in your specific browser, consult your browser's help documentation.

11.1 Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by crownph. These rights are real and enforceable — crownph takes them seriously.

11.2 To exercise any of the rights described above, contact crownph's Data Protection Officer using the details in Section 14. crownph will verify your identity before actioning any request and will respond within the timelines required by applicable law.

11.3 If you believe crownph has violated your data privacy rights under Philippine law, you have the right to file a complaint with the National Privacy Commission (NPC), the Philippine government body responsible for enforcing the Data Privacy Act.

12.1 If you are a parent or guardian and believe that a person under 21 has registered a crownph account using their details, please contact crownph support immediately via Live Chat or email. We will investigate and act promptly.

13.1 crownph may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulations, our data practices, or the services we offer. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

13.2 When material changes are made to this Policy, crownph will notify registered Players via the email address associated with their account, with at least 14 days' notice before the updated Policy takes effect (or shorter notice where required by law).

13.3 Your continued use of crownph following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you may close your account by contacting crownph support.

13.4 The current version of this Privacy Policy is always available on the crownph website and supersedes all prior versions.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the way crownph handles your personal data, please contact us through the following channels:

14.2 If you are not satisfied with crownph's response to your privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.