1. Introduction
Icrown2a (hereinafter referred to as "we", "the platform", or "icrown2a") is fully committed to protecting the privacy and security of the personal information of every member who uses our services. This Privacy Policy is designed to transparently explain how we handle your personal data, why we need it, and the rights you hold in relation to that data.
By registering or continuing to use the icrown2a platform, you confirm that you have read, understood, and accepted the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team for further assistance.
This Privacy Policy applies to all services offered by icrown2a, including the main website, mobile app, and all our official communication channels. This document will be updated from time to time in line with legal changes or platform enhancements, and we will notify you of any significant changes via a notice on the platform or through your registered email.
Icrown2a's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We guarantee that your personal data will not be sold, rented, or shared with third parties for marketing purposes without your explicit consent.
2. Information We Collect
In operating the platform and complying with legal requirements, icrown2a collects several categories of personal information from our members. We only collect information that is strictly necessary for the stated purposes — no excessive or irrelevant data collection.
2.1 Information You Provide Directly
During the registration process and while using the platform, you may be asked to provide the following information:
| Data Category | Example Information | Requirements |
|---|---|---|
| Personal Identity | Full name, date of birth, identification card number | Required – for KYC |
| Contact Information | Email address, phone number | Required – for account |
| Financial Information | Bank account number, bank name, eWallet details | Required – for transactions |
| Verification Documents | Copy of identification card, bank statement | Required – for enhanced KYC |
| Account Information | Username, password (encrypted) | Required – for login |
2.2 Information Collected Automatically
When you use the icrown2a platform, our systems automatically record certain technical information for security, fraud detection, and service improvement purposes:
- Your device's IP address and geographic location.
- Device type, operating system, and web browser version used.
- In-platform activity history, including games played, bets placed, and session times.
- Cookie data and session identifiers to maintain login status and user preferences.
- Interaction logs with the customer support team, including live chat recordings.
All icrown2a member passwords are stored in hashed form using strong cryptographic algorithms. Our team has no access to your original password — only you know it.
3. How We Use Your Information
Every piece of data we collect is used for a specific and legitimate purpose. icrown2a does not use your data for purposes unrelated to the services you use. The following are the primary purposes for which your personal data is used:
3.1 Account Operations and Management
- Establishing and verifying your account identity through the KYC process.
- Processing deposits, withdrawals, and all financial transactions on the platform.
- Maintaining a complete record of your wagering history and wins.
- Sending important account notices such as transaction confirmations, security alerts, and policy updates.
3.2 Security and Fraud Prevention
- Detecting and investigating any suspicious activity or unauthorised access attempts.
- Complying with anti-money laundering (AML) legal requirements and combating the financing of terrorism (CFT).
- Verifying that all members meet the minimum age requirement of 18 years.
- Protecting the platform's integrity against abuse, bonus fraud, and collusion.
3.3 Service Improvement
- Analysing platform usage patterns to identify areas requiring improvement.
- Personalising the user experience by offering relevant promotions and content.
- Conducting internal research to improve game quality and customer support services.
3.4 Marketing Communications
With your consent, icrown2a may send you information about promotions, new bonuses, and special offers via email or in-platform notifications. You may unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting our support team.
4. Sharing Information with Third Parties
Icrown2a does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, in certain limited situations, we may share your information with the following parties:
- Payment Service Providers: Transaction information is shared with banks, eWallet providers, and approved payment processors solely for the purpose of processing your deposits and withdrawals.
- Game Software Providers: Basic game data is shared with licensed casino software providers to ensure games run fairly and correctly.
- Regulatory Authority: When required by law or court order, icrown2a will disclose the necessary information to the relevant authorities.
- Auditors and Legal Advisors: Information may be shared with licensed auditors or lawyers in a limited professional capacity, bound by strict confidentiality agreements.
All third parties that receive data from icrown2a are required to comply with data protection standards equal to or higher than those we practise. Data sharing is carried out strictly on a minimum-necessary basis (data minimisation principle).
5. Data Security and Protection
Your data security is icrown2a's highest priority. We continuously invest in the latest security infrastructure to ensure your personal and financial information is always protected against both external and internal threats.
5.1 Technical Measures
- Data in transit is encrypted using TLS 1.3 protocol and 256-bit SSL encryption for all communications between your device and icrown2a servers.
- Databases are protected with military-grade AES-256 encryption for data at rest.
- Intrusion detection systems (IDS) and next-generation firewalls that monitor network traffic in real time.
- Vulnerability scanning and penetration testing are conducted periodically by independent security experts.
- Two-factor authentication (2FA) is available for all member accounts as an additional layer of protection.
5.2 Organisational Measures
- Access to member personal data is restricted to staff who require it solely to perform their designated duties.
- All icrown2a staff who handle personal data are required to sign confidentiality agreements and undergo regular data protection training.
- A comprehensive security incident response procedure to ensure any data breach is addressed promptly and effectively.
While no system can guarantee 100% absolute security, icrown2a employs a defence-in-depth approach that ensures your data is protected at every layer of our infrastructure. In the event of any security incident involving your data, we will notify you within 72 hours.
6. Cookies and Tracking Technologies
Icrown2a uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
6.1 Types of Cookies We Use
- Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
- Performance Cookies: Collecting information on how you use the platform to help us identify and resolve technical issues.
- Functional Cookies: Saving your preferences such as language, display settings, and recent game history for your convenience.
- Security Cookies: Helping detect suspicious login attempts and fraudulent activity based on unusual usage patterns.
You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's help section.
7. Data Retention Period
Icrown2a retains your personal data for as long as your account is active and for a set period following account closure, as required by applicable law. We do not retain data longer than necessary.
- Active member account and identity data: Retained for the duration of the active account plus 5 years after account closure, to meet anti-money laundering legal requirements.
- Financial transaction records: Retained for 7 years in accordance with Malaysia's tax and financial legal requirements.
- Customer support communication logs: Retained for 3 years for dispute resolution purposes.
- Security and audit log data: Retained for 2 years for security incident investigation purposes.
- Marketing data (with consent): Retained until you withdraw consent or request data deletion.
Upon expiry of the retention period, your data will be securely deleted or anonymised in accordance with our approved data disposal procedures.
8. Your Privacy Rights
As an icrown2a member and data subject under Malaysia's data protection laws, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights.
Right of Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Request the prompt correction of any inaccurate or outdated personal data.
Right to Erasure
Request the deletion of your personal data, subject to legal retention obligations.
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
Receive your data in a structured, machine-readable format for portability.
Right to Restriction
Request restriction of your data processing under certain legally permitted circumstances.
To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 14 business days.
9. Child Protection
The icrown2a platform is not intended for any individual under the age of 18. We actively prevent minors and teenagers from registering an account or using our services through strict age verification during registration and the KYC process.
If we discover that we have inadvertently collected personal information from individuals under the age of 18, we will take immediate action to delete that data and terminate the relevant account. If you believe your minor child has registered an account on our platform, please contact us immediately.
10. Contact Us Regarding Privacy
If you have any questions, concerns, or wish to exercise your privacy rights, the icrown2a Data Protection Officer (DPO) team is available to assist you 24 hours a day, 7 days a week.
You can also obtain additional information about your privacy rights by visiting the FAQ us or read our Terms & Conditions platform in full.