Privacy Policy

Version: 1.0  |  Last Updated: 30 July 2026

This Privacy Policy (“Policy”) explains how Crownplay, operating the website at crownplaybonus.com (the “Operator”, “we”, “us”, or “our”), collects, uses, processes, stores, and protects your personal data when you visit our Website or use our Services. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner.

This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gaming Policy. By using our Services, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should discontinue your use of our Services.

1. Introduction

1.1 Who We Are

Crownplay is the operator of the online gaming platform accessible at crownplaybonus.com. We act as the data controller in respect of the personal data we collect from you in connection with your use of our Website and Services.

1.2 Scope

This Policy applies to all personal data collected from:

• Registered Players and account holders;
• Visitors to the Website who have not registered an account;
• Individuals who communicate with us via email, live chat, or other channels.

1.3 Data Protection Framework

We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and any supplementary national legislation. Our data processing practices are designed to comply with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Data We Collect

2.1 Data You Provide Directly

When you register an account, deposit funds, contact support, or otherwise interact with our Services, you may provide us with the following categories of personal data:

• Identity Data: full name, date of birth, gender, nationality, government-issued ID number;
• Contact Data: email address, telephone number, residential address, postcode;
• Financial Data: payment method details (card numbers are tokenised and not stored in full), bank account information, transaction history, deposit and withdrawal records;
• Verification Data: copies of identity documents, proof of address, source-of-funds documentation submitted for KYC purposes;
• Account Data: username, password (stored in encrypted form), account preferences, communication preferences;
• Communications Data: content of messages, emails, live chat transcripts, and other correspondence with our team.

2.2 Data We Collect Automatically

When you visit or use the Website, we automatically collect certain technical and behavioural data, including:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution;
• Usage Data: pages visited, links clicked, time spent on pages, referral URLs, search queries;
• Gaming Data: game sessions played, bets placed, amounts wagered, outcomes, bonus usage history;
• Cookie Data: data collected through cookies and similar tracking technologies (see Section 6).

2.3 Data From Third Parties

We may receive personal data about you from third parties in certain circumstances, including:

• Identity verification and KYC service providers;
• Payment processors and financial institutions;
• Fraud prevention and anti-money laundering screening services;
• Marketing and analytics partners (in aggregated or pseudonymised form where possible);
• Affiliate and referral partners, where you have accessed our Website via an affiliate link.

2.4 Special Categories of Data

We do not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs). However, if you voluntarily disclose such information in the context of responsible gaming communications or support interactions, we will handle it with the highest degree of care and in accordance with applicable law.

3. How We Use Your Data

3.1 Purposes of Processing

We use your personal data for the following purposes:

• Account creation and management: to register your account, verify your identity, and maintain your Player profile;
• Service delivery: to provide access to Games, process deposits and withdrawals, and administer bonuses and promotions;
• KYC and compliance: to verify your identity and age, comply with anti-money laundering obligations, and conduct enhanced due diligence where required;
• Customer support: to respond to your enquiries, resolve complaints, and provide assistance;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• Responsible gaming: to monitor gaming behaviour, identify signs of problem gambling, and implement Player protection tools as described in our Responsible Gaming Policy;
• Marketing communications: to send you promotional offers, newsletters, and personalised communications (where you have consented or where we have a legitimate interest);
• Analytics and improvement: to analyse usage patterns, improve Website performance, and develop new products and features;
• Legal compliance: to comply with applicable laws, regulations, court orders, and governmental requests.

4. Legal Bases for Processing

4.1 Overview

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are:

• Performance of a contract (Article 6(1)(b) GDPR): Processing necessary to provide you with our Services in accordance with our Terms and Conditions — including account management, payment processing, and gameplay;
• Legal obligation (Article 6(1)(c) GDPR): Processing required to comply with our legal obligations, including KYC verification, AML reporting, and data retention requirements;
• Legitimate interests (Article 6(1)(f) GDPR): Processing for fraud prevention, security monitoring, responsible gaming oversight, analytics, and improving our Services, provided that these interests are not overridden by your fundamental rights and freedoms;
• Consent (Article 6(1)(a) GDPR): Processing for marketing communications and non-essential cookies, where we have obtained your prior, freely given, informed, and specific consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1 Categories of Recipients

We do not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly as necessary and subject to appropriate safeguards:

• Payment service providers: to process deposits and withdrawals;
• KYC and identity verification providers: to verify your identity and documents;
• Fraud prevention and AML screening services: to detect and prevent financial crime;
• Game software providers and platform partners: to deliver gaming services;
• Cloud hosting and IT service providers: to store and manage data securely;
• Customer support platforms: to manage and respond to your queries;
• Marketing and analytics platforms: where you have consented to receive personalised communications;
• Legal and regulatory authorities: where disclosure is required by law, regulation, or court order;
• Professional advisors: including lawyers, auditors, and accountants, under duties of confidentiality.

5.2 Data Processing Agreements

Where third parties process personal data on our behalf as data processors, we enter into written data processing agreements that obligate them to process personal data only on our instructions, implement appropriate technical and organisational security measures, and assist us in fulfilling our obligations under applicable data protection law.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and improve your user experience. We also use similar technologies, including web beacons, pixels, and local storage objects.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can manage your cookie preferences via our cookie consent banner on your first visit to the Website. You may also configure your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of the Website. For more information on managing cookies, please visit your browser’s help documentation.

7. Data Security

7.1 Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of stored sensitive data including payment information and identity documents;
• Access controls and role-based permissions to limit data access to authorised personnel only;
• Regular security audits, vulnerability assessments, and penetration testing;
• Two-factor authentication options for Player accounts;
• Monitoring systems to detect and respond to potential security incidents.

7.2 Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify you directly where the breach is likely to result in a high risk to your rights, in accordance with our obligations under the GDPR.

8. Data Retention

8.1 Retention Periods

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal, regulatory, and contractual obligations. Typical retention periods are:

After the applicable retention period, data will be securely deleted or anonymised so that it can no longer be attributed to you.

9. Your Rights

9.1 Rights Under GDPR

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of access (Article 15 GDPR): to request a copy of the personal data we hold about you;
• Right to rectification (Article 16 GDPR): to request correction of inaccurate or incomplete personal data;
• Right to erasure (Article 17 GDPR): to request deletion of your personal data in certain circumstances (“right to be forgotten”);
• Right to restriction of processing (Article 18 GDPR): to request that we limit the way in which we use your data in certain circumstances;
• Right to data portability (Article 20 GDPR): to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller;
• Right to object (Article 21 GDPR): to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

9.2 How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days. In complex cases, or where a large number of requests are received, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it.

9.3 Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Greece, the relevant authority is the Hellenic Data Protection Authority (HDPA), reachable at www.dpa.gr.

10. International Data Transfers

10.1 Transfers Outside the EEA

Where we transfer your personal data to third parties located outside the European Economic Area (EEA), we ensure that such transfers are made only to countries that benefit from an adequacy decision by the European Commission, or are subject to appropriate safeguards such as Standard Contractual Clauses (SCCs) adopted by the European Commission, or other legally recognised transfer mechanisms.

10.2 Your Rights

You may request information about the safeguards applied to international transfers of your personal data by contacting us at [email protected].

11. Minors

11.1 Age Restriction

Our Services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from minors. If we become aware that personal data has been submitted by a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has provided us with their personal data, please contact us at [email protected] as soon as possible.

12. Changes to This Policy

12.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the structure of our Services. The “Last Updated” date at the top of this page will indicate when the most recent revision was made. Material changes will be communicated to registered Players via email or a prominent notice on the Website. We encourage you to review this Policy periodically.

13. Contact Information

13.1 How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing activities, please contact us using the details below:

• Data Protection Officer (DPO) / Privacy Enquiries: [email protected]
• General Support: [email protected]
• Website: crownplaybonus.com

We aim to respond to all privacy-related enquiries within 30 days of receipt.