burger icon

Privacy Policy

This Privacy Policy explains how Crown Play, operated in connection with the website crownplaywin-au.com ("Crown Play", "we", "us", "our"), collects, uses, discloses and protects your personal information when you visit our site or use our services. It applies to website visitors, registered players and any individual who interacts with our services. This Privacy Policy is effective from 1 January 2026 and replaces any previous versions published on this site.

Who We Are

OBSERVE: Users need to know the legal identity, location and contact channels of the operator responsible for their data.

EXPAND: The Crown Play brand targets Australian players as an offshore online gambling service. It is operated by entities based in Curaçao under an online gambling sub-licence. These entities act as data controllers (alone or jointly, as applicable) for processing activities related to the operation of Crown Play via crownplaywin-au.com.

REFLECT: We therefore clearly identify the corporate operators, their address and contact details for privacy-related issues, including a dedicated email channel.

Operator / Data Controller

  • Brand name: Crown Play (Crown Play project, accessible via crownplaywin-au.com)
  • Primary operator company: Rabidi N.V., a public limited company incorporated under the laws of Curaçao (N.V. - naamloze vennootschap)
  • Registered / legal address: Scharlooweg 39, Willemstad, Curaçao
  • Operator group: Rabidi N.V. and/or its subsidiary Adonio N.V. (together "Operator Group"). Where Adonio N.V. provides certain services (e.g. payment processing or marketing operations), it may act as a joint controller or processor on behalf of Rabidi N.V.
  • Gaming licence: Online gambling sub-licence no. 8048/JAZ issued by Antillephone N.V. under the laws of Curaçao (licence status subject to ongoing regulatory changes and should be checked via the validator link in the website footer).
  • Jurisdiction of incorporation: Curaçao
  • Important note for Australian players: Crown Play is an offshore operator and is not licensed or regulated by Australian authorities (including the ACMA). You are not protected by Australian gambling consumer protection regimes when you use this site.

Data Protection Contact

  • Data Protection Officer / Privacy Contact: Data Protection Department, Rabidi N.V.
  • Email (primary for privacy matters): [email protected]
  • Alternative contact email: [email protected]
  • Postal contact for privacy correspondence: Data Protection Department, Rabidi N.V., Scharlooweg 39, Willemstad, Curaçao
  • Telephone: Not specified; please use email or the contact details provided on the website.

What Personal Data We Collect

OBSERVE: We collect different categories of data to operate an online casino, meet legal requirements (KYC/AML), process payments and enhance user experience.

EXPAND: These categories include identification data, contact details, account information, technical and usage data, financial data, behavioural and marketing information, as well as cookies and similar technologies. Some data is provided directly by you, others are generated by your activity or obtained from third parties such as payment providers or verification services.

REFLECT: We specify each data category, its typical content and context of collection to ensure transparency.

Identity and Contact Data

  • Full name, date of birth, age verification information
  • Residential and billing address
  • Email address and telephone number
  • Copies or details of identification documents (e.g. passport, national ID, driving licence) and, where required, utility bills or bank statements for address verification
  • Account username, unique player ID and security questions/answers (if used)

Account and Usage Data

  • Account registration details, account status, language and currency preferences
  • Login history, session identifiers, and in-site navigation data (pages visited, time spent)
  • Communication history with us (emails, live chat logs, internal messages, complaint records)

Technical and Device Data

  • IP address and approximate geolocation derived from it
  • Device identifiers, operating system, browser type and version, screen resolution, and similar technical information
  • Log files related to your access, including timestamps and error logs

Payment and Financial Data

  • Deposits and withdrawals history (amounts, dates, currencies, methods)
  • Partial payment card data (e.g. masked card number, expiry date) where applicable
  • Electronic wallet, prepaid card, voucher or bank transfer details (e.g. IBAN, BIC, account holder name, wallet ID)
  • Transaction identifiers, payment status, chargeback and refund information
  • Financial verification data requested for anti-money laundering (AML) checks (e.g. proof of income, source-of-funds documentation)

Behavioural and Gambling Activity Data

  • Betting history, game preferences, wins and losses
  • Stakes, wagers, bonuses used and bonus progression
  • Login frequency, session length, responsible gambling settings (limits, self-exclusion, cool-off periods)
  • Clickstream data relating to promotions and in-game features

Marketing and Communication Data

  • Newsletter subscriptions, opt-in/opt-out status for marketing channels (email, SMS, push notifications)
  • Records of marketing campaigns you interacted with (e.g. email opens, link clicks)
  • Your preferences about content, language and types of offers you wish to receive

Cookies and Similar Technologies

  • Cookies (session and persistent), web beacons, pixels and local storage identifiers
  • Identifiers linked to analytics and advertising partners (where used with your consent, if required)
  • Information about your interactions with banners, pop-ups and on-site tools

Data from Third Parties

  • Identity and verification data from KYC/AML providers and credit reference agencies (where applicable)
  • Fraud and risk information from payment processors and anti-fraud service providers
  • Information received from affiliates and marketing partners relating to your acquisition source and campaign parameters

Legal Basis for Processing

OBSERVE: As an offshore gambling operator serving Australian players, we are primarily subject to Curaçao law but we also align, where reasonable, with international data protection principles (including concepts derived from GDPR) to ensure a high level of protection.

EXPAND: We rely on several legal grounds for processing, including the necessity to perform our contractual obligations, compliance with legal duties (particularly KYC/AML and responsible gambling), our legitimate interests, and - where appropriate - your consent, notably for certain marketing and cookies.

REFLECT: We describe each ground and link it to typical processing activities in a transparent manner.

Contractual Necessity

  • Purpose: To create, administer and maintain your player account and to provide gambling and related services you request.
  • Examples of processing: Account registration, verification required to open the account; enabling deposits, wagers and withdrawals; granting bonuses; providing customer support; operating loyalty/VIP programs; enforcing relevant terms and conditions.
  • Legal basis: Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.

Compliance with Legal Obligations

  • Purpose: To comply with obligations under applicable gambling, AML, counter-terrorism financing, fraud prevention and accounting laws, particularly those of Curaçao and any other applicable jurisdictions.
  • Examples of processing: Identity checks (KYC), ongoing monitoring of transactions, source-of-funds investigations, reporting suspicious activities to competent authorities, record-keeping obligations, age verification, responsible-gambling measures mandated by law.
  • Legal basis: Processing is necessary for compliance with a legal obligation to which we are subject.

Legitimate Interests

  • Purpose: To operate, protect and improve our services, prevent abuse, defend our rights, and develop our business in a balanced way.
  • Examples of processing: Risk scoring and fraud prevention; network and information security; game and website performance analytics; customer segmentation for service improvement; enforcing our terms and conditions; handling legal claims; ensuring appropriate withdrawal limits (e.g. daily and monthly caps that may apply, subject to current T&Cs).
  • Safeguards: We assess our legitimate interests against your privacy rights and implement appropriate technical and organisational measures to minimise impact, including pseudonymisation where feasible and access controls.

Consent

  • Purpose: To send you direct marketing communications by electronic means (e.g. email, SMS, push notifications) where consent is required, and to use certain non-essential cookies or similar technologies.
  • Examples of processing: Subscription to promotional newsletters, tailored offers unrelated to your existing products, participation in surveys or competitions not necessary for contract performance, the placing of advertising/targeting cookies.
  • Your control: You may withdraw consent at any time via the links in marketing messages, the account dashboard (where available) or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

Purpose of Processing

OBSERVE: Users must understand why their data is processed and how it supports the operation of an online casino platform aimed at Australian players from an offshore jurisdiction.

EXPAND: Processing spans core service delivery, legal compliance, security, marketing and analytics. We separate these purposes to give you clear insight into how and why each category of data is used.

REFLECT: The list below summarises main purposes and should be read together with the legal bases section above.

  • Provision of Services: To allow you to register and manage an account, verify your identity, process deposits and withdrawals, place bets, access games, benefit from bonuses and participate in loyalty/VIP programs.
  • Customer Support: To respond to your queries, handle complaints, provide technical assistance, and communicate essential information about your account or our services.
  • Legal and Regulatory Compliance: To conduct KYC and AML checks, verify age, monitor and report suspicious transactions, comply with gambling regulations in our licensing jurisdiction and fulfil financial and tax obligations.
  • Fraud Prevention and Security: To detect and prevent misuse of our services (including multiple-account abuse, bonus abuse, chargebacks, collusion, money laundering and other fraudulent or prohibited activities), protect our systems, and ensure the integrity of games and payments.
  • Responsible Gambling: To monitor behaviour for indicators of problem gambling, apply self-exclusion or limits on your request, send responsible-gambling communications where necessary and comply with responsible-gambling duties.
  • Service Improvement and Analytics: To analyse performance of games and features, understand usage trends, test new functionalities, fix bugs, and improve the user experience on crownplaywin-au.com for Crown Play.
  • Marketing and Personalisation: To send you information about promotions, bonuses and events (subject to your preferences and applicable consent rules), to personalise content and offers, and to measure the effectiveness of marketing campaigns.
  • Business Operations: To maintain internal records, conduct audits, manage risk, defend legal claims, and facilitate potential corporate transactions (e.g. restructuring, asset transfer) in a manner consistent with this Privacy Policy.

Disclosure & Sharing

OBSERVE: Operating an online casino involves cooperation with multiple third parties, including payment providers, technology vendors, regulatory bodies and marketing partners.

EXPAND: Data sharing occurs only where necessary, proportionate and subject to appropriate safeguards, including contractual protections. We do not sell your personal data to third parties.

REFLECT: The following groups of recipients may receive your data under clearly defined circumstances.

Within the Operator Group

  • Rabidi N.V., Adonio N.V. and any other subsidiaries or affiliates involved in operating or supporting Crown Play may share access to personal data for administrative, operational, compliance, customer support and technical purposes, in line with this Privacy Policy.

Payment and Financial Service Providers

  • Banks, card schemes, e-wallet providers, voucher systems, payment gateways and other financial institutions that process your deposits and withdrawals.
  • Chargeback management and risk scoring services that help us prevent fraud and manage payment disputes.

Service Providers and Processors

  • IT hosting, cloud and infrastructure providers that store or process data on our behalf.
  • Game software providers and platform vendors necessary to offer casino games and related features.
  • Customer support tools (e.g. live chat platforms, ticketing systems) used to handle your requests.
  • Verification providers (KYC/AML, age and identity checks), anti-fraud and risk management services.
  • Analytics and performance monitoring services that help us understand and improve site usage (subject to cookie and consent settings).

Regulators, Authorities and Law Enforcement

  • Licensing and supervisory authorities in Curaçao or other jurisdictions, where required by gambling and AML regulations.
  • Law enforcement agencies, courts and governmental bodies where disclosure is mandated by law, court order, legal process or to establish, exercise or defend legal claims.

Affiliates and Advertising Networks

  • Affiliate partners who refer players to crownplaywin-au.com, to validate traffic, prevent abuse and calculate commissions, usually by sharing limited identifiers (e.g. player ID, country, basic transactional data or aggregated statistics).
  • Advertising and marketing partners, including email, SMS and campaign management platforms, used to deliver our promotional communications to you based on your consent or legitimate interest, as applicable.

Corporate Transactions

  • In the event of a merger, acquisition, reorganisation, sale of assets or insolvency, personal data may be disclosed to prospective or actual buyers, investors, advisers or other relevant third parties, subject to confidentiality obligations and in accordance with applicable law.

Other Disclosures

  • Where you explicitly request or consent to such disclosure (e.g. participation in public tournaments, leaderboards or testimonials, subject to specific notices).
  • Where necessary to protect our rights, privacy, safety or property, and/or that of you or others, in line with the law.

International Transfers

OBSERVE: Data processed in connection with Crown Play and crownplaywin-au.com may be stored and accessed from multiple jurisdictions.

EXPAND: Our main operation is based in Curaçao, but many of our service providers and partners may be located in or operate from the European Economic Area (EEA), the United Kingdom, and other regions. Transfers therefore occur across borders, including to countries that may have different data protection standards than your country of residence.

REFLECT: We implement appropriate safeguards to protect your data during such transfers and, where applicable, align with internationally recognised mechanisms.

  • Primary processing location: Curaçao, where Rabidi N.V. and related entities are established.
  • Other possible locations: Member States of the EEA, the United Kingdom, and other non-EEA jurisdictions where our hosting, payment, analytics, support or game providers operate.
  • Safeguards:
    • Contractual protections with service providers, including data protection clauses requiring a level of protection consistent with this Privacy Policy.
    • Where service providers are located in jurisdictions with formal data transfer frameworks (e.g. EU Standard Contractual Clauses), we seek to incorporate such clauses into our contracts when appropriate.
    • Technical measures such as encryption in transit and at rest, strict access control, and data minimisation to reduce risks associated with international transfers.

Regional Compliance Note (AU): As an offshore operator, we are not subject to the Australian Privacy Principles (APPs) as an Australian-registered entity. However, we endeavour to apply comparable standards of care to your data and to use reputable service providers that maintain strong security and privacy practices.

Data Retention

OBSERVE: Retention periods must align with regulatory duties (especially AML and gambling regulations) while not keeping personal data longer than necessary.

EXPAND: We therefore apply differentiated retention schedules based on data type and legal requirements, and we define criteria for deletion or anonymisation.

REFLECT: The periods below are indicative minima or maxima and may be adjusted if required by law or legitimate business needs (e.g. ongoing disputes).

  • Player account and identification data: Retained for the duration of your active account and generally for up to five (5) years after account closure or last transaction, in line with common AML and gambling record-keeping obligations. In certain cases, retention may be extended where required by law or necessary for legal claims.
  • Financial and transaction data: Deposit, withdrawal and betting transaction records are usually kept for at least five (5) years after the relevant transaction or account closure, whichever is later, to comply with AML, accounting and tax obligations.
  • KYC/verification documents: Copies of identity documents and supporting evidence are typically retained for at least five (5) years after the termination of the business relationship or the performance of the last transaction, subject to applicable regulations.
  • Marketing and communication data: Stored as long as you remain subscribed or until you withdraw consent or object to processing, plus a short period (typically up to one year) to document your preferences and ensure we honour your opt-out.
  • Technical logs and security data: Retained for a period necessary to ensure security and maintain stable operations, normally between six (6) months and three (3) years, depending on the nature of the logs and associated risk.
  • Complaint and dispute records: Kept for the duration of the complaint or dispute and for a subsequent period necessary to comply with legal obligations and limitation periods, usually up to five (5) years after resolution.

Deletion and Anonymisation Criteria

  • When data is no longer required for the purpose for which it was collected and no legal obligation or legitimate interest requires further retention, we securely delete or anonymise it.
  • Where anonymisation is used, data is irreversibly stripped of personal identifiers so that it can no longer be linked to an individual (e.g. for aggregated statistics and analytics).
  • Upon your request for erasure, we will assess whether we can delete certain personal data promptly or whether we must retain it due to overriding legal obligations (e.g. AML laws). Where full deletion is not possible, we will restrict processing to the minimum necessary.

Your Rights

OBSERVE: Players and visitors expect robust privacy rights comparable to those found in leading data protection frameworks such as the EU General Data Protection Regulation (GDPR), and some users may also be familiar with Mexican privacy concepts (e.g. ARCO rights).

EXPAND: Although we are not established in the EU or Mexico, we choose to align, as far as practicable, with core principles from GDPR and similar laws, including Mexican data protection regulations regarding access, rectification, cancellation/erasure and objection, as guidance for our internal standards.

REFLECT: We therefore provide the rights described below, subject to applicable legal limits and our obligations as an offshore gambling operator.

Right of Access

  • You may request confirmation as to whether we process your personal data and, if so, receive a copy of such data along with information about its sources, purposes, categories and recipients, subject to certain limitations (e.g. protection of third-party data, security considerations).

Right to Rectification (Correction)

  • You may request that inaccurate or incomplete personal data be corrected or completed without undue delay. Some information (such as contact details) can be updated directly in your account settings; other changes may require supporting documentation (e.g. legal name change).

Right to Erasure / Cancellation

  • You may request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent (where consent was the sole lawful basis), or when processing was unlawful.
  • We may need to retain certain data despite your request where this is necessary to comply with legal obligations (e.g. AML record-keeping), to establish, exercise or defend legal claims, or to enforce our terms and conditions.

Right to Restriction of Processing

  • You may request that we temporarily restrict processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection. During restriction, data will generally be stored but not otherwise processed, except for legal or security reasons.

Right to Object

  • You may object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling. We will stop such processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
  • You may object at any time to processing of your personal data for direct marketing, including profiling for marketing purposes. In such cases, we will cease marketing activities directed at you without undue delay.

Right to Data Portability

  • Where technically feasible and applicable, you may request to receive certain personal data you have provided to us in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller, where processing is based on consent or contract and carried out by automated means.

Right to Withdraw Consent

  • Where we rely on your consent for processing (for example, for certain marketing activities or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing, but we will stop the relevant activities going forward.

Exercise of Rights and Response Timeframes

  • How to submit a request: You may exercise your rights by contacting us at [email protected] or, where available, via your account dashboard or dedicated forms on the website.
  • Verification: We may request additional information to verify your identity (e.g. encrypted ID copy or security questions) before responding to a request, to protect your account from unauthorised access.
  • Response time: We aim to respond to all valid requests within thirty (30) days of receipt. If your request is particularly complex or we receive multiple requests, we may extend this period by a further thirty (30) days and will inform you of the extension and reasons.
  • Fees: Requests are generally handled free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive (e.g. repeated, repetitive submissions).

Note on Mexican Regulatory References: While we are not directly subject to Mexican law, we take inspiration from Mexican data protection regulations, particularly regarding ARCO rights (access, rectification, cancellation, opposition), as a benchmark to define the rights listed above and our internal procedures.

Cookies & Tracking Technologies

OBSERVE: Cookies and similar technologies are essential for running a secure, user-friendly and commercially viable online casino.

EXPAND: We use different categories of cookies (session, persistent, first-party and third-party) for functionality, security, analytics and marketing. Users must be informed about their purposes and control options.

REFLECT: The policy below outlines the types of cookies used and how you can manage them.

Types of Cookies We Use

  • Strictly Necessary / Functional Cookies: These cookies are required for the proper operation of the website and services, including enabling core features such as account login, session management, secure navigation, payment initiation, language and currency settings. They are typically session-based and expire once you close your browser or log out, though some functional cookies may persist for a limited period to remember your preferences.
  • Analytics / Performance Cookies: These cookies help us understand how visitors use crownplaywin-au.com (e.g. which pages are most popular, how long users stay, which devices are used). They may be set by us or by third-party analytics providers and can be session or persistent. The data collected is usually aggregated and used to improve site performance and user experience.
  • Advertising / Targeting Cookies: Subject to consent where required, we may use cookies that track your browsing activity on our site and, in some cases, across other websites, to deliver more relevant advertising and measure marketing effectiveness. These cookies are often set by third-party advertising networks or affiliate tracking systems.

Similar Technologies

  • We may use web beacons, pixels or local storage objects to support measurement, security, fraud prevention and marketing activities. These technologies operate in a similar way to cookies and are subject to similar controls.

Managing Cookies

  • Browser settings: Most web browsers allow you to control cookies through their settings (e.g. blocking all cookies, accepting only first-party cookies, or deleting existing cookies). Please refer to your browser's help section for details.
  • On-site tools: Where available, we may provide cookie preference tools or banners that allow you to accept or reject certain categories of cookies (excluding strictly necessary cookies which are essential for service functionality).
  • Impact of disabling cookies: If you disable or block certain cookies, you may experience reduced functionality or be unable to access some parts of the site (e.g. difficulties logging in, playing games, or maintaining session security).

Data Security

OBSERVE: Handling financial transactions and sensitive personal data in an online casino environment requires robust, multi-layered security.

EXPAND: Our security framework combines technical, organisational and procedural measures designed to protect data against unauthorised access, alteration, disclosure or destruction, taking into account the nature of the processing and associated risks.

REFLECT: While no system can be guaranteed as perfectly secure, we implement industry-standard practices and continuously monitor and improve our defences.

Technical Measures

  • Encryption in transit: We use Transport Layer Security (TLS) 1.2 or higher to encrypt data transmitted between your browser and our servers, reducing the risk of interception.
  • Encryption at rest: Sensitive data (such as passwords and certain financial details) is stored using strong cryptographic methods and hashing algorithms, with segregated storage and key management procedures.
  • Access controls: Access to personal data is restricted to authorised personnel and service providers on a need-to-know basis, using role-based access control, strong authentication mechanisms and logging of administrative actions.
  • Network security: Our infrastructure implements firewalls, intrusion detection and prevention systems, segmentation and other security measures aimed at defending against unauthorised access and attacks.

Organisational and Procedural Measures

  • Security policies: We maintain internal policies and procedures covering data protection, acceptable use, incident response, backup and recovery, access management and risk assessment.
  • Staff training: Employees and contractors with access to personal data receive regular training on confidentiality, privacy obligations, secure handling of information and recognition of social engineering attempts.
  • Vendor management: We select third-party service providers that demonstrate appropriate security practices and require them, via contracts, to protect personal data in line with our standards and legal obligations.
  • Monitoring and audits: We conduct periodic reviews and assessments of our systems and processes, including internal audits and, where relevant, external security testing. While we do not claim full certification under frameworks such as ISO 27001 or SOC 2 for all operations, we seek to align our controls with widely accepted international security standards.

Incident Response

  • We maintain procedures for identifying, assessing and responding to personal data breaches, including steps to contain incidents, investigate root causes and implement remedial actions.
  • Where required by applicable law, we will notify relevant supervisory authorities and affected individuals of a data breach without undue delay, including information on its nature, potential consequences and measures taken or proposed to address it.

Complaints & Contacts

OBSERVE: Users must be able to contact us easily for privacy-related questions or complaints and understand available escalation paths.

EXPAND: We provide clear contact details, an internal complaint-handling process and references to supervisory authorities, including those in the EU and Mexico, where such authorities may be relevant for individuals interacting with our services from those regions.

REFLECT: The steps below outline how to raise and escalate privacy concerns.

Contacting Us

Internal Complaint Procedure

  1. Submission: Send us a clear description of your concern, including any relevant account information and supporting documentation, via email or post.
  2. Acknowledgement: We will acknowledge receipt of your complaint as soon as reasonably practicable, usually within five (5) business days.
  3. Assessment: Our Data Protection Department will investigate your complaint, consult relevant internal teams and, if necessary, request additional information from you.
  4. Response: We aim to provide a substantive response within thirty (30) days of receiving your complete complaint. If we cannot respond within that time due to complexity, we will inform you of the delay and provide an estimated resolution timeframe.
  5. Further steps: If you are not satisfied with our response, you may request that the matter be escalated within our organisation for further review.

Escalation to Supervisory Authorities

Depending on your place of residence and local law, you may have the right to lodge a complaint with a data protection authority. While our primary regulatory oversight is in Curaçao, individuals in other jurisdictions may consider the following authorities, where applicable:

  • European Union / EEA: If you are located in the EU/EEA and consider that we process your personal data in a manner inconsistent with applicable data protection laws, you may lodge a complaint with your local data protection authority. Contact details of EU authorities are available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
  • Mexico (INAI): If you are located in Mexico and believe that your data protection rights inspired by Mexican regulations (such as ARCO rights) are being infringed, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI): https://home.inai.org.mx.
  • Other jurisdictions: You may have the right to contact your local data protection or privacy authority, where such an authority exists and has competence over your situation.

Note for Australian users: As an offshore operator not licensed in Australia, complaints related to data protection and privacy are primarily handled through our internal processes and the authorities indicated above, rather than Australian gambling regulators.

Updates

OBSERVE: Privacy practices evolve over time due to regulatory changes, technological developments and business needs.

EXPAND: We therefore update this Privacy Policy periodically and must inform users in a transparent manner about material changes, providing reasonable notice and options where appropriate.

REFLECT: The procedure below explains how we manage policy updates.

Change Management and Version Control

  • Last updated: January 2026
  • We maintain internal version control of this Privacy Policy and record the dates and nature of significant amendments (e.g. changes to data sharing practices, new processing purposes or updates due to legal developments).

Notification of Changes

  • Minor changes: For non-material amendments (e.g. clarifications, grammatical corrections, updated contact details without impact on your rights), we may update the Privacy Policy without specific individual notice. The revised version will be posted on crownplaywin-au.com with an updated "Last updated" date.
  • Material changes: For significant modifications that materially affect how we process your personal data or your rights (e.g. new categories of data, new purposes, substantial changes to data sharing practices), we will provide additional notice, which may include:
    • Prominent banners or pop-up notifications on the website;
    • Email notifications to the email address associated with your account; and/or
    • Alerts in your account dashboard (where available).
  • Advance notice: Where feasible and appropriate, we will provide at least thirty (30) days' advance notice before material changes take effect, especially when they rely on consent or could reasonably be perceived as disadvantageous.

Your Options in Case of Changes

  • If you do not agree with the updated Privacy Policy, you may choose to stop using our services and request account closure via customer support.
  • In cases where processing is based on your consent, and the changes relate to those activities (for example new marketing uses), you will be given the opportunity to provide or withhold consent for the updated practices.
  • Continued use of our services after the effective date of an updated Privacy Policy will generally be deemed acceptance of the changes, unless your explicit consent is required by law for specific processing.