We gather information necessary to verify identity, deliver services, prevent fraud, and comply with regulatory obligations applicable to online casino operators serving Australian residents.
The categories of personal data we process include:
We process personal data for defined and lawful purposes. These include account registration and verification, processing deposits and withdrawals, monitoring for suspicious activity, enforcing responsible gambling controls, responding to support inquiries, and meeting anti-money laundering obligations.
We also use aggregated and anonymised data to improve service performance, analyse user behaviour at scale, and develop new features. Where we rely on consent - for example, for marketing communications - you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Crown155 does not sell personal information. We may share data with carefully selected third parties when necessary to deliver our services or meet legal duties.
Recipients may include:
All third-party processors are bound by contractual obligations requiring them to safeguard your data and use it strictly for the purposes we specify.
Some of our service providers operate outside Australia. When personal data is transferred overseas, we take reasonable steps to ensure recipients comply with protections substantially similar to those required under the Australian Privacy Principles. Safeguards may include standard contractual clauses, binding processor agreements, and security certifications.
We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by Australian law. Account records, transaction logs, and KYC documents are typically held for a minimum of seven years after account closure, in line with anti-money laundering legislation. Marketing preferences and analytical data are kept for shorter periods and reviewed regularly.
We apply technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, segregated database access, multi-factor authentication for administrative systems, regular vulnerability testing, and staff training on data handling.
Although we maintain strong defences, no electronic system can guarantee absolute security. You are responsible for keeping your login credentials confidential and notifying us immediately of any suspected unauthorised use of your account.
Under Australian privacy law, you have the right to:
Requests should be submitted through our verified support channels and may require identity confirmation before they are actioned.
We use cookies and similar technologies to authenticate sessions, remember preferences, measure performance, and detect fraudulent behaviour. You can manage cookie settings through your browser, though disabling essential cookies may limit access to account features.
We review this Privacy Policy periodically and may update it to reflect changes in legislation, technology, or our operational practices. The latest version is always available on our website, and the effective date is shown at the top of the document. Continued use of Crown155 after revisions take effect constitutes acceptance of the updated terms.
If you have questions about this policy or how we handle your information, please contact our privacy team through the support section of your Crown155 account.