Your Privacy at Crowngold Casino

This Privacy Policy explains what personal data we collect when you play at Crowngold Casino, why we collect it, who we share it with and how long we keep it. It applies to every visitor and registered player on crowngold.com. Last updated 2026.

Data We Collect From You

We collect personal data directly from you when you register, verify your account, deposit, play or contact our support team, and automatically through your device and browser as you use the site.

Identity data: full name, date of birth, email address, phone number, residential address and country of residence.
Verification documents: government-issued photo ID, proof of address (utility bill or bank statement) and payment method verification, collected during KYC checks before your first withdrawal.
Transaction data: deposits and withdrawals, amounts, currencies (AUD, USD, EUR, BTC, ETH, USDT), payment method identifiers and wallet addresses.
Technical data: IP address, device type, operating system, browser type, language settings and session timestamps.
Gameplay behaviour: games played, bet sizes, wins and losses, bonus usage, session duration and self-assessment responses.
Marketing preferences: which promotions you opt into, your communication channel choices and promo code redemptions such as GOLD25.

How We Use Your Data

Every use of your data maps to a specific purpose. We do not collect data on spec or reuse it for unrelated aims. The main purposes are set out below.

Marketing communications are sent only where you have consented, and you can withdraw that consent at any time from your account settings or via [email protected].

Creating and administering your player account, including authentication and account recovery.
Verifying your identity under our KYC obligations before processing your first withdrawal, with checks completed within 48 hours.
Processing deposits and withdrawals through the payment methods you choose, including crypto transactions.
Preventing fraud, bonus abuse, multi-accounting and money laundering.
Monitoring gambling behaviour to support responsible-gambling tools such as deposit limits, loss limits, session reminders and self-exclusion, in line with Gambling Help Online (1800 858 858).
Sending marketing about bonuses, tournaments and VIP club benefits, only with your consent.
Meeting legal and regulatory obligations, including reporting to the Curaçao licensing authority (licence OGL/2023/156/0089).

Our Legal Bases

Contract. We process your data to perform the player agreement you accept at registration. Without identity and transaction data we cannot open your account, run your gameplay or pay out winnings, so this processing is necessary for the contract between us.

Legal obligation. Anti-money-laundering and licensing rules require us to verify your identity, keep transaction records for at least five years and report suspicious activity. This processing is not optional for either of us, and we cannot simply delete these records on request while obligations apply.

Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring and improving our services, because these activities protect you and other players. We weigh this interest against your rights and keep the data involved to a minimum.

Consent. Marketing emails, SMS and promotional notifications run on your consent alone. Consent is freely given, specific and withdrawable at any time without affecting your access to the casino itself.

How Long We Keep Data

Retention depends on the type of data and the obligation attached to it. We delete or anonymise data as soon as its purpose expires, and we do not keep records longer than the law requires.

Identity and account data: kept for the life of your account, then for five years after closure where regulatory rules demand it.
KYC verification documents: retained for five years after your last transaction, as required by AML rules.
Transaction and wagering records: kept for a minimum of five years, including deposit, withdrawal and bet history.
Marketing preferences: kept until you withdraw consent or ask us to delete them, whichever comes first.
Technical and device logs: kept for up to 12 months for security and fraud analysis, then deleted.
Self-exclusion records: kept for the full exclusion period plus five years, so we can honour the exclusion.

We never sell your personal data. We share it only with partners who need it to run the casino, and each one is bound by contract to process it solely on our instructions and with equivalent protections in place.

Payment processors handling your deposits and withdrawals, including card networks, e-wallets and crypto payment gateways.
KYC and AML verification providers that check your ID documents and screen against sanctions lists.
Game providers whose titles you play; they receive your player ID and gameplay data, not your full identity, unless verification requires it.
The Curaçao regulator and other authorities where reporting is legally mandated.
Analytics and site-performance services that receive aggregated or pseudonymised data.
IT and hosting providers that store and secure our systems, under strict access controls.

Your Rights Over Your Data

You control your data, and we act on every valid request within 30 days. Send requests to [email protected] or to our data protection officer at [email protected], and we will confirm your identity before making changes.

If you believe we have mishandled your data, you can complain to the Office of the Australian Information Commissioner (OAIC) or, where you are in the EU, to your local data protection authority. We would rather fix it first, so please contact us directly as well.

Access: get a copy of the personal data we hold about you.
Rectification: correct data that is wrong or out of date.
Erasure: ask us to delete data where no legal retention duty applies.
Portability: receive your data in a machine-readable format and move it elsewhere.
Objection: object to processing based on legitimate interest.
Withdrawal of consent: stop marketing processing at any time without losing your account.
Complaint: escalate to the OAIC or your local data protection authority.

Cookies and Tracking

We use cookies to keep you logged in, remember your preferences, measure site performance and, with your consent, personalise offers. Session cookies expire when you close your browser; preference and analytics cookies last longer, and you can clear or block them in your browser settings at any time.

For the full list of cookies, their purposes and lifespans, read our dedicated Cookies Policy, which sits alongside this page and carries the same weight in our terms.

How We Protect Your Data

All traffic between your device and our servers runs over TLS encryption, and payment and verification documents are encrypted at rest. Access to personal data is role-based: support agents see account details, KYC staff see documents, and no single role sees everything. We log every access to sensitive records.

We test our systems regularly and review access rights quarterly. If a data breach occurs that risks your rights, we notify the relevant regulator within 72 hours and tell affected players directly, without undue delay, with clear steps on what to do next.

Frequently Asked Questions

How do I stop marketing emails from Crowngold Casino?

Open your account settings and switch off marketing, or reply STOP to any SMS, or email [email protected]. Consent withdrawal takes effect immediately, and you keep full access to your account and gameplay.

Can I delete my KYC documents after verification?

AML rules require us to keep verification documents for five years after your last transaction, so we cannot delete them earlier. After that period we delete or irreversibly anonymise them automatically.

Does Crowngold Casino sell my data?

No. We share data only with payment processors, verification providers, game providers, regulators and hosting partners who need it to run the casino, and each is contractually barred from using it for their own purposes.

How long does a data request take?

We answer access, rectification, erasure and portability requests within 30 days, and we confirm your identity first so nobody else can act on your account.