Privacy Policy iCrown

Welcome to the iCrown Privacy Policy. This document is published by iCrown ("Company", "we") and applies to all users who access our platform through the official website icrown.vin, Android and iOS mobile apps, and any other digital channels operated by iCrown.

We understand that your trust is our most valuable asset. That is why we take a transparent and responsible approach to every aspect of processing your personal data. This Privacy Policy is designed to give you a clear and easy-to-understand overview of our privacy practices — without confusing legal jargon.

By registering an account or using iCrown's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you are advised to stop using the iCrown platform and contact us to close your account.

ICrown collects your personal data through several means — directly from you during registration or platform use, automatically via browsing technologies, and in certain cases through trusted third-party sources. Below is a detailed breakdown of the types of data we collect:

The personal data we collect is used responsibly and limited to legitimate purposes only. iCrown will not use your data beyond the scope stated below without obtaining your prior consent:

• Account Management: Processing registrations, verifying identities, and managing your member account from your first day to your last with us.
• Transaction Processing: Ensuring deposits and withdrawals are processed accurately, securely, and within the designated timeframe.
• KYC & Legal Compliance: Meeting Know Your Customer (KYC) requirements and legal reporting obligations, including anti-money laundering compliance.
• Security & Fraud Prevention: Detecting suspicious activity, preventing unauthorised access, and protecting the integrity of the platform.
• Service Improvements: Analysing usage patterns to enhance the gameplay experience, platform performance, and app usability.
• Service Communications: Sending important notifications related to your account, security, terms changes, and transaction confirmations.
• Marketing (with consent): Keeping you informed about the latest promotions, bonuses, and campaigns — subject to your communication preferences.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support.

Every personal data processing activity we carry out has a clear legal basis in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not process your data arbitrarily — every action has a valid justification:

• Contract Performance: Processing required to provide the services you have requested, including account management and payment processing.
• Legal Obligation: Processing required by Malaysian law, including KYC requirements, financial reporting, and cooperation with regulatory authorities.
• Legitimate Interests: Processing to prevent fraud, ensure platform security, and protect legitimate business interests without compromising your fundamental rights.
• Consent: For direct marketing activities and discretionary data use, we will obtain your explicit consent — and you may withdraw that consent at any time.

ICrown operates on a "need-to-know only" principle when sharing members' personal data. We do not sell or disclose your data to third parties for commercial gain. However, in certain circumstances, data sharing may occur with the following parties:

• Payment Service Providers: DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and other payment gateway providers required to securely process your financial transactions.
• Game Software Providers: Internationally licensed gaming companies that provide game content on the iCrown platform, bound by strict confidentiality agreements.
• KYC Service Providers: A third-party identity verification platform that assists us in conducting legally required KYC checks.
• Legal Authorities: Law enforcement agencies, financial regulatory bodies, or courts when required by Malaysian law.
• Consultants & Auditors: Legal, accounting, and cybersecurity professionals bound by professional confidentiality obligations.

The security of your data is iCrown's top priority. We continually invest in the latest cybersecurity infrastructure to ensure your personal and financial information is always protected against both external and internal threats.

The technical and organisational security measures we implement include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communications between your device and iCrown servers.
• Data encryption at rest using AES-256 algorithm for all sensitive information stored in our databases.
• Role-Based Access Control ensures that only authorised personnel can access specific data based on their job responsibilities.
• Two-factor authentication (2FA) for all internal admin access, with the option for members who wish to secure their accounts with an additional layer of protection.
• Real-time threat monitoring 24/7 using advanced Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
• Regular penetration testing conducted by independent third parties to identify and address security vulnerabilities before they can be exploited.
• A comprehensive security incident response plan — in the event of a data breach, we will notify affected members within 72 hours.

ICrown does not retain your personal data longer than is necessary for the purpose it was collected, or beyond the period required by Malaysian law. Data minimisation is a core principle of our privacy approach.

• Active Account Data: Retained for the duration that your account remains active and in use on the iCrown platform.
• Data After Account Closure: Retained for a minimum of 7 years after account closure, in line with Malaysian financial and taxation legal requirements.
• Financial Transaction Records: Retained for 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• KYC Records: Retained for 5 years after the end of the business relationship or the date of the last transaction, whichever is longer.
• Communication & Support Logs: Retained for 2 years for the purposes of service improvement and dispute resolution.
• Marketing Data: Retained until you withdraw consent or request deletion — whichever comes first.

Once the retention period expires, your data will be permanently deleted or anonymised using methods that ensure it can no longer be linked back to your identity.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you are entitled to various legally protected rights regarding your personal data. iCrown is committed to respecting and facilitating the exercise of these rights:

ICrown uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and secure your login sessions. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform — pages visited, time spent, and errors encountered — to help us improve the user experience.
• Functional Cookies: Storing your personal preferences such as text size, preferred language, and display settings to ensure a consistent experience every time you log in.
• Analytics Cookies: Helping us understand overall platform usage patterns in aggregate and anonymous form to make better product development decisions.

You can manage your cookie settings through your browser settings at any time. However, disabling certain cookies may affect the functionality and performance of the iCrown platform on your device.

The iCrown platform uses carefully selected third-party services to support our operations — including licensed game providers, payment gateways, and identity verification services. Each provider is chosen based on their security track record and privacy compliance.

While we strive to work only with third parties that uphold high privacy standards, iCrown is not responsible for the privacy practices of separate third-party platforms or websites. We encourage you to read their privacy policies independently before providing any personal information to those platforms.

The iCrown platform is a service designed exclusively for adults aged 18 years and above only. We hold a firm commitment to protecting the privacy of children and underage minors.

ICrown does not knowingly collect, store, or process any personal data from individuals under the age of 18. Our account registration process includes strict age verification as part of our KYC procedures to ensure only adults are eligible to use this platform.

If we detect or are informed that personal data of a minor has been inadvertently collected, we will take immediate action to delete that data and close the account in question without delay. Parents or guardians who become aware that their child has registered on the iCrown platform are advised to contact us immediately through our available support channels.

ICrown reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or how we handle personal data. All amendments will undergo thorough internal review before publication.

When significant changes are made to this Privacy Policy, we will take the following steps to ensure you are informed:

• An in-account notification upon your next login with a summary of the key changes that have been made.
• A notification email will be sent to your registered email address at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this page will be updated to reflect the date of the most recent amendment.
• Previous versions of the Privacy Policy will be retained and can be requested through customer support for members who require them for reference.

Continued use of the iCrown platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

We have appointed a Data Protection Officer responsible for ensuring iCrown complies with all privacy obligations and safeguards our members' rights. If you have any questions, concerns, or wish to exercise your privacy rights, please contact us through the following channels:

• Support Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the iCrown platform
• Response Time: Privacy-related requests will be processed within 30 calendar days

If you are not satisfied with how we have handled your privacy complaint after contacting us directly, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels established by the Ministry of Communications and Digital Malaysia.