Privacy Policy icrown2a — Malaysian Player Personal Data Protection

Icrown2a ("we", "the platform", or "icrown2a") is fully committed to protecting the privacy of every Malaysian player who uses our services. This Privacy Policy clearly explains how we collect, process, store, use, and protect your personal data when you use the icrown2a.best online Sports Betting and casino platform.

We believe transparency is the foundation of trust. That is why we do not bury anything in convoluted legal language. This policy is written in plain, straightforward language so that every Malaysian player — whether you are a new registrant or a long-time loyal member — can understand exactly what happens with your data at icrown2a.

This Privacy Policy applies to all information you provide while using the icrown2a platform, including during account registration, deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX, placing sports bets such as Malaysia Super League or EPL football, playing Live Casino, slots, roulette, and all other interactions with our platform.

Icrown2a collects your personal data in several different situations. We only collect information that is genuinely necessary to provide our services, process transactions, meet legal requirements, and protect the safety of all players. Below are the categories of data we collect:

Data You Provide Directly:

• Your full name as it appears on your Malaysian identity card (MyKad)
• An active Malaysian phone number (used for OTP verification and account-related communications)
• A valid and accessible email address
• Date of birth (for age verification, 18 and above)
• Registered payment method details — including your Touch 'n Go, GrabPay, Boost, or ShopeePay account name, or FPX account number (not your PIN or password)
• Photo ID (MyKad image) when the KYC (Know Your Customer) process is required for large withdrawals

Automatically Collected Data:

• Your device's IP address at the time of login and platform use
• Device information (device type, operating system, browser version)
• Session data — including login time, logout time, session duration, and in-platform activity
• Betting history and gaming activity on icrown2a
• Deposit and withdrawal transaction history
• Cookie data and similar tracking technologies (see Section 6)

Icrown2a uses collected personal data only for legitimate and necessary purposes. We do not use your data for anything unrelated to providing Sports Betting and casino entertainment services to you. The following are the primary purposes for which icrown2a uses your data:

• Account Management: Creating and maintaining your icrown2a account, processing registrations, verifying your identity, and ensuring your account functions properly.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing your winnings withdrawals securely and accurately.
• Service Provision: Enabling you to place Sports Betting wagers, play Live Casino, slots, roulette, lottery, and access all functions of the icrown2a platform.
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering, multiple account ownership, and misuse of the icrown2a platform.
• Legal Compliance: Meet KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting requirements as prescribed by applicable laws.
• Customer Support: Resolving inquiries, complaints, and technical issues that you submit to the icrown2a support team.
• Responsible Gambling: Monitoring betting patterns to identify players who may benefit from support through icrown2a's responsible gaming programme.
• Platform Improvements: Analysing aggregated usage data (not individual personal data) to improve the performance, design, and user experience of the icrown2a platform.
• Service Communications: Sending important notifications regarding your account, transactions, terms changes, and security information via email or SMS to your registered phone number.

Icrown2a does not sell or commercialise players' personal data. However, in certain limited situations, we may need to share some data with trusted third parties to keep our services running. Any such data sharing is strictly limited to only what is genuinely necessary.

Third Parties That May Receive icrown2a Player Data:

• Payment Providers: Payment gateways handling transactions for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive only the information necessary to process your financial transactions. They are bound by strict confidentiality agreements and the same security standards upheld by icrown2a.
• Technology Service Providers: Cloud infrastructure providers, email delivery services, and analytics tools we use to operate the icrown2a platform. All such providers are contractually bound to maintain the confidentiality of player data.
• Game Providers: Live casino, slots, and other game providers may receive limited session data (not full personal information) for the technical purposes of delivering gameplay.
• Regulatory Bodies & Legal Authorities: Where required by law, court order, or a formal request from a legitimate authority, icrown2a will disclose the necessary data.
• Identity Verification Agencies: For the KYC process, icrown2a works with licensed identity verification service providers to authenticate the documents you submit.

In all of the above cases, icrown2a ensures that any third parties receiving player data are bound by strict data protection agreements, adhere to security standards equivalent to those of icrown2a, and are not permitted to use that data for any purpose other than the specified task.

Protecting players' personal data is a core technical and operational priority at icrown2a. We continually invest in security infrastructure that goes beyond minimum industry standards to keep your data safe at all times.

• Encryption in Transit: All communication between your device and icrown2a's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Maybank2u and CIMB Clicks for Malaysian online banking.
• Encryption at Rest: Personal data stored in icrown2a's databases is protected with AES-256 encryption. Player passwords are never stored in plain text — they are stored in an irreversible hashed and salted format.
• Access Controls: Access to player data within icrown2a's internal systems is restricted to staff who require it, based on the principle of least privilege. All access is logged and monitored.
• Two-Factor Authentication: icrown2a encourages all players to enable 2FA on their accounts. Internally, all staff access to sensitive systems requires multi-factor authentication.
• Independent Security Audit: icrown2a undergoes regular penetration testing and security audits by qualified independent third parties to identify and address any vulnerabilities before they can be exploited.
• 24-Hour Monitoring: icrown2a's security monitoring system operates around the clock to detect unauthorised access attempts, suspicious activity, and other cybersecurity threats.
• Fund Segregation: Player funds are held in accounts fully segregated from the company's operational funds — this protects your money even in the event of any financial difficulties on icrown2a's part.

Icrown2a uses cookies — small text files stored on your device — along with similar tracking technologies such as web pixels and local storage, to enhance your user experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the icrown2a platform to function — including maintaining your login session, temporarily storing betting cart details, and ensuring session security. Without these cookies, the platform cannot operate properly.
• Performance & Analytics Cookies: We use analytics cookies to understand how players use the icrown2a platform — which pages are visited most, where players encounter difficulties, and how long a typical session lasts. All such data is aggregated and is not used to identify any individual personally.
• Functional Cookies: These cookies store your preferences — such as interface language, odds display settings, and favourite sports — so the icrown2a platform can show you the most relevant content.

You can manage and delete cookies through your browser settings at any time. However, disabling essential cookies may affect the overall functionality of the icrown2a platform, including your ability to log in and place bets.

Icrown2a does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal or business requirements.

• Active Account Data: For as long as your icrown2a account remains active, we retain all data necessary to operate it securely and efficiently.
• Financial Transaction History: Deposit and withdrawal transaction records are retained for a minimum of 7 years to comply with legal requirements relating to financial records and AML (Anti-Money Laundering) regulations in Malaysia.
• Betting History: Your betting and gaming history on icrown2a is retained for the duration of your active account and for up to 2 years after account closure, for the purpose of resolving any disputes that may arise.
• Security Log Data: Access logs and security activity records are retained for 12 months for audit and security investigation purposes.
• After Account Closure: When your account is closed at your request, we will delete or anonymise your personal data once the minimum retention period required by law has passed, unless there is a legal obligation or an active dispute that requires the data to be retained.

If you wish to request early deletion of your data (where permitted by law), please submit a written request to support@icrown2a.best. We will review your request within 30 days and inform you of what can and cannot be deleted based on current legal requirements.

The financial data security of our players is among icrown2a's highest priorities. We understand that your trust in our platform depends greatly on how we handle your money-related information. Below are our specific commitments regarding the financial data of Malaysian players:

• Touch 'n Go eWallet: When you deposit via Touch 'n Go, icrown2a only receives a transaction confirmation from the Touch 'n Go system. We do not store your TNG account number, PIN, or any Touch 'n Go account access credentials.
• GrabPay: GrabPay transactions are handled entirely by Grab's licensed system. icrown2a receives payment confirmation without storing your Grab credentials.
• Boost & ShopeePay: Same as above — the Boost and ShopeePay payment gateways handle all sensitive data. icrown2a only receives transaction verification status.
• DuitNow: For DuitNow transfers, we only store the name and phone number associated with your DuitNow account for ownership verification and withdrawal purposes.
• FPX (Maybank2u, CIMB Clicks, etc.): FPX transactions redirect you directly to your own bank's portal for approval. icrown2a never sees or stores your online banking credentials.

All payment methods available on icrown2a are local Malaysian options that are licensed and regulated by Bank Negara Malaysia. This provides an additional layer of protection for Malaysian players using the icrown2a platform.

As an icrown2a player whose personal data we process, you have certain rights regarding that data under applicable data protection laws, including Malaysia's Personal Data Protection Act 2010. Below are your rights and how to exercise them:

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you. Such requests will be processed within 30 days of receipt.
• Right to Rectification: If any personal data held by icrown2a is inaccurate or out of date, you have the right to request a correction. For basic changes such as your phone number or email address, you can update these directly in your icrown2a account settings.
• Right to Erasure: Under certain circumstances permitted by law, you may request the deletion of your personal data. Please note that icrown2a may be required to retain certain data for a specified period to comply with financial and AML legal obligations.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing at any time. Withdrawing consent does not affect the validity of any processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your personal data for specific purposes, such as unsolicited marketing communications.
• Data Portability Right: You have the right to receive the personal data you provided to us in a machine-readable format, and to transfer it to another party if you choose.

To exercise any of the rights above, please send a written request to support@icrown2a.best with the subject line "Privacy Rights Request". Include your full name and registered phone number for identity verification. icrown2a will process your request within 30 days and notify you of the action taken.

Icrown2a strictly does not accept registration or platform use by individuals under 18 years of age. We take this responsibility very seriously and have implemented multiple measures to ensure our platform cannot be accessed or used by minors.

With regard to the protection of children's data specifically, icrown2a does not knowingly collect any personal data from individuals under the age of 18. Should we discover that personal data of an underage individual has been collected without our knowledge — for example, through the provision of false information during registration — we will take the following steps:

• Suspend the account in question immediately
• Delete all collected personal data as promptly as possible
• Refunding any deposits made (minus any bonuses already used) to the original payment method
• Reporting cases to the relevant authorities when required

Icrown2a reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, technologies used, new legal requirements, or player feedback. Any amendments will take effect as soon as the updated version is published on icrown2a.best.

The "Updated" date shown at the top of this page will always reflect the date the latest changes to this Privacy Policy were made. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

For material and significant amendments — that is, changes that substantially affect how we use or share your personal data — icrown2a will send a notification via email to the address registered to your account, or through an in-platform notice, before the changes take effect. Continued use of the icrown2a platform after the amendment's effective date constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints about how icrown2a handles your personal data, or if you wish to exercise any of the privacy rights outlined in this policy, please contact the icrown2a Data Privacy Officer through the following channels:

• Privacy Email: support@icrown2a.best (Please include the subject line "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Via the icrown2a platform — our team is available to assist 24 hours a day, 7 days a week in Bahasa Melayu

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex requests, such as full data access or deletion requests, processing may take up to 30 days. We will keep you updated on the progress of your request within that timeframe.

If you are not satisfied with how icrown2a has handled your privacy complaint after contacting us, you have the right to escalate the matter to the Personal Data Protection Commissioner of Malaysia (PDPD) or the relevant regulatory authority in your jurisdiction.