crownph Privacy Policy

crownph ("crownph," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at crownph.org. This Privacy Policy ("Policy") describes the personal information crownph collects from registered players and site visitors, the purposes for which it is processed, the parties with whom it may be shared, and the rights you hold over your personal data.

This Policy applies to all personal data collected through the crownph website, mobile browser platform, customer support channels, and any other crownph-operated touchpoint. It does not apply to third-party websites linked from crownph or to the data practices of crownph's third-party game providers, payment processors, or other service providers operating under their own privacy policies.

By registering a crownph account or using any crownph service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The data controller responsible for the personal data collected through crownph.org is crownph, a PAGCOR-licensed online gaming operator registered and operating in the Republic of the Philippines.

crownph is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Questions or concerns regarding this Policy or crownph's data practices may be directed to our designated Data Protection Officer (DPO) at: [email protected]

crownph collects the following categories of personal data from players and site visitors:

Identity Data:

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (used to verify the mandatory 21-year minimum age requirement)
• Nationality and country of residence
• Government-issued ID number and ID document images (collected during KYC verification)
• Selfie photograph taken during live KYC verification

Contact Data:

• Email address (primary account identifier and communication channel)
• Philippine mobile number (used for two-factor authentication and SMS notifications)
• Home address (collected for certain regulatory reporting purposes)

Financial Data:

• GCash account number or mobile number linked to GCash
• Maya (PayMaya) account details where applicable
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable
• Transaction history — deposits, withdrawals, and bonus awards

Gaming & Behavioral Data:

• Game history, bet amounts, wager outcomes, and session duration
• Bonus usage, wagering requirement progress, and promotional participation
• Responsible gaming settings (deposit limits, session limits, self-exclusion status)

Technical & Device Data:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Login timestamps and session identifiers
• Cookie identifiers and tracking pixel data (see Section 10)

crownph collects personal data through the following means:

• Direct provision by you: Information you submit when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating account settings.
• Automated collection: Technical and device data collected automatically when you access crownph.org, including through cookies, server logs, and similar technologies described in Section 10.
• Payment providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other Philippine payment processors when you make a deposit or withdrawal.
• Identity verification providers: Results of automated and manual identity document verification conducted during KYC processes by crownph's accredited verification service partners.
• PAGCOR and regulatory bodies: In certain circumstances, data may be received from PAGCOR or other regulatory authorities in the course of licensing compliance obligations.

crownph processes your personal data for the following purposes, each with a corresponding legal basis under the Data Privacy Act:

• Account creation and authentication — Necessary for the performance of the contract between you and crownph.
• Age and identity verification (KYC) — Legal obligation under PAGCOR licensing requirements and the Anti-Money Laundering Act.
• Processing deposits and withdrawals — Necessary for the performance of the contract; legal obligation for AML monitoring.
• Regulatory reporting to PAGCOR and AMLC — Legal obligation; crownph is required by law to file certain reports regardless of player consent.
• Customer support and dispute resolution — Legitimate interest and contractual necessity.
• Fraud detection and security monitoring — Legitimate interest in protecting the platform and all players from fraudulent activity.
• Responsible gaming monitoring — Legal obligation under PAGCOR responsible gaming standards; legitimate interest in player welfare.
• Marketing communications — Your explicit consent, which may be withdrawn at any time by unsubscribing through account settings or by contacting support.
• Platform improvement and analytics — Legitimate interest in improving crownph's services, using aggregated and anonymized data wherever possible.

crownph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. crownph shares personal data with third parties only in the following circumstances:

• PAGCOR and regulatory authorities: crownph is legally obligated to provide player data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities upon lawful request or mandatory reporting obligation.
• Payment processors: Transaction data is shared with GCash, Maya, BPI, BDO, and other Philippine payment providers solely to facilitate deposits and withdrawals you have requested.
• KYC and identity verification providers: Identity document images and biometric data collected during KYC verification are processed by crownph's accredited third-party verification partners under strict data processing agreements.
• Game providers: Username and session identifiers are shared with crownph's licensed third-party game providers (e.g., PG Soft, Pragmatic Play, Evolution) to facilitate game sessions. These providers do not receive your financial or identity data.
• IT and infrastructure providers: crownph's hosting, cloud, and cybersecurity service providers process data on behalf of crownph under data processing agreements that bind them to confidentiality and data protection standards equivalent to this Policy.
• Law enforcement: Where required by court order, subpoena, or other legal process under Philippine law, crownph will disclose data to law enforcement authorities.

All third-party service providers engaged by crownph are contractually required to process personal data only for the specific purposes for which it was shared and in compliance with applicable Philippine data protection law.

crownph's primary data processing infrastructure is located within the Republic of the Philippines. Certain third-party service providers — including game technology providers and cloud infrastructure partners — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, crownph ensures that appropriate safeguards are in place as required by the National Privacy Commission, including: contractual clauses that impose data protection obligations equivalent to Philippine standards; transfer to jurisdictions recognized by the NPC as providing adequate levels of protection; or consent from the data subject where other safeguards are not available.

crownph retains personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal retention obligations. Specific retention periods include:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA compliance obligations.
• Transaction records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act.
• Customer support communications: Retained for two (2) years following resolution of the relevant inquiry or dispute.
• Marketing consent records: Retained for the duration of your marketing consent plus two (2) years to demonstrate compliance.
• Technical logs: Retained for ninety (90) days unless required for ongoing fraud investigation or legal proceedings.

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with crownph's data disposal procedures.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you hold the following rights in relation to your personal data held by crownph:

• Right to be Informed: The right to know what personal data crownph holds about you, the purposes of processing, and the recipients of that data.
• Right of Access: The right to obtain a copy of the personal data crownph holds about you.
• Right to Rectification: The right to correct inaccurate or incomplete personal data. Most account data can be updated directly in your crownph account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: The right to object to processing based on legitimate interest, including profiling and direct marketing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe crownph has processed your data unlawfully.

To exercise any of the above rights, submit a written request to crownph's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." crownph will respond within fifteen (15) working days of receipt. Identity verification may be required before processing a rights request.

crownph uses cookies and similar tracking technologies on crownph.org. These technologies serve the following purposes:

• Essential cookies: Required for core platform functionality — session management, login authentication, and security. These cannot be disabled without impairing platform access.
• Functional cookies: Remember your preferences, language settings, and responsible gaming configurations to personalize your crownph experience.
• Analytical cookies: Collect aggregated, anonymized data about how players navigate and interact with crownph.org to help improve platform design and performance.
• Security cookies: Track login anomalies, detect suspicious session behavior, and support crownph's fraud prevention systems.

crownph does not use cookies to serve behavioral advertising on third-party websites. Non-essential cookies may be managed through your browser settings or crownph's cookie preference center. Disabling essential cookies may prevent some crownph features from functioning correctly.

crownph implements technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and crownph's servers
• Encryption of sensitive data fields at rest within crownph's database infrastructure
• Access controls limiting personal data access to crownph personnel with a documented operational need
• Multi-factor authentication for crownph staff accessing production systems
• Regular third-party security audits and penetration testing
• Incident response procedures aligned with NPC breach notification requirements

In the event of a personal data breach that poses a real risk to your rights and freedoms, crownph will notify the National Privacy Commission within seventy-two (72) hours of discovery and will notify affected data subjects without undue delay, as required by RA 10173.

crownph's platform is strictly restricted to individuals aged twenty-one (21) years and older. crownph does not knowingly collect personal data from individuals below the age of twenty-one. Age verification is conducted as part of the registration and KYC process to enforce this restriction.

If crownph becomes aware that personal data has been collected from an individual below the minimum age without verifiable parental or guardian consent, that data will be deleted immediately and the associated account will be closed. Persons who believe a minor has registered a crownph account should contact [email protected] immediately.

crownph reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or crownph's data practices. The most current version of this Policy will always be published at crownph.org/privacy-policy with the effective date clearly indicated at the top of the document.

Where amendments are material — particularly those that affect how crownph uses sensitive personal data or alter your data subject rights — crownph will provide advance notice to registered players via email or in-platform notification at least fourteen (14) days before the changes take effect. Continued use of crownph following publication of an amended Policy constitutes acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by crownph, please contact our Data Protection Officer:

Email: [email protected]
Subject line: "Privacy / DPO Inquiry"

crownph aims to respond to all privacy-related inquiries within fifteen (15) working days. If you are not satisfied with crownph's response, you have the right to file a complaint with the National Privacy Commission of the Philippines through the NPC's official complaint procedures.