Privacy Policy at ICROWN Malaysia
This page is a working map of how ICROWN handles the file attached to your Malaysia login. You give a name, a phone, and a payment rail. The platform retains round IDs, cashier lines, and device logs so a dispute has something to match against. That is the job. It is not a license to treat your MyKad photo as marketing fuel.
House rules sit in the terms and conditions. Play caps sit under responsible gaming. If this guide and the live privacy page disagree, the live page wins. Type the official address yourself. Lookalike names copy banners. They rarely copy a consistent privacy notice and a matching cashier.
Introduction
The operator named in the registration and in the live About Us block is accountable for the player account. A bank, e-wallet, or game studio may control the slice they process under their own notice. ICROWN remains responsible for what it sends them under contract. A chat that found you first on WhatsApp is not that operator.
Read this on the phone you actually use. Shade the screen if you are in a food court. Public USB is a bad place to open identity pages. Log out on a shared handset. Children should never see this login. 18+ only.
Information we collect
Each field should have a job. If a job is missing, do not assume it is for marketing use. Trust the live form you see after login, not an old screenshot from a friend.
Account information
The sign-up form asks for the name, username, password, and date of birth, which it prints. Those fields support age checks, recovery, and name matching on payouts. A nickname in the form and a different name on the bank file is how withdrawals sit. Keep the legal name consistent.
Contact information
Email and mobile number, when the form asks for them, are how the account reaches you. Use details you can still open tomorrow. A dead phone number is how a password reset dies. Address appears when the form or a verification step requires it.
Transaction information
The cashier stores the methods you approved, the amounts in ringgit, the deposit and withdrawal IDs, and whether a request is pending. Game studios send round results for a given session. The casino and sports products send settlement lines needed for audits. Bonus opt-ins and limit changes sit in the same file.
Device and technical information
When you use the site or the mobile app, the platform may log IP address, device type, browser, language, and coarse location for fraud screening. That log is how a strange login from a new handset gets flagged. It is not a street-level map of your house.
Website usage data
The pages you open, the tiles you tap, and the duration of each session can be recorded in usage logs. Those logs help fix a freeze and spot a duplicate account. They do not make a cold hour “due.” Independent rounds stay independent.
Data type | Why it exists | Typical clock |
Identity fields | Age check, name match on payouts | While the account is open, then legal hold |
Cashier lines | Deposits, withdrawals, disputes | As long as payment rules require |
Round and bet IDs | Freeze reviews, bonus contribution | As long as a complaint window can still open |
Device and IP | Login risk, duplicate-account flags | Shorter unless a fraud file is open |
Support chat | A written record of what was asked | Until the ticket and any appeal close |
How we use personal information
We open and recover the login. We move ringgit in and out on a rail in your name. We send a promotions notice only where you opted in. We meet the identity and anti-fraud checks the cashier requires. We match a frozen round to history when you write in. We apply a limit or a pause you requested through official steps.
We do not use a round ID to invent a due win. A long-run payback figure is a wide average. It is not a debt. Your file is not a forecast.
Cookies and tracking technologies
Session cookies die when you close the browser. Longer cookies last until they expire or you clear them. You can turn cookies off in the browser. Login, cashier, and some game loads may then fail or log you out. That is annoying. It is also how a session stays yours on a shared tablet if you actually log out.
The same account follows you from desktop to the official app. A binge on both is still one week’s money. If a cookie banner appears, read it. Do not tap “accept” because the button was louder than the text.
Data sharing and third-party services
Player lists are not sold as a product. Sharing happens when the job cannot be completed without it: payment providers, to credit or debit the method you chose; identity partners, to read a document you uploaded; a legal request that the operator is required to answer; contracted hosts, email, or security vendors who run a slice of the site. A successor, if the business is transferred, should maintain the same duty.
Those parties should not add your file to their mailing list. If a stranger asks for an OTP “from ICROWN,” stop. Open Contact Us from the bookmark and start a new ticket. Anyone asking for a password on WhatsApp is not the cashier.
Data security
The live site should load on the official address you typed. Look for a lock in the browser before you type a password. Charge at home. Skip public USB. On a shared handset, log out. Do not store the password in a family browser profile.
Security is a set of habits plus the platform’s own checks. A leaked password you reused on a shopping app is still your leak. Change it from a trusted handset if you see a login you did not cause. Upload identity files only through the official verification path, not through a chat that messaged you first.
Data retention
The file stays while the account is open. After closure, payment, dispute, and fraud rules can require a hold. Ask which clock applies to your case. Deletion is not always immediate. A closed login can still sit in a payment archive. That is normal. It is not a reason to open a second account.
User privacy rights
You can ask for a copy of the file, a correction, or a deletion request. Open an official contact after logging in. Send your username, the time in Malaysia, and what you want. Staff must verify you before they discuss a file. Keep the ticket ID. A relative who only has the password is not you.
Correction means the legal name and the contact details that match the bank file. It does not mean editing a lost bet out of history. History is the record. If this guide and the live privacy page disagree, the live page wins.
Marketing communications
Promotional messages go only where you opted in, or where the live notice allows a service alert. A deposit receipt is not consent for a 1 am offer ping. Use the unsubscribe line on the message. You can also write to the official contact from the bookmark. Turn off non-essential alerts on the phone if they pull you back after your timer.
Children’s privacy
18+ only. This login is not for children. Do not leave the cashier open on a family tablet. If you think a minor opened a file, write to the official contact and stop using that handset for play. Safer-play wording is part of the account, not decoration.
Policy updates
The live privacy page can change. A new version should show a date. Take a screenshot of the version you care about if you are in a dispute. Campaigns last longer than memory. If a change is material, the live notice should say so. This article is a map. The live page is the rule.
Contact information
Privacy questions travel the same official path as other tickets. Lead with your username, the time in Malaysia, and whether you want a copy, a correction, or a deletion request. One complete message beats five short ones. Do not attach a password. Do not send an OTP.
A first-week privacy workflow
Day one is the official bookmark and a password you do not reuse. Day two is contact details you can still reach. Day three is a small test deposit and a screenshot of the credit. Day four is identity files, if you expect to withdraw, uploaded in daylight with uncropped photos. After that, log out on any shared phone.
If a lookalike page asks for the same photo again, stop. Compare the address in the bar to the bookmark you typed. That extra minute is cheaper than a MyKad crop sent to the wrong place.
What people get wrong with the file
They send a MyKad crop through a chat that messaged them first. They reuse a shopping-app password. They leave the session open on a family tablet. They ask a relative to “just talk to support” with the password. They treat a deletion request as a way to erase a lost bet. History is the record. Correction is the legal name and the contact details that match the bank file.
They tap “accept” on a cookie banner without reading it. They assume a cashier receipt is consent for 1 am offer pings. They open a second account because a hold felt slow. A hold is a pause. Write official contact. Do not register again.
Before you upload a photo tonight
The address in the bar matches the bookmark you typed. The upload sits inside the official verification path. The photo is uncropped and taken in daylight. You are not on public USB. You will not send the same file to a WhatsApp that found you. If any of those lines are a no, wait.
Staff must verify you before they discuss a file. Keep the ticket ID. A complete first message beats five short ones. If the live privacy page disagrees with this article, the live page wins. Entertainment money only. 18+ only.
