Crowngreen Privacy Policy

This document outlines how Crowngreen collects, processes, protects, discloses, and destroys personal data submitted through the use of its online casino and sportsbook platform. All data handling is conducted in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA). The collection and processing of personal information is grounded in informed user consent, obtained at the point of registration and through continued use of the platform. Users are encouraged to read this document carefully to understand their rights and the responsibilities of Crowngreen as a data controller. The current version of this policy supersedes all previous versions and applies to all users accessing the platform from Canada.

Crowngreen collects personal information necessary to operate its services, verify user identity, process transactions, and comply with regulatory obligations under Canadian law.

Personal Data Collected

The following categories of personal information may be collected:

• Full legal name and date of birth;
• Residential address and contact details (email address, phone number);
• Government-issued identification documents for identity verification;
• Financial information, including payment method details;
• Behavioural and technical data, such as IP address, device identifiers, and browsing activity on the platform.

Purpose of Collection

Personal data is collected for the following purposes:

• Account creation, verification, and management;
• Processing deposits, withdrawals, and related financial transactions;
• Compliance with anti-money laundering (AML) and responsible gambling obligations;
• Fraud detection and platform security;
• Improvement of services and personalization of the user experience.

Technical and Organizational Safeguards

Crowngreen applies industry-standard technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest;
• Access controls limiting data availability to authorized personnel only;
• Regular security assessments and monitoring;
• Data minimization practices ensuring only necessary information is retained.

User Rights Under Canadian Law

In accordance with PIPEDA and applicable provincial legislation, users have the right to:

• Access the personal information held about them;
• Request correction of inaccurate or incomplete data;
• Request deletion of personal data where no legal obligation requires its retention;
• Withdraw consent for non-essential data processing;
• File a complaint with the Office of the Privacy Commissioner of Canada if concerns are not resolved directly.

Account Services and Transactions

Information submitted during registration and ongoing use is applied to:

• Create and maintain user accounts;
• Authenticate user identity during login and financial transactions;
• Process deposits and withdrawals through authorized payment providers;
• Maintain accurate records of account activity.

Service Improvement and Analytics

Aggregated and anonymized data may be used to:

• Analyse platform performance and identify technical issues;
• Understand user behaviour and preferences for the purpose of improving services;
• Conduct internal research and reporting.

Marketing Communications

Where users have provided explicit consent, personal data may be used to:

• Send promotional communications related to offers, updates, and platform features;
• Personalize content based on user activity and preferences.

Users may withdraw consent for marketing communications at any time by updating preferences within the account settings or by contacting the support team.

Legal and Regulatory Compliance

Personal data is processed as required to:

• Fulfil obligations under Canadian anti-money laundering and counter-terrorism financing legislation;
• Respond to lawful requests from regulatory authorities;
• Enforce the platform’s Terms and Conditions;
• Detect, investigate, and prevent fraudulent or unlawful activity.

Personal information collected through the platform is used strictly for lawful, transparent, and clearly defined purposes. No data is processed in a manner inconsistent with the reasons for which it was collected.

Users retain rights over their personal information at all stages of the relationship with the platform. The following procedures apply to the exercise of those rights.

Accessing Personal Data

Users may submit a written request to obtain a copy of the personal information held about them. Requests are processed within 30 days of receipt, subject to identity verification. In cases where the volume or complexity of the request warrants additional time, users will be notified of any extension.

Correcting Personal Data

If a user identifies inaccurate, incomplete, or outdated information in their account, a correction request may be submitted through the account portal or directly to the support team. Corrections are applied promptly upon verification.

Deletion of Personal Data

Users may request the deletion of their personal information where:

• The data is no longer necessary for the purpose for which it was collected;
• Consent has been withdrawn and no overriding legal basis for retention exists;
• The data has been processed unlawfully.

Certain categories of data may be retained beyond a deletion request where required by law, including records necessary for AML compliance or dispute resolution.

Consent to Security and Payment Processing

By registering and using the platform, users acknowledge and consent to:

• Identity and security verification checks conducted by Crowngreen or its authorized third-party verification partners;
• The processing of payment information by licensed payment service providers for the purpose of completing financial transactions.

Age Verification

Crowngreen cannot independently verify the age of every individual who accesses the platform without reviewing appropriate identification documents. Users are required to confirm their age during registration. Where age cannot be confirmed, account access may be suspended pending document review.

Discovery of a Minor’s Account

If it is discovered, or reported by a parent or legal guardian, that a person under the age of 18 has registered an account or submitted personal information, the following steps will be taken:

• The account will be suspended immediately;
• All personal data associated with the account will be deleted from active records as promptly as technically feasible;
• Any funds deposited may be subject to reversal in accordance with applicable legal requirements.

The platform is intended exclusively for users who are 18 years of age or older. Access to the services is restricted to adults, consistent with Canadian provincial gambling regulations.

Parents or guardians who believe a minor has registered on the platform are encouraged to contact the support team without delay.

As an online platform operating across multiple jurisdictions, Crowngreen may engage partners, service providers, and technology vendors located outside of Canada. As a result, personal data may be transferred to and processed in countries other than Canada.

Scope of International Transfers

Data may be transferred internationally in connection with:

• Payment processing and fraud prevention services;
• Identity verification and compliance partners;
• Platform infrastructure and hosting providers;
• Customer support and communication services.

Consent and Safeguards

By using the platform, users consent to the transfer of their personal information to countries where Crowngreen’s partners and service providers operate. These countries may have data protection laws that differ from those in Canada.

Crowngreen requires all third-party partners who receive personal data to maintain confidentiality obligations and implement appropriate data protection measures. Data sharing agreements are established with partners to ensure that transferred information is handled in a manner consistent with this policy and applicable law.

This privacy policy constitutes a legally binding document governing the collection, use, and protection of personal information submitted through the platform. The terms set out in this document may alter the scope, interpretation, or application of certain rights and obligations depending on the circumstances of each user’s engagement with the platform.

Applicability

This policy takes effect upon:

• A user’s acceptance of the policy during the account registration process;
• Electronic confirmation of agreement through a checkbox or equivalent acknowledgement mechanism;
• Continued use of the platform following notification of any material updates to this policy.

Amendments

Crowngreen reserves the right to amend this policy at any time. Users will be notified of material changes through the platform or via email. Continued use of the platform following such notification constitutes acceptance of the revised terms. Users who do not agree with the updated policy should discontinue use of the platform and may request account closure.

How Cookies Are Used

Cookies are small text files stored on a user’s device when visiting a website. The platform uses cookies to support core functionality and to improve the overall experience for returning users.

Cookies are applied for the following purposes:

• Statistical analysis of platform traffic and usage patterns;
• Behavioural analysis to understand how users interact with various features;
• Personalization of content, language preferences, and display settings;
• Ongoing improvement of platform performance and security.

Cookie Retention

Cookies placed by the platform are retained for a period of up to one year from the date of the user’s last visit, unless cleared earlier by the user through their browser settings.

Managing Cookies

Users may configure their browser to reject or delete cookies at any time. Disabling cookies may affect the functionality of certain features within the platform. Instructions for managing cookie preferences are available through the settings of most standard web browsers.

By accessing and using the platform, users confirm their full and unconditional acceptance of the terms set out in this privacy policy. Acceptance is registered at the point of account creation and is reaffirmed through continued engagement with the platform.

The version of the privacy policy published on the platform at any given time is the version currently in effect. In the event of any discrepancy between this version and any prior version, the current document prevails in all respects.

Users who do not agree with any provision of this policy are advised to discontinue use of the platform. Questions or concerns relating to this policy may be directed to the platform’s designated privacy contact through the support channels listed on the website.

Circumstances for Disclosure

Personal data may be disclosed to third parties in the following situations:

• Compliance with a legal obligation, court order, or request from a regulatory authority;
• Resolution of disputes or enforcement of the platform’s Terms and Conditions;
• Performance of contractual obligations with authorized service providers;
• Prevention or investigation of fraud, security threats, or unlawful activity.

Notification and Consent

Where third-party recipients are identified on the platform, users may review the relevant information directly. In cases where such parties are not specifically listed, users will be informed of the general purpose and scope of the disclosure prior to sharing.

By submitting personal information through the platform, users consent to its disclosure in the circumstances described in this section. Users who withdraw consent for such sharing may be unable to access certain services where third-party processing is operationally necessary.

Third-Party Data Practices

Each external website operates under its own privacy policy and data practices. Crowngreen has no control over and accepts no responsibility for the collection, use, or protection of personal information by third-party websites. Users who follow links to external sites should review the applicable privacy policies of those sites before submitting any personal information.

User Caution

Users are advised to exercise caution when navigating to external websites, particularly with respect to:

• The type of personal information requested by the external site;
• The data protection standards applied by the external operator;
• Whether the external site is regulated and by which authority.

For any concerns related to data handling on a third-party site, users should contact the operator of that site directly.