Privacy Policy

Who controls your information

The operating company behind SkyCrown Casino acts as data controller for the personal information described here. Our registered office and processing operations sit outside Australia, and our data-handling obligations arise from Curaçao gaming regulation together with the contractual commitments imposed on us by our payment partners and game suppliers.

Australian visitors should note that the Privacy Act 1988 and the Australian Privacy Principles do not govern this platform, and the Office of the Australian Information Commissioner has no supervisory role over our processing. Where an Australian resident asks us to honour a right modelled on that framework, we will consider the request in good faith, but we are not bound to grant it.

Written privacy enquiries reach us through the dedicated privacy address published in the Contact section of the site. A named privacy officer reviews each submission, and we aim to acknowledge receipt within five business days.

Categories of information we hold

Registration produces identity and contact records: full name, date of birth, residential address, nationality, email address, mobile number, and chosen currency. Verification adds copies of government-issued photographic identification, a proof of address document, and — where a payment method requires it — a partially masked image of the instrument used.

Financial records cover deposits, withdrawals, refunds, chargebacks, bonus credits, and wagering history at the level of individual rounds. Source-of-funds documentation such as payslips or bank statements is requested only when regulatory thresholds or risk indicators make it necessary.

Technical records are generated automatically: IP address and derived approximate location, device type, operating system, browser fingerprint attributes, screen dimensions, referring URL, session timestamps, and the pages and games you open. Support records include chat transcripts, email threads, and internal notes made by agents while resolving your case.

Behavioural and protection records complete the picture. These include responsible gaming settings, reality-check responses, self-exclusion history, and any risk flags raised by our anti-money-laundering, fraud, or bonus-abuse monitoring systems.

Why we process it and on what basis

Contract performance covers the bulk of our processing: opening and maintaining your account, crediting deposits, settling bets, paying withdrawals, applying promotions, and answering your support requests. Without this information we cannot provide the service you have asked for.

Legal and licence obligations require us to verify identity, screen against sanctions and politically-exposed-person lists, monitor for suspicious transaction patterns, retain financial records, and report where our licence conditions or applicable anti-money-laundering rules demand it. These duties override your preferences and cannot be waived at your request.

Legitimate interests support fraud prevention, platform security, multi-accounting detection, debugging, aggregate performance analysis, and the defence of legal claims. Consent, separately given and freely withdrawable, is the basis for marketing email and SMS, for optional analytics and advertising cookies, and for any use of your information beyond the purposes above.

We do not sell your personal information. Automated systems do score accounts for fraud and responsible-gaming risk, and a high score can trigger a payout hold, a limit, or account closure; you may ask for human review of any such outcome by contacting support in writing.

Sharing, transfers, and security

Recipients fall into defined groups: payment processors and acquiring banks that settle your transactions; identity-verification and anti-fraud providers that check your documents; game studios that host the titles you play and maintain their own round histories; cloud hosting, email delivery, and customer-support platforms that run our infrastructure; and professional advisers, auditors, and regulators where a lawful request or licence condition applies.

Because our infrastructure and suppliers span multiple jurisdictions, your information will be transferred across borders, including to countries whose data-protection regimes differ from those of Australia or the European Union. We impose written confidentiality and security terms on every processor, restrict each one to the data it needs, and prohibit onward use for the processor's own purposes.

Technical safeguards include TLS encryption in transit, encryption at rest for identity documents, tokenised card handling so that full card numbers never reach our own systems, role-based internal access with logged administrative actions, and periodic penetration testing. No system is impregnable; if a breach is likely to cause you serious harm we will notify you and the appropriate authorities without undue delay.

Retention is purpose-bound. Account, transaction, and verification records are kept for the period our licence and applicable financial-crime rules require after your account closes — generally several years. Support transcripts and marketing consent logs are held for shorter defined periods, self-exclusion records are kept for as long as the exclusion must be enforced, and technical logs are rotated on a rolling schedule.

Cookies, tracking, and your choices

Strictly necessary cookies keep you logged in, remember your currency and language, secure form submissions, and balance traffic across our servers. These cannot be disabled without breaking the site. Preference, analytics, and advertising cookies are optional and are governed by the consent panel shown on your first visit; you may revisit that panel at any time to change your selection.

Third-party analytics and affiliate-attribution tags may set identifiers that allow the provider to recognise your browser across sessions. Browser-level controls, private browsing modes, and tracking-protection settings give you a further layer of control independent of our panel.

You may ask us to confirm what we hold about you, supply a copy, correct inaccuracies, delete information we no longer need, restrict a particular use, or stop marketing altogether. Marketing withdrawal is immediate and unconditional. Other requests are honoured to the extent our licence, financial-crime, and self-exclusion duties allow, and we will explain in writing whenever we cannot fully comply.

We verify identity before acting on any request so that one person cannot obtain another person's records. Expect a substantive response within thirty days of successful verification, or an explanation of the delay where a request is unusually complex.

Where to get help

• Privacy enquiries — the dedicated privacy contact address listed in the Contact section of SkyCrown Casino
• Account and data requests — live chat or the secure message form inside your logged-in profile
• Curaçao licensing authority — for concerns our privacy officer has been unable to resolve