Privacy Policy and Personal Data Security at CrownGreen
This Privacy Policy governs the processing and protection of personal data for users accessing CrownGreen in Ireland. Royal Flush Ventures collects, processes, and stores personal information necessary for account setup, financial transactions in EUR (€), identity verification, and system activity logs. The company aligns all data processing procedures with European Union General Data Protection Regulation (GDPR) requirements to safeguard player information.
How We Use Your Personal Data
By registering an account and using our services, users consent to the data practices described in this policy. CrownGreen retains personal data strictly for periods mandated by applicable regulatory and Anti-Money Laundering (AML) laws. When legal retention obligations expire, users may request the permanent deletion of their data. The Data Protection Commission (DPC) in Ireland serves as the supervisory authority for any data protection concerns. To exercise your privacy rights or submit inquiries, contact our Data Protection Officer at [email protected].
CrownGreen collects and processes personal information for specific, legally grounded operational and regulatory purposes. Each processing activity supports key platform services:
- Account Creation & Management: Establishing user profiles, storing credentials, and enabling secure access to gaming services.
- Identity & Age Verification: Reviewing submitted government identification documents to verify user authenticity and confirm compliance with 18+ legal age limits.
- EUR Payment Processing: Facilitating secure deposit and withdrawal transactions in euros through verified third-party financial institutions and Open Banking channels.
- Fraud Prevention & Security: Monitoring account activity, payment methods, and IP logs to detect unauthorized access, multi-accounting, or suspicious financial patterns.
- Service Communications: Sending essential operational updates, security alerts, policy revisions, and account status notifications via registered contact channels.
- Consensual Marketing: Delivering tailored promotional offers, deposit bonus notifications, and partner updates only after receiving explicit user opt-in consent.
- Regulatory Compliance (GDPR/AML): Maintaining detailed records to satisfy European data protection mandates, licensing rules, and anti-money laundering requirements.
- Cross-Border Privacy Standards: Applying standardized international protection frameworks (including PIPEDA principles where applicable) to secure data across multi-jurisdictional infrastructure.
Data Security and Encryption
CrownGreen Casino implements multi-layered technical and organizational safeguards to ensure all submitted information remains protected against unauthorized access, loss, or alteration.
- 256-bit SSL Encryption: Secures all data transmissions between user browsers or mobile applications and central servers.
- Hardware Firewalls: Prevents unauthorized external network traffic from accessing infrastructure hosting user data.
- Encrypted Storage: Personal information, identity documents, and payment records are stored in high-security, encrypted database clusters.
- Role-Based Access Controls: Restricts employee access to personal data strictly on a need-to-know basis for job-related tasks.
- System Activity Logging: Continuously records system interactions and administrative access for auditing and real-time security monitoring.
- Data Retention Schedules: Retains records only as long as required by operational needs and Irish/EU legal retention frameworks.
- Secure Server Infrastructure: Hosts server hardware within high-security data centers located in Germany and EU partner states operating under strict EU data protection standards.
- Periodic Security Audits: Conducts regular vulnerability assessments and system penetration tests to maintain security integrity.
- Third-Party Vendor Standards: Requires all operational partners, payment processors, and software providers to maintain equivalent GDPR-aligned security protocols.
- Account-Level Protection: Protects user profiles with mandatory password protection and optional two-factor authentication (2FA) layers.
Cookies Policy and Data Sharing
CrownGreen utilizes tracking technologies to enhance navigation, analyze site usage, and optimize services. The platform also transfers specific data to trusted entities to fulfill operational and legal duties.
| Category / Recipient | Type | Purpose / Description |
|---|---|---|
| Session Cookies | Essential | Temporary cookies assigned during visits that expire immediately when the browser closes. |
| Preference Cookies | Functional | Stores user configurations, language options, and layout preferences across site visits. |
| Analytics Cookies | Performance | Collects anonymous traffic data to monitor visitor count and analyze user navigation patterns. |
| Advertising Cookies | Marketing | Displays relevant promotional materials and tracks campaign efficiency via authorized networks. |
| Payment Providers | Third Party | Transfers financial transaction details to secure processors (Revolut, Trustly, Visa) for payment handling. |
| Legal Authorities | Regulatory | Discloses mandatory details to comply with court orders, legal processes, or statutory law enforcement requests. |
| Research Institutions | Academic | Shares anonymized, non-identifiable usage datasets to support academic research on addiction prevention. |
| Credit & Fraud Agencies | Security | Cross-references identification details against database registers during security and verification reviews. |
Note: CrownGreen does not sell, rent, or trade user databases to third-party advertisers or external marketing brokers under any circumstances.
Your Privacy Rights
Under the General Data Protection Regulation (GDPR), users in Ireland hold enforceable rights regarding their personal data:
- Right of Access: Request full confirmation of data processing activities and obtain copies of stored personal records.
- Right to Rectification: Request the immediate correction or updating of inaccurate or incomplete personal information on file.
- Right to Restrict Processing: Request restrictions on how personal data is handled under specific legal or factual conditions.
- Right to Object to Marketing: Withdraw consent for promotional communications at any time via account settings or directly via email links.
- Right to Data Portability: Obtain stored personal data in a structured, machine-readable format for transfer to another service provider.
- Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of personal data when legal obligations no longer require its retention.
- Submitting a Request: To exercise any data rights, submit a written request to [email protected] including your full legal name, registered email address, username, and the specific right being requested. Requests receive a formal response within 30 days.
- Lodge a Complaint: Users maintain the legal right to report privacy concerns or file complaints with the Data Protection Commission (DPC) in Ireland.
Contact Details and Supervisory Authority in Ireland
For assistance regarding data privacy or platform operations, reach out through the following official channels:
- CrownGreen Support: Email [email protected] or use the internal account messaging interface.
- Problem Gambling Support (Ireland): Contact Problem Gambling Ireland at [email protected] or visit www.problemgambling.ie.
- Data Protection Supervisory Authority: Contact the Irish Data Protection Commission (DPC) at [email protected] or visit www.dataprotection.ie.