CrownJewelz Privacy Notice for UK Players
Who Decides How Your Data Is Used
Aurelian Gaming Group S.A., Avenida Escazu, Torre Lexus, Piso 6, Escazu, San Jose, Costa Rica, operates crownjewelz.io and acts as the controller of the personal data you give us. We handle it in line with the UK GDPR and the Data Protection Act 2018.
Who We Share Your Data With
We do not sell personal data. The recipients below receive only what they need for the stated purpose. We also disclose data to a court, a regulator or the police when a lawful request requires it, after checking its scope, and we pass nothing to advertising networks.
| Recipient | What they receive | Why |
|---|---|---|
| Visa and Mastercard | Card payment details and amount | To process deposits and withdrawals |
| Skrill and Neteller | Wallet identifier, amount and email | To process e-wallet payments |
| Bitcoin, Ethereum, Litecoin and Dogecoin networks | Wallet address and transaction hash | To send and receive crypto payments |
| Evolution Gaming and Pragmatic Live | Account ID and session data | To run live casino rounds |
| Pragmatic Play, NetEnt, Play’n GO, Hacksaw Gaming, Nolimit City, Push Gaming, Microgaming, Thunderkick, Spribe, BGaming and Endorphina | Account ID and gameplay data | To operate slots and settle rounds |
How Long We Keep Your Data After You Leave
Account and gameplay records stay for as long as the account is open and for six years after closure, because financial and anti-money-laundering rules require it. Identity documents are kept for five years after closure and then deleted. Server logs are kept for 12 months. If you withdraw consent to marketing emails, we stop sending them and keep only a note that you opted out.
Where Your Data Travels Outside the UK
Our operator is based in Costa Rica, so your data is processed outside the UK. Where a transfer needs a safeguard under the UK GDPR, we use the ICO International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, and we limit access to staff who need the data to do their work.
Why We Process Your Data and What You Can Ask Us to Do
We process your data on four grounds under the UK GDPR: contract, to run your account and pay you; legal obligation, for age and identity checks and anti-money-laundering rules; legitimate interests, for fraud prevention and site security; and consent, for marketing emails and non-essential cookies.
We set essential cookies to keep you signed in, preference cookies to remember settings and analytics cookies to see how pages are used. Under the Privacy and Electronic Communications Regulations we ask for consent before setting any non-essential cookie, and you can change your choice in the cookie banner or your browser settings at any time.
You have the right to access your data, correct it, have it erased, restrict or object to its use and receive it in a portable format. We answer within one month, free of charge.
Where You Can Complain if We Get It Wrong
Please contact us first so we can try to put things right. If you remain unhappy, you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, on 0303 123 1113.
The Information We Collect at Each Step
At registration we collect your name, date of birth, address, email address, mobile number and a hashed password. When you pay, we record the method, the amount, the last four digits of a card or the crypto wallet address and transaction hash. For verification, we collect a passport or UK photocard driving licence and a proof of address such as a utility bill, a council tax bill or a bank statement. While you use the site we log your IP address, device type, browser and pages visited. We collect no health data, and no decision about your account is taken by automated means alone: our fraud checks raise flags that a member of the team reviews by hand before any account action.
Sending Us a Data Request
Email [email protected] from the address on your account with the subject Data request and say what you want, for example a copy of your data or deletion of your account. We may ask you to confirm your identity first, and we reply within one month.