Privacy Policy

Crn7 ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online gaming services at crn7-australia.com, in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Information We Collect

We collect personal information to provide our gaming services, ensure compliance with Australian laws, and enhance your experience. Personal information includes any data that identifies you or is reasonably linked to you.

Types of information include:

• Identity details: full name, date of birth, residential address, phone number, email address, and government-issued ID numbers.
• Financial data: bank account details, credit/debit card information, transaction history, and payment method details.
• Verification documents: scans or photos of passports, driver's licenses, utility bills, or other proof of address for KYC and AML compliance.
• Gaming activity: betting history, game preferences, wager amounts, session durations, deposits, withdrawals, and play patterns.
• Technical data: IP address, device type, browser information, operating system, cookies, and location data (approximated via IP).
• Communication records: support tickets, emails, chat logs, and feedback.
• Marketing preferences: opt-in status for promotions and newsletters.
• Sensitive information: occasionally, health-related data for responsible gambling assessments, such as self-exclusion requests or problem gambling indicators.

We collect this directly from you during registration, deposits, verification, gameplay, and support interactions. We may also receive unsolicited information from third parties like payment processors or fraud detection services.

Collection is limited to what is reasonably necessary for our functions, as required by APP 3. For example, identity verification is mandatory under anti-money laundering laws enforced by AUSTRAC.

How We Collect Information

Collection occurs through lawful and fair means, primarily directly from you. Methods include:

• Online forms for registration, deposits, withdrawals, and verification.
• Automated tools during gameplay, such as tracking software for bets and sessions.
• Cookies and similar technologies for site functionality, analytics, and security.
• Third-party integrations: payment gateways (e.g, for secure transactions), identity verification services, and affiliates.

Where practicable, we offer anonymity or pseudonymity under APP 2, such as browsing without an account. However, full gaming services require identification due to legal obligations.

We notify you at collection about the purpose, as per APP 5. During registration, our form discloses what data we collect and why.

For sensitive information, we obtain explicit consent or rely on legal requirements, aligning with protections similar to GDPR Article 9 for health data in gambling contexts.

Purpose of Collection and Use

Your information is used solely for legitimate purposes related to our gaming platform. Primary uses include:

• Account creation, management, authentication, and personalization.
• Processing deposits, withdrawals, bonuses, and refunds securely.
• Identity and age verification to prevent underage gambling and comply with KYC/AML rules.
• Fraud detection, security monitoring, and risk assessment.
• Facilitating gameplay, including game recommendations and session limits.
• Responsible gambling: monitoring for problem play, self-exclusion, and reality checks.
• Customer support, dispute resolution, and service improvements.
• Internal analytics to optimize platform performance.
• Compliance reporting to regulators like AUSTRAC.
• Marketing: sending promotions only with consent.

Under APP 6, we only use or disclose for the primary purpose or a related secondary purpose you would reasonably expect. For marketing, we seek separate consent, which you can withdraw anytime.

Legal bases mirror contractual necessity (service provision), legal obligations (AML/KYC), and legitimate interests (fraud prevention), akin to GDPR Article 6.

Disclosure of Information

We do not sell your personal information. Disclosures are limited and only to parties necessary for operations:

• Service providers: payment processors, hosting, analytics (e.g, Google Analytics), verification firms, all bound by contracts requiring APP compliance.
• Affiliates: for shared services, under strict controls.
• Regulators: AUSTRAC, ACMA, or law enforcement for AML, suspicious activity, or court orders.
• Professional advisors: auditors, lawyers for compliance.
• In business transfers: potential buyers during mergers.

Under APP 8, no direct marketing disclosures without consent. Overseas disclosures (e.g, to international providers) are to countries with comparable protections or under APP 8.1 safeguards like standard contracts.

We ensure recipients do not misuse data, similar to GDPR processor agreements.

Data Security

We implement robust security measures to protect your information from misuse, interference, loss, unauthorized access, modification, or disclosure, as mandated by APP 11.

Measures include:

• Encryption: SSL/TLS for data in transit; AES-256 for stored data.
• Access controls: multi-factor authentication, role-based permissions.
• Firewalls, intrusion detection, and regular penetration testing.
• Secure payment gateways compliant with PCI DSS.
• Employee training and data minimization.

Despite these, no system is impenetrable. We commit to notifying you and the Office of the Australian Information Commissioner (OAIC) of eligible data breaches under the Notifiable Data Breaches (NDB) scheme if likely to cause serious harm.

Data Retention

We retain information only as long as necessary for the purposes outlined or legal requirements:

Deletion occurs securely upon expiry, except where legally required. APP 11.2 requires destruction or de-identification when no longer needed.

Your Rights and Access

You have rights under the APPs to manage your information:

• Access: Request details we hold about you (APP 12).
• Correction: Update inaccurate information (APP 13).
• Anonymity: Where possible (APP 2).
• Opt-out: Marketing anytime.
• Complaints: See below.
• Withdrawal: Account deletion (subject to legal holds).

To exercise rights, email [email protected]. We respond within 30 days, free of charge unless requests are excessive. Verification may be required.

These align with GDPR-like rights (access, rectification) for transparency.

Cookies and Tracking

We use cookies for essential functions (session management), performance (analytics), and advertising (preferences). You can manage via browser settings.

Types:

• Essential: Cannot disable.
• Analytics: Google Analytics (anonymized).
• Marketing: Track opt-ins.

Third-party cookies from partners like payment providers. Full policy in our Cookie Notice.

Children's Privacy

Our services are for adults 18+. We do not knowingly collect data from children. Parents/guardians can contact us to remove such data.

International Transfers

Data may transfer overseas to providers in the EU, UK, or secure jurisdictions. We ensure equivalent protections via contracts, as per APP 8.

GDPR standards apply if processing EU data, including SCCs.

Third-Party Links

Our site links to external sites (e.g, payment pages). We are not responsible for their privacy practices. Review their policies.

Responsible Gambling Data

We process data to promote safe play, including monitoring for addiction signs. This sensitive data is handled with high care, consent where needed.

Changes to This Policy

We may update this policy to reflect legal changes or operations. Posted version applies; major changes notified via email or site notice. Last updated: March 31, 2026.

Complaints Process

If concerned about a privacy breach:

1. Contact [email protected] with details.
2. We investigate and respond within 30 days.
3. If unsatisfied, escalate to OAIC (www.oaic.gov.au).

We handle complaints per OAIC guidelines.

Contact Us

For questions: [email protected].

This policy ensures open management (APP 1). By using our services, you consent to this handling.