CrownRush Privacy Policy
DRAFT — not in effect. Items in [[brackets]] must be completed and the whole document approved by a lawyer before launch.
1. Who we are
CrownRush Social Casino ("CrownRush", "we") is operated by [[LEGAL ENTITY NAME AND ADDRESS]]. This policy explains what we collect when you use our website and games, why, and your choices.
2. Information you give us
Email and password, or your Apple or Google account basics (name and email). Your legal first and last name, date of birth, street address, city, state and ZIP. Support messages and anything you send us.
3. Location
Before play and before any prize redemption we check your location. We ask your device for its location once, use it only to find your state, and do not store your exact coordinates. We keep the state, the network (IP) region, the result and the time of each check to show we followed state rules and to prevent fraud.
4. Identity verification (face and ID)
Before your first prize redemption you'll verify your identity with our verification partner [[VERIFICATION PARTNER, e.g. Plaid]]. You'll scan a government photo ID and take a short selfie. The partner checks the ID is real, that your face matches the ID photo and is a live person, and that the name and date of birth match your CrownRush account. We receive the result and limited details, not your full images, unless required by law. Biometric data is handled by the partner under its own notice: [[BIOMETRIC NOTICE / CONSENT LANGUAGE — COUNSEL TO CONFIRM FOR IL, TX, WA]].
5. Bank linking and payouts
To receive prizes you may link a bank account through [[BANK-LINKING PARTNER, e.g. Plaid]]. We never see or store your bank login. We receive the account owner name and the details needed to send your prize.
6. Gameplay and transactions
Coin balances, game history, promotions and bonuses received, redemption requests, review decisions and payout references.
7. Device and security data
IP address, browser and device type, sign-in times and fraud signals. Used to keep accounts safe and to stop bots, duplicate accounts and scams.
8. Why we use it
To create and run your account, confirm you are 18 or older and in a permitted state, give promotional coins, review and pay prizes, prevent fraud and money laundering, meet legal duties, answer support, and enforce responsible-play tools.
9. Sharing
Only with service providers that help us run CrownRush (hosting, identity, location, bank linking, payouts, game and email partners) under contract, with regulators or law enforcement when required, or in a company sale. We do not sell your personal information. Current list: [[LIST OF PROCESSORS]].
10. Marketing
We only send promotional emails if you opt in, and never to self-excluded players. You can opt out anytime.
11. Retention
We keep account, verification, location-check and transaction records for as long as the law requires for sweepstakes and anti-fraud purposes: [[RETENTION PERIODS — COUNSEL TO CONFIRM]].
12. Security
Data is encrypted in transit, staff access is limited by role and requires two-factor sign-in, and every staff action on payouts is recorded.
13. Your rights
Depending on your state, you can ask to access, correct or delete your information, or opt out of certain uses: [[STATE PRIVACY RIGHTS AND HOW TO EXERCISE THEM]]. Some records must be kept by law even after you close your account. Contact: [[PRIVACY EMAIL]].
14. Children
CrownRush is only for adults 18 and older. We do not knowingly collect information from anyone under 18.
15. Changes
We'll post updates here and tell you about important changes. Last updated: [[DATE]].