PRIVACY POLICY

1. Introduction & Operating Entity

This Privacy Policy governs the practices of Crown Coins Casino, owned and operated by Sunflower LTD ("Company", "we", "us", or "our"). We deliver free-to-play social gaming and promotional sweepstakes entertainment across authorized United States jurisdictions. By registering an account, accessing our site, or participating in sweepstakes, you consent to the data practices described herein.

2. Information We Collect

To provide fair gaming, maintain sweepstakes compliance, and process prize redemptions, we collect the following categories of data:

• Identity & Profile Information: Legal full name, date of birth, residential address, email address, phone number, and Social Security Number (SSN/TIN) where required for US tax compliance upon prize redemptions exceeding statutory limits.
• Verification & KYC Documentation: Photographic proof of government-issued identification (driver’s license, state ID, or passport) and proof of address (utility bill or bank statement) submitted for account verification.
• Financial & Transaction Data: Encrypted bank routing and account numbers for ACH cash prize payouts, gift card delivery details, and optional purchase histories. We do not store raw credit card numbers.
• Technical & Geolocation Data: IP address, browser type, device identifier, operating system, and geolocation coordinates to ensure you reside in an eligible US state.
• Gameplay Records: Spin histories, Crown Coins transactions, Sweeps Coins balances, and redemption statuses.

3. How We Utilize Your Personal Information

We process personal information under strict legal and commercial justifications, including:

• Administering and operating social casino slot games and promotional prize systems.
• Verifying your identity, age (18+ or 21+), and geographic location within permissible states.
• Processing eligible Sweeps Coins redemptions and facilitating direct electronic bank deposits.
• Preventing bonus manipulation, fraudulent registrations, multi-accounting, and security breaches.
• Complying with federal anti-money laundering (AML) protocols and state promotional sweepstakes statutes.
• Sending critical transactional notices, security alerts, and customized promotional offers.

4. Data Sharing & Third-Party Processors

Sunflower LTD never sells your personal information. We may share necessary data with authorized third-party service providers solely under confidential data processing agreements:

• Identity Verification Providers: Automated identity confirmation and AML screening platforms (e.g., SumSub, Veriff).
• Financial Institutions: NACHA-compliant US bank transfer gateways (e.g., Trustly) and digital prize card vendors.
• Cloud Infrastructure: Secure, encrypted cloud hosting and content delivery networks (Cloudflare, AWS).
• Legal Authorities: Regulatory bodies, law enforcement, or tax authorities when mandated by US federal or state subpoenas.

5. Cookies and Web Tracking Technologies

We utilize essential, functional, and analytical cookies to safeguard session state, monitor performance, and customize your experience. For comprehensive details on configuring cookie preferences, please review our separate Cookie Policy.

6. Security Measures & Encryption

Sunflower LTD employs bank-grade 256-Bit SSL/TLS cryptographic protocols to protect information in transit and at rest. Access to player identity records is restricted to certified compliance personnel requiring authorization to process withdrawals and maintain platform integrity.

7. Your Privacy Rights (CCPA / CPRA & State Laws)

Depending on your US state of residence (including California, Virginia, Colorado, and Connecticut), you possess enforceable legal rights regarding your personal information:

• Right to Know: Request disclosure of specific categories of personal data collected, shared, or processed.
• Right to Delete: Request permanent deletion of non-essential personal information, subject to mandatory legal and tax retention periods.
• Right to Correct: Request prompt correction of inaccurate or outdated profile records.
• Non-Discrimination: We will never deny services or charge different rates for exercising statutory privacy rights.

8. Data Retention Periods

We retain personal data as long as your account remains active. After account termination, certain financial, gameplay, and redemption transaction records are retained for a minimum of 5 to 7 years to comply with statutory accounting and sweepstakes audit obligations.

9. Contacting Our Data Privacy Team

For privacy inquiries, data subject access requests, or regulatory queries, please contact: