Privacy Policy

This policy explains how Realz Casino ("we", "us", "our") collects, holds, uses, and discloses personal information about you when you visit our website, create an account, place wagers, contact our support team, or interact with our marketing communications.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where this policy makes specific commitments, those commitments operate alongside, and not in place of, your statutory rights.

Effective date: this policy was last reviewed and updated on the date shown in our terms record. Material changes are notified to active account holders by email at least thirty days before they take effect.

1. Information We Collect

We collect personal information that is reasonably necessary for the activities listed below. We do not collect data for vague "future analytics" purposes.

Identity and verification data: full legal name, date of birth, residential address, government-issued photo identification, proof of address, and a confirmation that the payment method belongs to you. Required by AML/CTF Act obligations and our gambling licence conditions.

Account and transactional data: username, hashed password, deposit and withdrawal records, wager and game history, bonus claims, communication logs with support, and balance ledger.

Technical data: IP address, device type, browser type and version, operating system, screen resolution, and the times of your sessions. Used for security, fraud prevention, and to keep the site working on the devices you actually use.

Marketing preferences: the channels by which you've agreed to receive promotional communications (email, SMS, in-app), and any opt-out flags you've set.

We do not collect sensitive information as defined in section 6 of the Privacy Act 1988 — including health, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation — except where it is incidentally included in a document you provide for identity verification.

2. How We Use Your Information

We use your personal information for the following purposes, and only these:

• To create and manage your account.

• To verify your identity, age, and residence in accordance with AML/CTF and licensing law.

• To process deposits and withdrawals.

• To provide the games, bonuses, and customer support you've asked for.

• To monitor patterns of play for the purposes of responsible gambling intervention, in line with our Responsible Gambling page.

• To detect, investigate, and prevent fraud, money laundering, or breaches of our Terms and Conditions.

• To send you marketing communications where you have opted in, and to honour any opt-out request immediately.

Where we rely on consent (typically for marketing), you may withdraw that consent at any time by following the opt-out instructions in any communication or by emailing the Privacy Officer (details below).

3. Disclosure of Information

We disclose personal information only as described here. We do not sell personal information to third parties.

Service providers. We disclose to payment processors, identity verification providers, hosting providers, customer support tooling vendors, and analytics providers — in each case bound by written confidentiality and data security obligations.

Regulators and law enforcement. We disclose where required by law, including in response to a valid notice from the Curaçao eGaming Authority, AUSTRAC, the Australian Federal Police, or a court of competent jurisdiction in Australia.

Business transfers. If the Realz business is sold or restructured, your personal information may be disclosed to the purchaser, who is required to handle it on terms no less protective than this policy.

APP 8 — cross-border disclosure. Some of our service providers are based outside Australia, including in Curaçao (gaming licence administration), the Philippines (customer support overflow), and Ireland (cloud hosting). Where we disclose personal information to overseas recipients, we take reasonable steps to ensure they handle it consistently with the APPs.

4. Data Security

We use TLS 1.3 encryption for data in transit, encrypted-at-rest storage for production databases, and segregated access controls based on the principle of least privilege. Passwords are stored hashed and salted; they are never visible to staff in plaintext.

No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

5. Retention Periods

We do not keep your personal information indefinitely. Specific retention windows by data category:

• Account and KYC documents: seven years after account closure (AML/CTF Act requirement).

• Transactional and wager records: seven years after the transaction (taxation and AML).

• Support and complaint correspondence: five years after resolution.

• Marketing preferences and opt-out history: retained until you request deletion.

• Technical session logs: ninety days, then aggregated to non-identifiable form.

After the relevant period, data is securely destroyed or de-identified.

6. Your Rights Under the APPs

You have the right, under the Australian Privacy Principles, to:

• Access the personal information we hold about you (APP 12).

• Correct personal information that is inaccurate, out-of-date, incomplete, or misleading (APP 13).

• Lodge a complaint about how we have handled your personal information.

To exercise any of these rights, contact the Privacy Officer at [email protected]. We respond to access and correction requests within thirty days. There is no charge for a standard request.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

7. Cookies and Tracking

We use cookies and similar technologies for three purposes: keeping you logged in across pages, remembering your language and preferences, and measuring anonymised site usage. We do not use third-party advertising cookies that follow you across other websites.

You can disable cookies in your browser settings, but parts of the casino — including login persistence and game state — will not work without them.

8. Children

Our service is not directed to anyone under 18. We do not knowingly collect personal information from minors. If we become aware that we hold information from a person under 18, we will delete it promptly and close any account opened in breach of our age requirement.

9. Contact

Privacy Officer, Realz Casino — [email protected]. For complaints not resolved with us, the OAIC (oaic.gov.au) is the supervising regulator under the Privacy Act 1988.