What we collect

• Identity. Name, date of birth, residential address, and the identity documents needed to verify them.
• Contact. Email address and mobile number.
• Financial. Payment details, deposits, withdrawals and account balance history.
• Betting. Bets placed, markets, stakes, results and account activity.
• Technical. IP address, device and browser information, and location data sufficient to confirm you are in Australia.
• Interactions. Correspondence with support, including complaint records.

Why we collect it

Some of it is because we cannot lawfully operate otherwise: identity verification and transaction monitoring under the AML/CTF Act, age verification, location checks required by the Interactive Gambling Act, and the reporting obligations that come with our Northern Territory licence. The rest is to run the account, settling bets, paying withdrawals, answering support, and producing the activity statements we are required to send.

Who we share it with

• Identity verification providers, for the sole purpose of confirming who you are.
• Payment processors and banks, to move money you have asked us to move.
• The Northern Territory Racing Commission and other regulators, where required.
• AUSTRAC, where a reporting obligation arises.
• Sport controlling bodies, where an integrity concern requires a referral.
• BetStop, to check and maintain self-exclusion registrations.
• Our IT and support providers, under contract and only as needed to run the service.

We do not sell personal information. We do not share it with advertisers or data brokers, and we do not build profiles for anyone else’s marketing.

Marketing

We do not send inducement advertising at all. Operational messages, statements, security notices, changes to terms, are not marketing and cannot be switched off while the account is open. Anything optional can be, in one click, and is switched off automatically and permanently the moment you take a break, reduce a limit, close the account or register with BetStop.

How long we keep it

Seven years after an account closes, which is the retention period our AML and licensing obligations require. Self-exclusion records are kept for as long as needed to give the exclusion effect, which may be longer.

Your rights

You can ask what we hold, ask for a copy, and ask us to correct anything inaccurate. We will respond within 30 days. You can ask us to delete information, though we must refuse where a law requires us to keep it, which covers most of an account record for seven years. Requests go through our contact page.

Security and complaints

Data is encrypted in transit and at rest, access is restricted to staff who need it, and we will notify you and the Office of the Australian Information Commissioner of an eligible data breach as the Privacy Act requires. If you are unhappy with how we have handled your information, complain to us first; if that does not resolve it, the OAIC can review the matter.