Your Privacy at Woo Casino
This Privacy Policy explains what personal data we collect at Woo Casino, why we collect it, how long we keep it and the choices you have. It applies to every account holder on woo-casino-pokies.com and covers our full service, from registration to withdrawals.
What Data We Collect
We collect personal data only where we need it to run your account, meet our legal obligations under the Curaçao licence 8048/JAZ2020-047 and keep the platform safe. Each category below has a purpose and a retention period set out later in this policy.
- Identity data: full name, date of birth, email address, phone number, residential address and country of residence.
- Verification documents: government-issued ID, proof of address and proof of payment method for KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, bonus and wagering records, and the payment instruments you use, including crypto wallet addresses.
- Technical data: IP address, device type, browser language, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, bet sizes, win and loss history, and tournament participation.
- Marketing preferences: which offers you opted in to receive, and how you told us you prefer to be contacted.
How We Use Your Data
We use your data to create and run your account, verify who you are, process deposits and withdrawals in AUD or crypto, and detect fraud and bonus abuse. Gameplay data also feeds our responsible-gambling monitoring, which helps us spot patterns of harmful play and offer you limits or a break.
- Account creation, login and general account management.
- KYC and anti-money-laundering checks required before your first withdrawal.
- Payment processing for deposits and withdrawals via PayID, cards, e-wallets and crypto.
- Fraud prevention, multi-account detection and dispute resolution.
- Responsible-gambling monitoring and enforcement of self-exclusion.
- Marketing and promotions, only where you have given consent, and legal and regulatory reporting.
Why We May Process Data
Contract. We process identity, transaction and account data because it is necessary to perform the agreement you accepted when you registered. Without this data we cannot hold an account for you or pay out winnings.
Legal obligation. Anti-money-laundering and gambling regulation require us to verify your identity, monitor transactions and keep records for set periods. We cannot offer you a choice here, because refusing would breach our licence conditions.
Legitimate interest. We process technical and gameplay data to prevent fraud, secure the platform and improve our service. We weigh this interest against your privacy and restrict processing to what is strictly needed.
Consent. Marketing emails, SMS and personalised bonus offers run only on your consent, which you may withdraw at any time. Withdrawal has no effect on the lawfulness of messages sent before you withdrew.
How Long We Keep It
We keep each category only as long as we need it. Gambling regulation requires us to retain transaction records for at least five years after the transaction, and verification records for at least five years after the relationship ends. Everything else is shorter.
| Data category | Retention period |
|---|---|
| Identity and account data | While your account is open, then up to 5 years for records purposes |
| Verification (KYC) documents | At least 5 years after account closure |
| Transaction records | At least 5 years after the transaction date |
| Technical and device logs | Up to 12 months |
| Gameplay and responsible-gambling data | While your account is open, then up to 5 years where linked to transactions |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share Data With
We do not sell your personal data. We share it only with processors and authorities that need it for a defined function, under written agreements that bind them to confidentiality and security standards comparable to ours.
- Payment processors handling your deposits and withdrawals, including card schemes, e-wallet providers and crypto payment gateways.
- KYC and AML verification providers that check your documents against sanctions and identity databases.
- Regulators, licensing authorities and law enforcement where we are legally compelled to respond.
- Analytics and hosting providers that run the platform under our instructions and cannot use your data for their own purposes.
- Game and platform suppliers where the game outcome requires your account data to be transmitted, limited to the technical minimum.
Your Rights Over Your Data
You can ask us at any time what data we hold about you and what we do with it. We respond to rights requests within 30 days. Email [email protected] or use live chat, available 24/7, and we will verify your identity before acting on the request.
- Access: receive a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or out of date.
- Erasure: request deletion where no legal retention obligation applies.
- Portability: get your data in a machine-readable format where processing runs on consent or contract.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: unsubscribe from marketing at any time, via the link in any email or your account settings.
- Complain: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or with your local data protection authority.
Cookies and Tracking
We use cookies to keep you logged in, remember your session, and understand in aggregate which games players open. Analytics cookies help us fix faults and improve page load times, and marketing cookies only fire with your consent. Our full cookie inventory, including the list of cookies set and their lifespans, sits on our dedicated Cookies Policy page where you can also manage your cookie settings.
How We Protect Your Data
All traffic between your device and our platform runs over TLS encryption, and card and wallet details are tokenised so we never store raw payment credentials. Access to personal data inside our systems is restricted to staff who need it for support, payments or compliance, with role-based permissions and logged access.
We test our security regularly and keep an incident response plan. If a breach affects your personal data and creates a serious risk of harm, we will notify you and the relevant regulator without undue delay, in line with the Notifiable Data Breaches scheme and our licence obligations.
Contact Our Data Officer
Questions about this policy, a specific processing activity or a rights request go to our Data Protection Officer at [email protected]. We answer privacy emails within 30 days, usually much faster. If you contact us, include your registered email address so we can locate your account securely.
Frequently Asked Questions
Do you keep my ID documents forever?
No. We retain verification records for at least 5 years after your account closes, because our licence requires it, and then delete them.
Can I stop marketing emails and still play?
Yes. Withdraw consent through any email link or your account settings. Your account, bonuses and withdrawals are unaffected.
Do you share my data with game providers?
Only the technical minimum needed for the game to run on your account. Providers cannot use your data for their own marketing.
How do I get a copy of my data?
Email [email protected] with your registered address. We verify your identity and send the export within 30 days in a machine-readable format.