Privacy Policy

About this Privacy Policy

We respect the privacy of players in Australia and aim to handle personal information in a clear, careful and responsible way. This policy describes the main types of information a casino website typically handles, the reasons for handling it, and the choices available to you. It should be read together with any other notices or terms displayed on the website.

By using the website or opening an account, you acknowledge that information may be collected and used for the purposes described in this policy. Where we ask for consent, you can usually change your mind later, subject to any legal or operational requirements that apply. Some services may not be available if information that is necessary to provide them is not supplied.

This policy applies to information collected through the website, account areas, support interactions and related online services. It does not necessarily apply to websites or services operated by third parties, even where a link to them is provided. Those third parties should be reviewed separately for information about their own privacy practices.

Information we may handle

The information handled by an online casino can vary depending on how you use the website, what services you request and what checks are required. We aim to collect information that is reasonably relevant to operating the account, providing support, meeting legal obligations and protecting the website and its users.

Account and identity details

This may include your name, date of birth, residential or contact details, username, account preferences and information used to communicate with you. We may also record details about your account status, responsible gaming settings, requests and correspondence with support.

Verification information

To verify an account and help prevent fraud, we may handle identity documents, proof of address, information about the source or ownership of funds, and other information needed for customer checks. Documents should only be submitted through the approved account or support channels shown on the website.

Payment and transaction records

We may handle deposit, withdrawal and transaction information, including payment method details, transaction references, amounts, account history and information received from payment providers. Full payment card details may be processed by an external payment provider rather than stored directly by the casino website, depending on the payment method used.

Technical, device and usage information

When you visit or use the website, technical information may be recorded. This can include your IP address, browser type, device type, operating system, language settings, approximate location, access times, pages viewed, links followed, error information and interaction with website features. We may also record information about how an account or service is used.

Information from other sources

We may receive information from payment providers, identity and verification services, fraud prevention providers, analytics providers, communication platforms or other service providers that help operate the website. We may also receive information from public or lawful sources where this is relevant to account security, compliance or fraud prevention.

How information is used and shared

Personal information is handled for specific business, service and compliance purposes. These purposes may include:

• Creating, maintaining and administering your account.
• Providing access to games, account features, promotions and other requested services.
• Processing deposits, withdrawals and other account transactions.
• Completing identity, age, customer and payment verification checks.
• Detecting, investigating and preventing fraud, money laundering, account misuse, collusion, cheating and other prohibited activity.
• Managing responsible gaming requests, account restrictions and safety measures.
• Providing customer support, responding to questions and resolving complaints.
• Sending service messages about your account, transactions, security, changes to the website or this policy.
• Understanding website use, testing features, improving performance and developing the user experience.
• Sending marketing communications where permitted and where you have provided the necessary permission or there is another lawful basis to do so.
• Meeting legal, regulatory, tax, accounting, court, law enforcement and other official requirements.
• Protecting the rights, property, safety and security of players, the website, service providers and other persons.

Information may be shared with carefully selected suppliers and professional providers that help with hosting, technology, customer support, payments, identity checks, fraud prevention, analytics, communications, security and legal or accounting services. These providers should only receive information needed for their role and are expected to handle it securely and appropriately.

Information may also be disclosed where necessary to comply with a lawful request, court order or official process; to investigate suspected unlawful activity; to protect someone from harm; or to establish, exercise or defend legal rights. If the website or its operations are reorganised, transferred or combined with another service, information may be shared as reasonably necessary for that process, subject to appropriate privacy protections.

Some providers may handle information in countries outside Australia. Where this occurs, reasonable steps should be taken to use suitable safeguards and to ensure that information is handled consistently with the purposes described in this policy. Information may also be processed through international technology, payment or support systems.

Cookies, security and retention

Cookies and similar technologies

The website may use cookies, pixels, logs and similar technologies. These technologies can help keep you signed in, remember preferences, support security, understand website traffic, measure performance and provide more relevant communications or content. Some cookies are essential for website functions, while others help with analytics or optional features.

You can manage, restrict or delete cookies through the settings in your browser or device. If you block essential cookies, some account or website functions may not work properly. Browser settings may also allow you to receive a notice before a cookie is placed or to remove cookies already stored on your device.

Security measures

Reasonable technical, administrative and organisational measures may be used to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These measures can include access controls, authentication procedures, secure transmission methods, monitoring and staff or provider confidentiality requirements.

No online service can guarantee complete security. You should use a strong, unique password, keep login information confidential, use up-to-date software and notify support promptly if you suspect that your account or personal information has been compromised. We will not normally ask you to provide your full password through an unsolicited message.

Keeping information

Information is generally kept only for as long as it is needed for the purpose for which it was collected, to manage an ongoing account or relationship, to resolve disputes, to enforce terms, or to protect the website and its users. Some records must be kept for a period required by law even after an account is closed or a deletion request is made.

When information is no longer required, it may be securely deleted, anonymised or otherwise disposed of. Backup copies and records held by service providers may take additional time to be removed or may be retained where necessary for security, legal or operational reasons.

Your privacy rights and choices

Depending on the circumstances and applicable privacy requirements, you may have rights relating to the personal information we hold about you. These rights are subject to identity checks, legal exceptions, the rights of other people and any records that must be retained.

• Access: ask for information about the personal information held about you and, where appropriate, a copy of that information.
• Correction: ask for inaccurate, incomplete or out-of-date personal information to be corrected or updated.
• Deletion: ask for your personal information to be deleted where it is no longer required or where deletion is otherwise available. This right may be limited where records must be retained for legal, security, fraud prevention or dispute-related reasons.
• Marketing consent: withdraw your consent to marketing communications at any time. You can use an unsubscribe option in a marketing message where available or contact support to request that marketing messages stop.
• Restriction or objection: in some situations, ask for certain processing to be restricted or object to a particular use of your information.
• Complaint: raise a concern with support and, where appropriate, contact the relevant privacy or complaints authority in Australia.

How to make a request

To exercise your rights, ask a privacy question, request access, request correction or deletion, or withdraw consent to marketing, contact support@heapsofwinscasino.site. Please explain your request clearly and include enough information for us to identify the relevant account. Do not send unnecessary identity documents or payment information unless requested through a secure process.

For your protection, we may need to verify your identity before responding to a request. This helps prevent information from being disclosed to the wrong person. We aim to respond within a reasonable time, although complex requests, security checks, legal restrictions or information held by external providers may affect the response process.

If you withdraw marketing consent, this will not affect service messages that are necessary for account administration, security, transactions or legal notices. You may still receive messages of that type while your account remains active or while the information is needed for the relevant purpose.

Updates to this policy

This Privacy Policy may be updated when our services, technology, business processes or privacy requirements change. The updated version will be made available on the website and will apply from its stated effective date. You should review this page occasionally so that you remain informed about how information is handled.