Our Privacy Policy
This Policy explains what personal data we collect when you play at Joo Casino, why we collect it, how long we keep it and the rights you hold over it. It applies to every Australian player who registers an account on our website.
The Data We Collect
When you open an account, verify your identity, deposit or simply browse joocasino-aud.com, we collect only the data we need to run the casino lawfully. We group it into the categories below.
- Identity data: full name, date of birth, email address, phone number, residential address and country of residence.
- Verification documents: a government-issued ID, a recent proof of address and, where applicable, proof of your payment method (front and back of a card with middle digits covered, or a wallet screenshot).
- Transaction data: deposit and withdrawal amounts, timestamps, payment method identifiers, crypto wallet addresses and your AUD balance history.
- Technical data: IP address, device type, operating system, browser version, language setting and referral source.
- Gameplay behaviour: the games you open, bet sizes, session duration, win and loss records, bonus and tournament participation.
- Marketing preferences: your communication channel choices, promo opt-ins and consent records with the date and time you gave them.
How We Use Your Data
We process your data for specific purposes only. We never sell it, and we never use it for a purpose that is incompatible with the ones set out below.
- Creating and administering your player account, including login, settings and VIP club membership.
- Verifying your identity and age under our KYC obligations before your first withdrawal is paid.
- Processing deposits and withdrawals through PayID, cards, e-wallets and cryptocurrency.
- Preventing fraud, bonus abuse, multi-accounting, chargeback abuse and money laundering.
- Monitoring play for responsible-gambling indicators and enforcing deposit, loss and session limits you set.
- Sending you promotions and tournament invitations where you have consented, and measuring how our campaigns perform.
- Meeting legal, tax, regulatory and audit obligations that apply to our Curaçao licence.
Why the Law Allows It
Contract
We process identity, transaction and gameplay data because they are necessary to perform the contract you enter into when you register. Without them we cannot open your account, settle your bets or pay your winnings.
Legal obligation
Anti-money-laundering and KYC rules oblige us to verify who you are and to keep transaction records for at least five years. You cannot opt out of processing that the law requires, because refusing would prevent us from serving you at all.
Legitimate interest
Fraud prevention, site security and aggregated analytics rest on our legitimate interest in running a safe casino and protecting you and other players from abuse. We weigh this interest against your rights and keep the data involved to a minimum.
Consent
Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time from your account settings or by clicking the unsubscribe link, and withdrawal never affects the lawfulness of messages sent before.
How Long We Keep It
We retain each category of data only as long as its purpose requires. Regulatory rules fix some minimums; the rest is deleted or anonymised once we no longer need it.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then up to 5 years after closure |
| KYC verification documents | 5 years from verification, per AML requirements |
| Transaction and payment records | Minimum 5 years under financial regulations |
| Gameplay and betting history | 5 years for audit and dispute resolution |
| Technical and device data | Up to 13 months, then deleted or anonymised |
| Marketing consent and preferences | Until you withdraw consent or ask us to delete them |
Who We Share It With
We share your data only with processors and authorities that need it to deliver our service, and every processor is bound by a written data-processing contract. We list categories here rather than every company.
- Payment processors and e-wallet providers, so your deposits and withdrawals reach the right account.
- KYC and AML verification suppliers that confirm your ID document and screen against sanctions lists.
- The Curaçao regulator and other competent authorities, when law, a court order or an audit requires disclosure.
- Analytics and hosting providers that help us keep the site fast and stable, working on our instructions only.
- Professional advisers such as auditors and lawyers, bound by confidentiality.
- We never sell your personal data to advertisers or data brokers.
Your Rights Over Your Data
You control your data. Whatever the legal basis, you can ask us to show you what we hold, fix it, or in some cases delete it, and we answer within 30 days. Send requests from your registered email to [email protected] and include your account ID so we can verify you.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything that is inaccurate or out of date.
- Erasure: ask us to delete data we no longer have grounds to keep.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time via settings or the unsubscribe link.
- Complaint: you may lodge a complaint with your local data protection authority.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and your session secure, plus analytics and marketing cookies that load only with your consent. The banner you see on your first visit records your choice, and you can change it at any time in your browser settings. Full details of each cookie, its purpose and its lifespan sit on our dedicated Cookies Policy page, which is part of this document.
How We Protect Your Data
Your data travels over TLS encryption, and we store passwords only as salted hashes that nobody at Joo Casino can read. Access to production systems follows a strict least-privilege model: only trained staff who need it for support, payments or compliance can reach your records, and every access is logged. Verification documents are held in an encrypted, access-restricted repository.
If a breach happens
If a breach ever risks your rights, we notify the competent regulator within 72 hours of confirming it and tell you without undue delay what happened and what we are doing about it. You can reach our data protection officer at [email protected] for any question about this Policy or a data request.
Frequently asked questions
Does Joo Casino sell my personal data?
No. We share data only with the processors and authorities listed in this Policy, under written contracts, and never with advertisers or data brokers.
Why do you need my ID before my first withdrawal?
KYC rules tied to our Curaçao licence require us to verify your identity, age and payment method before we release funds. We keep the documents for 5 years after verification.
How do I stop marketing messages?
Withdraw consent any time from your account settings or the unsubscribe link in any message. We stop marketing immediately, though transactional and account emails continue.
How long do you keep my betting history?
Five years after closure, because audit and dispute rules require it. Technical and device data goes much earlier, within about 13 months.
Who do I contact about a data request?
Email [email protected] from your registered address with your account ID. We verify you and answer within 30 days.