Your Privacy at Casinoly Casino
This Privacy Policy explains what personal data we collect when you play at casinoly-aud.com, why we collect it, who sees it and how long we keep it. It applies to every registered player and visitor of ours from Australia.
Data We Collect From You
We collect only what we need to run your account, meet our licence obligations and keep you safe. Depending on how you use our site, that covers six broad categories.
- Identity data: your full name, date of birth, email address, phone number and residential address, provided by you at registration.
- Verification documents: a government-issued ID, proof of address and proof of payment method, submitted during KYC before your first withdrawal.
- Transaction data: deposits and withdrawals, amounts in AUD, payment method used and timestamps.
- Technical data: IP address, device type, browser, operating system and approximate location derived from your IP.
- Gameplay behaviour: games opened, bets placed, session duration, bonus usage and results, tied to your account ID.
- Marketing preferences: whether you opted in to our emails, SMS or push offers, and which channels you chose.
How We Use Your Data
Every use of your data maps back to a purpose listed here. If a new purpose arises, we tell you before we start.
- Creating and managing your account, including logins and profile updates.
- Verifying your identity under our KYC and anti-money-laundering duties before we release funds.
- Processing deposits and withdrawals through the method you selected, from PayID to Tether.
- Preventing fraud, bonus abuse and multi-accounting by comparing device, IP and payment signals.
- Monitoring gambling behaviour for signs of harm so we can offer deposit limits, session reminders or self-exclusion.
- Sending you promotional offers only where you consented, and honouring your opt-outs immediately.
- Meeting legal and regulatory obligations, including tax and licence reporting to the Curaçao authority.
The Legal Bases We Rely On
Contract. To open your account, process your play and pay out your winnings, we must handle the identity and transaction data you gave us. Without it, we cannot deliver the service you signed up for.
Legal obligation. Our Curaçao licence (8048/JAZ2020-13) requires us to verify players, monitor transactions and keep records for set periods. We process your KYC documents and transaction history because the law leaves us no choice.
Legitimate interest. Fraud prevention, site security and aggregate analytics on how our games perform all rest on our legitimate interest in running a safe, functioning casino. This never overrides your privacy where the risk to you outweighs our need.
Consent. Marketing messages and non-essential cookies run only on your explicit opt-in. You withdraw consent any time through your account settings or the unsubscribe link, and we stop processing from that moment.
How Long We Keep It
Retention follows the strictest applicable rule for each category. Nothing is held longer than the periods below.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years after your last transaction, per AML rules |
| Transaction and wagering records | At least 5 years, as our licence requires |
| Technical and IP logs | Up to 12 months for security and fraud review |
| Marketing preferences and history | Until you withdraw consent or 24 months after your last engagement |
| Self-exclusion records | For the full exclusion term plus 5 years |
When a period ends, we delete or irreversibly anonymise the data. Backups roll off on a fixed cycle, so full erasure from every system can take up to 90 days.
Who We Share It With
We never sell your data. Sharing happens only with processors and authorities who need it for a defined job, under contracts that bind them to the same standards we hold ourselves to.
Some recipients sit outside Australia or the EU. Where that happens, we rely on adequacy decisions, standard contractual clauses or equivalent safeguards, and we remain your single point of contact for any question about your data.
Your Rights Over Your Data
You control your data, and we answer every request within 30 days, free of charge. Contact us at [email protected] and we will confirm your identity before acting.
Reaching our DPO
Our Data Protection Officer handles privacy matters directly. Write to [email protected] with your account ID and the word "privacy" in the subject line, and we will route it straight to them.
Cookies and Tracking
We use session cookies to keep you logged in, security cookies to detect bots, and, with your consent, analytics and marketing cookies to personalise your experience. You accept, reject or change your choices through the cookie banner, and you can reset them any time from your browser settings or our dedicated Cookie Policy page, which lists every cookie by name and purpose.
Keeping Your Data Secure
All traffic between you and our site runs over TLS encryption. Stored data sits segmented by category, with role-based access controls, so a member of our support team sees your contact details but never your payment credentials.
If a breach affects your personal data, we notify the relevant regulator without undue delay and inform you directly where the risk to you is high, including clear steps on what to do next. This policy was last reviewed in 2026; check this page for updates, since material changes are always announced here first.
Frequently Asked Questions
Can I play at Casinoly without sharing my ID?
You can register and deposit with basic details, but our licence requires ID, proof of address and payment verification before your first withdrawal. Until then, we only ask for your name, date of birth and contact details.
How fast do you delete my data after I ask?
We action verified erasure requests within 30 days. Transaction and KYC records stay for 5 years after your last transaction because AML law requires it, after which they are deleted automatically.
Do you share my data with advertisers?
No. We never sell your personal data, and we only process marketing on the channels you consented to. Withdraw consent and your details leave our marketing systems within 72 hours.