Privacy Policy

This Privacy Policy explains how Aussie Play, operated via the website aussieplay-au.com, collects, uses, discloses, and protects personal information of its users. It applies to all visitors of aussieplay-au.com, including prospective and existing players, and any person who interacts with our services, support channels, or marketing communications. By accessing or using aussieplay-au.com, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and replaces any earlier versions published on aussieplay-au.com.

Who We Are

OBSERVE: Users need to know the identity and contact details of the operator and the person responsible for data protection.

EXPAND: Based on available corporate information, Aussie Play is operated by Infinity Media Group LTD under a claimed Curacao licence, targeting Australian players as an offshore online casino.

REFLECT: We present a clear operator identity, jurisdictional context, and contact channels for privacy matters.

The website aussieplay-au.com (referred to as "Aussie Play", "we", "us", or "our") is operated by:

• Operator: Infinity Media Group LTD (private company limited by shares)
• Registered jurisdiction: Curacao
• Legal address / registered office: not publicly specified by the operator; the company is incorporated in Curacao under local company law.
• Gambling licence (claimed): Online gambling licence issued under Curacao eGaming framework, under master licence 365/JAZ or 8048/JAZ (operator statements vary). The exact sub-licence number and current validation status have not been independently verified and the validator seal may be missing or non-functional on some domains.

Important Australian regulatory note: According to the Australian Communications and Media Authority (ACMA), Aussie Play-related domains are listed as illegal offshore gambling services for the purposes of the Interactive Gambling Act 2001. Aussie Play is not licensed in Australia and is subject to ACMA blocking orders. As a result, Australian consumer protections and dispute mechanisms that apply to licensed domestic services generally do not apply to this offshore service.

Data Protection Contact

• Data Protection Contact / Responsible department: Data Protection Officer (DPO) / Privacy Team, Infinity Media Group LTD
• Email (primary for privacy matters): [email protected]
• Alternative general contact: [email protected]
• Website: https://aussieplay-au.com
• Telephone / postal address: currently not specified; any physical correspondence should first be arranged via email.

When you contact us for privacy-related matters, please mark your email subject line with "Privacy" or "Data Protection" so we can route your request efficiently.

What Personal Data We Collect

OBSERVE: Operation of an online casino and review environment requires identification, technical monitoring, payment processing, and behavioural tracking.

EXPAND: In addition to data you provide directly, we collect device data, logs, cookies, and betting/transaction histories to comply with KYC/AML duties, risk management, and service optimisation.

REFLECT: We categorise data to make your rights and our obligations transparent.

1. Identification and Contact Data

• Full name, date of birth, and gender (where provided).
• Residential address and country of residence.
• Email addresses (e.g., the address used for your Aussie Play account and for communications with [email protected] or [email protected]).
• Phone number(s), where you provide them during registration, verification, or support interactions.
• Verification documents (e.g., copies of ID documents, proof of address, payment instrument screenshots) submitted for KYC/AML checks, age verification, and fraud prevention.

2. Account and Usage Data

• Username, account ID, and profile settings.
• Login dates and times, session duration, and account status (active, self-excluded, closed).
• Communication records with our support, including emails and live-chat logs (if applicable).
• Preferences related to language, marketing consent, and game categories.

3. Technical and Log Data

• IP address, approximate geolocation inferred from IP, and ISP information.
• Device information, such as device type, operating system, browser type and version, screen resolution, and unique device identifiers where available.
• Server logs, including pages visited, timestamps, referral URLs, clickstream data, and error logs.
• Security and authentication data (e.g., failed login attempts, suspicious activity flags).

4. Payment and Financial Data

• Limited payment card details (typically cardholder name, masked card number, and expiry date), to the extent necessary and usually processed via PCI-DSS-compliant payment providers.
• E-wallet, prepaid card, cryptocurrency wallet, or bank account identifiers used for deposits and withdrawals.
• Transaction records: deposits, withdrawals (including any applicable weekly limits such as AUD 2,500 where relevant), bonuses credited, and chargeback or dispute history.
• Billing and financial verification information required by anti-money laundering (AML) and counter-terrorism financing (CTF) rules.

5. Behavioural and Gaming Data

• Game and betting history, including dates and times of play, game titles, stakes, wins/losses, and bonus use.
• Interaction patterns, such as clicks, navigation paths, time spent on specific pages, and response to offers.
• Risk and responsible gambling indicators (e.g., self-exclusion status, deposit limits, behavioural flags used to identify problematic play).

6. Cookies and Similar Technologies

• Cookies and local storage objects used to remember your session, preferences, and authentication state.
• Analytics tools (e.g., third-party analytics providers) using cookies or tracking pixels to collect aggregated usage statistics.
• Advertising and affiliate tracking identifiers (e.g., campaign tags, referral IDs, and click IDs) used to attribute traffic and measure marketing performance.

You can find more detail on cookies in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

OBSERVE: As an offshore operator processing personal data of users who may be located in various regions, we align with internationally recognised bases similar to GDPR, while operating from Curacao and targeting Australia.

EXPAND: Our processing relies primarily on contract necessity, legal obligations (including KYC/AML and gambling requirements under Curacao law and applicable international standards), legitimate interests, and, where required, your consent (notably for marketing and some cookies).

REFLECT: Identifying legal bases clarifies why we can lawfully process your data and how you can challenge or limit such processing.

1. Performance of a Contract

We process personal data where it is necessary to:

• Create and manage your Aussie Play account on aussieplay-au.com.
• Provide access to games, bonuses, promotions, and related services.
• Process deposits, withdrawals, bonuses, and loyalty rewards.
• Provide customer support and resolve operational issues affecting your account.

2. Compliance with Legal Obligations

We are subject to legal and regulatory obligations in Curacao and, where applicable, other supervisory regimes. Accordingly, we process personal data to:

• Perform know-your-customer (KYC), identity verification, age verification, and source-of-funds checks.
• Comply with AML/CTF legislation and record-keeping obligations (e.g., maintaining transactional and identification records for a minimum period).
• Respond to lawful requests, orders, or audits from competent authorities or regulators in our licensing jurisdiction (e.g., Curacao eGaming or master-licence holders).
• Maintain appropriate books, records, and audits required under corporate and tax laws in our jurisdiction of incorporation.

3. Legitimate Interests

We process data on the basis of our legitimate interests, balanced against your privacy rights, to:

• Ensure network and information security, prevent unauthorised access, and protect against cyber attacks.
• Detect, investigate, and prevent fraud, bonus abuse, money laundering, and other prohibited behaviour.
• Monitor gameplay and transaction patterns for risk management and responsible gambling controls.
• Improve our website, user interface, product offering, and overall user experience through analytics and A/B testing.
• Protect our legal rights, including defending or establishing legal claims or handling disputes with players, payment providers, or third parties.

Where we rely on legitimate interests, you may have the right to object (see "Your Rights" section).

4. Consent

We rely on your consent in specific circumstances, for example:

• Sending direct electronic marketing communications (such as promotional emails or SMS) where this is required by applicable law.
• Using non-essential cookies or similar technologies for advertising, advanced analytics, and personalisation, where consent is mandated.
• Processing particular categories of information that go beyond what is necessary for contractual or legal purposes.

You may withdraw your consent at any time with effect for the future, as explained in the "Your Rights" section. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

Purpose of Processing

OBSERVE: Data processing must be linked to concrete, explicit, and legitimate purposes.

EXPAND: As an offshore gambling operator and associated review environment, we process data for service provision, compliance, analytics, marketing, and security.

REFLECT: Below, we group purposes logically to enhance transparency.

1. Provision and Management of Services

• To create and administer user accounts on aussieplay-au.com.
• To provide access to games, bonuses, loyalty programmes, and other features.
• To process financial transactions, including deposits, withdrawals, and refunds, in line with any applicable limits and terms.
• To provide technical support and handle your enquiries and complaints.

2. Compliance, Risk Management, and Responsible Gambling

• To verify identity, age, and eligibility to use our services.
• To fulfil AML/CTF obligations and maintain records required by law.
• To monitor play and transaction patterns for signs of fraud, money laundering, bonus abuse, or other policy violations.
• To implement responsible gambling tools and procedures, including self-exclusion, deposit limits, and activity monitoring.

3. Website Operation and Service Improvement

• To operate, maintain, and secure aussieplay-au.com and related systems.
• To analyse performance metrics, identify errors, and optimise user experience.
• To perform statistical and aggregated analysis on user behaviour to inform product development and site improvements.

4. Marketing, Affiliates, and Personalisation

• To send promotional communications about our services, games, and special offers, subject to your marketing preferences and consent where required.
• To manage affiliate relationships, track referrals, and measure marketing performance.
• To personalise offers, bonuses, and recommendations based on your playing and transaction history, provided such profiling is compatible with your rights and expectations.

5. Legal Protection and Business Interests

• To enforce our Terms and Conditions and any other applicable policies.
• To prevent, detect, and respond to suspected illegal activities or breaches of contract.
• To manage business operations, including internal audits, financial reporting, and strategic planning.
• To establish, exercise, or defend against legal claims in disputes with players, partners, regulators, or other third parties.

Disclosure & Sharing

OBSERVE: Online gambling operations depend on external payment providers, technical vendors, and, in some cases, regulators and affiliates.

EXPAND: Data may be transferred to multiple categories of recipients for transaction processing, hosting, analytics, and regulatory compliance.

REFLECT: We outline who may receive your data, under what conditions, and with what safeguards.

1. Payment Service Providers and Financial Institutions

• Banks, card schemes, payment processors, e-wallet providers, prepaid card issuers, and cryptocurrency payment gateways used to handle deposits and withdrawals.
• These partners typically act as independent controllers or joint controllers and process limited subsets of your data (e.g., card details, name, transaction amount) in line with their own privacy policies and applicable financial regulations.

2. Technical and Operational Service Providers

• Hosting providers, content delivery networks (CDNs), and data centre operators.
• Game providers and platform providers supplying casino content and game servers.
• IT security providers, fraud detection tools, and identity verification services.
• Email delivery, CRM, and customer support tools used to manage communications and support tickets.

These entities generally act as processors on our behalf and are contractually bound to process personal data only according to our instructions, implement suitable security measures, and maintain confidentiality.

3. Group Companies and Affiliates

• Other brands or related entities operated by or associated with Infinity Media Group LTD (for example, operator group brands such as Red Dog and El Royale, where relevant), to the extent necessary for group-level risk management, compliance, and service improvement.
• Affiliate partners and marketing networks that refer you to aussieplay-au.com, for the purposes of tracking, compensation, and performance reporting.

4. Regulators, Law Enforcement, and Authorities

• Regulatory authorities in our licensing and corporate jurisdictions (e.g., Curacao eGaming or the respective master licence holder such as Gaming Services Provider N.V. for 365/JAZ or Antillephone N.V. for 8048/JAZ), where data disclosure is required by applicable regulations or licence conditions.
• Law enforcement agencies, courts, and other governmental bodies, where we are required to disclose information pursuant to a lawful request, court order, or legal process.

5. Professional Advisors and Business Transfers

• Lawyers, auditors, consultants, and other professional advisors engaged to protect our legal, financial, or operational interests, subject to confidentiality obligations.
• Potential acquirers, investors, or business partners in the event of a merger, restructuring, acquisition, or asset transfer, in which case personal data may be part of the transferred assets, subject to appropriate safeguards and continued protection.

6. Advertising Networks and Analytics Partners

• Third-party analytics providers to help us understand site usage and improve our services.
• Advertising networks and partners, but only where permitted by law and, where required, with your prior consent for relevant cookies and tracking technologies.

We do not sell your personal data as the term "sell" is understood in certain jurisdictions' consumer privacy laws. All sharing is limited to what is necessary for the purposes described above or as required by law.

International Transfers

OBSERVE: Data is collected from users accessing aussieplay-au.com (including from Australia and potentially other countries) and processed primarily in Curacao and other locations where our vendors operate.

EXPAND: This entails cross-border transfers to countries that may not provide the same level of data protection as your home jurisdiction.

REFLECT: We outline how we seek to mitigate risks and apply contractual safeguards modelled on widely recognised standards such as the EU Standard Contractual Clauses.

Your personal data may be transferred to and processed in:

• Curacao: Primary place of incorporation and licensing of Infinity Media Group LTD and core gambling operations.
• European Economic Area (EEA) and United Kingdom: Where certain hosting providers, payment processors, analytics vendors, or professional advisors are located.
• Other jurisdictions: Including (but not limited to) the United States or Asian-Pacific locations, depending on the geographic footprint of specific technology providers, CDNs, or support teams.

Where personal data is transferred from regions with formal data export restrictions (e.g., EEA/UK), we aim to implement one or more of the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent contractual frameworks.
• Data processing agreements imposing confidentiality, security, and limited-purpose obligations on recipients.
• Technical measures such as encryption in transit and at rest, access controls, and data minimisation.

Because we operate as an offshore gambling service, local privacy regimes may not recognise or enforce the same rights as under, for example, the EU General Data Protection Regulation (GDPR). Nevertheless, we endeavour to provide a level of protection that is broadly consistent with recognised international best practices, as described in this Privacy Policy.

Data Retention

OBSERVE: Data must not be retained longer than necessary, but gambling regulations (including AML/CTF) typically require multi-year retention for account and transaction data.

EXPAND: As an offshore casino targeting Australia, we balance regulatory record-keeping duties with privacy expectations by applying category-specific retention periods and clear deletion triggers.

REFLECT: We define retention periods and criteria to ensure predictability and compliance.

Retention Periods by Category

• Account and identification data: Typically retained for the duration of your active account and up to five (5) years after account closure, to comply with AML/CTF and gambling record-keeping requirements and to resolve any outstanding disputes.
• Transaction and payment data: Retained for at least five (5) years from the date of the last transaction, in line with applicable financial and AML standards, and potentially longer if required by law or for ongoing disputes.
• Gaming and behavioural data: Retained for as long as your account is active and generally up to five (5) years after closure, subject to aggregation or anonymisation for long-term statistical and risk modelling purposes.
• Marketing data: Retained for as long as you remain subscribed to marketing communications and for up to two (2) years after you withdraw consent or unsubscribe, to demonstrate compliance with your preferences and to avoid inadvertent re-subscription.
• Technical logs and security data: Retained for a period of six (6) months to two (2) years, depending on the nature of the log, to ensure security and investigate incidents, after which data may be deleted or irreversibly anonymised.

Deletion and Anonymisation Criteria

• Expiry of the applicable retention period as stated above.
• Fulfilment of the purposes for which the data was collected, where no legal obligation or legitimate interest requires further retention.
• Successful exercise of your rights to erasure or objection, where applicable and where no overriding legal grounds exist for continued retention.

After expiry of relevant retention periods, we will either securely delete your personal data or transform it into anonymised, non-personal data that can no longer be associated with you.

Your Rights

OBSERVE: Users accessing offshore services expect privacy rights similar to those enshrined in established frameworks such as the EU GDPR and regional privacy laws (including, for example, Mexican data protection regulations).

EXPAND: Although Infinity Media Group LTD is established in Curacao, we adopt a rights framework broadly aligned with GDPR core principles and comparable Latin-American regulations, such as Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), especially in respect of ARCO rights (Access, Rectification, Cancellation, and Opposition).

REFLECT: The following rights are made available, subject to jurisdictional limitations and our legal obligations.

1. Right of Access

• You may request confirmation as to whether we process your personal data and obtain a copy of such data, together with information about the purposes of processing, categories of data, recipients, retention periods, and applicable safeguards for international transfers.

2. Right to Rectification (Correction)

• You may request that we correct inaccurate personal data and complete incomplete data, including contact details and identification information, to ensure your account information is up to date and accurate.

3. Right to Erasure (Cancellation / "Right to be Forgotten")

• You may request deletion of your personal data where:
  • The data is no longer necessary for the purposes for which it was collected.
  • You withdraw consent (where consent is the only legal basis).
  • You successfully object to processing based on legitimate interests.
  • The data has been unlawfully processed.
• We may need to retain certain data despite your request where required by law, notably to meet AML/CTF obligations, regulatory requests, or to establish, exercise, or defend legal claims.

4. Right to Restriction of Processing

• You may request that we restrict processing of your data (i.e., store but not otherwise process it) while:
  • The accuracy of the data is contested.
  • The processing is unlawful but you oppose erasure.
  • We no longer need the data, but you require it for legal claims.
  • We assess your objection to processing based on our legitimate interests.

5. Right to Object to Processing

• You may object, on grounds relating to your particular situation, to our processing of your personal data based on legitimate interests, including any profiling for risk or personalisation, unless we demonstrate compelling legitimate grounds that override your interests or rights, or where processing is required for legal claims.
• You have an unconditional right to object at any time to processing of your personal data for direct marketing purposes, including profiling related to such marketing.

6. Right to Data Portability

• Where processing is based on your consent or on a contract and carried out by automated means, you may request that we provide you with personal data you have provided to us in a structured, commonly used, and machine-readable format, or that we transmit it to another controller where technically feasible.

7. Right to Withdraw Consent

• If we rely on your consent for certain processing activities (e.g., marketing communications or some cookie-based tracking), you may withdraw your consent at any time, without affecting the lawfulness of processing performed before your withdrawal.

8. Procedures, Timeframes, and Charges

• How to exercise your rights: Please submit your request by email to [email protected] or [email protected], clearly indicating:
  • Your full name and account ID (if applicable).
  • The right(s) you wish to exercise.
  • Any relevant details to help us identify your records.
• Verification: We may request additional information or documentation to verify your identity before acting on your request, in order to protect your account and personal data.
• Response timeframe: We aim to respond to your request within 30 days of receipt. If your request is complex or we receive numerous requests, we may extend this period by up to a further 30 days, in which case we will inform you of the extension and reasons.
• Charges: We will handle your request free of charge. However, we may charge a reasonable fee or refuse to act on manifestly unfounded or excessive requests, in accordance with applicable data protection principles.

Please note that because aussieplay-au.com is operated from Curacao and is not licensed in Australia, the enforceability of rights under EU GDPR, Mexican LFPDPPP, or other foreign laws may be limited in practice; nevertheless, we voluntarily endeavour to respect and respond to rights requests as outlined above.

Cookies & Tracking Technologies

OBSERVE: aussieplay-au.com uses cookies and related technologies to ensure service functionality, gather analytics, and support marketing/affiliate operations.

EXPAND: Cookies may be first-party or third-party, session-based or persistent, and used for functional, analytical, and advertising purposes.

REFLECT: Transparency about cookie types and management options allows you to make informed choices.

Types of Cookies We Use

• Strictly Necessary / Functional Cookies (usually session or short-term persistent):
  • Used to maintain your login session, store your language and region settings, and enable core functionalities such as secure navigation, game loading, and payment processing.
  • These cookies are essential for the operation of aussieplay-au.com and cannot be disabled through our systems, although you can configure your browser to block them (which may impair site functionality).
• Analytics and Performance Cookies (session and persistent):
  • Used to collect aggregated statistics on how visitors use aussieplay-au.com, such as which pages are visited most frequently, how long users stay on each page, and error or crash data.
  • These cookies help us improve site performance, usability, and content relevance.
• Advertising and Affiliate Cookies (usually third-party, persistent):
  • Used to track your interaction with our advertisements and affiliate links, attribute conversions to marketing campaigns, and avoid showing the same adverts repeatedly.
  • Some of these cookies may be placed by external advertising networks or affiliate platforms that have their own privacy policies.

Managing Cookies

• Browser settings: Most web browsers allow you to:
  • View which cookies are stored on your device.
  • Delete existing cookies.
  • Block or restrict all or certain types of cookies from being placed.
  Please refer to your browser's help section for detailed instructions.
• In-site settings (where available): We may offer an internal cookie or privacy settings panel on aussieplay-au.com to allow you to manage certain non-essential cookies, particularly analytics and advertising cookies, including the ability to opt in or opt out where required by law.
• Effect of disabling cookies: If you disable or delete cookies, some features of aussieplay-au.com (such as maintaining a logged-in session or remembering your preferences) may not function properly, and your overall experience may be affected.

Data Security

OBSERVE: Online gambling and financial transactions involve heightened security and fraud risks.

EXPAND: We must protect confidentiality, integrity, and availability of data through technical and organisational measures, following recognised practices (e.g., encryption, access controls, audits, staff training, incident response).

REFLECT: While no system is perfectly secure, we describe the safeguards we implement to reduce risk.

Technical Measures

• Encryption in transit: Data transmitted between your browser and aussieplay-au.com is protected by TLS (Transport Layer Security) version 1.2 or higher, aiming to prevent interception and tampering.
• Encryption at rest: Sensitive data, including certain account and transaction information, is stored using industry-standard encryption and hashing mechanisms, with keys managed securely and access restricted to authorised systems and staff.
• Access controls: User data is accessible only to authorised personnel on a "need-to-know" basis, enforced through role-based permissions, strong authentication, and access logging.
• Network and application security: We use firewalls, intrusion detection and prevention systems, anti-malware tools, and regular patching to mitigate known vulnerabilities and protect our infrastructure.

Organisational Measures

• Security policies and procedures: We maintain internal policies governing how personal data is handled, accessed, and shared, including requirements for confidentiality and secure disposal.
• Staff training: Employees and contractors with access to personal data receive training on data protection, information security, and responsible handling of player information.
• Vendor due diligence: We assess third-party service providers for their security posture, require appropriate contractual safeguards, and monitor their compliance where feasible.
• Incident response: We maintain procedures to detect, investigate, and respond to personal data breaches or security incidents. Where a breach is likely to result in a high risk to your rights and freedoms, we will seek to notify affected users and, where applicable, relevant authorities, taking into account our jurisdiction and applicable legal requirements.

While we reference international standards such as ISO/IEC 27001 and SOC 2 as benchmarks for good practice, Aussie Play and Infinity Media Group LTD do not currently claim full formal certification under these frameworks. Nonetheless, we strive to align our security controls with widely recognised industry standards as far as practicable for an offshore online casino operator.

Complaints & Contacts

OBSERVE: Users require clear channels to raise concerns or complaints about how their data is processed.

EXPAND: Our complaint mechanism must include internal escalation and, where applicable, guidance on external supervisory authorities, recognising that Aussie Play operates from Curacao and is not licensed in Australia.

REFLECT: We provide a structured pathway for handling privacy-related complaints.

How to Contact Us

• Primary email for privacy and complaints: [email protected]
• Alternative contact email: [email protected]
• Website: https://aussieplay-au.com
• Phone number / contact forms / postal address: currently not specified. Where a postal address is needed (for example, to send documents), we will provide it on request via the emails above.

Internal Complaint Procedure

1. Submit your complaint: Send an email to [email protected] or [email protected] with a clear description of your concern, your account ID (if any), and any supporting documentation.
2. Acknowledgement: We aim to acknowledge receipt of your complaint within 5 business days.
3. Investigation: Your complaint will be reviewed by our privacy and/or compliance team. We may contact you for further information if necessary.
4. Response: We aim to provide a substantive response within 30 days of receiving your complaint. In complex cases, this period may be extended, in which case we will inform you of the extension and reasons.
5. Further steps: If you are not satisfied with our response, you may request that the matter be escalated to higher management or our legal department, as appropriate.

External Supervisory Authorities and Regulatory Contacts

Because Infinity Media Group LTD is incorporated in Curacao and operates aussieplay-au.com as an offshore online casino, the primary regulatory frameworks are those applicable in Curacao and associated master licence structures. You may wish to seek independent legal advice to identify the most appropriate supervisory body in your jurisdiction.

• Curacao eGaming / Master Licence Holders: Complaints regarding licence compliance may, in principle, be addressed to the relevant Curacao eGaming authority or master licence holder (e.g., Gaming Services Provider N.V. for 365/JAZ or Antillephone N.V. for 8048/JAZ), although practical enforcement pathways can be limited.
• Australian Communications and Media Authority (ACMA): ACMA enforces the Interactive Gambling Act 2001 in relation to illegal offshore gambling services. While ACMA does not typically resolve individual consumer disputes about winnings or privacy issues, you may report concerns about illegal offshore gambling to:
  • Website: https://www.acma.gov.au
• EU and Mexican authorities (where applicable): If you are physically located in an EU Member State or Mexico, you may have the right under local data protection laws (e.g., GDPR or Mexican LFPDPPP enforced by the Mexican data protection authority INAI) to lodge a complaint with your local supervisory authority. However, please note that aussieplay-au.com is not established in these jurisdictions and enforcement of orders against an offshore Curacao operator may be practically constrained.

Updates

OBSERVE: Privacy practices and legal obligations evolve over time, particularly for online gambling and cross-border data transfers.

EXPAND: We must update this Privacy Policy periodically and ensure that users are made aware of material changes through appropriate communication channels.

REFLECT: We describe how we will notify you of updates, maintain version control, and give you options when significant changes affect you.

Policy Changes and Notification

• We may update this Privacy Policy from time to time to reflect:
  • Changes in our services, technologies, or operational practices.
  • Amendments to applicable laws or regulatory guidance.
  • Adjustments to our corporate structure, licences, or third-party partnerships.
• When we make material changes that significantly affect how we process your personal data or your rights, we will:
  • Notify you via email using the address associated with your Aussie Play account, where practical.
  • Display a prominent notice or banner on aussieplay-au.com.
  • Provide notice in your account dashboard or profile area, where available.

Advance Notice and User Options

• For significant changes that materially affect your rights or the lawful bases on which we process your data, we will seek to provide at least 30 days' advance notice before the changes take effect, unless a shorter period is required to comply with law or urgent security requirements.
• If you do not agree with the updated Privacy Policy, you may:
  • Adjust your privacy and marketing preferences as explained in this Policy.
  • Request closure of your account and, where applicable, exercise your rights to data access, deletion, or portability before the changes take effect.

Last updated: January 2026. Any future revisions will be accompanied by a short changelog summarising key modifications, for example:

• Updated international transfer safeguards.
• Revised data retention periods for certain log data.
• Clarified rights procedures and contact details.