Your Privacy at Castle Casino

This Privacy Policy explains what personal information we collect when you play at Castle Casino, why we collect it, who we share it with and the rights you hold over it. It applies to every player visiting castlecasino-aud.com.

Data We Collect

We only collect personal information we need to run your account, meet our legal obligations and keep the site safe. The categories below cover everything we hold on you.

You give most of this information to us directly when you register, deposit or claim a bonus. Some of it, such as device and gameplay data, we collect automatically as you use the site.

• Identity data: full name, date of birth, email address, phone number and residential address.
• Verification documents: passport or driver licence, proof of address and payment method confirmation required before your first withdrawal.
• Transaction data: deposits, withdrawals, wagering history and bonus activity across AUD, USD, EUR, BTC, ETH and other supported currencies.
• Device and connection data: IP address, browser type, operating system and device identifiers.
• Gameplay behaviour: games played, session times, bet sizes and tournament entries.
• Marketing preferences: which offers you opt in to and how you prefer to hear from us.

How We Use Your Data

We use each category of data for a defined purpose and never for anything unrelated to running a fair, compliant casino. If we ever want to use your data for a new purpose, we ask you first.

Every use traces back to one of these operations:

• Creating and maintaining your player account.
• Verifying your identity under our KYC checks before we release a withdrawal.
• Processing deposits and withdrawals through PayID, cards, e-wallets or crypto.
• Preventing fraud, bonus abuse, duplicate accounts and money laundering.
• Monitoring play for responsible gambling signals and applying deposit, loss or session limits you set.
• Sending you marketing with your consent, including cashback and reload offers.
• Meeting legal and regulatory obligations owed to our licensing authority.

Our Legal Bases

Contract

We process your identity, account and transaction data to perform the contract you enter when you register. Without this data we cannot open an account, hold your balance or pay out winnings.

Legal obligation

Anti money laundering and gaming licence rules oblige us to verify who you are and to keep records of your transactions. We cannot offer you play at Castle Casino without meeting these duties.

Legitimate interest

Fraud prevention, security monitoring and aggregate analytics on how our 4,000-plus games perform all rest on our legitimate interest in operating a safe site. This never overrides your privacy rights.

Consent

Marketing emails, SMS and personalised offers run only on your consent. You can withdraw it at any time through your account settings or the unsubscribe link in every message we send.

How Long We Keep It

We do not hold your data indefinitely. Each category has its own retention clock, set either by regulation or by the shortest period that still serves the purpose. When a period ends, we delete or anonymise the data.

Withdrawals cannot be processed while identity records are pending, so keep your verification documents current to avoid delays.

Who We Share With

We never sell your personal data. We share it only with parties who perform a service we cannot do ourselves, and each one is bound by contract to use it solely for that service.

Categories we share with:

• Payment processors handling PayID, Visa, Mastercard, Skrill, MiFinity, Jeton and crypto transactions.
• KYC and AML screening providers confirming your documents and screening transactions.
• Our licensing authority and regulators, on lawful request.
• Analytics and hosting providers running site performance and security tooling.
• Professional advisers such as auditors and lawyers, where strictly needed.
• Law enforcement, only where a valid legal demand requires disclosure.

Your Privacy Rights

Australian privacy law gives you enforceable control over your personal information, and we honour every one of these rights within 30 days of a verified request. Contact our Data Protection Officer at [email protected] to exercise any of them.

You also have the right to complain to the Office of the Australian Information Commissioner if you believe we mishandled your data. We would rather fix it first, so please raise it with us directly and we will respond in writing.

• Access: get a copy of the personal data we hold on you.
• Rectification: correct anything inaccurate or out of date.
• Erasure: request deletion where no legal retention duty applies.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: opt out of marketing at any time, effective immediately.

Cookies and Tracking

Our site uses cookies to keep you logged in, remember your preferences and measure how pages perform. Session cookies are essential; analytics and marketing cookies load only after you accept them in the consent banner.

Full detail on every cookie we set, its lifespan and how to block it sits in our separate Cookies Policy page, which forms part of this document.

How We Protect Data

All traffic between your device and our servers runs over TLS encryption, and stored payment and identity records are encrypted at rest. Access to personal data is limited to staff who need it for their role, with every access logged and reviewed.

We test our defences regularly and keep an incident response plan on standby. If a breach ever affects your personal information, we notify the relevant regulator and, where the law requires, you directly and without undue delay.

If you need support with gambling itself, Gambling Help Online is free on 1800 858 858, 24 hours a day. Our support team at [email protected] can also activate self-exclusion or tighter limits on your account the same day you ask.

Castle Casino FAQ

Does Castle Casino sell my personal data?

No. We share data only with service providers such as payment processors, KYC screeners and regulators, each bound by contract to use it for that purpose alone.

How do I stop marketing emails?

Use the unsubscribe link in any message, adjust preferences in your account settings, or email [email protected]. Withdrawal of consent takes effect immediately.

Why do you need my ID before a withdrawal?

Our licence requires KYC verification of identity, address and payment method before we release funds. It protects your balance and blocks fraud on your account.

Can I get a copy of all data you hold on me?

Yes. Send an access request to [email protected] and we will provide a structured copy of your personal data within 30 days.

How long is my transaction history kept?

Seven years, because anti money laundering rules require it. After that period the records are securely deleted or anonymised.