What we hold

• Who you are. Name, date of birth, residential address and the documents used to confirm them.
• How to reach you. Email address and mobile number.
• Money. Payment details, deposits, payouts and balance history.
• Betting. Wagers, markets, stakes, outcomes and general account activity.
• Technical. IP address, device and browser details, and location data sufficient to establish you are in Australia.
• Contact history. Correspondence with support, including any dispute record.

Why

A large part of it we cannot lawfully operate without: identification and transaction monitoring under the AML/CTF Act, age checks, the location verification the Interactive Gambling Act requires, and the reporting that comes with a Northern Territory licence. The remainder runs the account, settling wagers, releasing payouts, answering questions, and producing the activity statements we are obliged to issue.

Who else sees it

• Identity verification providers, purely to establish who you are.
• Banks and payment processors, to move money you have asked us to move.
• The Northern Territory Racing Commission and other regulators, on request.
• AUSTRAC, where a reporting duty arises.
• Sport controlling bodies, where an integrity matter requires referral.
• BetStop, to check and give effect to self-exclusion.
• Our technology and support suppliers, contractually bound and only as far as the service needs.

We do not sell personal information, we do not pass it to advertisers or data brokers, and we build no profiles for anybody else’s marketing.

Marketing

We run no inducement advertising whatsoever. Operational messages, statements, security alerts, changes to this agreement, are not marketing and continue while the account is open. Everything optional can be switched off in one action, and switches itself off permanently the moment you take a break, cut a limit, close the account or join BetStop.

Retention

Seven years past account closure, which is what our AML and licensing duties require. Self-exclusion records may be held longer, for as long as giving effect to the exclusion demands.

What you can ask for

You may ask what we hold, request a copy, and have inaccuracies corrected. We respond within 30 days. Deletion requests are honoured except where law compels retention, which covers most of an account record for seven years. Start any request through our contact page.

Security and complaints

Information is encrypted in transit and at rest and access is limited to staff who need it. Where an eligible data breach occurs we will notify you and the Office of the Australian Information Commissioner as the Privacy Act requires. Unhappy with our handling? Raise it with us first; the OAIC can review it afterwards.