Privacy Policy

Candy96, operating through candy96-australia.co, is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as applicable gambling regulations and, where relevant, the General Data Protection Regulation (GDPR) for users in the European Union.oaic.

We provide online gaming services targeted at users in Australia, and this policy applies to all visitors, registered users, and players interacting with our platform. By accessing or using our services, you consent to the practices described herein. This policy was last updated on April 2, 2026.stresstelijf.

1. Information We Collect

We collect personal information to provide our gaming services, ensure compliance with Australian laws, and enhance user experience. Personal information includes any data that identifies you or relates to you as an individual, such as your name, email address, date of birth, and IP address.

Types of information collected:

• Identity and Contact Data: Full name, date of birth, residential address, email address, phone number, government-issued ID details (e.g, driver's license or passport number) for verification purposes required under anti-money laundering laws. austrac.gov .
• Financial Data: Bank account details, credit/debit card information, payment method details, transaction history, and source of funds information to process deposits, withdrawals, and comply with AUSTRAC requirements. senetgroup .
• Gaming and Technical Data: Betting history, game preferences, session duration, IP address, device type, browser information, cookies, and location data (where permitted) to facilitate gameplay, prevent fraud, and optimize our platform. igsmonitor .
• Sensitive Information: Health data related to responsible gambling assessments, criminal records for compliance checks, or biometric data if used for verification. We only collect sensitive information with your explicit consent or as required by law. casinocanberra.com .
• Marketing and Communications Data: Preferences for promotions, survey responses, and interaction history with our emails or support.

We collect this information directly from you during registration, deposits, gameplay, or support interactions, and indirectly via cookies, analytics tools, and third-party services. Where possible, we offer anonymity or pseudonymity for non-essential interactions, per APP 2.

For users under 18 or engaging in responsible gambling tools, we collect additional data like self-exclusion preferences to promote safer play. We do not knowingly collect data from minors without parental.

2. How We Collect Information

Collection occurs through lawful and fair means, primarily when you provide it voluntarily. Methods include:

• Online forms for account creation, verification (KYC), and transactions.
• Automated tools like cookies, web beacons, and device fingerprinting to track usage.
• Third-party integrations for payments (e.g, bank APIs), identity checks, and affiliates.
• Public sources or regulators for compliance (e.g, AUSTRAC reporting). austrac.gov .

We notify you at the point of collection about the purpose, per APP 5, via on-screen notices or our collection statements. Unsolicited information received (e.g, via email) is assessed under APP 4; if irrelevant, it is destroyed securely.austrac.gov.

For EU users, we comply with GDPR Article 13/14 requirements for transparent collection notices. We minimize data collection to what is reasonably necessary (data minimization principle).

3. Purpose of Collection and Use

We use your information only for legitimate purposes disclosed at collection, in line with APP 6. Primary purposes:

• Account management, identity verification, and service provision.
• Processing payments, refunds, and financial transactions.
• Fraud prevention, security monitoring, and anti-money laundering compliance (e.g, AUSTRAC ACIP). amlwatcher .
• Personalizing gameplay, promotions, and recommendations (with opt-out).
• Responsible gambling monitoring, self-exclusion, and harm minimization.
• Customer support, dispute resolution, and legal compliance.
• Analytics, site improvement, and aggregated reporting (anonymized). australiabestonlinecasino.co .

We do not use data for purposes incompatible with collection without consent. Automated decision-making (e.g, bonus eligibility, risk scoring) is used transparently; you have rights to human review per upcoming Privacy Act reforms effective 2026.

Under GDPR, processing is based on consent, contract performance, legal obligations, or legitimate.

4. Disclosure of Information

We disclose information only as necessary and permitted under APP 6. Recipients include:

• Service Providers: Payment processors, KYC/AML providers, hosting services, analytics (e.g, Google Analytics), all bound by confidentiality.
• Regulators: AUSTRAC, OAIC, ACMA, state gambling authorities for compliance.
• Law Enforcement: In response to legal requests or to protect rights/safety.
• Affiliates and Business Transfers: In mergers/acquisitions.
• Marketing Partners: Only with consent for direct marketing. bungoma .

No sale of data occurs. For direct marketing (APP 7), we provide clear opt-out options in every communication.

5. Cross-Border Disclosure

If data is disclosed overseas (e.g, to international payment processors or cloud servers in the US/EU), we ensure equivalent protection per APP 8 via contracts including GDPR Standard Contractual Clauses where applicable. Locations include the United States and European Union. You consent to this by using our services; we remain accountable.oaic.

6. Cookies and Tracking Technologies

We use cookies for functionality, analytics, and advertising. Essential cookies cannot be rejected; others require consent via cookie banner. You can manage preferences in settings. Third-party cookies (e.g, for ads) comply with APPs and GDPR ePrivacy rules.

7. Data Security

Per APP 11, we implement reasonable security measures: encryption (TLS/SSL), firewalls, access controls, regular audits, and employee training. Despite efforts, no system is impenetrable; we cannot guarantee absolute.

Data is retained only as long as needed: 7 years for financial/compliance (legal requirement), shorter for others. Upon expiry, it is securely deleted or de-identified.au47.

8. Data Breaches

Under the Notifiable Data Breaches scheme (Privacy Act Part IIIC), eligible breaches causing serious harm are notified to you and OAIC promptly. We assess all incidents via our breach response plan.

9. Your Rights and Choices

Aligned with APPs 12-13 and GDPR Chapters III:

• Access: Request your data (free, within 30 days).
• Correction: Update inaccurate info.
• Deletion/Erasure: Subject to legal retention.
• Objection/Restriction: To processing/marketing.
• Portability: Receive data in structured format.
• Withdraw Consent: Where applicable.
• Opt-Out: Marketing, cookies.

Contact us to exercise rights. Complaints go to us first, then OAIC (oaic.gov.au) or GDPR supervisory authority.

Anonymity options available where feasible (APP 2).

10. Children's Privacy

Our services are for 18+. We do not target children. If data of a child is collected inadvertently, it is.

11. Changes to This Policy

We may update this policy; material changes posted here with notice. Continued use constitutes.

12. Contact Us

Questions? Email [email protected]. For privacy issues, [email protected].

We respond within 30 days per APPs.

,652).