Privacy Policy

Information we may collect

Candy Casino handles information that is needed to provide an online casino service, maintain account security and meet applicable legal and operational requirements. The information collected depends on how you use the website and the services available to you. Some information is provided directly by you, while other information may be created or collected automatically when you use the website.

Account and contact details

When you register or update an account, the site may handle details such as your name, date of birth, residential information, contact details, login information and account preferences. We may also keep records of messages, requests and other communications you send to customer support. These details help operate your account, respond to questions, provide important service notices and help confirm that account activity relates to the correct person.

Verification and security information

To support identity checks, age checks, account protection and anti-fraud processes, the site may request verification information and documents. This can include information used to confirm your identity or address, together with records of checks carried out on an account. The information requested will depend on the circumstances and on the checks needed for safe and lawful operation of the service.

Payment and transaction records

The site may handle information about deposits, withdrawals, wagers, winnings, account balances, payment activity and related transactions. Payment providers may process payment details on behalf of the service. Transaction records help complete requests, investigate unusual activity, resolve disputes, maintain accurate account records and meet financial, security and legal obligations.

Device, usage and cookie data

When you visit the website, technical information may be collected from your device or browser. This may include an internet protocol address, browser type, operating system, device identifiers, pages viewed, approximate location, access times, referral information and information about how you use the website. We may also use cookies and similar technologies to remember settings, support essential functions, understand website performance and help protect the service.

How we use and share information

Personal information is used only for purposes connected with providing, securing and improving the service, supporting players and meeting applicable obligations. The purposes may include the following:

• Creating, administering and maintaining your account.
• Processing deposits, withdrawals and other account transactions.
• Carrying out identity, age, verification, security and anti-fraud checks.
• Providing customer support and responding to questions, complaints and requests.
• Sending essential account, security, service and operational communications.
• Sending marketing communications where permitted and where you have provided consent or otherwise agreed to receive them.
• Monitoring activity to detect misuse, attempted fraud, money laundering risks, account takeovers and other suspicious behaviour.
• Understanding website performance and improving features, content and the user experience.
• Keeping records and taking steps required for legal, regulatory, tax, accounting or dispute-management purposes.

Information may be shared where reasonably necessary with service providers that help operate the website and its functions. Depending on the service involved, these providers may support payment processing, identity and verification checks, fraud prevention, technology, hosting, customer support, communications, analytics or security. They should receive information relevant to the service they provide and are expected to handle it in a manner that supports confidentiality and security.

Information may also be disclosed where required or permitted to protect players, the website, service providers or other people; to investigate suspected unlawful or harmful activity; to enforce applicable terms; to respond to a valid legal request; or to deal with a business, technical or operational change. We aim to limit disclosures to information that is relevant to the purpose for which it is shared.

If you choose not to provide information that is necessary for account creation, verification, payment processing or security checks, some services may not be available. If information is inaccurate or incomplete, this may affect the ability to process an account request or provide support.

Cookies, security and data retention

Cookies

Cookies are small files or similar technologies placed on your device by a website. Some cookies are needed for core functions, such as keeping an account session active, remembering choices, supporting security and helping pages work correctly. Other cookies may help understand website usage, measure performance or support relevant communications.

You can manage or remove cookies through your browser settings. You may also be able to block certain types of cookies. If you disable cookies, parts of the website may not work as intended, and some account or security functions may be limited.

Security

Reasonable technical, organisational and administrative measures may be used to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures can include access controls, security monitoring, authentication processes and the use of appropriate systems for handling sensitive information. No website, device or method of transmission can be guaranteed to be completely secure, so players should also protect their login details and avoid sharing passwords or verification codes.

Retention

Personal information is kept for as long as it is reasonably needed for the purposes described in this policy, including account administration, security, dispute handling and service improvement. Some records must be kept for a period required by law even after an account is closed. The length of time information is retained can depend on the type of record, the reason it was collected and any continuing legal, security or operational need.

When information is no longer required, reasonable steps may be taken to securely delete it, anonymise it or otherwise remove it from active use. Information may remain in secure backups for a limited period while normal backup and security processes operate.

Your privacy rights and how to contact us

Depending on the circumstances and applicable privacy requirements, you may have rights relating to the personal information held about you. These rights are subject to reasonable identity checks and may have lawful limitations, including where information must be retained or where providing it could affect the rights, safety or security of another person.

1. Access your personal information and receive an explanation of how it is being used.
2. Ask for inaccurate, incomplete or out-of-date information to be corrected.
3. Ask for deletion of your personal information where it is no longer needed or where deletion is otherwise appropriate.
4. Withdraw consent to marketing communications at any time. You can use an unsubscribe option in a marketing message where available, or contact us directly to update your preferences.
5. Ask questions about the handling of your information or raise a privacy concern.

To exercise your rights, request access, ask for correction or deletion, or withdraw consent to marketing, contact support@candycasino-au.win. Please describe your request clearly and provide enough information for us to identify the relevant account or records. We may ask for reasonable information to verify your identity before completing a request. This helps prevent personal information from being disclosed to the wrong person.

Requests will be considered and handled within a reasonable period, subject to applicable requirements, operational needs and any permitted exceptions. If a request cannot be completed in full, we will generally explain the reason, unless doing so would not be appropriate. Closing an account does not automatically remove every record, because some information may need to be retained for a period required by law or for legitimate security, dispute or record-keeping purposes.

This policy may be updated from time to time to reflect changes to the website, the services provided, technology, privacy practices or applicable requirements. The latest version published on the website will apply to information handled under the policy. Players should review this page occasionally, particularly before submitting new information or changing their account preferences.