Data And Privacy Reference For Pocket Pokies Players In Australia
A privacy page earns its place by answering four questions per item: what is held, why, for how long, and which step changes it. This one is laid out as a reference table rather than an essay, so an answer can be found without reading the whole document. Where information is genuinely unavailable, the entry says so.
Australian law supplies the framework. The Privacy Act 1988 (Cth) applies, together with the Australian Privacy Principles scheduled to it, which set the rules for gathering, using, disclosing, exporting, securing, accessing and correcting personal information. No line below narrows a right the Act grants.
Access, correction, deletion, opt-out and complaints about this website: [email protected].
Anything tied to a live account, a payment or a verification document belongs with the operator, through its own live chat or support address.
Start here: which party holds the record you care about
| This website | The Pocket Pokies platform | |
|---|---|---|
| What it does | Explains Pocket Pokies Casino to readers based in Australia | Runs accounts, games, bonuses and money movement |
| What it holds about you | Browser traces, your cookie choice, any email you send | Identity, verification documents, payments, gameplay |
| What it cannot do | Open, freeze or close an account; view a balance or a document | Nothing on this list is delegated to us |
| Where requests go | [email protected] | Operator live chat, or the support address in its own footer |
Everything described here about the operator's handling of data reflects what the operator publishes about its process, so you know the shape of it before registering. One item is missing at source: no dedicated privacy officer or data protection contact is published by the operator, only a general support channel. Ask support for a named contact if you want one, and keep the reply.
The full collection table
| Category | What it covers | Why it is collected | Legal basis | How long it survives |
|---|---|---|---|---|
| Identity | Given name, surname, country, confirmation of being 18 or over | Opening the account and proving eligibility | Contract, and legal obligation for age | Minimum 7 years after the account closes |
| Verification | Driver licence or passport, uploaded through a link the operator emails after sign-up | Anti-money-laundering identity checks before money moves | Legal obligation | Minimum 7 years after closure |
| Contact | Email address, plus anything written into a message | Verification links, account notices, replies | Contract | Same as the matter, plus 12 months for site correspondence |
| Financial | Chosen method, deposits, withdrawals, transaction history | Moving money and satisfying reporting duties | Contract plus legal obligation | Minimum 7 years from each transaction |
| Gameplay | Bets, session length, bonus progress, limits you set | Serving games, enforcing the limits you chose, validating bonus conditions | Contract | With the account record |
| Technical | IP address, device model, operating system, browser, connection | Fraud and duplicate-account checks, correct page rendering | Legitimate interests | 12 months for this site's logs |
| Site usage | Pages opened, dwell time, referring site, outbound clicks | Working out which pages help and which fail | Legitimate interests | 12 months, then reduced to anonymous counts |
| Preferences | Cookie choice, marketing subscription status | Honouring choices already made | Consent | Until changed, plus a record of when it was given and withdrawn |
| Self-exclusion | The fact and duration of a break you have taken | Making an exclusion survive an account closure | Legal and protective obligation | Beyond account closure |
Two details are worth knowing before you register. Documents are not requested on the sign-up form itself; an email follows registration with the upload link. And card numbers, wallet passwords and crypto keys never reach the casino, because the payment provider holds those and returns only the result.
Seven years is not an internal convention. It is the statutory floor Australia sets for identification and transaction records, and it overrides any deletion request touching them.
Mandatory versus optional
Only one item on the table is genuinely yours to refuse.
Optional: marketing. Promotional mail, campaign notices and tailored offers exist on consent alone. Decline at sign-up or withdraw later and nothing changes about your balance, your bonus progress or your ability to withdraw. Service messages continue regardless, because a verification request or a security alert belongs to running the account, not to selling.
Mandatory: identity, age, documents and transaction records. An operator waiving these would be breaching anti-money-laundering rules rather than granting a favour. There is no version of a real-money account without them.
Disclosure: who else receives it
Nothing here is sold to advertisers, rented to brokers or exchanged with other sites. Each recipient below gets only the fields its task consumes.
- Payment providers and banks, so deposits and payouts settle.
- Document checking services, which assess an uploaded licence or passport and return a verdict.
- Game studios, since their titles execute on studio infrastructure and see round data as a result.
- Suppliers of hosting, traffic filtering and measurement, working to instruction and barred from using anything for themselves.
- Regulators, police and courts, where a lawful demand or mandatory report allows no discretion.
- Lawyers and auditors under confidentiality, if a dispute or audit requires it.
Data that crosses a border
APP 8 governs disclosure offshore. Responsibility stays with the Australian entity for whatever it passes to a recipient abroad, which means taking reasonable steps to secure APP-equivalent treatment there.
For this website: measurement, traffic filtering and hosting can sit on servers beyond Australia, under contracts demanding equivalent treatment, and what travels is technical rather than identifying.
For the platform: unknown, and stated as unknown. Storage location, processor identities and server jurisdictions are not published by the operator. Naming a country here would be a guess dressed as a fact. If that answer matters to your decision, put the question to support in writing before uploading a document, and read a vague reply as an answer of its own.
What a deletion request actually achieves
Removed on request: preference records, device-level analytics, marketing lists, and correspondence this website holds.
Retained regardless: self-exclusion entries, identity and transaction records inside the seven-year window, and whatever an open investigation or dispute needs. The exclusion entry is deliberate: one that dissolved when an account closed would protect nobody.
Once a retention period ends, whatever remains is deleted or stripped of identifying detail rather than held indefinitely.
Rights, and the action that exercises each
| Right | What you get | The step to take |
|---|---|---|
| Access | A copy of what is held about you | Email [email protected] from your usual address; acknowledgement inside five business days, substantive answer inside thirty |
| Correction | A wrong field replaced with the right one | Name the field and the correct value. Casino-side details are edited in the account profile or through support; a legal name change triggers a new document check |
| Deletion | Removal of everything outside a legal retention obligation | Ask in writing at the same address, then see the section above for what stays |
| Marketing opt-out | An end to promotional messages | Use the unsubscribe link, or write to the privacy address. Applies to future sends, so allow for queued mail |
| Complaint | A written answer, and an escalation route if it fails | Write to [email protected] describing the issue and the outcome you want. If that answer does not resolve it, the Office of the Australian Information Commissioner takes privacy complaints under the Act |
The OAIC neither partners with nor supervises this website or the casino. It is simply the independent authority you can turn to once our own answer has failed to settle things.
Cookies
Three categories operate on this website.
- Strictly necessary. They hold your consent decision and keep navigation working. Declining them is not possible without the pages failing, and they carry no advertising identifier.
- Measurement. They tally page views and reading depth. Declinable, with no visible consequence.
- Campaign. They attribute arrivals to advertising. Declinable as well, and dormant until accepted.
Neither declinable category fires before consent is given. Clearing site data resets the decision at your next visit, and the cookie controls inside your browser override anything configured here.
Security measures
Transport to this website is encrypted by HTTPS. Enquiry mail sits in accounts opened only by staff who answer it.
The operator reports 256-bit SSL on connections and TLS certificates renewed every 90 days. That is its own statement, unverified by any published audit, so treat it as a claim rather than a result.
Three habits do more than any clause here. Use a password reserved for the casino and shared with nothing else, especially not the mailbox receiving its resets. Enable two-step verification wherever offered. The operator's own upload form is the only correct destination for a document: never a chat window, never a social message, never an attachment sent in reply to unsolicited mail. And note that this brand runs no native app, so an installer claiming otherwise did not come from the casino, and permissions granted to it sit beyond the reach of any policy.
Under-18s
Gambling online in Australia is restricted to adults, and this site is written for adults. No under-18 data is knowingly gathered on this website, and anything of that kind is destroyed once spotted.
On the platform, age is declared at registration and tested against an identity document, and an under-age account is terminated when found. Suspected minor accounts should be reported to operator support, and the device involved should be secured.
Proving a request is yours
A privacy request only works if the person making it is the person the records describe, so identity is checked before anything is disclosed, corrected or deleted.
Write from the email address already associated with your correspondence and that is usually enough. If the address does not match, expect a short exchange confirming details already held rather than a demand for new documents. Identity papers are never requested by email for a privacy request, and nobody legitimate will ask you to attach a licence or passport to one. A request made on someone else's behalf needs their written authority attached.
If something goes wrong with the data
Part IIIC of the Privacy Act 1988 (Cth) creates the Notifiable Data Breaches scheme. Where a breach is likely to cause serious harm, the entity holding the information has to notify the people affected and the Office of the Australian Information Commissioner, and describe what happened and what to do about it.
For this website the practical exposure is small, because what it holds is technical data and correspondence rather than accounts or payment details. If a breach here ever met that threshold, notification would follow the scheme.
The operator's own breach process is not published anywhere we can read, which is worth knowing before you upload a document. It is a reasonable question to put to support.
Closing an account, and what stays behind
Closing an account ends access. It does not clear the record, and no operator subject to anti-money-laundering rules can make it do so.
Identity and transaction history remains for the statutory period described above. A self-exclusion outlives the closure by design, since an exclusion that dissolved with the account would be worthless. Marketing consent ends, and promotional mail with it. Withdraw any balance before closure rather than after, because retrieving money from a closed account is a support matter with no published timeline.
Questions this document cannot answer
Some answers do not exist publicly, and guessing at them would be worse than the gap. Unpublished by the operator: the country holding player records, the processors touching them, the name of a privacy officer, any retention period beyond the statutory floor, and whether an uploaded document must stay valid for a set time. Support is the only route to those answers. Ask in writing, keep the reply, and treat silence as part of the picture.
Contact, and revisions
One address handles access, correction, deletion, opt-out and complaints for this website: [email protected]. State what you want done and the answer returns in the same plain terms, inside the timeframes above.
Anything tied to a live account, a payment or a verification document belongs with the operator, reached by live chat or by the support address in its own footer.
This page is revised when practice changes or the law moves. The version published here is the one in force, and material changes are flagged at the top rather than folded in silently.