Our Privacy Policy in Plain English
This policy explains what personal data we collect when you play at Woo Casino, why we collect it, how long we keep it and what rights you have over it.
What Data We Collect
Categories of personal data
When you register, deposit, play or contact support at woo-casino-aud.com, we collect the following categories of information:
- Identity data: full name, date of birth, email address, phone number and residential address.
- Verification documents: photo ID, proof of address and payment method verification required under our KYC procedure before your first withdrawal.
- Transaction data: deposits, withdrawals, bets, winnings and bonuses, including amounts in AUD or cryptocurrency.
- Technical data: IP address, device type, browser, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, session duration, betting patterns and tournament participation.
- Marketing preferences: whether you have opted in to receive promotions such as our weekly reload bonuses up to 150 AUD or cashback offers.
How We Use Your Data
We process your data to open and operate your account, verify your identity under KYC rules, process deposits and withdrawals, detect and prevent fraud and money laundering, and comply with our licence obligations under Curaçao licence 8048/JAZ2020-047. We also use gameplay data to monitor responsible gambling indicators and to enforce deposit limits, loss limits and self-exclusion tools you have set.
Where you have given consent, we use your email address to send promotional offers, including the welcome package of a 100% match up to 1600 AUD plus 150 free spins with promo code WOO. You can withdraw that consent at any time from your account settings or by contacting [email protected], available 24/7.
Why We May Process It
Our legal bases
Where Australian privacy law or, for EU visitors, the GDPR applies, we rely on one of four legal bases for each processing activity.
- Contract: creating your account, processing your deposits and withdrawals, and running the games you play all require us to handle your data to deliver the service you signed up for.
- Legal obligation: KYC checks, AML record keeping (including the 5-year retention of transaction records) and responses to regulator requests are mandated by law and cannot be opted out of.
- Legitimate interest: fraud prevention, security monitoring, aggregated statistics on game popularity and keeping our site functioning safely fall under our legitimate interest, balanced against your rights.
- Consent: marketing emails, promotional SMS and non-essential cookies are only activated with your explicit opt-in, which you can withdraw at any time.
How Long We Keep It
We retain each category of data only as long as necessary for the purpose it was collected, after which it is securely deleted or anonymised.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then up to 5 years after closure |
| KYC verification documents | 5 years from verification, as required by AML rules |
| Transaction and betting records | Minimum 5 years under gaming and AML regulations |
| Fraud and security logs | Up to 2 years after the incident is resolved |
| Marketing preferences | Until you withdraw consent or delete your account |
| Support correspondence | Up to 2 years after the conversation |
Who We Share Data With
We never sell your personal data. We share it only with categories of partners required to run the casino, each bound by data processing agreements.
Payment processors handling your Visa, Mastercard, PayID, Skrill, MiFinity, Jeton or crypto transactions need enough data to execute and reconcile your payments. Game providers such as Evolution, Pragmatic Play and NetEnt receive your player ID and session data to deliver gameplay and allocate winnings. KYC and AML screening providers verify your documents. Our licence authority and, where applicable, Australian regulators receive reports as required by law. Analytics and hosting providers process technical data under strict contractual limits.
Your Rights Over Your Data
What you can ask us to do
You can exercise any of the rights below free of charge by emailing [email protected]; we respond within 30 days.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate details such as your address or phone number.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time, effective immediately.
- Complaint: raise concerns with the relevant data protection authority, or contact Gambling Help Online on 1800 858 858 for gambling-related concerns.
Cookies and Tracking
We use a small set of cookies to keep you logged in, remember your game preferences, secure sessions against fraud and measure anonymous site traffic. Non-essential marketing and analytics cookies are only set after you accept them in the cookie banner, and you can change your choice anytime from the cookie settings link in the footer. Our full cookie inventory, including each cookie's name, purpose and lifespan, is listed on our dedicated Cookies Policy page.
Session cookies expire when you close your browser; persistent preference cookies last up to 12 months. Clearing cookies does not delete your account, but you will need to log in again with your email and password.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS 1.3. Verification documents and payment details are stored encrypted at rest, and access to personal data is limited to trained staff on a need-to-know basis, logged and reviewed regularly.
We run continuous monitoring for intrusion attempts, keep payment card data out of our systems entirely (card data goes directly to the processors), and test our controls at least annually. If a data breach affecting your personal data occurs, we notify the relevant regulator within 72 hours and inform affected players directly where the law requires it. Our data protection officer can be reached at [email protected] for any privacy question not answered on this page.
Frequently Asked Questions
Do you sell my personal data to advertisers?
No. We never sell your data. We share it only with the payment, verification and infrastructure partners strictly required to run Woo Casino, always under data processing agreements.
Why do you need my ID before my first withdrawal?
Know Your Customer checks are a legal obligation under our Curaçao licence and anti-money-laundering law. We verify a photo ID, proof of address and your payment method once, and keep the documents for 5 years.
How do I stop marketing emails?
Open any email from us and click unsubscribe, or switch off promotional messages in your account settings. Marketing consent withdrawal takes effect immediately.
Can I delete my account and all my data?
You can request account closure via [email protected]. Identity and transaction records must be kept for a minimum of 5 years by law, after which they are securely deleted.
Is my card number stored on your servers?
No. Card details are entered directly into the payment processor's secure form and never touch our systems.