Your Privacy at Palm Casino
This Privacy Policy explains what personal data we collect when you play at palmcasino-au.com, why we collect it, how long we keep it, and the controls you have over it. We operate under Curacao eGaming licence 8048/JAZ2021-045 and handle your data in line with the Australian Privacy Principles and, where you are located in the EU or UK, GDPR standards.
What Data We Collect
Categories of personal data
We collect only the data we need to run your account, meet our legal obligations and keep the site safe. The categories below cover everything we hold about you.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: government-issued ID, proof of address, proof of payment method, collected during KYC before your first withdrawal.
- Transaction data: deposits, withdrawals, bets, winnings, bonuses claimed, payment method details.
- Technical data: IP address, device type, operating system, browser, approximate location derived from IP.
- Gameplay behaviour: games played, session times, betting patterns, self-assessment responses.
- Marketing preferences: which channels you consented to (email, SMS) and how you interact with our promotions.
How We Use Your Data
We use your data to create and run your account, verify your identity under KYC rules, process deposits and withdrawals, and prevent fraud and money laundering. We also monitor play patterns for responsible-gambling indicators, so we can step in with limits or a check-in when the signals suggest it.
With your consent, we send you promotional offers such as our weekly 50% reload bonus and weekend free spins drops. You can withdraw that consent at any time and we will stop marketing to you without affecting your account.
Our Legal Bases
Contract: we process your identity and transaction data to set up your account, honour the welcome bonus terms and pay out winnings. Without this data we cannot provide the service you signed up for.
Legal obligation: Curacao eGaming and anti-money-laundering law require us to verify your identity, keep transaction records for at least 5 years and report suspicious activity to the relevant authorities.
Legitimate interest: we rely on this basis for fraud prevention, security monitoring, dispute resolution and aggregated analytics that improve our site, always balanced against your rights.
Consent: marketing communications, optional cookies and any data uses beyond the three bases above run only on your explicit, revocable consent, recorded with a timestamp when you give it.
How Long We Keep It
Retention depends on the type of data and the reason we hold it. Where regulation sets a minimum, we keep to it as a floor, not a target.
| Data category | Retention period |
|---|---|
| Transaction and account records | Minimum 5 years after account closure, per regulatory requirements |
| KYC verification documents | 5 years after the last transaction, then securely deleted |
| Identity and contact data | For the life of your account, then up to 12 months for audit purposes |
| Technical and device data | Up to 13 months for security and analytics |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share It With
We never sell your personal data. We share it only with parties who need it to deliver the service, and each one is bound by a data-processing agreement that restricts how they may use it.
- Payment processors handling your deposits and withdrawals, including card schemes, e-wallets and crypto gateways.
- KYC and AML verification providers who check your documents against sanctioned and watch lists.
- Game and platform providers that need your account ID to deliver play sessions; they receive a pseudonymised identifier, not your full profile.
- Curacao eGaming and other regulators or law-enforcement bodies, where we are legally required to disclose.
- Analytics and email-delivery vendors operating on our instructions only.
Rights You Hold Over Data
You can exercise any of the rights below at any time by emailing [email protected]. We respond within 30 days and never charge a fee for a first, reasonable request.
If you are unsatisfied with how we handled your request, you may complain to your local data protection authority; Australian residents can contact the OAIC, and EU or UK residents their national supervisory authority.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask us to delete data we no longer need, subject to regulatory retention minimums.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, such as profiling for fraud checks.
- Withdrawal of consent: stop marketing and optional cookie processing at any time.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and secure the site, plus optional analytics and marketing cookies set only after you consent through the cookie banner. You can change your choices at any time from the cookie settings link in the site footer. Full details, including the cookie types and their lifespans, are set out on our separate Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and stored data is encrypted at rest. Access to personal data is role-based and limited to staff who need it, with every access logged and reviewed.
We test our controls regularly and run a documented incident-response plan. If a breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly without undue delay.
Contact Our Data Officer
Our Data Protection Officer answers questions about this policy, handles data requests and reviews any complaint you raise. Email [email protected] and we will reply within 30 days; for anything urgent, our 24/7 live chat can log your query and route it straight to the privacy team. We review this policy at least once a year, and the version below was last updated in 2026.
Frequently Asked Questions
Do you share my data with advertisers?
No. We never sell your personal data. Marketing partners only process data on our written instructions, and only for the campaigns you consented to.
How long do you keep my KYC documents?
We keep verification documents for 5 years after your last transaction, as required by anti-money-laundering rules, then securely delete them.
Can I get a copy of all data you hold about me?
Yes. Email [email protected] requesting access and we will send a structured copy of your data within 30 days at no charge.
How do I stop marketing emails?
Use the unsubscribe link in any email, change your preferences in account settings, or withdraw consent by contacting our support team at any time.