How Your Personal Information Is Handled: Pocket Pokies Privacy Policy
Most privacy pages are written so that nothing in them can ever be held against the publisher. This one is written so you can act on it: every section names the data, the reason it exists, how long it survives, and the exact step that gets it changed or removed. Where an answer is not publicly available, that gap is written down rather than smoothed over.
The framework is Australian and it has two parts: the Privacy Act 1988 (Cth) itself, and the thirteen Australian Privacy Principles that sit inside it and govern collection, use, disclosure, offshore transfer, security, access and correction. Nothing written below cuts down a right the Act gives you.
- Two record sets, and the address for each
- What is collected, and why
- Mandatory data versus consent
- Who else sees your information
- When information leaves Australia
- How long records are kept
- What deletion actually means
- Your rights under the APPs
- Cookies and tracking
- Security, and the app question
- Under-18s
- Changes, and how to reach us
Two record sets, and the address for each
There are two separate piles of information about you, and mixing them up is the fastest way to send a request to the wrong place.
This website publishes information about Pocket Pokies Casino for readers in Australia. What it holds is thin: the technical trace a browser leaves when it loads a page, your cookie choice, and whatever you type into an email you send us. No accounts are opened here, no money moves here, no identity documents arrive here.
The casino platform is run by the operator, separately. Registration, age and identity checks, deposits, gameplay, bonuses and withdrawals all happen inside that platform under its own terms and its own confidentiality policy, which the operator links from the footer of its site. We cannot read your balance, view your documents, freeze an account or close one.
Any description of the casino's data handling on this page is a report of the operator's own published account of how it works. For anything held by this website, write to [email protected]. For anything tied to a live casino account, use the operator's live chat or the support address published in the footer of its own site.
What is collected, and on what legal basis
Australian privacy law requires collection to have a purpose. The table pairs each category with the reason it exists and the basis that reason rests on.
| Data category | Specific examples | Why it is collected | Basis |
|---|---|---|---|
| Identity | First name, surname, date of birth, country of residence | Opening and running the account, confirming you are 18 or over | Contract and legal obligation |
| Contact | Email address, correspondence you send | Account notices, verification links, replies to your questions | Contract |
| Verification (KYC) | Driver licence or passport uploaded through an emailed link | Confirming you are who you say you are before money moves | Legal obligation under AML and counter-terrorism financing rules |
| Financial | Chosen payment method, deposit and withdrawal records, transaction history | Processing payments and meeting reporting duties | Contract and legal obligation |
| Gameplay | Bets placed, sessions, bonus activity, limits you have set | Running the games, applying your own limits, checking bonus conditions | Contract |
| Technical | IP address, device type, operating system, browser, connection data | Security, fraud and multi-account checks, making pages load correctly | Legitimate interests |
| Usage on this website | Pages read, time on page, referring site, outbound clicks | Understanding which pages are useful and fixing the ones that are not | Legitimate interests |
| Preferences | Cookie consent choice, marketing subscription status | Respecting the choices you have already made | Consent |
Two details from the operator's published process are worth knowing before you register. Verification is not done at sign-up: an email arrives afterwards with a link, and the licence or passport is uploaded there. And card numbers, wallet logins and crypto keys stay with the payment provider you choose, which passes back only the result of the transaction.
Mandatory data versus optional consent
This distinction gets blurred constantly in the industry, so here it is drawn sharply.
Mandatory. Identity, date of birth, contact details, KYC documents and transaction records. A gambling operator that lets you deposit or withdraw without them is breaking anti-money-laundering rules, not doing you a favour. You cannot opt out of this data and keep the account.
Optional. Marketing. Promotional emails, campaign messages and personalised offers run on consent alone. You can refuse them at sign-up, withdraw consent later, and nothing about your account, your balance, your bonuses or your withdrawal rights changes as a result. Service messages are a different thing entirely: security alerts, verification requests and transaction confirmations continue, because they are part of running the account rather than selling to you.
Who else sees your information
Nothing about you is sold to advertisers, rented to data brokers or swapped with other websites. Disclosure happens where a defined job requires it, limited to the fields that job actually uses:
- Payment processors and banks, so that a deposit or a withdrawal actually settles.
- Document-checking services, which read the licence or passport and report back whether it stands up.
- Game studios, whose titles run on their own servers and therefore see round and session data.
- Hosting, security filtering and measurement suppliers, acting on instruction and barred from using anything for their own ends.
- Regulators, police and courts, when a lawful demand or a mandatory report leaves no discretion.
- Auditors and lawyers, under confidentiality obligations, if a dispute or an audit reaches that point.
Nobody on that list gets your details for their own marketing.
When information leaves Australia
Cross-border disclosure sits under APP 8, which keeps an Australian entity responsible for personal information it sends offshore. In practice that means an entity has to take reasonable steps to ensure an overseas recipient handles the data consistently with the Australian Privacy Principles.
For this website, hosting, security filtering and analytics may run on infrastructure outside Australia. In those cases the supplier contract requires handling equivalent to the APPs, and what crosses the border is technical data rather than anything identifying you as a player.
For the casino platform, the honest answer is that we do not know. The operator does not publish where player data is stored, which processors it uses, or which country its servers sit in, and inventing a jurisdiction here would be worse than admitting the gap. If storage location is a deciding factor for you, ask the operator's support team in writing before you upload identity documents, and treat a vague answer as information in itself.
How long records are kept
Retention has two speeds: short for anything held by this website, long for anything the law pins down.
| Record | Kept for | Reason |
|---|---|---|
| Server logs and analytics on this site | 12 months, then deleted or reduced to anonymous statistics | Security review and traffic analysis |
| Emails you send us | Duration of the matter plus 12 months | So a reopened question still has its history |
| Cookie consent record | Until you change it or clear your browser storage | Proof that the choice was yours |
| Casino identity and verification records | Minimum 7 years after the account closes | Australian AML and counter-terrorism financing law |
| Casino transaction records | Minimum 7 years from the date of the transaction | Same statutory obligation |
| Marketing consent record | While consent stands, plus a period afterwards | Evidence of when consent was given and withdrawn |
| Self-exclusion record | Beyond account closure | An exclusion is worthless if closing the account cancels it |
The seven-year figure is not a house rule. It is the statutory minimum applied to customer identification and transaction records in Australia, and any operator subject to those obligations keeps them for the full term regardless of what a customer asks.
What deletion actually means
A deletion request removes what can lawfully be removed. It does not vaporise the record set, and any site telling you otherwise is overselling.
Deleted on request: marketing lists, correspondence held by this website, analytics tied to your device, and preference records. Not deleted, whatever the request says: identity and transaction records inside the statutory retention window, records needed for an open dispute or investigation, and self-exclusion entries. Those last ones are deliberately protected. An exclusion that could be erased by closing the account and opening a new one would protect nobody, which is explained further on our responsible gambling page.
Once a retention period expires, the remaining data is deleted or de-identified rather than kept indefinitely.
Your rights under the APPs, and how to use each one
Naming a right is not much use without the step that exercises it.
Access. Email [email protected] from the address you have used with us and ask for a copy of what is held. You should hear back inside five business days, with the substantive answer inside thirty, the window the Privacy Act works to. For casino account data, send the same request through the operator's support channel.
Correction. Name the field, give the correct value, and it gets amended. Casino-side details are edited in your profile or through its support team, and a change to your legal name will set off a fresh document check.
Deletion. Ask in writing, and everything outside a legal retention obligation goes. See the section above for what stays and why.
Marketing opt-out. Every promotional email carries an unsubscribe link, and a line to the privacy address does the same job. The change covers future sends, so allow a few days for queued messages.
Complaint. Put it in writing to [email protected] with what happened and what you want done. You get a written response. If that response does not settle it, the next step above us is the Office of the Australian Information Commissioner (OAIC), the independent regulator that takes privacy complaints made under the Act. The OAIC is not a partner, a sponsor or a supervisor of this website or of the casino, simply the authority you can turn to when our own answer has not fixed the problem.
Security, and the app question
Traffic to this website is encrypted in transit by HTTPS, which is what the padlock in your address bar reports. Enquiry email lands in mailboxes with restricted access, opened only by the people who have to answer it.
The operator states that connections are secured with 256-bit SSL and that its TLS certificates are refreshed on a ninety-day cycle. That is the operator's own published claim and no independent audit of it exists, so weigh it as a statement of intent.
Your own habits carry more weight than any of this. Give the casino a password it does not share with your email or your bank. Where two-step verification is offered, switch it on. And identity documents belong in the operator's upload form and nowhere else: not a chat box, not a social media message, not a reply to mail that arrived unprompted.
One warning specific to this brand. The operator runs no native mobile app: it is web-first, and the way to play from a phone is the browser plus Add to Home Screen. Anything in an app store, an APK file or a download page presenting itself as a "Pocket Pokies app" did not come from the operator. Installing it hands device permissions, contacts, storage and keyboard input to a stranger, and no privacy policy on this page or any other can protect data you have given away that way.
Under-18s
Gambling online in Australia is an adults-only activity and this site is written for adults. Personal information from anyone under 18 is not knowingly collected here, and anything of that kind arriving by accident is destroyed as soon as it is spotted.
The operator requires age confirmation at registration and checks it against identity documents. An account found to belong to a minor is closed. If you think a minor is playing on an account, raise it with the operator's support so the account can be shut, and lock down the device it was opened on.
Changes, and how to reach us
Revisions happen for two reasons: practice changes, or the law moves. Whatever appears here is the version in force, and anything material is flagged at the head of the page instead of being slipped in unannounced.
For this website a single address covers the lot, access, correction, deletion, opt-out and complaint: [email protected]. State plainly what you want done, and the reply comes back the same way, inside the timeframes set out above.
Questions about a deposit, a withdrawal, verification or an existing account belong with the operator, through its live chat or the support address it publishes. What that operator does and does not disclose about itself is set out on our Pocket Pokies overview.