Your Privacy at Castle Casino

This Privacy Policy explains what personal information we collect when you play at castlecasino-au.com, why we collect it, who we share it with, and the rights you have over it. It applies to every account holder and visitor, and it sits alongside our Terms and Conditions.

What We Collect From You

When you register an account, deposit, or simply browse our site, we gather only the information needed to run a lawful online casino. Our licence from Curaçao (number 8048/JAZ2023-045) and Australian gambling obligations shape what we must hold and for how long.

• Identity data: full name, date of birth, email address, phone number, residential address.
• Verification documents: passport or driver's licence, proof of address, proof of payment method.
• Transaction data: deposits, withdrawals, bonuses claimed, wagering history.
• Technical data: IP address, device type, browser, approximate location derived from IP.
• Gameplay behaviour: games played, session times, betting patterns and outcomes.
• Marketing preferences: which promotions you opted into and how you want us to contact you.

How We Use Your Data

We use your information to create and manage your account, verify your identity under KYC rules before your first withdrawal, and process deposits and payouts through PayID, cards, e-wallets or crypto. Transaction and behavioural data feed our anti-fraud systems, which flag suspicious patterns for manual review.

We also monitor play for signs of gambling harm so our responsible-gambling tools, including deposit limits and session reminders, can be triggered when needed. Where you have given consent, we send promotional offers such as our weekly 15% cashback or weekend reload up to 300 AUD. Finally, we meet legal obligations set by our regulator and anti-money-laundering law.

The Bases We Rely On

Contract

Processing your identity and transaction data is necessary to perform our contract with you. Without it we cannot open an account, settle wagers or pay withdrawals.

KYC verification, record-keeping and suspicious-activity reporting rest on legal obligation. We keep transaction records for at least five years because our Curaçao licence and AML duties require it.

Fraud prevention, security monitoring and aggregated service analytics rely on our legitimate interest in running a safe, honest platform. This basis never overrides your privacy rights, and we balance it against any impact on you.

Marketing emails, SMS and personalised bonus offers run on consent alone. You may withdraw that consent at any time without affecting your right to play; just reply STOP or change your settings in your account profile.

How Long We Keep It

We hold each category of data only as long as there is a lawful reason to keep it. Once that reason expires, we delete or anonymise the records.