Privacy Policy

This Privacy Policy explains how personal and technical information is collected, used, disclosed, and protected by casinodarwin in relation to the services offered on darwin.casino. It applies to all players, registered account holders, and website visitors. This policy is effective as of 1 January 2025 and is drafted to fulfill all applicable Australian (AU) legal and regulatory obligations, including those specific to the Northern Territory gambling jurisdiction.

Who We Are

OBSERVE: casinodarwin operates exclusively through darwin.casino and is managed under the corporate entity below.
EXPAND: Legal identification, jurisdiction, and contact mechanisms are provided for transparency and regulatory compliance.
REFLECT: This section fulfills AU law, Gaming Control Act 1993, and NT Casino Code of Practice requirements for data controller identification.

Legal Entity Name: casinodarwin Pty Ltd (parent: Delaware North Companies, Inc.)
Legal Address: Gilruth Avenue, The Gardens, Darwin NT 0820, Australia
ABN: 54 009 624 417
Operating Licence: Northern Territory Casino License issued by the Northern Territory Government, Australia (current, valid through 2025), under the Gaming Control Act 1993 and relevant NT casino codes
Contact - Data Protection Officer: [email protected] | +61 8 8943 8888
Official website: darwin.casino

Regional Compliance Note: All regulatory communications may be directed to the above Data Protection Officer or via the support department: [email protected].

What Personal Data We Collect

OBSERVE: Data types processed include personal, technical, payment, and behavioral information.
EXPAND: Collection is aligned with operational, legal, and player safety obligations.
REFLECT: All categories comply with AU Privacy Act 1988 (Cth), AML/CTF Act, and NT harm minimisation codes.

Personal Data: Full name, date of birth, residential and mailing address, phone number, email address, identity documents (for KYC/verification)
Account and Transaction Data: Username, password (encrypted), betting history, deposit and withdrawal records
Payment Data: Bank account or payment card details, transaction logs (processed via regulated third-party payment providers)
Technical Data: IP address, device identifiers (incl. hardware and browser info), connection logs, time and location stamps
Behavioral Data: Betting and gaming activity, session data, interaction logs, clickstream data
Cookies and Similar Technologies: Session cookies, persistent cookies, third-party analytics and advertising cookies (see "Cookies & Tracking Technologies")

Legal Obligation: Some data is required by law (e.g. for KYC and anti-fraud). Refusal to provide may limit service access.

Legal Basis for Processing

OBSERVE: Data processing is governed by privacy and gambling laws.
EXPAND: Multiple legal foundations ensure lawful and fair use.
REFLECT: Per Australian law, this section clarifies when and why processing is permitted.

Your Consent: Certain uses (e.g. marketing communications, use of non-essential cookies) are based on the explicit consent of the user.
Contractual Necessity: Processing is required to establish, maintain, and fulfill the customer relationship (account creation, service provision, payment, and withdrawal functions).
Legal and Regulatory Obligations: Compliance with mandatory requirements, including the Privacy Act 1988 (Cth), Anti-Money Laundering and Counter-Terrorism Financing Act, Gaming Control Act 1993 (NT), report filing and harm minimization.
Legitimate Interests: For operational improvement, service analytics, fraud prevention, security, and player protection, provided these interests do not override user rights.

Regional Compliance Note: All legal bases are harmonized with AU and state/territory requirements for gambling operators.

Purpose of Processing

OBSERVE: Data is processed only for clearly defined, lawful objectives.
EXPAND: Each processing activity is mapped to a necessity or benefit under law.
REFLECT: Purposes are disclosed per Privacy Act 1988 and best industry standards.

Account Management: To register, authenticate, and maintain user accounts on darwin.casino
Service Delivery: To provide online casino products, process gaming transactions (deposits, bets, withdrawals), and facilitate player participation
Regulatory Compliance: To fulfill KYC/AML checks, verify age and identity, and satisfy reporting duties to regulatory authorities
Fraud and Security: To monitor for suspicious behavior, prevent, detect, and investigate criminal or prohibited activities
Service Improvement: To analyze usage patterns, troubleshoot issues, and optimize digital services
Marketing (with Consent): To send promotional emails, offers, and notifications, subject to withdrawable user consent
Responsible Gambling: To monitor play, administer self-exclusion, and comply with NT harm minimisation codes

Legal Compliance Note: Data is never processed for secondary purposes incompatible with these objectives unless further consent is obtained.

Disclosure & Sharing

OBSERVE: Data may be disclosed in clearly delineated circumstances only.
EXPAND: Disclosure partners are vetted and bound by confidentiality and compliance agreements.
REFLECT: AU privacy, anti-money laundering and gambling disclosure obligations are strictly observed.

Payment and Banking Partners: For processing deposits/withdrawals and detecting financial crime; data is only shared with regulated institutions.
Technology and Service Providers: Data hosting, analytics, IT support and related service providers with contractual data security obligations.
Regulatory Authorities: To comply with Northern Territory Government and other AU regulatory agency requests, including for KYC/AML, audit or legal investigation purposes.
Affiliates and Advertising Networks: Only with specific user consent for marketing, tracking, or refer-a-friend schemes.
Corporate Groups: Within casinodarwin's parent company (Delaware North Companies, Inc.) for central compliance, auditing and technical administration, all subject to applicable laws.
Legal or Emergency Requirements: Where required by law, or necessary for the protection of legal rights, property, safety of users or others.

Protective Clause: All third parties must comply with strict confidentiality, data protection, and security standards as required under Australian law and sectoral codes.

International Transfers

OBSERVE: Data processing may occasionally involve international partners.
EXPAND: Strong cross-border data protection measures are implemented.
REFLECT: Disclosures in this section ensure transparency and meet Australian Privacy Principles (APPs) on overseas transfer.

Transfer Regions: Personal data may be transferred to data hosting or payment partners in jurisdictions outside Australia, such as the United States or European Economic Area, solely as necessary for provision/support of services at darwin.casino.
Protection Mechanisms: All such transfers are subject to legally robust contractual safeguards, including:
- Standard contractual clauses (SCCs) approved by the Office of the Australian Information Commissioner (OAIC) or by the European Commission where relevant
- Partner contractual binding to equivalent privacy protection standards as those in Australia
- Technical and organizational security measures (encryption, access controls, limitation of onward transfer)

Legal Obligation: Transfers are conducted only with entities providing adequate protection, in compliance with APP 8.

Data Retention

OBSERVE: Retention periods are defined to satisfy both regulatory and operational needs.
EXPAND: Retention duration is guided by law and service functionality.
REFLECT: AU, NT and AML/CTF retention mandates are respected.

Personal Account Data: Retained for the duration of the player relationship and for a maximum of 5 years after account closure, to meet legal and anti-money laundering requirements.
Transaction/Payment Data: Similarly retained for up to 5 years post-closure/last activity in line with the AML/CTF regulations.
Technical and Behavioral Data: Kept as necessary for operational usage and deleted or anonymised when no longer required.
Deletion Criteria: Data will be deleted or de-identified:
- On user request (where permitted by law and after all legal holds)
- Upon expiration of retention period
- After the fulfilment of all processing purposes

Legal Guarantee: Post-retention, all data is securely destroyed as per industry and regulatory standards.

Your Rights

OBSERVE: Casinodarwin recognises all user rights granted under AU privacy legislation.
EXPAND: Rights may be exercised via dedicated contact channels.
REFLECT: This section operationalises the Australian Privacy Principles (APPs) and related legal protections.

Access: Request a copy or summary of personal information held by casinodarwin.
Correction: Request correction of inaccurate or incomplete personal data.
Erasure ("Right to be Forgotten"): Request deletion or de-identification of data in certain circumstances, subject to legal retention obligations.
Restriction: Request the restriction of processing in cases where data accuracy, lawfulness, or necessity is in dispute.
Objection: Object to data processing activities, particularly direct marketing.
Data Portability: Request that your data be provided in a structured, commonly used, and machine-readable format for transfer to another service provider.
Withdrawal of Consent: Withdraw consent to any processing previously consented to (e.g., marketing communications) at any time. Withdrawal does not affect the lawfulness of prior processing.

Legal Disclaimer: In some circumstances, not all rights may be granted where restricted by law or overriding regulatory obligations.

Cookies & Tracking Technologies

OBSERVE: darwin.casino uses various cookies and related technologies.
EXPAND: Each type and use is made transparent, and control mechanisms are provided.
REFLECT: Practices align with APP requirements and Australian e-Privacy standards.

Session Cookies: Essential for secure log-in, game sessions, and navigation. Expire when the browser is closed.
Persistent Cookies: Used to remember user preferences, device settings, and facilitate personalisation; retained for a predefined period or until deleted by the user.
Third-Party Cookies: Set by analytics providers (e.g., Google Analytics) or advertising networks-only activated with user consent.
Purposes: Functionality, service improvement, usage analytics, targeted marketing (consent-based).
Managing Cookies: Users can manage, refuse or delete cookies through:
- Browser settings (see your browser's help section for instructions)
- Any internal preference panels provided by darwin.casino

Legal Recommendation: Review our Cookie Policy (where separately available) for further detail. Disabling cookies may impact site functionality.

Data Security

OBSERVE: casinodarwin incorporates leading technical and organisational safeguards for darwin.casino.
EXPAND: Security controls mitigate unauthorised access, loss, or misuse.
REFLECT: This section meets both AU legal mandates and NT Gaming Harm Minimisation requirements.

Encryption: All sensitive transmissions are protected via SSL/TLS technology; personal and payment data is encrypted both in transit and at rest.
Access Controls: Strict access permissions based on user role; only authorised staff may access personal information, all subject to strict confidentiality duties.
Physical and Logical Security: Data hosted in secure facilities with multi-layered physical and electronic protection.
Regular Audits: Independent audits and risk assessments are conducted to proactively identify and address vulnerabilities.
Staff Training: Ongoing staff awareness and privacy training, aligned with compliance best practices for 2025.
Incident Response: Comprehensive breach detection and response protocols, including regulatory notification where required.

Protective Clause: No system is completely immune, but casinodarwin commits to surpassing minimum legal security requirements for darwin.casino and regularly updates protocols in line with evolving threats and standards.

Complaints & Contacts

OBSERVE: Users may ask questions, raise privacy requests, or lodge complaints.
EXPAND: Multiple contact channels are provided, and procedures align with legal timeliness requirements.
REFLECT: Fulfills user recourse obligations under APP 1.4(g)-(h).

Data Protection Officer Contact: [email protected] | Phone: +61 8 8943 8888
Mailing Address: Gilruth Avenue, The Gardens, Darwin NT 0820, Australia
Support Email: [email protected]
Complaints Procedure:
- Contact the Data Protection Officer in writing with your concern including supporting details.
- All complaints will be acknowledged within 5 business days and a substantive response will be provided within 30 days.
- If unsatisfied, you may contact the Office of the Australian Information Commissioner (OAIC) for escalation (see oaic.gov.au).

User Note: All reasonable efforts will be made to resolve privacy issues promptly and efficiently as required by law.

Updates

OBSERVE: This Privacy Policy may be periodically amended to reflect legal, technical, or operational changes.
EXPAND: Users will be notified of significant updates.
REFLECT: Ensures continuing compliance and user awareness.

Notification Procedure: Material changes will be broadcast via emails (to registered users), prominent site banners, or special update notices within user accounts prior to effective date.
Policy Availability: The latest version is always accessible at darwin.casino.
Date of Last Revision: 1 January 2025

Recommendation: Users are encouraged to periodically review this page for the latest policy status.