Privacy Policy

Last updated: 24.02.2026

nationalcasino.one (“we”, “us”, “our”, the “Website”) is operated for the purpose of providing online gambling and related services (“Services”) to users in Australia and other jurisdictions where our Services are lawfully available.

We act as a data controller in respect of the personal information we collect and process about you. As a licensed iGaming operator, we have legal obligations to collect and process certain personal data for purposes such as providing gambling services, verifying your identity, preventing fraud and money laundering, and complying with responsible gambling and other regulatory requirements.

By registering an account on nationalcasino.one, by using our Services, or by otherwise providing your personal data to us, you:

• Confirm that you have read and understood this Privacy Policy; and
• Consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy and with applicable laws, including the General Data Protection Regulation (GDPR) where it applies, and relevant Australian privacy and gambling laws.

If you do not agree with this Privacy Policy, you should not use our Website or Services.

For any questions about this Privacy Policy or our data practices, please contact us at: [email protected].

Information We Collect

We collect and process various categories of personal data in order to operate our gambling services and comply with legal and regulatory requirements.

Personal Details and Account Information

When you register and use your player account, we may collect:

• Full name
• Date of birth and age
• Residential address and country of residence
• Email address and telephone number
• Username, password, and other login credentials
• Account preferences (language, currency, marketing preferences)

Financial and Transaction Information

To process deposits, wagers, and withdrawals, we may collect:

• Payment details (such as partial card numbers, payment method type, e‑wallet details)
• Bank account or IBAN details where required for withdrawals
• Transaction history, including:
  • Deposits and withdrawals
  • Bet history and game activity
  • Winnings, losses, bonuses, and loyalty points
  • Payment status and payment method used

Correspondence and Customer Support

When you communicate with us, we may collect:

• Content of your emails, live chats, web forms, or phone calls
• Records and logs of communications with customer support
• Internal notes related to handling your inquiries or complaints

Technical and Usage Data

When you access the Website or use our Services, we may collect:

• IP address and approximate location (geolocation)
• Device identifiers (device ID, operating system, browser type and version)
• Date, time, and duration of visits and sessions
• Pages visited, clicks, and navigation paths
• Log-in attempts and authentication logs
• Technical error logs and performance data

Verification and KYC Documentation

To comply with Know Your Customer (KYC) and Anti-Money Laundering/Counter‑Terrorism Financing (AML/CTF) laws, we may collect and store:

• Government-issued identification documents (passport, driver’s licence, national ID)
• Proof of address (utility bill, bank statement, official correspondence)
• Proof of ownership of payment methods (card statements, screenshots, bank letters)
• Selfies or biometric checks where required for identity verification
• Information from sanctions/PEP lists and other risk databases

Responsible Gambling and Risk Data

To promote responsible gambling and manage risk, we may also process:

• Self-exclusion status and responsible gambling limits
• Gambling activity patterns and risk indicators
• Notes or classifications related to problem gambling support or interventions

How We Use Your Information

We process your personal data only where we have a legal basis, including contractual necessity, legal obligations, legitimate interests, and, where required, your consent.

We use your information in particular for the following purposes:

• Account registration and management

  • Opening, maintaining, and administrating your player account
  • Verifying your age, identity, and eligibility to use our Services
  • Managing account settings and security

• Provision of gambling services

  • Enabling you to place bets and participate in games
  • Processing deposits, wagers, and withdrawals
  • Calculating and paying winnings and bonuses
  • Operating loyalty and promotional programs

• Customer support and communication

  • Responding to your requests and complaints
  • Providing technical assistance and problem resolution
  • Sending important service messages (account changes, system notifications, changes to terms)

• Legal and regulatory compliance (including AML/CTF)

  • Conducting KYC, source-of-funds, and affordability checks
  • Monitoring and investigating suspicious activity
  • Meeting record-keeping obligations under gambling and AML/CTF laws
  • Complying with court orders, regulatory requests, and other legal obligations

• Fraud prevention and security

  • Detecting and preventing fraud, abuse, and collusion
  • Protecting our systems, accounts, and games from unauthorised access
  • Enforcing our Terms and Conditions

• Responsible gambling

  • Monitoring activity for potential signs of problem gambling
  • Applying self-exclusion or limits where requested or required
  • Providing information and tools to support safer gambling

• Analytics, reporting, and improvement of services

  • Analysing usage patterns and game performance
  • Conducting statistical and market research (on an aggregated or pseudonymised basis)
  • Improving the Website, Services, and user experience

Where we rely on legitimate interests, we always balance those interests against your privacy rights and freedoms, and we limit processing to what is necessary.

Marketing Communication

If you have provided your consent, or where permitted by law, we may use your contact details for marketing and promotional purposes, including:

• Sending you emails, SMS, or in-account messages about new games, bonuses, tournaments, and special offers
• Customising promotional content based on your preferences and gaming history
• Conducting surveys or feedback campaigns to improve our services

You may opt out of marketing communications at any time by:

• Using the “unsubscribe” link included in marketing emails;
• Adjusting your marketing preferences in your account settings (where available); or
• Contacting us at [email protected].

Opting out of marketing will not affect essential service communications, such as account notifications or legally required messages.

Obtaining Personal Information

We collect personal information from various sources:

• Directly from you, when you:

  • Register for an account
  • Provide documents or information for verification
  • Make deposits, place bets, or request withdrawals
  • Communicate with us via email, live chat, or other channels

• Automatically, when you use our Website and Services, through:

  • Cookies and similar technologies (see “Cookie Policy” below)
  • Server logs and technical monitoring tools

• From third-party providers, including:

  • Identity verification and KYC/AML service providers
  • Payment processors, banks, and financial institutions
  • Fraud prevention agencies and credit reference agencies (where permitted)
  • Sanctions and politically exposed person (PEP) databases
  • Game providers, for technical and transactional data related to gameplay

We ensure that any third-party data we receive has been collected in accordance with applicable data protection laws.

Data Recipients

Within our organisation and corporate group, your personal data is only accessible to personnel who need it for their job functions, including:

• Compliance and AML/CTF teams
• Customer support and account management teams
• Payments and finance departments
• IT and security personnel
• Risk management and responsible gambling teams
• Senior management and internal audit, where necessary

All staff with access to personal data are bound by confidentiality obligations and receive training on data protection and security.

Releasing Data to Third Parties

We may share your personal data with selected third parties where necessary for the purposes described in this Privacy Policy, including:

• Payment service providers and banks

  • To process deposits, withdrawals, and refunds
  • To verify payment methods and prevent fraud

• Game and platform providers

  • To enable participation in casino games and bets
  • To resolve technical issues, disputes, and game-related incidents

• Identity verification, AML/CTF, and fraud prevention providers

  • To verify your identity and age
  • To screen against sanctions lists, PEP databases, and risk indicators
  • To detect and prevent fraudulent or unlawful activities

• IT and infrastructure service providers

  • Hosting providers, data centres, cloud services
  • Security, monitoring, and backup services

• Professional advisers

  • Lawyers, auditors, and consultants assisting with legal, regulatory, or business matters

• Regulators, law enforcement, and other authorities

  • Where required by law, regulation, court order, or regulatory directive
  • For the investigation and prevention of crime, fraud, or regulatory breaches

We do not sell your personal data. Whenever we share data with third parties, we ensure that appropriate data protection agreements and safeguards are in place, particularly where data is transferred outside the European Economic Area or Australia.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, and to comply with our legal and regulatory obligations.

In particular:

• For AML/CTF and gambling regulatory requirements, we are generally required to retain relevant customer and transaction records for a minimum of five (5) years after:
  • The end of the business relationship (account closure); or
  • The date of the last transaction, as applicable under local law.

After the expiry of mandatory retention periods, and unless we have a legitimate reason or legal obligation to retain the data for longer (for example, ongoing disputes or investigations), we will:

• Delete, anonymise, or irreversibly de-identify your personal data; and
• Ensure that data no longer required is not used for any new processing activities.

Once legal retention periods have passed, you have the right to request erasure of your personal data, subject to applicable legal limitations.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure ID/password protection and strong authentication controls
• Encryption of data in transit (e.g., TLS/SSL) and, where appropriate, at rest
• Firewalls, intrusion detection, and monitoring systems
• Access controls based on “need-to-know” principles
• Secure backup and disaster recovery procedures
• Regular security assessments and vulnerability management
• Staff training on security and data protection obligations

While we take reasonable steps to safeguard your data, no transmission or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately if you suspect any unauthorised use of your account.

Your Rights & Contacting Us

Subject to applicable law (including GDPR where it applies and relevant Australian privacy laws), you may have the following rights in relation to your personal data:

• Right of access – to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that data.
• Right to rectification – to request correction of inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”) – to request deletion of your personal data where there is no longer a legal basis or overriding legitimate interest for processing, and when statutory retention periods have expired.
• Right to restriction of processing – to request that we restrict the processing of your data in certain circumstances (for example, while a complaint is investigated).
• Right to data portability – where technically feasible and legally required, to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to object – to object to processing based on legitimate interests or direct marketing, including profiling for such purposes.
• Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, or to contact our data protection point of contact, please email: [email protected].

You also have the right to lodge a complaint with a competent data protection or privacy supervisory authority:

• For EU/EEA users, this may be your local data protection authority;
• For Australian users, this includes the Office of the Australian Information Commissioner (OAIC) (www.oaic.gov.au).

We encourage you to contact us first so we can attempt to resolve any concerns directly.

Cookie Policy

Our Website uses cookies and similar technologies to provide, improve, and personalise our Services. Cookies are small text files stored on your device when you visit our Website.

Types of Cookies We Use

• Essential (Strictly Necessary) Cookies

  • Required for the operation of the Website and core features (e.g., login, account navigation, security).
  • Without these cookies, the Services you request cannot be provided.
  • These cookies do not require your consent but are necessary for service delivery.

• Functional Cookies

  • Remember your preferences and settings (e.g., language, region, saved details).
  • Enhance user experience but are not strictly necessary for basic operation.
  • You may disable them through your browser, but this may affect functionality.

• Analytics and Performance Cookies

  • Help us understand how visitors use the Website (pages visited, time spent, errors encountered).
  • Used to improve performance, usability, and content.
  • Data is generally aggregated and not used to identify you directly.

• Advertising and Targeting Cookies

  • Used to deliver relevant ads and promotional content, including on third-party sites.
  • May be set by us or by third-party advertising partners.
  • Help us measure the effectiveness of marketing campaigns.

Managing Cookies

You can manage or disable cookies through:

• Your browser settings (e.g., blocking or deleting cookies); and
• Website cookie consent tools or banners, where available.

Please note that disabling certain cookies may limit your ability to use some features of the Website or Services.

If you have any questions about this Privacy Policy, our data protection practices, or your rights, please contact us at: [email protected].