Your privacy at Real Casino
This Privacy Policy explains what personal data we collect when you play at realcasino-aud.com, why we collect it, how long we keep it and the choices you have. It applies to every account holder and visitor using our Australian site.
Data we collect
Categories of personal data
We collect personal data directly from you and automatically as you use our site. The categories below cover everything we hold.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: passport or other government ID, proof of address, and payment method verification we require before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering records and currency balances in AUD, BTC, ETH or USDT.
- Technical data: IP address, device identifiers, browser type, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, session duration, bet sizes, win and loss history across our 22,700 titles.
- Marketing preferences: which channels you consent to (email, SMS), and how you interact with our promotions.
How we use your data
We process your personal data to open and maintain your account, verify your identity under KYC rules, process deposits and withdrawals, and meet our legal and regulatory obligations under our MGA licence (MGA/B2C/394/2017). We also use gameplay data to detect fraud and money laundering, and to monitor for signs of problem gambling so we can intervene responsibly.
With your consent, we use your email address and phone number to send bonus offers, tournament invitations and news about promotions such as our weekly reload bonus and Drops & Wins. You can withdraw that consent at any time from your account settings or by contacting [email protected], available 24/7.
Why the law lets us
Contract: we process identity and transaction data to perform the agreement between you and us, because we cannot operate your account or process payments without it.
Legal obligation: KYC, AML and record-keeping requirements oblige us to verify your identity and retain transaction records, whether or not you ask us to.
Legitimate interest: fraud prevention, security monitoring and aggregated service improvement rely on our legitimate interest in running a safe platform, balanced against your rights.
Consent: marketing communications and non-essential cookies are processed only with your freely given consent, which you may withdraw at any time without affecting prior processing.
How long we keep it
We keep each category of data only as long as needed for the purpose it serves, then delete or anonymise it.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| Verification (KYC) documents | 5 years after account closure, per regulatory requirements |
| Transaction and wagering records | Minimum 5 years under AML rules |
| Device, IP and security logs | Up to 12 months |
| Marketing preferences | Until you withdraw consent or delete your account |
| Support correspondence | 2 years after resolution |
Who we share with
We never sell your personal data. We share it only with parties who need it to deliver our service, and always under strict confidentiality terms.
- Payment processors handling your deposits and withdrawals, including card schemes, e-wallets and crypto gateways.
- KYC and AML verification providers that check your documents and screen transactions.
- Our regulator, the Malta Gaming Authority, and Australian authorities where legally required.
- Analytics and hosting providers that help us run and improve the site, processing data on our instructions.
- Game providers whose titles you play receive your username and gameplay events, not your payment details.
Your rights over data
Australian privacy law and, where you are in the EU, the GDPR give you enforceable rights over your personal data. Send any request to [email protected] and we will respond within 30 days.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or out of date.
- Erasure: ask us to delete data we no longer need, subject to regulatory retention rules.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time.
- Complaint: escalate to the OAIC in Australia, or your local data protection authority.
Cookies and tracking
We use essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that activate only with your consent. Our cookie banner lets you accept or reject non-essential categories, and you can change your choice at any time. Full details, including the list of cookies and how to block them in your browser, are set out on our dedicated Cookies page.
How we protect data
All traffic between your device and our servers is encrypted with TLS, and payment and verification documents are stored encrypted at rest with access limited to staff who need it for KYC or support. We run regular security reviews, monitor systems continuously for unauthorised access, and require multi-factor authentication for internal administrative accounts.
If a data breach occurs that is likely to cause you serious harm, we will notify you and the relevant regulator without undue delay, in line with our obligations.
Contact our DPO
Our Data Protection Officer oversees this policy and answers questions about how we handle your data. Write to [email protected] for anything related to privacy, data requests or complaints. You can also reach our support team on live chat, 24/7, for account-related privacy questions. We review this Privacy Policy regularly and publish any changes on this page, with the updated date shown at the top.
Frequently Asked Questions
Do you share my data with advertisers?
No. We never sell or rent your personal data. Marketing partners only receive data under contract to send communications you have consented to.
How do I stop marketing emails?
Unsubscribe via the link in any email, adjust preferences in your account settings, or contact [email protected]. Processing stops immediately once consent is withdrawn.
Why do you need my passport before withdrawal?
KYC rules under our MGA licence require us to verify your identity before your first withdrawal. This protects you and keeps the platform free of fraud and money laundering.
Can I delete my account and all my data?
Yes. Closing your account is free. We erase data we no longer need, but transaction and KYC records are retained for a minimum of 5 years to meet regulatory obligations.
Who do I complain to about privacy?
Contact our DPO first at [email protected]. If unresolved, you may complain to the Office of the Australian Information Commissioner or your local data protection authority.