PRIVACY POLICY

Categories of Personal Information We Collect

To provide our legal wagering services and comply with regulatory duties, we collect various categories of personal data:

• Identity Data: Includes legal name, date of birth, gender, and government-issued identification numbers for age and identity verification.
• Contact Data: Includes residential address, email address, and mobile phone number.
• Account & Transaction Data: Registration credentials, deposit and withdrawal records, wagering history, account balances, and gaming patterns.
• Financial Data: Permitted debit card details, bank account details, and funding transaction logs.
• Technical & Usage Data: IP address, device fingerprints, browser cookies, geolocation logs, and system interaction data.
• Communications Data: Inquiries, contact logs, support tickets, and voluntary survey responses.

How and Why We Use Your Personal Information

We process your personal information only for legitimate business purposes and to fulfill legal or regulatory obligations, including:

• Providing and managing wagering and racing services.
• Conducting mandatory identity and age verification check-ups.
• Meeting Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) requirements.
• Processing payment transactions safely and securely.
• Preventing fraud, collusive play, and other prohibited activities.
• Executing state and federal regulatory reporting to the Victorian Gambling and Casino Control Commission (VGCCC).
• Deploying responsible gambling monitoring tools and reality checks.
• Offering system upgrades, marketing communication, and customer support.

Disclosure of Personal Information to Third Parties

Betaroo.co does not sell or lease customer databases. We disclose personal information only to nominated recipients under strict privacy agreements:

• Regulators & Integrity Bodies: Including the Victorian Gambling and Casino Control Commission (VGCCC), sports governing bodies, and racing authorities for integrity assurance.
• Law Enforcement Agencies: When required by law or to assist under legal warrants.
• Financial Infrastructure Providers: Nominated payment processors, banks, and secure transactional services.
• Identity Verification Partners: Independent database services authorized to perform age/AML verification checks.
• National Self-Exclusion Register (BetStop): Ensuring strict compliance with exclusions across the Australian online wagering industry.

Data Retention

We retain personal data for as long as is necessary to support active customer agreements and satisfy statutory record-keeping rules. Under AML/CTF laws and applicable licensing terms, financial records and identity checks must be preserved for at least 7 years post-account closure. Once these obligations are met, records are securely destroyed or anonymized.

Direct Marketing

We may use your details to send targeted promotions. You have the right to opt-out of marketing communications at any time using your account settings or unsubscribe links. Crucially, in compliance with federal guidelines, no marketing materials are sent to individuals actively registered on the BetStop National Self-Exclusion Register.

Data Breach Notification

In the unlikely event of an unauthorized data access or leak, we comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act. If a breach is likely to result in serious harm to you, we will immediately notify you and the Office of the Australian Information Commissioner (OAIC) with specific details of the incident and recommended protective actions.

Children's Privacy

Our wagering services are strictly limited to persons aged 18 years or older. We do not knowingly collect, store, or process any personal information from individuals under the age of 18. Any account discovered to be associated with an underage user is instantly locked, and all related data is removed from our operational databases.

How We Protect Your Personal Information

We employ strict industry-standard security measures to safeguard all personal information:

• Cryptographic Standards: Full Transport Layer Security (TLS) encryption on all web and data transfers.
• Access Controls: Restricted data access limited strictly to employees with business reasons to interact with the data.
• Intrusion Testing: Continuous monitoring, automated threat detection, and periodic professional penetration testing.
• Physical Security: Storage of records on geographically secure, compliance-certified cloud data centers located in Australia.

Access Correction and the Privacy Officer

You have the right to request access to the personal information we hold about you and to ask for corrections. To submit an inquiry, please contact our team via the Help Centre.

Complaints

If you believe we have breached your privacy rights under the Australian Privacy Principles, you can lodge a formal complaint with our Privacy Officer. We aim to review and respond to all complaints within 30 business days. If our resolution is not satisfactory, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Overseas Disclosure of Personal Information

While we prioritize keeping personal data inside Australian boundaries, some IT backend partners, cloud tools, or analytics providers may operate servers internationally. Where personal information is disclosed to overseas entities, we ensure they are bound by contractual commitments to protect your information to a standard equivalent to the APPs.

Related Information

For additional details on our data management and wagering conditions, please review our complementary legal resources:

Cookie Policy →

Terms and Conditions →

Responsible Gambling →

Contact Us →