Our Privacy Policy
This policy sets out what personal data we collect when you play at Justbet Casino, why we collect it, who we share it with and the rights you hold over it. It applies to every visit to justbet-au.com, whether you hold an account with us or not.
What Data We Collect
Categories of personal data
We collect only the data we need to run your account, meet our licensing obligations and keep our platform safe. Below is the full list of categories, split between what you give us directly and what our systems record automatically.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: passport, driver licence or national ID, plus proof of address and proof of payment method, required under our KYC process before your first withdrawal.
- Transaction data: deposits, withdrawals, bets placed, winnings and bonus activity across AUD, BTC, USD and EUR.
- Technical data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: games played, session duration, bet sizes, win and loss history, and responsible gambling indicators such as deposit and loss patterns.
- Marketing preferences: which channels you opted into, promo codes redeemed (for example JUST250) and how you respond to our offers.
How We Use Your Data
Purposes of processing
Every processing activity we carry out maps to a specific purpose. We do not use your data for anything outside this list, and we never sell it to advertisers or data brokers.
- Creating and administering your player account, including login, profile settings and VIP tier assessments across our 5-tier club.
- Verifying your identity and age under KYC rules before your first withdrawal.
- Processing deposits and withdrawals through PayID, Neosurf, CashtoCode, Visa, Mastercard, MiFinity, Jeton, Skrill and Bitcoin.
- Preventing fraud, bonus abuse, multi-accounting and money laundering.
- Monitoring gambling behaviour to flag harm indicators and act on responsible gambling limits you set with us.
- Sending marketing messages where you have consented, including our weekly cashback and reload offers.
- Meeting legal and regulatory obligations owed to the Curaçao eGaming authority.
Our Legal Bases Explained
Performance of a contract
When you register an account and play with us, we process your identity, transaction and gameplay data because it is necessary to deliver the service you signed up for. Without it we cannot hold your balance, settle bets or pay out winnings up to the 7,500 AUD daily withdrawal limit.
Compliance with a legal obligation
Our Curaçao eGaming licence obliges us to verify your identity, screen transactions against sanctions lists and retain records for set periods. We cannot waive these checks, and we cannot delete the underlying records while the retention obligation is live.
Legitimate interests
We rely on legitimate interests for fraud prevention, security monitoring and service improvement. We weigh our interests against your rights each time and only proceed where the impact on you is minimal and the purpose cannot be met another way. Aggregated, anonymised statistics on game popularity fall under this basis.
Consent
Marketing emails, SMS and push notifications run on your explicit consent, captured when you opt in and logged with a timestamp. You can withdraw consent at any time from your account settings or by contacting our support team, and withdrawal never affects the lawfulness of messages sent before it.
How Long We Keep Records
Retention by data category
We hold each category of data only as long as the law requires or the purpose lasts. Where our licence sets a minimum, that minimum wins over any deletion request. Since our launch in 2023 we have applied these periods consistently across all accounts.
| Data category | Retention period |
|---|---|
| Identity and account data | While your account is active, then 5 years after closure |
| KYC verification documents | 5 years after account closure, per regulatory requirement |
| Transaction and wagering records | Minimum 5 years after account closure |
| Gameplay and session logs | 5 years, in line with AML record keeping |
| Device, IP and security logs | Up to 12 months |
| Marketing preferences and consent records | Until you withdraw consent, then 12 months as proof of withdrawal |
| Support chat and email history | 3 years after your last contact |
Who We Share Data With
Categories of recipients
We share data only with processors and authorities who need it for a defined job, always under written agreements that bind them to confidentiality and security standards matching ours. We never disclose your data for third party advertising.
- Payment processors: Visa, Mastercard, MiFinity, Jeton, Skrill and Bitcoin payment infrastructure, each receiving only the fields needed to move your funds.
- KYC and AML verification providers: they check your documents against official registries and return a match result to us.
- Game and platform providers including Pragmatic Play, Evolution, NetEnt, Play'n GO, BGaming and Hacksaw Gaming, who receive pseudonymised player IDs, never your identity documents.
- Regulators and law enforcement: the Curaçao eGaming authority and competent bodies where a lawful request applies.
- Analytics and email delivery providers, working on our instructions with data stripped of direct identifiers where possible.
Your Rights Over Your Data
Rights you can exercise
Whatever the legal regime that applies to you, we honour the same practical set of rights. Email [email protected] or message our 24/7 live chat and we will verify your identity, then respond within 30 days. Requests are free unless clearly excessive or repetitive.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate details such as a mistyped address.
- Erasure: ask us to delete data where no retention obligation applies.
- Portability: receive your account and transaction history in a machine readable format.
- Objection and restriction: object to processing based on legitimate interests, or ask us to pause processing while a dispute is resolved.
- Withdrawal of consent: opt out of marketing at any time without losing access to your account.
- Complaint: raise a complaint with the Office of the Australian Information Commissioner (OAIC) or, if you are in the EU, your national data protection authority.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that only load after you accept them in the consent banner. Your choices are stored and can be changed at any time from the cookie settings link in our footer.
The full inventory of cookies, their purposes and lifespans is set out in a dedicated document. Read our Cookie Policy for the complete breakdown, including how to block or delete cookies through your browser without breaking core site functions.
How We Protect Your Data
Technical and organisational safeguards
All traffic between your device and our platform runs over TLS encryption, and verification documents sit in access restricted storage separate from our general databases. Staff access follows least privilege principles, is granted by role, logged, and reviewed quarterly. Card and wallet details are handled by certified payment processors rather than stored on our own servers.
If a data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly without undue delay, together with clear steps on what you can do. Our security team tests the platform continuously, and an external audit of our controls takes place on a recurring cycle set by our licence.
Frequently asked questions
Can I play without sharing my ID documents?
You can register and play with deposits, but our licence requires full KYC verification before your first withdrawal. Send your ID, proof of address and payment verification once and we will not ask for them again unless something material changes.
How do I stop marketing emails from Justbet Casino?
Open your account settings and switch off each channel, click the unsubscribe link in any email, or ask our live chat team to remove you. We stop marketing immediately and keep only a record proving your withdrawal for 12 months.
Do you keep my data after I close my account?
Yes, for a fixed period. Transaction and KYC records must be kept for at least 5 years after closure under our regulatory obligations. Everything outside those obligations is deleted within 30 days of closure.
Who do I contact about a privacy concern?
Email [email protected] for anything privacy related, or use our 24/7 live chat for a faster first response. If we cannot resolve your concern, you can complain to the Office of the Australian Information Commissioner.