Privacy Policy

What Data is Collected and How It Works

Definition is straightforward. Data collection is the systematic harvesting of information provided directly by you, observed from your activity, or obtained from third parties. It's not a single event at registration. It's a continuous process from the moment you land on the site until years after you leave. The mechanism is a network of digital touchpoints — forms, cookies, server logs, API calls to payment gateways, and integration with game software. Each interaction generates a data point. Together, they form a behavioural and financial identity far more detailed than your public persona.

Comparative analysis here is stark. A generic international casino might collect the same broad categories. But an Australia-localised operation like Dazardbet must intricately tie its collection to specific Australian legal triggers. The requirement to verify identity against a government-issued document? That's the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. Keeping records for 7 years? Same Act. The need to collect data for responsible gambling interventions? That's a condition of the Northern Territory licensing (if applicable) and a core APP requirement to use data in a way that prevents harm. The collection isn't arbitrary. Each field maps to a legal or operational imperative. When you're asked for your address, it's not for a newsletter. It's often to cross-reference with electoral roll or utility databases for identity verification — a standard practice in Australian financial services.

Practical application for an Australian player in, say, Brisbane: When you sign up and claim a welcome bonus, you provide identity and financial data. That's used to verify you and process your deposit. As you play, your transactional and behavioural data is analysed. If you switch from A$1 spins on classic pokies to A$50 spins on live casino blackjack within a short period, the system may flag this for a responsible gambling review. This could lead to a check-in from customer support. The benefit is protection. The risk is perceived intrusion. But that's the trade-off. Your data is both the key to seamless play and the trigger for safer gambling protocols. According to data from the Australian Communications and Media Authority's 2020 report on Australians' use of online services, over 86% of online service users were concerned about the security of their personal data online — this concern is amplified in a financial context like gambling.

1. Core Service Delivery: This is non-negotiable. Your identity data verifies your account. Your financial data processes your A$100 deposit via POLi. Your gameplay data settles the bet. This is the primary purpose.
2. Regulatory & Security Compliance: Data is used to generate reports for regulators, to monitor for fraud (like chip dumping in poker), and to comply with court orders. This is a legal requirement, not an option.
3. Marketing & Personalisation: This is the grey zone. Using your data to email you a free spins offer on a new pokie you've played similar titles of is a soft expectation. Using psychographic profiling from your speed of play to serve hyper-persuasive ads at 2 AM is not. Dazardbet's policy must delineate this.
4. Service Improvement: Aggregated, anonymised data is used to fix bugs, improve mobile load times, or decide which game provider to add next. This is generally uncontroversial if done properly.

Sharing is inevitable. No casino is an island. The policy must name the categories of third parties. Comparative analysis shows a weak policy uses vague terms like "trusted partners." A strong one lists them. Dazardbet's sharing likely includes:

• Payment Processors: Companies like PayPal or Stripe. They receive your payment instruction details to execute the transaction. They are separately regulated.
• Game Providers: Companies like Pragmatic Play or Evolution. When you play a live game show, the provider needs a player ID to log your bets and outcomes. They become a separate data controller for that session.
• Cloud & IT Infrastructure: Hosting services (e.g., AWS, Google Cloud) that store the data. They are processors, not controllers.
• KYC/AML & Fraud Vendors: Specialised firms that cross-check your documents against global databases.
• Marketing & Analytics Platforms: Tools like Google Analytics or CRM software.

Protection Measure	Technical Implementation	Limitation or Risk
Encryption (in transit)	TLS 1.2+ (SSL) for all data transfer between your device and casino servers.	Standard practice. Does not protect data at rest or on compromised endpoints.
Encryption (at rest)	AES-256 encryption for sensitive databases (e.g., identity documents).	Key management is critical. A lost key means lost data.
Access Controls	Role-based access (RBAC) for staff. E.g., marketer cannot view full credit card details.	Insider threat remains. Logging and auditing of access is essential.
Network Security	Firewalls, intrusion detection/prevention systems (IDS/IPS), DDoS mitigation.	Constantly evolving threat landscape. Zero-day exploits are a constant risk.
Physical Security	Data centres with biometric access, 24/7 surveillance, redundant power.	Largely mitigates physical theft, irrelevant for cyber attacks.

Practical application for a player in Adelaide: You win A$5,000 on a progressive jackpot. To withdraw, you must verify. You upload your driver's licence and a bank statement. That data is encrypted, shared with a KYC vendor in Malta for automated checks, and stored in an encrypted database in a Singapore data centre. A staff member in the finance team accesses it to approve your withdrawal. The chain is long. The protection is only as strong as the weakest contractual agreement or employee training session. Dr. Charles Livingstone, Associate Professor at Monash University, has noted the particular risks in digital environments: “The aggregation of financial and behavioural data by online gambling operators creates a valuable target for cybercriminals. The onus is on operators to invest in security commensurate with the sensitivity of the data they hold.” The policy should reflect that investment level, not just list standard tech.