Privacy Policy

1. Data Controller

The data controller responsible for your personal information is RocketPlay Casino, licensed under the Curaçao gaming regulatory framework. All data processing activities are conducted in accordance with the Landsverordening bescherming persoonsgegevens (National Ordinance on the Protection of Personal Data) of Curaçao and, where applicable, the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Queries about data handling can be directed to [email protected] .

2. Information We Collect

We collect personal information that is necessary to operate a licensed gaming service, verify your identity, process transactions and comply with anti-money laundering obligations. The categories of information we collect include your full legal name, date of birth, residential address, email address, telephone number and government-issued identification documents such as a passport or driver’s licence. We also collect financial information, including bank account details, credit or debit card numbers and records of deposits and withdrawals. When you use our platform, we automatically collect technical data such as your IP address, browser type, device identifiers, session duration and pages visited. Where you interact with our responsible gambling tools, we retain records of self-exclusion requests, deposit limits and cooling-off periods.

3. Purpose and Legal Basis for Processing

We process your personal information for six primary purposes. First, account creation and identity verification — we cannot open an account without confirming your identity, age and residential address. Second, payment processing — every deposit and withdrawal requires us to process financial data to complete the transaction. Third, regulatory compliance — our Curaçao GCB licence and obligations under the National Ordinance on the Protection of Personal Data require us to conduct Know Your Customer (KYC) checks and maintain detailed transaction records for a minimum of five years. Fourth, fraud prevention and security — we analyse behavioural patterns and transaction data to detect and prevent fraudulent activity. Fifth, responsible gambling — we monitor play patterns to identify potential problem gambling and apply protective measures where required. Sixth, marketing communications — if you have opted in, we send you promotional materials about bonuses, tournaments and new games; you may withdraw this consent at any time.

4. KYC and Anti-Money Laundering

RocketPlay Casino applies KYC procedures in accordance with GCB licence conditions and the National Ordinance on Anti-Money Laundering. Before we process any withdrawal, and in certain circumstances before we accept deposits above specified thresholds, we require you to submit identity documents, proof of address and, where appropriate, proof of source of funds. Documents you may be asked to provide include a government-issued photo ID, a utility bill or bank statement dated within three months, and bank statements or payslips demonstrating the origin of funds deposited. We retain verified KYC documents for a minimum of five years from the date of your last transaction or account closure, whichever is later. Failure to complete KYC verification will result in suspension of withdrawal capabilities until verification is satisfied.

5. Cookies and Tracking Technologies

Our platform uses cookies, web beacons and similar tracking technologies. Strictly necessary cookies ensure the platform functions correctly, maintain your session and remember your language preferences; these cannot be disabled. Analytical cookies, provided by services including Google Analytics, measure traffic volumes, session behaviour and feature usage — this data is aggregated and does not identify you individually. Marketing cookies track your activity across websites to deliver relevant promotional content; these are only placed with your consent. You can manage cookie preferences through our Cookie Settings panel or by adjusting your browser settings, though disabling certain cookies may limit platform functionality.

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. We share your information only in the following circumstances: with payment processors and banking partners to facilitate deposits and withdrawals; with identity verification and KYC service providers to confirm your identity and assess fraud risk; with regulatory authorities, including the GCB and law enforcement agencies, where we are legally required to disclose information; with our technology infrastructure providers, including cloud hosting and cybersecurity services, under contractual data processing agreements; and with responsible gambling support organisations where we determine that a referral is in your interest. All third-party service providers are contractually required to process your data only for the specified purpose and to maintain appropriate security standards.

7. International Data Transfers

RocketPlay Casino is operated from Curaçao, and your personal information may be transferred to and processed in jurisdictions outside Australia. Where such transfers occur, we implement contractual safeguards to ensure your data receives a level of protection consistent with the Australian Privacy Principles. By using our platform, you acknowledge and consent to the transfer of your personal information to Curaçao and other jurisdictions where our service providers operate.

8. Data Retention

We retain your personal information for as long as your account remains active and for a minimum of five years after account closure, in compliance with GCB anti-money laundering requirements. Marketing data is retained until you withdraw your consent. Technical log data is retained for 12 months. After applicable retention periods expire, we securely delete or anonymise your data.

9. Your Rights Under the Australian Privacy Principles

The Australian Privacy Act 1988 grants you specific rights in relation to your personal information. You have the right to access the personal information we hold about you, request correction of inaccurate or incomplete information, complain about a breach of the APPs and, in certain circumstances, request that we refrain from using your information for direct marketing. To exercise any of these rights, contact us at [email protected] . We will respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

10. Security

We implement technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. These measures include TLS encryption for data in transit, AES-256 encryption for data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, multi-factor authentication for administrative systems and regular third-party penetration testing. No online system is entirely free of risk; however, we review and update our security practices on an ongoing basis.

11. Responsible Gambling Data

Information collected through our responsible gambling tools — including self-exclusion elections, deposit limits, session time limits and cooling-off periods — is processed solely to give effect to your instructions and to monitor compliance. This data is not used for marketing purposes and is retained for a minimum of five years to enable us to enforce self-exclusion periods if you attempt to re-register.

12. Minors

RocketPlay Casino does not knowingly collect personal information from individuals under the age of 18. Our KYC process is designed to identify and exclude minors from accessing the platform. If we discover that we have collected information from a minor, we will delete it promptly and close the associated account.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email to your registered address or by prominent notice on the platform at least 14 days before taking effect. Your continued use of the platform after the effective date of any update constitutes acceptance of the revised policy.

14. Contact

For any questions, requests or complaints relating to this Privacy Policy, contact us at [email protected] . We aim to respond to all privacy-related enquiries within 30 days.