Ricky Casino Privacy Policy
Ricky Casino respects your right to privacy. This policy explains the personal information we collect about Australian players, the reasons we hold it, the parties we share it with, and the choices you have at every step. It is written to mirror the thirteen Australian Privacy Principles (APPs) set out in Schedule 1 of the Privacy Act 1988 (Cth).
What This Policy Covers
This document applies to everyone who registers an account, deposits or withdraws funds, contacts our support team, subscribes to our promotional emails, or simply browses our website from an Australian IP. It covers our domains, mobile web experience and any branded landing pages we operate. It does not cover external sites we link to — their own policies apply when you follow those links.
Who We Are and How to Reach Our Privacy Team
Ricky Casino is the trading name of the entity that operates this site under a Curaçao gaming licence. Our Privacy Officer is the first point of contact for any question about how your data is handled. Reach the team by emailing [email protected] with the subject line "Privacy enquiry" and we will acknowledge within two business days.
The Personal Information We Collect About You
We collect three categories of information. Account data includes the name, email, date of birth, residential address and contact number you provide at sign-up. Verification data includes the identity documents and supporting evidence we request to satisfy Know-Your-Customer (KYC) obligations — passport or driver licence scans, recent utility bills, selfie verification. Activity data includes deposits, withdrawals, bets, game sessions, browser fingerprint, IP address and device identifiers. We do not knowingly collect data from anyone under 18.
Why We Collect, Hold and Use Your Information
The lawful basis for collection is twofold. We rely on performance of the player agreement to register accounts, process payments and pay winnings. We rely on legal obligation to satisfy our Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) duties, responsible-gambling controls and any direction issued by a recognised regulator. We may also send transactional communications about your balance, bonus status or upcoming withdrawals — these are operational, not promotional, and cannot be switched off while your account is active.
How We Share Information With Third Parties
We disclose personal information only to processors who help us run the service. These include licensed payment providers (for PayID, POLi, BPAY, Neosurf and card rails), our KYC verification partner, our cloud hosting and email infrastructure providers, and our customer-support tooling. Each processor is contractually bound to confidentiality and to use the data only for the purpose we instruct. We never sell your personal information to data brokers, advertisers or affiliates.
Cookies, Pixels and Browser Storage
Our site uses first-party cookies for session management, fraud detection and remembering your stated preferences. We also use a limited number of third-party analytics pixels to measure traffic patterns in aggregate. You can clear or block cookies through your browser settings; some site functions, including login persistence and game-play state, will not work without them. A separate cookies banner gives you a one-click consent choice on first visit.
Storage, Retention and the AML/CTF Seven-Year Rule
Account, verification and transactional records are retained for seven years after the closure of your account. This window is fixed by the record-keeping obligations under the AML/CTF Act 2006 and is not optional for us. Marketing-only data (for example, your email preferences if you have unsubscribed) is purged within ninety days unless retained for the purpose of suppression. Backup copies expire on rolling schedules and are not used to restore deleted live data.
Your Rights — Access, Correction and Withdrawal
Under APP 12 and APP 13 you may ask us for a copy of the personal information we hold about you, and you may ask us to correct anything that is inaccurate or out of date. We respond to verified requests within thirty days at no charge. You may also withdraw consent to direct marketing at any time — the footer of every promotional email carries an unsubscribe link, and your profile page exposes the same toggle.
Cross-Border Transfers and Overseas Disclosure
Some of our processors host data in the European Economic Area, the United Kingdom, Singapore or the United States. Before any cross-border transfer we satisfy ourselves that the recipient is bound to standards substantially similar to the APPs, either by contract or by the data-protection law of the receiving jurisdiction. You can request the current list of overseas recipients from our Privacy Officer.
Complaints, the OAIC and How We Respond
If you believe we have mishandled your personal information, raise a complaint with our Privacy Officer first. We aim to acknowledge within two business days and resolve within thirty days. If you remain dissatisfied, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992 — they are the independent regulator for the Privacy Act 1988.
Changes to This Policy
We review this policy at least once a year and whenever we change a material processing practice. The current version date sits at the bottom of this page. Material changes are notified by an in-product banner at next login; minor edits are published silently.
Last reviewed: 2026-05-20.