Your Privacy at Hollywin Casino
This Privacy Policy explains exactly what personal data we collect when you play at Hollywin Casino, why we collect it, who we share it with, and how long we keep it. It applies to every page on hollywin-aud.com and to all interactions with our support team.
The Data We Collect
We collect only the data we need to run your account, process your payments and meet our legal obligations. That breaks down into six categories, listed below.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: government-issued photo ID, proof of address dated within 3 months and proof of payment method, collected under our KYC process.
- Transaction data: deposits, withdrawals, bonus wagering and game outcomes tied to your account.
- Technical data: IP address, device type, operating system, browser type and approximate location derived from your IP.
- Gameplay behaviour: the games you play, session duration, bet sizes and win/loss history.
- Marketing preferences: whether you have opted in to receive bonus offers, promotions and newsletters from us.
How We Use Your Data
Your data powers seven core functions. We create and maintain your player account, verify your identity before your first withdrawal, process deposits and withdrawals through your chosen payment method, and detect fraud and bonus abuse. We also monitor play patterns to support responsible gambling, send you marketing only when you have consented, and meet the regulatory reporting duties set by our licensing authority.
Our Legal Bases
Contract: we process identity, account and transaction data because they are necessary to provide the gaming services you signed up for. Without them we cannot open an account or pay out winnings.
Legal obligation: KYC verification, anti-money-laundering checks and record-keeping for our MGA licence (MGA/B2C/812/2025) all rest on legal obligations we cannot avoid.
Legitimate interest: fraud prevention, security monitoring and aggregate service improvement rely on our legitimate interest in running a safe, fair casino.
Consent: marketing emails, promotional SMS and non-essential cookies are processed only with your consent, which you may withdraw at any time.
How Long We Keep It
Retention depends on the type of data and the reason we hold it. Gambling regulation requires us to keep transaction and verification records for at least 5 years after your last activity or account closure. Everything else is kept only as long as needed.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years for regulatory records |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering data | 5 years minimum under AML rules |
| Technical and gameplay logs | Up to 12 months for security analysis |
| Marketing preferences | Until you withdraw consent or delete your account |
Who We Share Data With
We never sell your personal data. We share it only with categories of partners who need it to deliver our service: payment processors handling your deposits and withdrawals, KYC and AML screening providers that verify your documents, the Malta Gaming Authority and other regulators when reporting is required, and analytics providers that help us understand site performance in aggregate. Each partner is bound by contract to use your data only for the purpose we engaged them for.
Your Rights Over Your Data
You control your personal information. Where privacy law applies to you, including the Australian Privacy Principles and, if you access us from the EU, the GDPR, you can exercise the following rights at any time by contacting our support team at [email protected].
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: request deletion where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing and optional cookies at any time.
- Complain: raise a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
Cookies and Tracking
We use essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies set only with your consent. You can change your cookie choices any time from the cookie banner or your browser settings. Full details, including a complete list of the cookies we set and their lifespans, are on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS. Data at rest is encrypted, access to player records is restricted to staff who need it for support, payments or compliance, and every access is logged. We run regular security reviews and penetration tests on our platform.
If a data breach occurs that is likely to cause you serious harm, we will notify you and the relevant regulator without undue delay, in line with our obligations under the Notifiable Data Breaches scheme and GDPR Article 33 where applicable.
Contact Our Data Team
Questions about this policy or your data can go to our Data Protection Officer at [email protected]. We aim to respond to all privacy requests within 30 days. If you are unhappy with our answer, you may complain to the OAIC or your local data protection authority.
Frequently Asked Questions
How do I request a copy of my data from Hollywin Casino?
Email [email protected] or our DPO at [email protected] with your request. We verify your identity and send your data in a readable format within 30 days.
Can I delete my account and all my data?
You can close your account any time via support. Verification and transaction records must be kept for at least 5 years under gambling regulations, but marketing data is deleted as soon as you withdraw consent.
Do you sell my personal information to advertisers?
No. We share data only with payment processors, KYC/AML providers, regulators and analytics partners, each bound by contract to use it solely for the purpose we engaged them for.
Why do you need my ID before my first withdrawal?
Our MGA licence requires identity verification to prevent fraud, money laundering and underage gambling. We typically complete checks within 24-48 hours of receiving your documents.