Privacy Policy

Information we may collect

When you visit the Candy Casino website, create or use an account, make a transaction, play games or contact support, information connected with you may be collected and handled. The information involved depends on how you use the website, which services you request and which checks are needed to keep the account secure. Some information is provided directly by you, while other information may be collected automatically when you use the website.

Account and contact details

Account information may include your name, date of birth, residential details, email address, telephone details, username, password or other account credentials. It may also include account preferences, responsible gaming settings, communication choices and information supplied when you register, update your account or contact customer support. Keeping these details accurate helps Candy Casino administer the account and communicate with you about services, security and transactions.

Identity and verification information

Candy Casino may request information or documents to verify identity, age, account ownership and eligibility. This can include proof of identity, proof of address, photographs, payment ownership information or other verification material. Verification documents may contain sensitive personal information. They are used to support account checks, prevent unauthorised access, detect fraud and meet applicable legal or compliance requirements.

Payment and transaction records

Records may be created when you deposit funds, request a withdrawal, place wagers, receive winnings, use an applicable promotion or otherwise interact with your account balance. These records may include transaction dates, amounts, payment method details, account activity and related reference information. Payment providers or financial service providers may process some payment information. Depending on the payment method, Candy Casino may not receive or retain every part of a card or banking record.

Device, cookie and usage data

Technical information may be collected automatically when you access the website. This may include your IP address, browser type, operating system, device identifiers, general location information, language settings, pages visited, access times, referral information and records of interactions with website features. Cookies and similar technologies may help recognise a device, remember preferences, maintain a session and understand how the website is being used.

Communications and support records

If you contact Candy Casino, records of your communication may be kept. This can include support messages, questions, complaints, documents supplied during a request and information used to resolve a technical, account or payment issue. These records help provide consistent support, investigate concerns and maintain an appropriate history of account-related communications.

Sharing, security and retention

Candy Casino may share personal information where this is reasonably necessary to operate the website, provide requested services, protect players and systems or meet legal and compliance responsibilities. Information should only be made available to people or organisations that need it for an appropriate purpose. Sharing does not mean that all information is provided to every service provider.

• Payment and transaction providers involved in processing deposits, withdrawals or related account activity.
• Identity verification, security, fraud prevention and technology providers.
• Hosting, communications, customer support, analytics and other operational providers.
• Professional advisers or service providers assisting with business, security or legal matters.
• Courts, authorities or other parties where disclosure is required or permitted by applicable requirements.
• Other parties where you have requested or authorised the disclosure.

Some service providers may process information on behalf of Candy Casino and may be located in Australia or another country. Where information is handled by an external provider, reasonable contractual, technical or organisational safeguards may be used to help protect it. International handling can involve privacy protections that differ from those applying in Australia. Information may also be shared within a group of service providers where this is necessary for account administration, security, support or compliance.

Keeping information secure

Candy Casino uses reasonable administrative, technical and organisational measures intended to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. Depending on the circumstances, safeguards may include access controls, authentication processes, monitoring, secure transmission, encryption, staff procedures and restrictions on who can view or change information. No website or electronic transmission can be guaranteed to be completely secure, so players should also take care with their passwords, verification codes and devices.

Players should not share account passwords or security codes with other people. If you believe that your account, password, payment details or device may have been compromised, contact support as soon as possible. Candy Casino may ask questions or request verification before making security-sensitive changes, helping to reduce the risk of an unauthorised person accessing an account.

How long information is kept

Personal information is kept for as long as it is reasonably needed for the purposes described in this Privacy Policy. This may include account administration, customer support, transaction records, dispute handling, security, fraud prevention, compliance and general business records. Some records must be kept for a period required by law even after an account is closed or a deletion request is submitted.

When information is no longer required, it may be securely deleted, anonymised or otherwise disposed of. Information may remain in backups or restricted records for a reasonable period while systems are updated or legal and security requirements are satisfied. Retention does not necessarily mean that the information remains available for ordinary account use.