Privacy Policy

Version: 1.0  |  Last Updated: 30 October 2026

1. Introduction

Welcome to Bitstarz AU ("we", "us", "our"), accessible at bitstarzau.com. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with our platform. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, with whom we may share it, and what rights you hold over your own data.

This document forms part of a suite of legal documents that govern your relationship with Bitstarz AU, alongside our Terms and Conditions and our Responsible Gaming Policy. By accessing our website or creating an account, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

We review and update this policy periodically to reflect changes in law, technology, or our business practices. The version number and "Last Updated" date at the top of this page indicate the current revision.

2. Data We Collect

We collect personal data through several channels: directly from you when you register or use our services, automatically through your interaction with our website, and from trusted third parties. The categories of data we collect include, but are not limited to, the following:

2.1. Identity and Contact Information

• Full legal name and date of birth
• Residential address, city, state, and postcode
• Email address and telephone number
• Copies of government-issued identity documents (e.g., passport, driver's licence) for identity verification and age verification purposes
• Selfie or live photo required for Know Your Customer (KYC) checks

2.2. Account and Financial Information

• Username and encrypted password
• Payment method details, including card numbers (partially masked), e-wallet identifiers, cryptocurrency wallet addresses, and bank account references
• Transaction history, including deposits, withdrawals, bonuses, and wager records denominated in Australian Dollars (AUD) or supported cryptocurrencies
• Account balance and responsible gaming limits set by the player

2.3. Technical and Usage Data

• IP address and approximate geolocation derived from it
• Browser type, version, and operating system
• Device identifiers (e.g., device ID, MAC address where applicable)
• Pages visited, session duration, clickstream data, and referring URLs
• Game history, preferred game categories, and in-session behaviour patterns

2.4. Communications Data

• Support chat transcripts and email correspondence
• Responses to surveys or promotional campaigns
• Complaints and dispute records

2.5. Sensitive Data

In limited circumstances — for example, to fulfil our responsible gaming obligations described in our Responsible Gaming Policy — we may collect information about a player's self-assessed vulnerability or self-exclusion status. We treat such data with the highest level of care and restrict access to authorised personnel only.

3. How We Use Your Data

We process your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected.

3.1. Service Delivery and Account Management

We use your identity, contact, and financial information to create and maintain your account, process deposits and withdrawals across our supported payment methods (Visa, Mastercard, PayPal, Skrill, Neteller, PayID, Bitcoin, Ethereum, Litecoin, Neosurf, Paysafecard, and direct bank transfer), settle wagers, and deliver winnings. Without this processing, we cannot provide our core gaming services.

3.2. Verification and Compliance

We are required to verify your identity and age (minimum 18 years) before you may deposit funds or withdraw winnings. We also screen your details against sanctions lists and conduct anti-money laundering (AML) checks as part of our financial crime prevention obligations. Relevant transaction data may be retained to satisfy statutory record-keeping requirements.

3.3. Responsible Gaming Monitoring

We analyse gameplay patterns, deposit frequency, and session duration to identify early indicators of potential gambling harm. Where our systems flag a concern, a member of our safer gambling team may make contact. This processing supports our obligations outlined in our Responsible Gaming Policy.

3.4. Marketing and Promotions

With your consent, we may send you emails, SMS messages, or push notifications about promotions, bonus offers, and new game releases. You may withdraw your consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at support@bitstarzau.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

3.5. Analytics and Service Improvement

We use aggregated and pseudonymised usage data to improve site performance, personalise your experience, and develop new features. This processing helps us understand which games are most popular, where technical issues arise, and how to optimise our platform for Australian players.

3.6. Customer Support

When you contact our support team, we use your account and communications data to resolve your query efficiently, maintain a record of interactions, and train our staff where appropriate.

4. Legal Bases for Processing

Every processing activity we undertake is grounded in at least one recognised legal basis. The primary legal bases we rely upon are as follows:

Where we rely on legitimate interests, we conduct a balancing test to ensure that our interests do not override your fundamental privacy rights.

5. Data Sharing & Third Parties

We do not sell your personal data to any third party. We may, however, share your data with carefully selected partners and service providers strictly for the purposes described in this policy.

5.1. Categories of Recipients

• Payment processors and financial institutions: To facilitate deposits and withdrawals via payment methods such as Visa, Mastercard, PayPal, Skrill, Neteller, PayID, and supported cryptocurrency networks.
• Identity verification providers: Third-party KYC and AML screening platforms that verify documents, check sanctions lists, and confirm proof of address.
• Game software providers: Casino game studios whose platforms are integrated into our site may receive a session token and anonymised player identifier necessary to operate gameplay.
• Cloud hosting and infrastructure providers: Servers and databases used to store your account data are maintained by reputable cloud providers operating under strict data processing agreements.
• Analytics and fraud prevention services: Tools that help us detect unusual session activity, prevent account takeover, and understand platform performance.
• Regulatory authorities: We may be required to disclose specific data to government agencies, law enforcement bodies, or financial intelligence units in response to a lawful request or legal obligation.
• Responsible gaming support bodies: In strictly limited circumstances — for example, where a self-exclusion request is processed through the national BetStop register — relevant data may be shared with the appropriate authority.

5.2. Contractual Safeguards

All third-party service providers with whom we share personal data are bound by written data processing agreements that require them to process your data only on our documented instructions, implement appropriate technical and organisational security measures, and not disclose your data to additional parties without our prior written authorisation.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies — including pixel tags, web beacons, and local storage objects — to deliver, secure, and improve our services. A cookie is a small text file placed on your device when you visit our site.

6.1. Types of Cookies We Use

• Strictly necessary cookies: Essential for the website to function. They maintain your session, remember your login state, and protect against cross-site request forgery. These cannot be disabled without impacting core functionality.
• Performance and analytics cookies: Collect anonymised data about how visitors use our site — pages visited, time spent, errors encountered — to help us improve performance.
• Functional cookies: Remember your preferences, such as language settings, preferred currency display, and responsible gaming limits, to provide a more personalised experience.
• Marketing and targeting cookies: Used, with your consent, to deliver relevant promotional content and measure the effectiveness of our advertising campaigns. These may be set by us or trusted advertising partners.

6.2. Managing Your Cookie Preferences

You may adjust your cookie preferences at any time via the cookie consent banner displayed on your first visit to our site. You can also configure your browser settings to refuse non-essential cookies; however, doing so may affect certain features of our platform. Note that strictly necessary cookies cannot be disabled through these controls.

7. Data Security

We implement a layered approach to information security, combining technical controls, organisational measures, and staff training to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

7.1. Technical Measures

• TLS/SSL encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive data stored in our databases, including financial records and identity documents, is encrypted at rest using AES-256 or equivalent algorithms.
• Access controls: Personal data is accessible only to authorised employees and third-party processors who require it to fulfil their specific role. Role-based access controls and multi-factor authentication are enforced.
• Penetration testing and vulnerability scanning: We conduct regular security assessments to identify and remediate potential vulnerabilities.
• Intrusion detection systems: Automated monitoring tools are in place to detect and respond to suspicious activity in real time.

7.2. Incident Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals promptly. If you suspect any unauthorised activity on your account, contact us immediately at support@bitstarzau.com.

8. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are outlined below:

• Active account data: Retained for the duration of your account and updated as necessary to remain accurate.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction to satisfy AML and financial record-keeping obligations.
• Identity verification documents: Retained for a minimum of five (5) years from the closure of your account or the end of our business relationship, whichever is later.
• Communications and support records: Retained for up to three (3) years from the date of the interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years thereafter to demonstrate compliance.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised dataset is no longer subject to this Privacy Policy.

9. Your Rights

As an individual whose data we process, you hold a number of important rights with respect to your personal information. We are committed to honouring these rights and will respond to any valid request within a reasonable timeframe (ordinarily within 30 days of receipt, subject to complexity).

9.1. Right of Access

You have the right to request a copy of the personal data we hold about you, along with supplementary information about how and why we process it. You may submit an access request by emailing privacy@bitstarzau.com. We may ask you to verify your identity before processing the request to protect against unauthorised disclosure.

9.2. Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. You can update basic account details (such as your contact address) directly through your account settings. For more sensitive corrections, please contact us at privacy@bitstarzau.com.

9.3. Right to Erasure ("Right to Be Forgotten")

In certain circumstances, you may request that we delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for continued processing. Please note that this right is not absolute: we are required to retain certain data (such as financial transaction records) to comply with legal obligations, even after account closure. We will inform you of any data that must be retained and the reasons why.

9.4. Right to Restriction of Processing

You may request that we restrict the processing of your data in specific situations — for example, if you contest the accuracy of the data and we need time to verify it, or if you have objected to processing based on legitimate interests and we are assessing whether our grounds override yours. During any restriction period, we will only store your data and will not carry out any further active processing activities without your consent.

9.5. Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller where technically feasible. To exercise this right, contact privacy@bitstarzau.com.

9.6. Right to Object

You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. If you object to direct marketing, we will cease that processing immediately. If you object to other legitimate interest-based processing, we will assess whether our compelling legitimate grounds override your rights and communicate our decision to you.

9.7. Rights Related to Automated Decision-Making

Where we use automated systems to make decisions that significantly affect you — for example, automated fraud detection resulting in account suspension — you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Please contact our support team at support@bitstarzau.com to trigger a manual review.

9.8. How to Exercise Your Rights

All rights requests should be directed to privacy@bitstarzau.com with the subject line "Data Subject Request". We will acknowledge your request promptly and aim to respond fully within 30 calendar days. In complex or high-volume cases, this period may be extended by a further 30 days, and we will notify you of any such extension.

10. International Data Transfers

Our platform is accessible to players in Australia, and we store the majority of your data on servers located in Australia or in countries with comparable data protection standards. However, some of our third-party service providers — including certain KYC verification engines, game software studios, and cloud infrastructure providers — may be located in, or route data through, countries outside Australia.

When we transfer personal data internationally, we take steps to ensure that an adequate level of protection accompanies that data throughout its journey. The safeguards we rely upon include:

• Transferring data to countries recognised as providing adequate data protection by relevant authorities;
• Implementing standard contractual clauses or binding corporate rules with the receiving entity, requiring them to protect your data to a standard equivalent to that applied in Australia;
• Applying additional technical safeguards — such as end-to-end encryption and pseudonymisation — before any cross-border transfer takes place.

You may request further information about the specific safeguards applied to any particular international transfer by contacting privacy@bitstarzau.com.

11. Minors

Our services are intended exclusively for individuals who are aged 18 years or older. We do not knowingly collect personal data from anyone under the age of 18. All new registrants are required to confirm that they meet this minimum age requirement at the point of registration, and we conduct identity and age verification checks to substantiate this confirmation.

If we discover, or are notified, that we have inadvertently collected personal data from a person under 18, we will immediately suspend the associated account and take steps to delete the relevant data as soon as practicable. If you believe that a minor has registered on our platform, please alert us immediately at support@bitstarzau.com so that we can act without delay. Further information about our approach to protecting young people is contained in our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or the services we offer. The revised policy will be published on this page with an updated version number and "Last Updated" date. Where changes are material — meaning they significantly affect your rights or the way in which we process your data — we will provide you with advance notice via email or a prominent notice within your account dashboard, giving you a reasonable opportunity to review the changes before they take effect.

Your continued use of our services after any amendments have come into force constitutes your acceptance of the updated policy. If you do not agree to the revised policy, you must cease using our services and may request account closure by contacting support@bitstarzau.com. We recommend that you review this page periodically to remain informed about how we protect your personal data.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which we handle your personal data, please do not hesitate to contact us using the details below. We are committed to addressing your enquiries promptly and transparently.

13.1. General Support

For general account enquiries, payment questions, and day-to-day support matters:
Email: support@bitstarzau.com
Website: bitstarzau.com

13.2. Privacy and Data Protection Enquiries

For matters specifically relating to data protection, rights requests, data breaches, or privacy complaints:
Email: privacy@bitstarzau.com

Please include your full name, registered email address, and a clear description of your enquiry or request to allow us to locate your account records and respond effectively. We strive to acknowledge all privacy-related enquiries within two (2) business days and to provide a full response within thirty (30) calendar days.

13.3. Related Documents

This Privacy Policy should be read in conjunction with the following documents that form part of our legal framework:

• Terms and Conditions — governing your use of our gaming platform
• Responsible Gaming Policy — detailing our safer gambling tools, self-exclusion options, and support resources including Gambling Help Online (1800 858 858), Lifeline (13 11 14), and the national BetStop self-exclusion register
• Privacy Policy — this document