Your Privacy at Ricky Casino
This Privacy Policy explains what personal data we collect when you play at Ricky Casino, why we collect it, who we share it with, and the rights you hold over it. It applies to rickycasino-pokies.org and every account you hold with us.
What Data We Collect
We collect only the data we need to run your account, process your payments, and meet our legal obligations. If you never register, we collect far less: your IP address, browser type, and the pages you view.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: government-issued ID, proof of address, and proof of payment method for KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history, and payment method details.
- Technical data: IP address, device identifiers, browser and operating system, and approximate location derived from your IP.
- Gameplay behaviour: games played, session duration, bet sizes, and win/loss records.
- Marketing preferences: whether you opted in to receive bonus offers, newsletters, and SMS or email promotions.
How We Use Your Data
We use your data for seven clear purposes, each tied to a legal basis set out in the next section. We never sell your data, and we never use it for purposes outside this list without telling you first.
- Creating and administering your player account.
- Verifying your identity and age under our KYC obligations.
- Processing deposits and withdrawals, including refunds and chargebacks.
- Detecting and preventing fraud, money laundering, and bonus abuse.
- Monitoring play for responsible-gambling indicators, such as sudden loss-chasing patterns.
- Sending you marketing offers, but only with your consent.
- Meeting legal and regulatory obligations, including tax and AML reporting.
Our Legal Bases
Contract. When you register and play, we process your identity and transaction data because it is necessary to perform our agreement with you. Without it, we cannot hold your funds or pay out winnings.
Legal obligation. Curaçao gaming law and anti-money-laundering rules require us to verify your identity and retain transaction records for at least five years. We cannot waive these duties even at your request.
Legitimate interest. We process device, IP, and gameplay data to detect fraud, secure our platform, and monitor responsible-gambling risk. This interest never overrides your privacy rights, and you may object to some of this processing.
Consent. Marketing emails, SMS offers, and non-essential cookies run on your consent only. You can withdraw it at any time, and we stop that processing the moment you do.
How Long We Keep It
We keep each category of data only as long as the law requires or the purpose needs. Once a period expires, we delete or irreversibly anonymise the data. Here are the exact periods.
| Data category | Retention period |
|---|---|
| Transaction and wagering records | 5 years after account closure, per AML requirements |
| KYC verification documents | 5 years after account closure |
| Identity and account data | For the life of the account, then 5 years |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
| Technical logs (IP, device) | Up to 12 months |
| Live chat transcripts | Up to 12 months for dispute resolution |
Who We Share It With
We share your data only with parties who need it to deliver our service, and always under strict contractual confidentiality terms. We list them by category, not by brand, unless a partner appears in our published casino information.
- Payment processors and crypto gateways, to move your deposits and withdrawals.
- KYC and AML verification providers, to confirm your identity and screen transactions.
- Game providers, who receive your player ID and bet data to run the games you play.
- IT hosting and security vendors, under data processing agreements.
- Analytics and marketing platforms, only where you have consented to tracking.
- Regulators and law enforcement, where the law compels disclosure.
Your Privacy Rights
You control your data. Australian privacy law and, where you are in the EU, the GDPR give you enforceable rights over what we hold. Ask us at [email protected] and we respond within 30 days.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or out of date.
- Erasure: ask us to delete data we no longer need, subject to legal retention rules.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: opt out of marketing at any time from your account settings.
- Complaint: raise a complaint with the Office of the Australian Information Commissioner or your local data protection authority.
Cookies and Tracking
We use essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that run only on your consent. Your browser or our cookie banner lets you refuse optional cookies without losing access to your account.
For the full list of cookies, their purposes, and lifespans, read our dedicated Cookies Policy, which sits alongside this page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption, and card and wallet details are tokenised so full payment credentials never sit in our databases. Access to player data is limited to staff who need it, logged, and reviewed.
If a data breach occurs that is likely to cause you serious harm, we notify you and the relevant regulator without undue delay, in line with the Notifiable Data Breaches scheme. If you spot a security issue, contact [email protected].
Frequently asked questions
Can I play at Ricky Casino without giving my ID?
You can register and play with basic details, but we must verify your identity with a government ID before your first withdrawal. This is a legal KYC requirement, not a choice on our part.
How do I stop marketing emails?
Open your account settings and untick marketing consents, or click the unsubscribe link in any email. Withdrawal takes effect immediately, and we keep your marketing preferences on file only until you ask us to delete them.
Do you keep my data after I close my account?
We retain transaction and KYC records for 5 years after closure because AML law requires it. Marketing data is deleted as soon as you withdraw consent, and technical logs expire within 12 months.
Do you sell my personal data?
No. We share data only with processors and providers who deliver the service, under contractual confidentiality terms, and never sell it to third parties.