Privacy Policy

Information we may collect

To provide an online casino service, 28 Mars Casino may handle information that identifies a player, relates to an account or is generated when the website is used. The information collected depends on the services used, the information supplied by the player and the checks required before or during account activity. Players should provide information that is accurate, complete and kept up to date.

Account and contact information

This may include a player’s name, date of birth, residential details, username, password, contact details, account preferences and records of communications with customer support. It may also include information about responsible gaming settings, account restrictions or requests made by the player. Passwords are generally handled using security measures designed to reduce the risk of unauthorised access.

Identity and verification information

A casino account may require identity, age, address or other verification checks. For this purpose, the site may receive copies or details of identification documents, proof of address, information about the source or use of funds where appropriate, and records of checks carried out to prevent fraud, money laundering, identity misuse or access by ineligible persons. Players should only provide documents through the relevant secure process.

Payment and transaction information

The site may record deposits, withdrawals, bets, wins, losses, bonuses or other account transactions. Payment information may include transaction references, payment method details and information needed to confirm or reconcile a payment. Complete card or banking credentials may be processed by an authorised payment service rather than stored directly by the casino. Transaction records help operate the account, investigate disputes, identify unusual activity and meet applicable obligations.

Technical, device and usage information

When a player visits or uses the website, technical information may be collected, including an IP address, browser type, device type, operating system, language, general location information, referring pages, login activity and interactions with website features. The site may also receive information from cookies and similar technologies. This information helps maintain security, remember settings, understand website performance and identify activity that may be unauthorised or fraudulent.

How information is used and shared

Personal information is used for legitimate operational, security and legal purposes connected with providing the casino service. The information is handled only as reasonably necessary for these purposes, or where use is required or permitted by applicable requirements.

• Creating, maintaining and administering a player account.
• Processing deposits, withdrawals and other account transactions.
• Providing customer support and responding to questions, complaints or requests.
• Carrying out age, identity, address, payment and account verification checks.
• Detecting, preventing and investigating fraud, money laundering, collusion, cyberattacks, account misuse and other prohibited activity.
• Operating, testing, troubleshooting and improving the website, games and related services.
• Managing responsible gaming tools, account limits, exclusions and other player protection requests.
• Sending service communications, including account, security, transaction and policy messages.
• Sending marketing communications where permitted and where the player has provided consent or another lawful basis applies.
• Meeting record-keeping, reporting, dispute handling and other legal or regulatory obligations.

Service providers and other recipients

Information may be shared with carefully selected service providers that help operate the website or perform services on behalf of 28 Mars Casino. Depending on the circumstances, these providers may support payment processing, identity verification, fraud monitoring, website hosting, information security, customer support, analytics, communications or technical maintenance. They should receive only the information reasonably needed for their assigned service and are expected to protect it.

Information may also be disclosed where necessary to protect players, the website or other people; to investigate suspected unlawful or prohibited activity; to resolve a dispute; or to comply with a valid legal, court or official request. If business services or operations change, information may be transferred as part of that change, subject to applicable privacy requirements. Where information is handled outside Australia, reasonable steps should be taken to protect it in accordance with applicable requirements.

Security of information

Reasonable technical, organisational and administrative measures are used to help protect personal information against loss, misuse, unauthorised access, alteration or disclosure. No website, online transmission or storage system can be guaranteed to be completely secure. Players should keep login details confidential, use a secure device and notify support promptly if they suspect that an account or password has been compromised.

Cookies, storage and retention

How cookies are used

Cookies are small files or similar technologies placed on a device when a website is visited. Some are necessary for the website to function, keep a session active, remember preferences or support account security. Other cookies may help measure website use, understand performance, remember settings or support relevant communications. Similar technologies may collect technical or usage information for these purposes.

Players can manage, restrict or delete cookies through the settings of their browser or device. Blocking necessary cookies may affect login, account features, security checks or other parts of the website. Browser settings may also allow a player to receive a notice before cookies are placed. The available controls depend on the browser and device being used.

How long information is kept

Information is kept for as long as reasonably needed for the purposes described in this Policy, including account administration, customer support, security, dispute resolution and business records. When information is no longer required, it may be securely deleted, anonymised or otherwise disposed of.

Closing an account does not necessarily result in the immediate deletion of every record. Some account, identity, payment, transaction, security or communication records must be kept for a period required by law, even after an account is closed. Information may also be retained where necessary to establish, exercise or defend legal claims, prevent fraud, resolve a complaint or comply with an official request.

Player privacy choices and requests

Players may have rights and choices concerning the personal information held about them. These rights can be subject to identity checks, applicable exceptions and legal record-keeping requirements. A request may not always result in complete deletion or immediate action where information must be retained, where it is needed for security or where another legal reason applies. We will explain any relevant limitation where appropriate.

How to exercise your data rights

To make a privacy or data request, contact support@28marscasino.click. Players may use this address to request access to the personal information held about them, ask for inaccurate or incomplete information to be corrected, request deletion of their information, or withdraw consent to marketing communications. Requests should include enough information to identify the account and clearly explain what is being requested. Additional information may be needed to verify the requester’s identity and protect the account from unauthorised disclosure.

• Access: request information about the personal data held and, where appropriate, a copy of that information.
• Correction: ask for inaccurate, out-of-date or incomplete account information to be corrected.
• Deletion: request removal of personal information where it is no longer needed or where another applicable basis for deletion exists.
• Marketing consent: withdraw consent or opt out of promotional messages by contacting support@28marscasino.click or using an available unsubscribe option.

Withdrawing marketing consent does not affect the lawfulness of marketing sent before the withdrawal. It also does not stop essential service communications, such as messages about account security, transactions, responsible gaming, policy changes or other information needed to administer the account. If a player asks for deletion while an account is active, the request may need to be considered alongside account security, transaction processing and legal retention requirements.

Policy updates

This Privacy Policy may be updated when services, technology, legal requirements or privacy practices change. The current version published on the website will apply to information handled under the Policy. Players should review this page from time to time, particularly before continuing to use the website after an update.