Privacy Policy

This privacy policy outlines how Pointsbet collects, uses, stores, and protects personal information provided by users when accessing and using the platform. The policy applies to all players who register, deposit, or engage with gaming services offered through the website and mobile applications. By creating an account or using any services, users acknowledge and consent to the practices described within this document.

Information Collection and Use

Pointsbet collects various types of personal information to facilitate account creation, verify identity, process transactions, and comply with regulatory requirements. The data collected includes full name, date of birth, residential address, email address, telephone number, government-issued identification documents, and financial information such as bank account details or payment card numbers. Additional information may be gathered automatically during platform usage, including IP addresses, device identifiers, browser types, operating systems, and gameplay patterns.

The collected information serves multiple purposes within the operational framework. Account verification ensures compliance with age restrictions and legal gambling requirements in Australia. Transaction processing relies on financial data to facilitate deposits, withdrawals, and accurate record-keeping. Gameplay data helps improve user experience, detect fraudulent activities, and maintain responsible gaming standards. Marketing communications may be sent based on preferences indicated during registration, though users retain the right to opt out at any time.

Data Security and Storage

Pointsbet implements comprehensive security measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. The platform employs industry-standard encryption protocols, including SSL technology, to secure data transmission between user devices and servers. All sensitive information stored on servers undergoes encryption using advanced cryptographic methods that meet international security standards.

Access to personal data is restricted to authorized personnel who require the information to perform specific job functions. Employee access is monitored through audit trails, and staff members undergo regular training on data protection obligations. The platform maintains multiple layers of security infrastructure, including firewalls, intrusion detection systems, and regular security assessments conducted by independent third-party auditors.

Data retention periods vary according to the type of information and applicable legal requirements. Account information and transaction records are typically maintained for seven years following account closure to comply with Australian financial reporting and anti-money laundering regulations. Gameplay history may be retained for shorter periods unless required for dispute resolution or regulatory inquiries. Users may request deletion of certain non-essential data by contacting customer support, subject to legal retention obligations.

Third-Party Sharing and Disclosure

Pointsbet shares personal information with selected third parties only when necessary to operate the platform, comply with legal obligations, or protect legitimate interests. Payment processors receive financial information required to facilitate deposits and withdrawals, though these providers operate under strict contractual obligations to maintain confidentiality and security. Identity verification services may access submitted documents to confirm user details and prevent fraudulent account creation.

Regulatory authorities and law enforcement agencies may receive personal information when required by applicable laws, court orders, or government requests. This includes reporting obligations to Australian gaming regulators and financial intelligence units for anti-money laundering and counter-terrorism financing purposes. Information may also be disclosed to legal advisors, auditors, and other professional service providers bound by confidentiality agreements.

Marketing partners and affiliated brands may receive limited data for promotional purposes only with explicit user consent. Users maintain control over these preferences through account settings and can withdraw consent at any time. Pointsbet does not sell personal information to third parties for their independent marketing purposes. Any data sharing arrangements are documented through formal agreements that specify permitted uses, security requirements, and compliance with Australian privacy legislation.

The following table outlines the categories of third parties who may receive personal information and the purposes for such disclosure:

User Rights and Control

Users possess specific rights regarding their personal information under Australian privacy law and the platform’s privacy policy. Access rights allow individuals to request copies of personal data held about them, subject to certain exceptions where disclosure would compromise security or violate third-party confidentiality. Correction requests enable users to update inaccurate or incomplete information through account settings or by contacting customer support with supporting documentation.

Restriction rights permit users to limit how certain data is processed, particularly for marketing purposes. Objection rights allow users to oppose specific data processing activities where the platform relies on legitimate interests rather than legal obligations. Portability rights enable users to receive certain personal information in a structured, commonly used format for transfer to another service provider, though practical limitations may apply to gaming-specific data.

Complaint procedures are available for users who believe their privacy rights have been violated. Initial complaints should be directed to the designated privacy officer through the contact methods provided on the website. If the response proves unsatisfactory, users may escalate concerns to the Office of the Australian Information Commissioner, which oversees compliance with the Privacy Act 1988. The platform commits to investigating all complaints promptly and implementing corrective measures where deficiencies are identified.

Account closure requests are processed within reasonable timeframes, though certain data must be retained to fulfill legal obligations even after account termination. Users can initiate closure through account settings or customer support channels. Upon closure, the account becomes inaccessible, and no further transactions can be processed. Marketing communications cease following closure, except for essential notifications regarding retained data or legal matters.

Policy Updates and Contact Information

This privacy policy may be updated periodically to reflect changes in data processing practices, legal requirements, or platform features. Material modifications will be communicated through prominent notice on the website, email notification to registered users, or notification upon next login. Continued use of the platform following policy updates constitutes acceptance of the revised terms. Users who disagree with changes may close their accounts, though data retention obligations continue to apply.

The effective date of the current policy version appears at the document’s beginning. Previous policy versions are archived and available upon request for users who wish to review historical practices. Regular policy reviews occur at least annually to ensure alignment with evolving privacy standards, technological developments, and regulatory expectations within the Australian gambling industry.

Questions, concerns, or requests regarding this privacy policy or data processing practices should be directed to the privacy officer through the designated contact channels. Email inquiries can be sent to the privacy-specific address listed on the contact page. Postal correspondence may be addressed to the registered office location displayed in the website footer. Customer support representatives can also facilitate privacy-related requests, though complex inquiries may require escalation to specialized privacy staff.

Response timeframes for privacy requests typically range from 14 to 30 days, depending on the complexity of the inquiry and verification requirements. Users must provide sufficient information to confirm their identity before receiving access to personal data or processing certain requests. This verification step protects against unauthorized disclosure and ensures safe gaming practices are maintained throughout all interactions with the platform.