Privacy Policy

Topaz33 ("we", "us", "our") operates the online gaming platform accessible via topaz33-australia.com. We are committed to protecting your privacy and handling your personal information responsibly in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our services, ensuring transparency and compliance with applicable laws including references to the General Data Protection Regulation (GDPR) where relevant for international users.

Information We Collect

We collect personal information necessary to provide secure, compliant online gaming services tailored to Australian users. This includes data you provide directly, as well as information gathered automatically during your interactions with our platform.

Personal identification details form the core of what we collect, such as your full name, date of birth, residential address, email address, phone number, and government-issued ID numbers like driver's license or passport details. These are essential for account creation, age verification to prevent underage gambling, and compliance with Australian gambling regulations.

Financial information is also gathered, including bank account details, credit or debit card numbers, payment method preferences, transaction histories, and source of funds data. This supports deposits, withdrawals, and anti-money laundering (AML) checks required under laws like the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).australiabestonlinecasino.

Gaming and behavioral data covers your betting patterns, game preferences, session durations, wager amounts, and responsible gambling indicators. Technical data includes IP addresses, device IDs, browser types, operating systems, cookie data, and approximate location for security and functionality.

We may collect sensitive information, such as health data related to responsible gambling assessments or criminal records for enhanced due diligence, but only where permitted by APP 3 and with your consent or legal necessity. For EU users, this aligns with GDPR Article 9 for special categories of data.oaic.

Communication records from support chats, emails, and surveys, plus marketing preferences and demographics, help personalize your experience. We do not collect information about children under 18, as our services are restricted to.

How We Collect Information

Collection occurs through fair and lawful means as per APP 3. You provide data during registration, verification (uploading ID documents), deposits/withdrawals, and gameplay.oaic.gov.

Automatically, we use cookies, web beacons, and server logs to track usage. Our site employs essential cookies for login and security, performance cookies for analytics, functional ones for preferences, and marketing cookies for promotions — with opt-out options.

Third parties assist: payment gateways like those from Visa or PayPal share transaction confirmations; affiliates may provide referral data; and analytics tools like Google Analytics collect anonymized stats. Identity providers (e.g, for KYC) supply verification results.

If you interact via social media or promotions, we may receive profile info with your permission. Unsolicited information is destroyed unless relevant and APP-compliant.oaic.gov.

For EU data subjects, collection respects GDPR transparency requirements under Article 13/14.oaic.gov.

Purposes of Collection and Use

We use your information only for primary purposes you expect or secondary ones reasonably related, per APP 6. Key uses include managing your account, processing transactions, verifying identity, and enabling gameplay.

Fraud prevention employs monitoring tools to detect unusual activity, while responsible gambling features like deposit limits use behavioral data. Customer support resolves issues via recorded interactions.

Regulatory reporting to AUSTRAC or state bodies (e.g, NSW Office of Liquor, Gaming and Racing) ensures compliance. Marketing sends promotions only with consent, via email or SMS, and you can unsubscribe.

Analytics improve our platform; we aggregate data for trends without identifying individuals. For EU users, processing bases include contract necessity (Article 6(1)(b) GDPR), legal obligation (6(1)(c)), and legitimate interests (6(1)(f)) like security.

We never sell your data. Uses align with Australian gambling laws and APP 6 limits.oaic.gov.

Legal Basis for Processing follows APPs and, for EU/EEA users, GDPR. Contractual necessity covers account services; legal obligations include AML and tax reporting; legitimate interests protect against fraud and enable operations.

Consent is sought for marketing and non-essential cookies — freely given, specific, informed, and withdrawable. Vital interests apply rarely, e.g, harm.

Australian entities handling EU data must comply with GDPR extraterritorially if offering services to EU residents.

Sharing and Disclosure is limited to necessary parties under APP 6. Payment processors handle transactions; KYC providers verify identity; regulators receive reports as required.

Service providers (hosting, analytics, support) are bound by data processing agreements ensuring APP/GDPR compliance. In mergers, data may transfer under safeguards.eci.

Law enforcement requests are assessed legally; we notify you unless prohibited. No overseas disclosure without APP 8 checks — our processors are primarily Australian or verified equivalents.oaic.gov.

For EU data, transfers use Standard Contractual Clauses if needed (GDPR Chapter V).oaic.gov.

Data Storage and Retention

Data is stored securely in Australia or approved jurisdictions, encrypted at rest/transit. Retention matches purpose: financial records 7 years post-closure (tax/AML); account data 7 years; gameplay logs 5 years for responsible gambling.australiabestonlinecasino.

Verification docs held as needed for regulations, then securely deleted. Marketing data erased on consent withdrawal or 6 months inactivity. Anonymized data may persist.

Destruction follows secure methods like overwriting. Backups retain deletion timelines.oaic.gov.

Security Measures

We protect data per APP 11 with encryption (AES-256), firewalls, intrusion detection, and regular audits. Multi-factor authentication (MFA), role-based access, and employee training minimize risks.

Vulnerability scans and penetration tests occur quarterly by certified experts. Incident response plans include breach notification within 30 days to OAIC/users if eligible data is affected (Notifiable Data Breaches scheme).oaic.gov.

GDPR-equivalent safeguards apply for international data.com.

Your Rights

APP 12-13 grant rights: access your data (free, within 30 days, ID verified); correct inaccuracies; opt-out of direct marketing. Anonymity/pseudonymity offered where possible (APP 2).oaic.

Deletion ("right to be forgotten") where no overriding obligation; object to processing; restrict use during disputes. Complaints go to us first, then OAIC (www.oaic.gov.au).

EU users have GDPR rights: access (Art 15), rectification (16), erasure (17), restriction (18), portability (20), object (21). Withdraw consent anytime without affecting legality.

Requests to [email protected]; responses within reasonable time.

Cookies and Tracking

Cookies enhance functionality. Essential: session management. Analytics: usage stats (Google Analytics, opt-out available). Marketing: personalized ads.

Cookie banner seeks consent; manage via settings. Third-party cookies disclosed; do not track signals honored. Flash/local storage used sparingly.

GDPR-compliant consent for non-essential (ePrivacy parallels).com.

International Users and GDPR

If you access from EU/EEA, we comply with GDPR as a controller. Rights mirror above; DPO contact via email. Transfers safeguarded.oaic.

Children's Privacy

Services for 18+. No knowing collection from children; parental contact notifies for deletion.oaic.gov.

Data Breaches

Suspected breaches investigated; eligible ones notified per Part IIIC Privacy Act. Updates via site/email.oaic.gov.

Changes to Policy

Updates posted here with date; continued use implies acceptance. Major changes emailed to registered.

Contact Us

Questions? Email [email protected]. Our Privacy Officer reviews concerns promptly.

Data Protection Officer: [email protected].

Last updated: April 3, 2026.