What personal data does the casino collect?

The platform collects registration details, payment information, usage and device data, and KYC identity documents required before withdrawal. Cookies capture session and preference data. This information supports running the account and meeting the licence's verification duties.

Is my data shared with third parties?

Data is shared only with payment processors, game providers and regulatory authorities as needed to run the service or meet legal obligations. It is not sold to unrelated parties for their own marketing. Sharing follows the Curacao eGaming licence and applicable Australian law.

How can I access or correct my personal data?

Under the Australian Privacy Act 1988, players can request access to and correction of their data through the support team. Identity confirmation may be required first. Unresolved matters can be raised with the Office of the Australian Information Commissioner.

How does the platform protect my data?

The operator uses SSL encryption in transit and access controls limiting who can view personal information. KYC verification confirms account ownership. Players are advised to use strong passwords and keep login details private.

How do I report a data concern?

Data concerns can be raised through the 24/7 live chat, email or phone support channels. For unresolved issues, Australian players may approach the Office of the Australian Information Commissioner. Matters are handled under the applicable privacy framework.

Privacy Policy Heaps of Wins

Prestige Package

Up to A$1,200 + 250 Free Spins

Explore the Bonus

Table of contents

This page explains how an online casino such as Heaps of Wins typically handles personal information for players in Australia. It outlines what data is collected, how it is used and shared, and the rights players hold under the Australian Privacy Act 1988 and its Australian Privacy Principles, overseen by the Office of the Australian Information Commissioner. The text is general guidance rather than a binding legal document; the operator's full policy governs the actual terms.

What Data Is Collected

The casino collects the information needed to open and run an account. This includes registration details such as name, date of birth, email and country, plus payment information tied to the chosen banking method. Usage data, including device type, browser and gameplay activity, is recorded to operate the service. Cookies and similar technologies capture session and preference data as players move through the site.

Identity documents are also collected at the KYC verification stage, which the Curacao eGaming licence requires before a first withdrawal. These confirm the account holder's age and identity.

How Data Is Used

Collected data supports account management, deposit and withdrawal processing, and fraud prevention. Verification information is used to meet anti-money-laundering obligations and to confirm players are of legal age. Aggregated usage data helps the platform maintain and improve the service. Marketing communications are sent only where a player has given consent, and that consent can be withdrawn at any time.

The operator shares data only as needed to run the service or to meet legal duties. Payment processors handle transaction data, game providers such as Real Time Gaming receive the data needed to deliver titles, and regulatory authorities may be given information under the Curacao eGaming licence and applicable law. Data is not sold to unrelated third parties for their own marketing.

Cookies and Tracking

The site uses session cookies to keep players logged in, analytics cookies to understand site usage, and preference cookies to remember settings. Most browsers let players manage or block cookies, though disabling some may affect functionality such as staying signed in. Tracking is used to operate and secure the service rather than to build profiles for outside parties.

Your Rights Under Australian Privacy Law

Under the Australian Privacy Act 1988, players have defined rights over their personal information:

Access the personal data held about them.
Request correction of inaccurate or outdated information.
Ask how their data is collected, used and disclosed.
Lodge a complaint with the Office of the Australian Information Commissioner.

Requests are handled through the support team, subject to identity confirmation and any record-keeping the licence requires. Some data, such as transaction and verification records, may be retained for the period anti-money-laundering and licensing rules demand even after an account closes, so a request to erase data can be limited by those legal obligations. Where retention is required by law, the operator keeps only what the regulation specifies and for no longer than necessary.

Data Security

The platform protects data with SSL encryption in transit and access controls that restrict who can view personal information. KYC verification adds a check that accounts belong to their stated holders. No online system is completely immune to risk, so players are encouraged to use strong, unique passwords and keep login details private.

Contact and Complaints

Players with a data concern can reach the operator through the 24/7 support channels: live chat, email and phone. For unresolved matters, Australian players may contact the Office of the Australian Information Commissioner. Concerns are addressed in line with the applicable privacy framework.

Conclusion

This summary outlines how Heaps of Wins is expected to handle personal data under Australian privacy principles. Players should review the operator's full policy and contact support with any specific questions about their information.