Wild Tokyo Casino operates under the licensing framework of the Curaçao Gaming Control Board and processes personal information of Australian residents in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what data we collect, why we hold it, how long we keep it, and what rights you retain over it. Read it before opening an account.
Data Controller and Contact Point
The operator responsible for the collection and handling of your personal information is GBL Solutions N.V., a company incorporated under the laws of Curaçao, holding a gaming licence issued by the Curaçao Gaming Control Board. Any privacy-related enquiry, access request, correction request or complaint should be directed to [email protected]. We respond within thirty days from the moment your written request reaches us.
What Personal Information We Collect
Proper account operation requires a defined dataset. Simply put, we collect what regulators, payment providers and anti-fraud controls require, nothing decorative. During registration we ask for full name, date of birth, residential address, email, mobile number and the currency you intend to use. When you deposit or withdraw funds we record payment instrument details, transaction amounts, timestamps and the IP address associated with the session. Important to note: when verification is triggered you supply identity documents, a proof of address issued within the last three months, and, where applicable, a card image with the middle six digits and CVV masked. Session data such as device identifiers, browser type, connection language, betting history and session length is captured automatically for security, statutory reporting and responsible gambling monitoring.
Legal Grounds for Processing
Under the APPs we process personal information only where a lawful basis exists. Simply put, four grounds cover everything we do. Contractual necessity underpins account creation, deposits, withdrawals and gameplay logging. Compliance with law covers KYC, source-of-funds checks, anti-money-laundering reporting to relevant authorities and record retention obligations. Legitimate interest supports fraud detection, multi-account prevention and platform security. Consent is requested for direct marketing, optional profile enrichment and non-essential cookies; consent can be withdrawn at any moment through your account settings or by writing to us.
How We Use the Data
The dataset is used to open and maintain your account, process financial transactions, credit bonuses, calculate loyalty points, enforce responsible gambling limits, verify identity, prevent fraud, respond to disputes and meet regulatory reporting duties. Important to consider: marketing communications, including promotional emails, SMS and push notifications, are sent only after you opt in during registration or through the preferences panel. Unsubscription is one click in every email.
Verification and Anti-Money-Laundering Checks
Curaçao licence conditions and AUSTRAC-aligned internal controls oblige us to verify the identity of every player before payouts are released. Verification is triggered at first withdrawal request, whenever cumulative payouts approach EUR 2,300 lifetime or EUR 2,000 within a single day, or on a risk-based basis at the request of our Risk Department. You are given thirty calendar days from the date of the request to supply the required documents. Simply put, missing that window results in confiscation of winnings and permanent closure of the account.
Data Sharing with Third Parties
We never sell personal information. Sharing occurs only where necessary and only with parties bound by written confidentiality and data-protection obligations. Payment processors receive transaction data required to move funds. Identity verification providers receive document images and biometric data solely for KYC. Game studios receive anonymised gameplay telemetry for jackpot calculation and fairness audits. Regulators, law enforcement authorities and courts receive information when we are compelled by valid legal process. Important to note: some recipients are located outside Australia, including the European Union, the United Kingdom and Curaçao itself. Every cross-border transfer is protected by standard contractual clauses or equivalent safeguards consistent with APP 8.
Retention Periods
Account data, transaction records, KYC files and communications with support are retained for seven years after account closure, which matches the record-keeping period expected of gambling operators under AML frameworks aligned with AUSTRAC guidance. Marketing preferences are retained until you withdraw consent. Web analytics logs are anonymised after twenty-six months. Simply put, when a retention period ends the data is either securely deleted or irreversibly anonymised.
Your Rights under the Australian Privacy Principles
You retain a defined set of rights over the information we hold about you. You may request access to your personal information at any time; we respond within thirty days and, in most cases, provide a copy free of charge. You may request correction of inaccurate or outdated data. You may withdraw marketing consent. You may lodge a complaint directly with us, and if the response does not satisfy you, escalate to the Office of the Australian Information Commissioner at oaic.gov.au. Important to consider: the right to request deletion is not absolute. Records tied to AML obligations, financial reporting or dispute resolution must be preserved for the statutory retention window even after you close the account.
Security Measures
Data is stored on servers hosted within EU data centres certified to ISO 27001. Transmission is protected by TLS 1.3 encryption. Card numbers are tokenised through PCI DSS Level 1 payment processors and never stored on our systems in cleartext. Access to personal information inside the company is restricted through role-based controls, audited quarterly. Important to note: no online system is absolutely impenetrable, and although our controls follow current industry standards, we cannot guarantee that transmission over the internet is entirely free of risk.
Cookies and Tracking Technologies
Technical, analytical and marketing cookies are used on the site. Full details, categories and opt-out mechanisms are set out in the separate Cookie Policy. Consent for non-essential cookies is collected through the banner shown on first visit and can be revised at any moment through the cookie preferences link in the footer.
Children
The service is strictly limited to persons aged eighteen years or older. Simply put, we do not knowingly collect personal information from minors. Any account suspected of belonging to a minor is closed immediately, deposits are refunded to the source, and winnings are forfeited to the regulator.
Changes to This Policy
Material amendments to this document are communicated by email to the address linked to your account at least fourteen days before they take effect, alongside an on-site notice. Continued use of the platform after the effective date constitutes acceptance of the updated version. Archive copies of superseded versions are available on request.
Effective date: upon publication | https://wildtokyo.com.au | [email protected]