Legal

Heritage Casino Privacy Policy

Plain language on how Heritage Casino handles your personal data, what we use it for, who we share it with, and the rights you keep under the Australian Privacy Act.

Register

This Privacy Policy sets out how Heritage Casino collects, uses, stores and shares your personal data when you register, deposit, play or browse the site. It applies to the Heritage Casino website and all related products. By creating an account you confirm that you have read and accepted this policy. If you do not agree with anything below, please do not register.

What personal data do we collect?

We collect three broad categories. Account data including your name, date of birth, address, email, phone number, username, password and verification documents. Financial data including deposit and withdrawal records, payment method identifiers and source of funds documents where required. Technical data including IP address, device details, browser type, location data, cookie identifiers and the pages and games you interact with on the site.

The data is collected directly from you during registration, deposit and verification, and indirectly through cookies, server logs and integrations with regulated KYC providers such as identity verification services and credit reference bureaus.

Why do we use your data?

We use your personal data to operate your account, process payments, verify your identity, prevent fraud, comply with anti-money laundering and gambling regulations, provide support, personalise the games and promotions you see, and improve the platform over time. We also use it to send transactional emails about your account and, where you have consented, marketing communications about new promotions and product launches.

Legal bases for processing include performance of the contract with you, compliance with legal obligations under gambling and AML law, our legitimate interests in running a safe platform, and your consent where it is required, for example for marketing emails or non-essential cookies.

Who do we share it with?

We share data with payment processors to settle your deposits and withdrawals, with KYC providers to verify your identity, with game providers to deliver the games you play, with cloud and hosting providers, and with regulators, auditors and law enforcement when required by law. We never sell your data to third parties for advertising.

Some of these providers operate outside Australia. Where that is the case we put appropriate safeguards in place such as Standard Contractual Clauses approved by the European Commission and the the Office of the Australian Information Commissioner, to make sure your data continues to receive a high standard of protection.

How long do we keep your data?

Account and transaction data is retained for at least five years after your account is closed, in line with anti-money laundering rules. Marketing preferences are kept until you withdraw consent or close your account. Cookie data is kept for the lifetime of the relevant cookie as detailed in our Cookie Policy. After the retention window ends, data is securely deleted or fully anonymised.

What rights do you have?

Under the Australian Privacy Act you have the right to access the personal data we hold about you, to ask us to correct anything inaccurate, to ask us to delete data where the law allows it, to restrict or object to certain types of processing, to receive a portable copy of your data, and to withdraw consent at any time for processing that relies on consent.

To exercise any of these rights, email privacy@heritagecasino.net with the subject line containing your username and the right you want to exercise. We will respond within 30 days as required by law. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

How do we keep your data secure?

All data is encrypted in transit with 256-bit TLS and at rest with AES-256. Access inside the company is granted on a least-privilege basis with multi-factor authentication, and is logged for audit. Payment card data is handled by PCI DSS certified processors and never touches our own infrastructure. We test our systems regularly with independent security audits and penetration tests.

For more detail on cookies, see our Cookie Policy. For more on closing your account, see the Close Account guide. For any other privacy question, the privacy team is reachable at privacy@heritagecasino.net.