Our Privacy Policy at Zotabet
This policy explains what personal data we collect when you play at Zotabet Casino, why we collect it, who we share it with and the controls you hold over it. It applies to every visitor and registered player on zotabet-pokies.com.
Data We Collect About You
We collect several categories of personal data, and each one serves a specific purpose set out in the next section. Some data you give us directly when you register or verify your account; the rest we record automatically as you use our site.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: photo ID (passport or driver licence), proof of address (utility bill or bank statement) and payment method verification, collected during KYC checks.
- Transaction data: deposits and withdrawals, PayID references, card details held by our payment processors, crypto wallet addresses and currency balances in AUD, BTC or USDT.
- Technical data: device type, operating system, browser, IP address, approximate location derived from your IP and session timestamps.
- Gameplay behaviour: the pokies and table games you open, bet sizes, wins, losses, session duration and bonus wagering progress.
- Marketing preferences: which promotions you opt into, your communication channel choices and your consent history.
Why We Process Your Data
Every processing activity we run is tied to one of the purposes below. We do not use your data for anything outside this list, and we never sell it to advertisers.
Account management sits at the core: we create your player account, authenticate your logins and run KYC checks before your first withdrawal, as required under our Curaçao licence. Payment processing covers every deposit and withdrawal you make, including fraud screening and anti-money-laundering checks on unusual transaction patterns.
We also monitor gameplay behaviour for responsible-gambling signals, such as chasing losses or extended sessions, so our support team can reach out with tools like deposit limits or self-exclusion. Finally, we send marketing messages only where you have consented, and we meet record-keeping obligations set by our regulator.
The Legal Bases We Rely On
Contract and legal obligation govern most of what we do. Processing your identity and transaction data is necessary to perform our player agreement with you, while KYC, AML record-keeping and reporting to our regulator are duties imposed on us by law, so we cannot offer you a choice about them.
Legitimate interest covers fraud prevention, security monitoring and aggregate analytics. We balance this interest against your rights by keeping the data minimal, restricting access to trained staff and anonymising analytics wherever possible.
Consent is the basis for all marketing communications and for non-essential cookies. You can withdraw consent at any time through your account settings or by contacting us, and withdrawal never affects the lawfulness of messages sent before it.
How Long We Keep Your Data
We hold each data category only as long as the purpose requires, and no longer. Regulatory rules oblige us to keep financial and KYC records for at least five years after your account closes, so erasure requests cannot shorten those statutory periods.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering records | Minimum 5 years, per AML requirements |
| Device, IP and session logs | 12 months |
| Marketing consent records | Until you withdraw consent, plus 2 years for proof of consent |
| Self-exclusion register entries | For the full exclusion period you choose |
Who We Share Your Data With
We share your data only with parties who need it to deliver our service, and every recipient is bound by contractual confidentiality obligations. These are the categories we work with:
Game studios on our platform, including Pragmatic Play, Evolution and Play'n GO, receive your player ID and gameplay activity so your wagers and balances sync correctly. Analytics providers process aggregated, de-identified traffic data to help us improve site performance.
- Payment processors handling your deposits and withdrawals, such as Visa, Mastercard, MiFinity, Jeton, Skrill and crypto networks.
- KYC and AML verification providers that check your documents against sanctions and identity databases.
- Our regulator in Curaçao, when reporting obligations apply.
- IT hosting and infrastructure suppliers that store and secure our systems.
- Professional advisers, such as auditors and lawyers, under strict confidentiality.
Your Rights and Choices
You control your personal data, and exercising any of the rights below costs nothing. Send your request to [email protected] or through live chat, and we respond within 30 days. If you are unhappy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) or to our data protection officer at the same email address.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or out of date.
- Erasure: ask us to delete data we no longer need, subject to statutory retention periods.
- Portability: receive your account and gameplay history in a machine-readable format.
- Objection: object to processing based on legitimate interest, such as analytics.
- Withdraw consent: stop marketing messages at any time via account settings or the unsubscribe link.
- Complain: escalate to the OAIC or the relevant supervisory authority.
Cookies and Tracking Tools
We use essential cookies to keep you logged in and secure your session, analytics cookies to understand how the site performs, and marketing cookies only where you accept them in the consent banner. You can change your cookie choices at any time. Full details, including a complete list of cookies and how to block them, are set out in our Cookies Policy, which forms part of this document.
Security Measures We Apply
All traffic between your device and Zotabet runs over TLS encryption, and payment card data is handled exclusively by PCI DSS certified processors, never stored on our own servers. Access to player records follows strict need-to-know controls: staff roles are segmented, every access is logged, and sensitive KYC documents sit in an encrypted store separate from the general database.
If a data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players directly without undue delay. We review our security controls on a rolling schedule and test them with independent audits at least once a year, with findings reported to our data protection officer and resolved under tracked deadlines.
Frequently Asked Questions
How long do you keep my KYC documents?
We retain verification documents for 5 years after your account closes, because anti-money-laundering rules require it. After that period we delete them securely.
Can I stop marketing emails from Zotabet Casino?
Yes. Withdraw consent any time through your account settings or the unsubscribe link in any email. Marketing stops immediately; your account and statutory records stay intact.
Do you sell my personal data?
No. We share data only with the categories listed above, such as payment processors and KYC providers, and each one is bound by confidentiality obligations. We never sell player data to advertisers.
Who do I contact about a privacy question?
Email our data protection officer at [email protected] or reach the support team via 24/7 live chat. We answer rights requests within 30 days.