Privacy Policy

To provide online casino services, Candy Casino may collect information that identifies you or is reasonably connected with your account, activity or device. The information collected depends on how you use the website, the services requested and the checks that may be required before or during your use of the account.

Account and identity information

This may include your name, date of birth, residential or contact details, login information, account preferences and other details supplied when you register or update your account. We may also receive information needed to confirm that an account belongs to the person using it.

Verification and compliance information

Where appropriate, we may request verification documents or other information used to confirm identity, age, residency, source of funds or account activity. This can include copies or details from identity documents, information about account ownership and records of checks made to prevent fraud, money laundering, underage gambling and other prohibited activity.

Payment and transaction information

We may handle records about deposits, withdrawals, wagers, winnings, bonuses where applicable, payment methods, transaction references and related account activity. Payment providers may process payment details directly. We may receive enough information to confirm, reconcile and support transactions without necessarily receiving all underlying payment details.

Technical, device and usage information

When you visit or use the website, technical information may be collected, such as your IP address, browser type, operating system, device identifiers, approximate location, time zone, language, pages viewed, links used and interaction history. We may also collect information about errors, performance and security events.

Communications and support information

If you contact customer support, we may keep the information you provide, including your name, account details, correspondence, questions, documents and the outcome of the enquiry. We may also keep records of communications sent to you about your account, transactions, services, safety or privacy choices.

Candy Casino uses personal information for legitimate business, service, security and compliance purposes. We aim to collect and use information that is reasonably necessary for the relevant purpose and to handle it in a fair and transparent way.

• Create, operate, maintain and secure your player account.
• Provide access to casino games, account functions and other available website services.
• Process deposits, withdrawals and other transactions, and maintain accurate financial records.
• Confirm identity, age and account ownership where checks are required.
• Carry out fraud prevention, security monitoring, risk assessment and responsible service checks.
• Meet legal, regulatory, tax, financial crime and record-keeping obligations that apply to gambling services.
• Respond to questions, provide customer support and investigate complaints or disputed activity.
• Personalise website content, remember preferences and improve the performance and usability of the website.
• Analyse trends, usage and technical issues so that services, systems and security controls can be improved.
• Send service messages, account notices and other communications that are necessary for operating the account.
• Send marketing communications where permitted and where you have provided consent or another lawful basis applies.

We may combine information collected from your account, website activity, support interactions and verification processes where this is reasonably necessary for these purposes. We do not use personal information for unrelated purposes unless permitted or required by applicable requirements, or where you have been informed and have provided any consent that may be needed.

Sharing information

Information may be shared with service providers and professional partners that help operate the website and related services. These may include payment providers, identity and verification providers, technology and hosting providers, customer support tools, security services, fraud prevention services, analytics providers and communication platforms. They should only handle information as needed for the services they provide and in line with appropriate confidentiality and security arrangements.

Information may also be disclosed where necessary to protect players, the website or other people; investigate suspected fraud or unlawful activity; enforce applicable terms; resolve a dispute; or comply with a valid legal, regulatory or official request. If business operations change, information may be transferred as part of a restructure, sale or similar transaction, subject to appropriate safeguards.

Cookies and similar technologies

The website may use cookies and similar technologies to keep you signed in, remember preferences, support security, measure website performance and understand how services are used. Some cookies are necessary for core functions, while others may support analytics, personalisation or marketing. You can manage or remove cookies through your browser settings. Disabling cookies may affect the availability or operation of some website features.

Security

Reasonable technical and organisational measures may be used to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures can include access controls, authentication processes, monitoring, encryption where appropriate and secure handling procedures. No website, online service or electronic transmission can be guaranteed to be completely secure, so you should use a strong password, keep login details confidential and contact support if you suspect unauthorised account activity.

How long information is kept

Personal information is kept for as long as it is reasonably needed for the purposes described in this policy, including account administration, customer support, security, dispute handling and business records. Some records must be kept for a period required by law even after an account is closed. When information is no longer required, it may be securely deleted, anonymised or otherwise disposed of in accordance with applicable requirements.

Information outside Australia

Some service providers may store or process information in Australia or another country. Where information is handled across borders, appropriate steps may be taken to protect it and to support compliance with applicable privacy requirements. The location and providers used may change as the website, technology and service arrangements develop.

Depending on your circumstances and applicable privacy requirements, you may have rights in relation to personal information held about you. These rights may include asking for access to your information, requesting correction of information that is inaccurate or incomplete, asking for deletion where deletion is permitted, and withdrawing consent to marketing communications.

Making a data request

To exercise your data rights, or to ask a privacy question, contact support@candycasino.best. Please explain the request clearly and provide enough information for us to identify the relevant account or records. We may need to verify your identity before providing information or making changes, particularly where the request involves account security or sensitive records.

• Access: ask for a copy of personal information held about you, subject to applicable exceptions.
• Correction: ask for inaccurate, outdated or incomplete information to be corrected.
• Deletion: ask for personal information to be deleted where there is no continuing legal, security, contractual or operational reason to keep it.
• Marketing consent: withdraw consent to marketing communications at any time. You may also use an unsubscribe option included in a marketing message where available.

Withdrawing marketing consent will not usually affect service, security or account messages that are necessary for your use of the website. It may also not remove records that must be retained for legal, fraud prevention, dispute resolution or other valid purposes. If you believe your privacy has not been handled appropriately, you may first contact us so the concern can be reviewed and addressed.

Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, technology, legal requirements or information-handling practices. The latest version will be made available on the website. You should review this page periodically, particularly before providing new information or continuing to use the services after an update.