Our Privacy Policy
This policy explains what personal data we collect when you play at Infinity Casino, why we collect it, who we share it with, and the control you keep over it. It applies to every account holder on infinitycasino-pokies.com.
What Personal Data We Collect
We collect only the data we need to run your account, meet our licence obligations and keep the site safe. The categories below cover everything we hold on you.
Identity and verification data comes first. When you register we ask for your full name, date of birth, email address, phone number and residential address. Before your first withdrawal we request a photo ID, proof of address and proof of your payment method, because our Curaçao licence requires us to verify every player.
- Identity data: name, date of birth, email, phone number, residential address
- Verification documents: passport or driver licence, utility bill, card or wallet screenshot
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history, currency (AUD, EUR, USD, BTC, ETH, USDT)
- Technical data: IP address, device type, browser, operating system, approximate location derived from IP
- Gameplay behaviour: games played, session times, bet sizes, win and loss records
- Marketing preferences: which channels you opted into and which offers you received
- Support records: live chat transcripts and email correspondence with our 24/7 team
How We Use Your Data
Each purpose below is tied to a specific category of data, and we never use your information for anything outside this list without telling you first. Where the purpose requires your consent, such as marketing, we ask for it separately at signup.
- Creating and administering your player account
- Verifying your identity and age under KYC and AML rules
- Processing deposits and withdrawals through PayID, cards, e-wallets, bank transfer and crypto
- Detecting fraud, bonus abuse, duplicate accounts and money laundering
- Monitoring play for responsible-gambling signals and enforcing limits you set yourself
- Sending promotional material where you have consented, including Monday reload and cashback offers
- Meeting legal, tax and regulatory obligations owed to our licensing authority
The Legal Bases We Rely On
Contract. We process your identity, transaction and gameplay data to deliver the service you signed up for. Without it we cannot open an account, settle bets or pay winnings, so this basis covers the core of our relationship with you.
Legal obligation. Our Curaçao licence number OGL/2023/174/0090 obliges us to verify players, monitor transactions and keep records for set periods. We cannot waive these duties, and they override a deletion request where retention is mandated.
Legitimate interest. We rely on this basis for fraud prevention, security logging and aggregated analytics that improve the site. We weigh our interest against your expectations and keep the data involved to a minimum.
Consent. Marketing emails, SMS and personalised offers run only on your consent, captured at signup or later. You may withdraw it at any time through your account settings or the unsubscribe link in every message.
How Long We Keep It
Retention depends on what the data is and what law says about it. Gambling regulations require us to hold transaction and KYC records for at least five years, so a closed account does not mean immediate erasure.
Once the mandatory period ends we delete or anonymise the data, and marketing data follows your consent rather than any fixed schedule. The table sets out each category in plain terms.
| Data category | Retention period |
|---|---|
| Transaction and wagering records | Minimum 5 years after account closure, per regulation |
| KYC verification documents | 5 years after account closure |
| Account and identity data | Life of the account, then 5 years |
| Marketing preferences and consent logs | Until you withdraw consent, plus 2 years for the consent record |
| Technical and device logs | 12 months |
| Live chat and support transcripts | 2 years |
| Analytics data in aggregated form | Indefinite, de-identified |
Who We Share Data With
We do not sell your personal data, full stop. We share it only with parties who perform a service for us or who are entitled to it by law, and every one of them is bound by contract to protect it to the same standard we do.
Payment processors receive the details needed to move your money in and out, such as your wallet address or card token. KYC and AML providers receive your documents purely to run verification checks. Our hosting and IT suppliers process data on our instructions only. We disclose records to regulators and law enforcement when formally requested, and our analytics providers receive pseudonymised usage data that cannot single you out.
- Payment processors for deposits and withdrawals
- Identity verification and AML screening providers
- Game and platform suppliers hosting your session data
- Analytics and site performance services, on a de-identified basis
- Regulators and authorities with a lawful basis for request
Your Rights at Infinity Casino
You control your data, and exercising any right below costs you nothing. Email [email protected] or use live chat, and we respond within 30 days as the Australian Privacy Principles require.
If you are unhappy with how we handled a request you may complain to the Office of the Australian Information Commissioner, and players in the EU may contact their local supervisory authority instead.
- Access: get a copy of the personal data we hold on you
- Rectification: correct data that is wrong or out of date
- Erasure: request deletion, subject to regulatory retention
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time via account settings
- Complain: escalate to the OAIC or your local data protection authority
Cookies and Tracking Tools
We use cookies to keep you logged in, remember your game preferences and measure site performance. Essential cookies run without consent because the site cannot function without them; analytics and marketing cookies activate only after you accept them in the banner on your first visit.
Full details, including how to block or delete cookies in your browser, sit on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers travels over TLS encryption, and stored verification documents sit encrypted at rest. Access to personal data is role-based: our support and payments staff see only what their job requires, and every access is logged.
If a data breach occurs that is likely to cause you serious harm, we notify you and the Office of the Australian Information Commissioner as soon as practicable. We also test our controls regularly and train staff on handling personal data.
Frequently asked questions
How do I stop marketing emails from Infinity Casino?
Use the unsubscribe link in any email, or switch off marketing in your account settings. Withdrawal takes effect immediately, though the consent record itself is kept for two years as proof.
Can I delete my KYC documents once I am verified?
We must keep verification records for at least 5 years after your account closes under gambling regulations. After that period we delete or anonymise them automatically.
Do you sell my personal data?
No. We share data only with payment processors, verification providers, suppliers and authorities who need it to deliver a service or meet a legal obligation, never for sale.
How long does a data access request take?
We respond within 30 days of receiving a verified request, which is the timeframe set by the Australian Privacy Principles.
Who do I contact about a privacy concern?
Email [email protected] or use our 24/7 live chat. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner.