Club House Casino Privacy Policy Australia
Data We Collect
Club House Casino, operated by Dama N.V. under Curaçao GCB licence OGL/2023/174/0082, collects personal information from Australian players across four broad categories. Identity data covers details supplied at registration and during KYC verification, including full legal name, date of birth, residential address, government-issued identification number, and a photographic identity document.
Transaction data records every deposit, withdrawal, wager, and payout linked to the account, along with the payment method used. Behavioural data covers gameplay patterns, session durations, game preferences, and interactions with promotional offers. Device data includes IP address, browser type, operating system, device fingerprint, and geolocation at the country and state level.
How We Use Data
Player data supports regulatory compliance, fraud prevention, service delivery, and communications. Compliance uses include KYC verification, source of funds review, sanctions and politically exposed person screening, and reporting to Curaçao GCB. Fraud prevention relies on transaction monitoring, device fingerprint checks, and pattern analysis.
Marketing communications are sent only to players who have not opted out. Every marketing email includes an unsubscribe link that takes effect within 48 hours. Analytics data is aggregated for product improvement, and individual behavioural profiles are not shared with third parties for advertising purposes.
Data Storage and Security
Personal information is stored on servers located within the European Union and Curaçao. Data at rest is protected using AES-256 encryption, and data in transit is secured with TLS 1.3. Access to production databases is restricted to named compliance and technical staff who complete mandatory data protection training annually.
Retention periods follow a seven-year rule from the date the account is closed, aligned with anti-money laundering record-keeping obligations. After the retention period expires, personal identifiers are anonymised and only aggregated statistical records are preserved.
Third-Party Sharing
Personal data is shared with payment providers to process deposits and withdrawals, with KYC verification vendors to confirm identity, and with regulators when a legal obligation applies. Payment providers receive only the minimum data required for the transaction. KYC vendors process identity documents under strict data processing agreements.
Regulators including the Curaçao Gaming Control Board and financial intelligence units receive data on suspicious transactions, source of funds reviews, and formal information requests. Personal information is not sold to marketing companies, data brokers, or third-party advertising networks under any circumstances.
Australian Privacy Principles Compliance
Although Club House Casino operates under Curaçao licensing rather than direct Australian regulation, the privacy programme aligns with the Australian Privacy Principles set out in the Privacy Act 1988. APP 1 open and transparent management is reflected in this policy. APP 3 to APP 5 solicitation, collection, and notification rules govern the registration and KYC flow.
Cross-border disclosure under APP 8 applies whenever data moves to servers or vendors outside Australia. Australian players who believe their privacy rights have been breached may contact the Office of the Australian Information Commissioner at oaic.gov.au for guidance, though initial complaints should first be raised with the operator’s data protection officer.
Your Rights
Players hold rights of access to their personal information, meaning a written request produces a copy of the data held on the account within 30 days. Correction rights allow players to update inaccurate information directly through the account panel or by contacting support. Deletion rights apply subject to the seven-year retention obligation.
Marketing opt-out is immediate on request, either through the account settings or by using the unsubscribe link in any marketing email. Data portability requests produce personal information in a structured, commonly used format within 30 days.
Contact — Data Protection Officer
Privacy queries, subject access requests, and complaints are directed to the data protection officer at [email protected] with the subject line marked “Privacy”. The DPO commits to a substantive response within 30 days of receipt. For a full brand assessment, visit the Club House Casino AU home review.
Reviewed by Marcus Whitlam, Senior AU Casino Editor. Last updated 10 July 2026.