Privacy Policy
A privacy policy is essential to inform users about how their personal data is collected, used, stored, and protected when interacting with thisisvegas on thisisvegass.com. This policy applies to all players and website visitors in Australia. It outlines legal rights and obligations consistent with Australian privacy laws, specifically the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Effective date: 1 January 2025.
Who We Are
OBSERVE: thisisvegas is operated by SSC Entertainment N.V., licensed under Curacao eGaming sub-license 8048/JAZ (issued by Antillephone N.V., valid through 2025), serving Australian clients via thisisvegass.com.
EXPAND: As the responsible entity, SSC Entertainment N.V. acts as the primary data controller. The parent group is AffDynasty Group, which manages additional brands such as Cocoa Casino and Paradise 8.
REFLECT: Users may direct data protection inquiries to the Data Protection Officer (DPO). While no specific legal or contact address is provided, primary correspondence should be made through the official site.
- Operator: SSC Entertainment N.V. (Legal entity type: N.V.; registered in Curacao)
- Gambling License: Curacao eGaming, sub-license 8048/JAZ, valid until 2025, issued by the Government of Curacao (Antillephone N.V.)
- Official Website: thisisvegass.com
- Data Protection Contact: Data Protection Officer, via web contact page; Attention: Charlotte Evans (site operator representative)
- Registered Office: Curacao (full address available upon request)
Regional Compliance Note: For Australian users, data handling aligns with the Australian Privacy Act 1988, even when processing occurs outside Australia.
What Personal Data We Collect
OBSERVE: To operate the online gambling platform, thisisvegas collects various categories of information necessary for compliance, service delivery, and risk mitigation.
EXPAND: Both directly provided data and information from use of the site are included. Cookies and technical identifiers are critical for security and personalization.
REFLECT: Categories of data collected on thisisvegass.com include:
- Personal Identification Data: Full name, date of birth, email address, phone number, residential address, submitted identification documents (for KYC/AML).
- Account and Transaction Data: Username, account history, betting and play history, deposit and withdrawal records, payment card or e-wallet details.
- Technical Data: IP address, device/browser information, session logs, cookies, geolocation data (as required for compliance).
- Behavioral Data: Click tracking, navigation patterns, session times, game preferences, bonus/redemption records.
- Cookies & Similar Technologies: Session identifiers, persistent user tokens, third-party analytics and marketing cookies.
Legal Obligation: Collection of certain data is required for legal compliance (e.g., age verification, anti-money laundering checks).
Legal Basis for Processing
OBSERVE: Australian law and industry standards require a clearly articulated legal basis for every processing activity.
EXPAND: Data is processed for commercial, regulatory, and legitimate interest justifications, all within the scope of the Privacy Act 1988 and related gambling regulations.
- User Consent: Processing with informed consent provided at registration and upon use of specific features (including marketing communications).
- Performance of Contract: Collection and processing necessary to provide gambling services, manage accounts, process payments, and deliver winnings.
- Compliance with Legal Obligations: Data processing required to fulfill obligations under AU and Curacao law, including KYC (Know Your Customer), AML/CTF (Anti-Money Laundering/Counter-Terrorism Financing), and reporting requirements.
- Legitimate Interests: Security and fraud prevention, service optimisation, analytics, and business development, provided such processing does not override user rights.
Protective Clause: In cases where consent is withdrawn, processing may continue where legally required or permitted under applicable law.
Purpose of Processing
OBSERVE: Data is used to deliver lawful, secure, and high-quality gambling services.
EXPAND: Each processing activity serves operational, legal, or improvement purposes, in line with both AU and Curacao regulatory standards.
- Account Creation & Verification: Establish user identity and eligibility, prevent duplicate or fraudulent accounts.
- Provision of Casino Services: Operate the gambling platform, process bets, manage deposits/withdrawals, enable participation in games and promotions.
- Customer Support: Respond to user inquiries, resolve technical issues, manage complaints.
- Legal Compliance: Meet regulatory obligations such as age and identity verification, anti-fraud measures, and recordkeeping.
- Analytics & Service Improvement: Analyse behavior to enhance user experience, optimize offerings, and ensure platform stability.
- Marketing & Promotions: With explicit consent, send promotional information and tailored offers; users can opt out at any time.
- Security & Fraud Prevention: Monitor and prevent abusive activities, safeguard user information, mitigate financial risks.
Regional Compliance Note: Any promotional communications will comply with Australian Spam Act requirements and include clear opt-out instructions.
Disclosure & Sharing
OBSERVE: Data may be disclosed to third parties where necessary for operation or legal compliance.
EXPAND: All sharing is subject to strict confidentiality, data processing agreements, and legal obligations.
- Payment Partners: Banks, e-wallet providers, and payment processors to complete deposits, withdrawals, and verify identity.
- Service Providers: IT support, platform software vendors, marketing agencies, and analytic services (including third parties that assist with fraud detection or operational support).
- Regulatory Authorities: Government bodies in Curacao and Australia when required for legal compliance, reporting, or upon lawful request.
- Affiliates & Group Companies: Parent and subsidiary brands (SSC Entertainment N.V., AffDynasty Group, Cocoa Casino, Paradise 8, Davinci's Gold), for group administration or cross-brand promotions (with consent).
- Advertising Networks: Third-party ad technology providers, only with user consent, for targeted marketing and analytics.
Protective Clause: All third parties are contractually obligated to comply with high standards of data security and may not use personal data for their own purposes.
International Transfers
OBSERVE: Data collected from Australian users may be transferred, processed, or stored outside Australia, including in Curacao and other jurisdictions where thisisvegas group entities or service providers operate.
EXPAND: Transfers are undertaken only where adequate protection mechanisms are in place, such as contractual safeguards or adherence to privacy frameworks.
REFLECT:
- Standard Contractual Clauses (SCCs): Used with non-AU/non-EEA partners to ensure data receives equivalent protection abroad.
- Processor Due Diligence: All third-party processors undergo thorough reviews to verify compliance with applicable privacy laws and technical protections.
- Rights Preservation: Users retain all rights under the Australian Privacy Act regardless of data transfer location.
Regional Compliance Note: Information transferred overseas remains protected by enforceable contractual obligations and oversight by thisisvegas.
Data Retention
OBSERVE: Data is retained only as long as necessary for regulatory compliance, contractual performance, or legitimate business purposes.
EXPAND: Australian Anti-Money Laundering (AML) and gambling laws require retention of financial and identification records for defined periods.
- Personal Data: Retained for the lifetime of the user account and up to 5 years after closure or last activity, to comply with legal obligations, defend against legal claims, and for AML/KYC purposes (as required until 2025 and subject to regulatory extensions).
- Payment and Transaction Data: Retained for 7 years as mandated by financial regulations, or longer if specific proceedings require.
- Behavioral & Technical Data: Analytics and tracking data are anonymised or deleted within 2 years after collection, except where extended retention is required for security/audit logs.
- Deletion Criteria: Data is deleted or irreversibly anonymized upon user request (where permitted), account closure, or when no longer necessary for original purposes.
Protective Clause: Statutory retention obligations may override user deletion requests where legally mandated.
Your Rights
OBSERVE: Under the Australian Privacy Act and relevant international frameworks, users have comprehensive data rights.
- Right of Access: Request a copy of the personal data held by thisisvegas via thisisvegass.com contact form. Reasonable proof of identity may be required.
- Correction: Request rectification of inaccurate or incomplete information.
- Deletion (Right to Erasure): Request account closure and deletion of data, unless retention is required by law.
- Restriction of Processing: Apply temporary processing limits where legal grounds exist, such as while a correction request is under review.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Data Portability: Receive data in a structured, commonly used electronic format, where technically feasible.
- Withdraw Consent: Revoke consent for marketing or non-essential data processing at any time, through account settings or direct request.
Legal Obligation: Some rights may be limited by overriding legal, regulatory, or contractual requirements.
Cookies & Tracking Technologies
OBSERVE: thisisvegass.com uses cookies and similar technologies to enable core functions, analyze activity, and provide personalized experiences.
EXPAND: Australian users are informed at first site entry and may manage preferences.
- Session Cookies: Essential for maintaining secure user sessions, deleted after logging out or closing the browser.
- Persistent Cookies: Store preferences and login information to facilitate future visits.
- Third-Party Cookies: Analytics (e.g., behavioral tracking), advertising partners, and social media integrations (placed only with user notice/consent).
Management: Users can disable or restrict cookies through browser settings or, where available, an on-site cookie management panel. However, core site functionality may be affected if all cookies are rejected.
Protective Clause: All cookie usage is fully detailed in our Cookie Notice, consistent with AU regulatory requirements.
Data Security
OBSERVE: Protecting user data against unauthorized access, alteration, disclosure, or destruction is a top priority for thisisvegas.
-
Technical Measures:
- SSL/TLS encryption of data in transit;
- Hashing and encryption of sensitive user information;
- Multi-factor authentication for administrative access;
- Network segmentation, firewalls, and intrusion detection systems.
-
Organizational Measures:
- Access restricted to authorized personnel based on role and necessity;
- Regular privacy and security audits (at least annually);
- Comprehensive staff training on privacy obligations and incident reporting.
- Incident Response: Established protocols for breach detection, response, and notification pursuant to the Notifiable Data Breaches (NDB) scheme under Australian law.
Regional Compliance Note: All security frameworks align with both Curacao licensing and Australian standards for online gaming operators.
Complaints & Contacts
OBSERVE: Users have the right to lodge complaints or make inquiries regarding privacy practices at any time.
- Primary Contact: Data Protection Officer, reachable through the official website thisisvegass.com.
-
Complaint Procedure:
- Submit your complaint or inquiry via the website contact page, specifying the nature of your concern;
- Include sufficient information to identify your account and the issue (while protecting your own security);
- The DPO or designated staff will acknowledge receipt within 7 working days and provide a substantive response within 30 days, in accordance with AU privacy complaint handling standards.
- If not resolved, users may escalate the matter to the Office of the Australian Information Commissioner (OAIC).
- Site Operator Contact: Charlotte Evans (operator representative) via official site contact form.
Protective Clause: All complaints are treated confidentially and resolved in accordance with legal requirements.
Updates
OBSERVE: thisisvegas reserves the right to revise this Privacy Policy at any time, primarily to reflect changes in legal requirements or service offerings.
EXPAND: Any significant updates will be notified to registered users via email (where available) and through a prominent notice on thisisvegass.com prior to implementation.
REFLECT: Users are encouraged to review the Privacy Policy periodically to remain informed. Continued use of the platform after any update constitutes acceptance.
- Effective Date of Latest Revision: 1 January 2025
- Notification Procedure: Website announcement (and, if necessary, direct communications to users with active accounts)
Regional Compliance Note: All updates conform to Australian and Curacao regulatory guidance on user notification and change management.