Privacy Policy

Information we may collect

To provide casino services, maintain secure accounts and meet applicable obligations, Surfplay Casino may handle information that identifies or relates to a player. The information collected depends on how the website and its services are used, what features are accessed and what information is needed to complete a particular request. Players should provide information that is accurate and keep their account details up to date.

Account and contact details

This may include a player’s name, date of birth, residential information, country or region, username, account credentials and contact details. It may also include information about account preferences, responsible gambling settings, communications choices and requests made to customer support. Some information is necessary to open, maintain or secure an account, while other information may be provided voluntarily.

Identity and verification information

Where verification is required, the site may handle identity documents, images, proof of address, age-related information and other information used to confirm that an account belongs to the person using it. Verification information may be reviewed to help prevent impersonation, underage access, account misuse, fraud, money laundering and other prohibited activity. Players may be asked to provide additional information where this is reasonably needed for security or compliance purposes.

Payment and transaction records

The site may handle information about deposits, withdrawals, wagers, winnings, bonuses or other account transactions. Payment information may include transaction references, payment method details, billing information and records supplied by a payment provider. Full payment card details may be handled by the relevant payment service rather than being stored directly by the casino site. Transaction records help process account activity, investigate disputes, identify unusual behaviour and meet record-keeping obligations.

Device, usage and cookie information

When a player visits or uses the website, technical information may be collected automatically. This can include an IP address, browser type, operating system, device identifiers, language settings, approximate location, pages viewed, session information, referral details and information about how features are used. The site may also use cookies and similar technologies to remember preferences, support sign-in, maintain security, understand website performance and help provide relevant communications.

How information is used

Personal information is used for clear and reasonable business and service purposes. The exact use depends on the information involved and the relationship with the player. Surfplay Casino may use information to provide the website and account services, process activity, communicate with players and keep the platform safe.

• Create, administer and secure player accounts.
• Confirm a player’s identity, age, eligibility and account ownership.
• Process deposits, withdrawals and other account transactions through available payment services.
• Provide customer support, respond to questions and investigate complaints or disputes.
• Monitor activity for fraud, collusion, account takeover, money laundering, abuse and other security risks.
• Meet applicable legal, regulatory, tax, financial, responsible gambling and record-keeping obligations.
• Maintain, test, troubleshoot and improve the website, applications and related services.
• Understand website usage, measure performance and improve the player experience.
• Send service messages about accounts, transactions, security, changes or other important matters.
• Send marketing communications where permitted and where the player has provided consent or another lawful basis applies.

Information may be combined from account activity, verification processes, technical records, support conversations and payment or security checks where this is necessary for the purposes described in this policy. Automated tools may be used to identify unusual activity, technical problems or potential risks. Where an outcome has a significant effect on an account, the matter may be reviewed through appropriate support or operational processes.

Sharing and service providers

Information may be shared with service providers that help operate the website and provide related services. These providers may support payment processing, identity verification, fraud prevention, technology hosting, customer support, communications, analytics, security and technical maintenance. They should receive only the information reasonably needed for their assigned service and are expected to handle it securely and in accordance with applicable requirements.

Information may also be disclosed where necessary to protect players, the website or other people; respond to lawful requests; investigate suspected unlawful or prohibited conduct; enforce applicable terms; resolve disputes; or meet a legal or official requirement. Information is not shared for unrelated purposes without an appropriate reason or permission where permission is required.

Security, retention and international handling

Surfplay Casino takes reasonable steps to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. Safeguards may include access controls, account security measures, encryption or secure transmission where appropriate, monitoring, staff procedures and security reviews. No website, electronic transmission or storage system can be guaranteed to be completely secure, so players should use a strong password, keep login information private and contact support promptly if they suspect that an account has been compromised.

Personal information is kept for as long as it is reasonably needed for the purposes described in this policy. The period may depend on the type of information, the purpose for which it was collected, account activity, security requirements, dispute handling and applicable obligations. Some records must be retained for a period required by law even after a player closes an account. When information is no longer required, it may be securely deleted, anonymised or otherwise disposed of in accordance with relevant procedures.

Some service providers or technical systems may process or store information outside Australia. Where this occurs, reasonable steps should be taken to support appropriate handling and security, subject to the arrangements used for the relevant service. The protections that apply can depend on the location, service and information involved.

Cookies

Cookies are small files or similar technologies placed on a device when a website is used. They can help remember settings, keep a session active, support security, measure performance and understand which features are useful. Some cookies may be placed by service providers supporting website functions. Players can manage, block or delete cookies through their browser settings. Disabling certain cookies may affect sign-in, preferences or the operation of some website features.

Your privacy choices and rights

Depending on the circumstances and applicable privacy requirements, players may have rights relating to their personal information. These rights are subject to reasonable identity checks, legal exceptions, security needs and other applicable conditions. A request will be considered based on the information available and the nature of the request.

• Access the personal information held about you and receive an explanation of how it is used.
• Request correction of information that is inaccurate, incomplete or out of date.
• Request deletion of your personal information where it is no longer needed or where deletion is otherwise available. Some information may need to be retained for a period required by law or for legitimate security, dispute or record-keeping purposes.
• Withdraw consent to marketing communications at any time. Marketing messages may also include an unsubscribe option where available. Withdrawing marketing consent does not necessarily stop essential service, account, security or transaction messages.
• Ask questions about the handling of your personal information or raise a privacy concern.

How to make a privacy request

To request access, correction or deletion of your data, or to withdraw consent to marketing, contact support@surfplaycasino.best. Please describe the request clearly and include enough information to help identify the relevant account or records. For security, additional information may be requested to verify your identity before a request is completed. Do not send unnecessary passwords, payment card numbers or other sensitive information in an email.

The response process may take reasonable time, particularly where a request involves verification, extensive records, third-party information, technical investigation or information that must be preserved. If a request cannot be completed in full, an explanation may be provided where appropriate. Players may also use their browser settings to manage cookies and may update available account or communication preferences through the website.

Updates to this policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, technology, security practices or applicable requirements. The latest version will be made available on the website and will apply from its stated publication or effective date. Players should review this page periodically, especially before providing new information or using new features. If a change is important, additional notice may be provided through an appropriate account or website communication.