Playmeth Privacy Policy

1. Information We Collect

Playmeth gathers personal data necessary for account verification, regulatory compliance, and service delivery. The categories of information include:

• Identification details: full name, date of birth, residential address, and government-issued identification documents required under Australian Know Your Customer (KYC) obligations.
• Contact information: email address and mobile telephone number used for account recovery and security notifications.
• Financial data: payment method details, transaction history, deposits, withdrawals, and bonus activity.
• Technical data: IP address, device identifiers, browser type, operating system, and login timestamps.
• Behavioural data: gameplay records, session duration, wagering history, and preferences.

Information is collected directly during registration, during deposits or withdrawals, through cookies during browsing sessions, and from authorised third-party verification providers.

2. Purpose of Data Processing

Personal information is processed for lawful and clearly defined purposes:

• Verifying account holder identity and age in accordance with Australian gambling regulations.
• Preventing fraud, money laundering, and unauthorised account access.
• Processing financial transactions and maintaining accurate records.
• Providing customer support and resolving disputes.
• Sending transactional communications and, where consent is granted, promotional updates.
• Meeting tax, audit, and regulatory reporting requirements.

We do not process personal data beyond what is required for these specified purposes.

3. Legal Basis for Processing

Processing occurs on one or more of the following legal grounds: performance of the user agreement, compliance with legal obligations under Australian law, legitimate operational interests such as fraud prevention, and explicit consent for optional communications.

4. Data Sharing and Disclosure

Playmeth does not sell personal information. Data may be disclosed to the following recipients when strictly necessary:

• Regulatory authorities: Australian Communications and Media Authority (ACMA), AUSTRAC, and state-level gambling regulators upon lawful request.
• Payment service providers: for the secure processing of deposits and withdrawals.
• Identity verification partners: for KYC and Anti-Money Laundering checks.
• Technical service providers: hosting, analytics, and cybersecurity contractors bound by confidentiality agreements.
• Legal advisors and law enforcement: where disclosure is required by court order or statutory obligation.

All third parties handling player data are contractually required to apply equivalent protection standards.

5. Data Retention

Account records, transaction histories, and verification documents are retained for a minimum of seven years following account closure, as required by AUSTRAC and Australian taxation legislation. Marketing data is retained only while consent remains active. After the applicable retention period expires, information is securely deleted or anonymised.

6. Security Measures

Technical and organisational safeguards include 256-bit SSL encryption for all data transmissions, encrypted database storage, role-based internal access controls, multi-factor authentication for staff systems, and regular penetration testing. Despite these measures, no internet-based service can guarantee absolute security. Account holders share responsibility by protecting login credentials and reporting any suspicious activity immediately.

7. Your Privacy Rights

Under the Australian Privacy Principles, you have the following rights:

• Request access to personal information held about you.
• Request correction of inaccurate or outdated records.
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.
• Request deletion of personal data, subject to legal retention obligations.

Requests should be submitted through the verified account holder's registered email address. Responses are typically provided within 30 days.

8. Cookies and Tracking Technologies

Cookies are used to maintain session integrity, remember preferences, and analyse usage patterns. Strictly necessary cookies cannot be disabled without affecting login functionality. Optional analytical and marketing cookies require user consent and can be adjusted through browser settings.

9. International Data Transfers

Where information is transferred outside Australia for processing, Playmeth ensures that recipient jurisdictions provide protection consistent with Australian standards, supported by contractual safeguards.

10. Policy Updates

This Privacy Policy may be amended to reflect operational, legal, or regulatory changes. Material revisions will be communicated through account notifications. Continued use of services after publication of an updated version constitutes acceptance of the revised terms.