Darwin Online Casino Privacy Policy - How Your Data Is Handled

1. Who We Are

The platform operates under a Malta Gaming Authority licence. The platform is the data controller responsible for personal information collected through the site and its associated services. For all data-related queries, contact the support team through the live chat function or the contact form in your account dashboard.

2. Information We Collect

Darwin online casino collects personal information through registration, account activity, payment processing and general platform use. The categories of data collected include:

• Identity data: Full legal name, date of birth, gender and nationality
• Contact data: Email address, phone number and residential address
• Verification data: Copies of government-issued identification and proof of address documents submitted during KYC
• Financial data: Payment method details, transaction history, deposit and withdrawal records
• Technical data: IP address, browser type, device identifiers, operating system and session timestamps
• Usage data: Game history, betting patterns, session duration, bonus activity and platform navigation data
• Communications data: Records of interactions with the support team including live chat transcripts and email correspondence

The platform does not collect data beyond what is necessary for the purposes described in this policy.

3. How We Use Your Information

Online casino Darwin uses collected data for the following purposes:

• Account management: Creating, maintaining and securing your player account
• Identity verification: Fulfilling KYC obligations required under the MGA licence framework
• Payment processing: Handling deposits, withdrawals and associated transaction records
• Fraud prevention: Monitoring account activity for irregular patterns, duplicate accounts and potential abuse
• Regulatory compliance: Meeting anti-money laundering obligations and reporting requirements under applicable law
• Responsible gambling: Identifying players who may require intervention and administering self-exclusion requests
• Customer support: Responding to queries, complaints and account-related requests
• Platform improvement: Analysing usage data to improve game performance, navigation and service delivery
• Marketing: Sending promotional communications where you have provided explicit consent to receive them

4. Legal Basis for Processing

Darwin online casino processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the account agreement between the platform and the player - including registration, payment handling and game access
• Legal obligation: Processing required to comply with MGA licence conditions, anti-money laundering legislation and applicable Australian privacy law
• Legitimate interests: Processing carried out for fraud detection, platform security and service improvement where those interests are not overridden by your rights
• Consent: Processing for marketing communications, where consent has been given explicitly and can be withdrawn at any time

The platform does not rely on consent as the legal basis for processing where another lawful ground applies.

5. Who We Share Your Information With

Online casino Darwin does not sell personal data to third parties. Data is shared only where necessary and with the following categories of recipients:

• Payment processors: Third-party providers handling deposit and withdrawal transactions, including POLi, PayID, PayPal and cryptocurrency network operators
• Identity verification providers: Third-party KYC and AML services used to verify player identity and screen against sanctions lists
• Regulatory bodies: The Malta Gaming Authority and, where required, Australian state and territory gambling regulators
• Law enforcement: Government agencies or authorities where disclosure is required by law or court order
• IT and security providers: Cloud infrastructure, data storage and cybersecurity partners operating under contractual data protection obligations
• Responsible gambling organisations: Where player data is required to support self-exclusion registration or problem gambling intervention

All third parties who receive personal data from the platform are required to handle it in accordance with applicable data protection law.

6. Cookies and Tracking Technologies

Darwin Casino online uses cookies and similar technologies to support platform functionality, measure performance and personalise your experience. The categories in use include:

• Essential cookies: Required for the platform to function - session management, login authentication and security features. These cannot be disabled without affecting core functionality
• Analytical cookies: Track aggregate usage patterns including page visits, session length and navigation paths - used to improve platform performance
• Functional cookies: Store preferences such as language settings and display options between sessions
• Marketing cookies: Track activity across sessions to deliver relevant promotional content where consent has been provided

You can manage cookie preferences through your browser settings. Disabling non-essential cookies does not affect your ability to access account functions or place bets.

7. Data Retention

Darwin online casino retains personal data for as long as your account remains active and for a defined period following closure. Specific retention periods:

• Account and identity data: Held for a minimum of five years following account closure, in line with MGA and anti-money laundering requirements
• Transaction records: Retained for a minimum of five years from the date of each transaction
• Communications data: Support interaction records held for up to three years
• Technical and usage data: Retained in aggregated or anonymised form for analytical purposes beyond the standard retention window

Where retention is no longer required by law or legitimate business need, data is securely deleted or anonymised. The platform does not retain data beyond the periods specified without a documented legal basis.

8. Data Security

Online casino Darwin applies technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Measures in place include:

• Encryption: SSL/TLS encryption across all data transmitted between your device and the platform
• Access controls: Role-based internal access restrictions limiting data access to authorised personnel only
• Monitoring: Continuous security monitoring and intrusion detection across platform infrastructure
• Incident response: A documented data breach response process including regulatory notification obligations under MGA requirements

No data transmission over the internet is entirely without risk. The platform takes reasonable steps to protect your information, but cannot guarantee absolute security against all possible threats.

9. International Data Transfers

Darwin Casino online operates under a Malta Gaming Authority licence, and data may be processed in Malta or other jurisdictions outside Australia. Where personal data is transferred internationally, the platform applies appropriate safeguards including:

• Standard contractual clauses approved by relevant data protection authorities
• Transfers only to jurisdictions with adequate data protection frameworks or with equivalent safeguards in place

Players located in Australia should be aware that data processing occurs outside Australian borders. By registering an account, you acknowledge and consent to this transfer under the conditions described above.

10. Your Rights

Depending on your location and applicable law, you may hold some or all of the following rights in relation to your personal data held by Darwin Casino online:

• Access: Request a copy of the personal data the platform holds about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your data where retention is no longer legally required
• Restriction: Request that processing be limited while a dispute over accuracy or lawfulness is resolved
• Portability: Request a structured, machine-readable copy of data you have provided under consent or contractual necessity
• Objection: Object to processing carried out on the basis of legitimate interests
• Withdrawal of consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact the platform through the support team via live chat or the account dashboard contact form. The platform will respond within 30 days. Where a request is refused, you will receive a written explanation and information on how to escalate the matter to the MGA or the relevant Australian privacy authority.