ThePokies Protects Your Privacy
Your personal information is protected by industry-standard encryption and transparent practices. We're committed to keeping your data secure and complying with global privacy regulations.
Privacy Policy
How we safeguard your personal and payment information
Data
How we collect, protect, and use your information
We collect customer data to deliver our casino services securely and efficiently. This includes essential account information such as your name, email address, date of birth, and residential address, along with payment details and gameplay records. ThePokies uses industry-standard encryption - specifically TLS 1.2 or higher - to protect all data transmitted between your device and our servers. Our hosting infrastructure follows ISO 27001 security standards and is audited regularly by external security firms to ensure compliance and data integrity.
Your data enables us to verify your identity, process deposits and withdrawals via payment partners including Visa, Mastercard, Bitcoin, Ethereum, TRON, Skrill, Neteller, USDT, Litecoin, ecoPayz, and Paysafecard. We retain transaction records as required by Curacao eGaming oversight. Gameplay history across our entire portfolio - which includes slots from Evolution, Pragmatic Play, NetEnt, and Push Gaming, as well as our live casino, poker, and sports betting offerings - is logged systematically to ensure accurate payout calculations, maintain game fairness, and enable our responsible gambling tools to function properly.
We do not sell player data to third parties for marketing, analytics, or any commercial purposes. Data sharing occurs only where legally mandated by authorities - for example, reporting large transactions to financial regulatory bodies or cooperating with gaming regulators. Support requests handled through email, phone, live chat, Facebook, or Telegram are archived for 6 years to handle disputes, verify service interactions, and maintain a complete service record.
You have the right to request access to your personal data, correct inaccuracies, and request deletion of information, subject to legal retention requirements. Some data cannot be deleted because ThePokies must retain it to prevent fraud, verify account history, comply with gaming law, or resolve disputes. Contact our support team via email or live chat to exercise these rights. We review data retention policies annually and purge records no longer required by law, regulation, or legitimate business need.
Data Storage
How we protect and retain your information
We maintain our users' information on secure, encrypted servers located in regulated data centers. Your personal data, transaction history, and account activity are retained for as long as your account remains active and for a minimum period following account closure to comply with Australian gaming regulations and international anti-money laundering standards. We do not retain sensitive payment information (such as full credit card numbers) longer than necessary to process transactions - payment details are typically deleted or masked within 90 days of the final transaction.
All data stored on our systems is protected using industry-standard encryption protocols, including AES-256 encryption for data at rest and TLS 1.3 for data in transit. Our infrastructure partners include globally recognized hosting providers with SOC 2 Type II certifications. We conduct regular security audits and penetration testing to identify and address potential vulnerabilities. Employee access to personal data is restricted to authorized personnel only, and all access is logged and monitored.
Your account information is backed up regularly to prevent accidental loss or corruption. These backups are stored in geographically distributed secure facilities to ensure data availability in the event of a system failure. We also maintain transaction records for a period of seven years to satisfy regulatory requirements and facilitate dispute resolution if needed. Should you request deletion of your account, we will remove your personal data from active systems within 30 days, subject to legal obligations that may require longer retention.
ThePokies takes data storage seriously as a core component of player protection. We continuously monitor our storage systems for signs of unauthorized access or data breaches and maintain comprehensive incident response procedures. Our commitment to secure storage practices, combined with regular compliance reviews and third-party security assessments, ensures that your information remains protected throughout your time with us.
User Rights
Take control of your data and account settings
You have complete control over your ThePokies account and the personal information we hold. We're committed to transparent data handling and give you multiple ways to manage your privacy at any time. You can request access to all personal data we store about you, including account activity, payment history, and communication records. If any information is inaccurate or outdated, we'll correct it promptly. You also have the right to request deletion of your data, subject to our legal retention obligations and responsible gaming requirements.
We respect your communication preferences across all channels. You can opt out of marketing emails and promotional messages through your account settings or by contacting us directly via email, live chat, phone, Telegram, or Facebook. Unsubscribing from promotional content won't affect your access to our casino games, live tables, slots, betting, poker, or sports products.
ThePokies supports responsible gaming and provides tools to help you stay in control. You can set deposit limits in AUD across all payment methods, including Visa, Mastercard, Bitcoin, Ethereum, Skrill, Neteller, TRON, ecoPayz, Paysafecard, and Litecoin. You can also take temporary breaks through self-exclusion or request permanent account closure. These protections apply across our entire platform.
If you wish to withdraw consent for data processing or have concerns about how we use your information, you can lodge a formal complaint with us. We investigate all requests within 14 days and provide a detailed response. You also have the right to escalate concerns to the relevant data protection authority in your jurisdiction. Our support team is available 24/7 via email, phone, or live chat to help you exercise your rights, and we process all valid requests without charging fees.
GDPR Compliance
How we protect EU users' personal data
The General Data Protection Regulation (GDPR) sets strict requirements for protecting personal data of European Union residents. Even though ThePokies operates from Australia, we take GDPR obligations seriously if you are an EU resident accessing our platform. We process personal data lawfully and transparently, using industry-standard encryption protocols to safeguard your information. Your data is never shared with third parties without explicit consent, except where required by law or to operate our licensed services through our payment processors and game providers (Evolution, Pragmatic Play, NetEnt, Push Gaming).
Under GDPR, you have specific rights regarding your personal data. You may request access to information we hold about you, correct inaccuracies, request deletion in certain circumstances, or restrict how we use your data. You can also object to direct marketing communications and request portability of your data in a machine-readable format. To exercise these rights, contact our support team via email, live chat, phone, or Telegram - we respond to data requests within 30 days as required by law.
Your consent is essential. We do not process sensitive personal data beyond what's necessary for account verification, responsible gambling checks, and payment processing. Cookies on our platform collect non-sensitive usage data only; you may disable non-essential cookies through your browser settings without losing core functionality. We retain your data only as long as your account is active, plus the period required by Australian and Curacao gaming regulations for compliance records.
ThePokies complies with data protection impact assessments and maintains records of all processing activities. If you believe we've violated your GDPR rights, you may lodge a complaint with your national data protection authority. Our Privacy Officer oversees compliance and can be reached through our support channels for any data protection inquiries.

