3-Step Welcome Package

Up to $650 AUD

200% on 1st deposit + bonus steps 2 & 3

Privacy Policy

This Privacy Policy explains how Candy Casino handles personal information when you visit the website, create or use an account, contact support, or otherwise use the available services. It also explains cookies, information sharing, security measures and the choices available to players in Australia.

Candy Casino operates under a Responsible Gaming policy and AML procedures, applies mandatory KYC age and identity verification for all withdrawals, and supports deposit limits on a daily, weekly or monthly basis to support player wellbeing.

About this Privacy Policy

Candy Casino respects the privacy of its players and aims to handle personal information in a responsible and transparent way. This policy applies to information collected through the website, account services, customer support interactions and related online features. It should be read together with any applicable terms and conditions and responsible gambling information published on the site.

Personal information means information that identifies you or could reasonably be linked to you. The information handled will depend on how you use the site, the services you request, the checks that may be required, and the choices you make about communications. Some information may be provided directly by you, while other information may be collected automatically when you browse or use the website.

By using the website, you acknowledge that information may be collected and used for the purposes described in this policy. Where consent is required for a particular activity, you may be asked to provide it. You can withdraw consent to marketing communications at any time, as explained below. Withdrawing consent does not affect processing that is needed for account operation, security, legal compliance or other lawful purposes.

Information we may handle

A casino website typically needs to handle different types of information to provide account services, protect players and meet its operational obligations. The information collected may vary depending on whether you register, make a transaction, contact support, take part in a promotion or simply browse the site.

Account and identity information

Your name, date of birth, contact details, username and account login information.
Information about your account settings, preferences, responsible gambling choices and communications preferences.
Information you provide when contacting support, including the contents of your enquiry and details used to help verify your account.
Verification documents or information needed to confirm identity, age, eligibility or the ownership of an account.

Payment and transaction information

Payment method details and records of deposits, withdrawals, purchases, refunds or other account transactions.
Information needed to identify unusual activity, prevent misuse and reconcile payments.
Records relating to account balances, gaming activity, offers or other services used through the account.

Technical and usage information

Your IP address, approximate location, browser type, operating system, device details and language settings.
Information about how you use the website, such as pages visited, links selected, session activity and general interaction data.
Cookie identifiers and similar technical information, including information used to remember preferences, support security and understand website performance.

You should only provide information that is accurate, current and relevant to your use of the site. If you provide information about another person, you should have a lawful basis or permission to do so. The site may also receive information from service providers or other sources where this is needed for identity checks, payment processing, fraud prevention, security or legal compliance.

How information is used and shared

Personal information is generally used to operate, maintain and improve the site and the services made available through it. The purposes may include setting up and managing your account, processing transactions, providing customer support, communicating with you and making the website function as intended.

To create, verify and administer your account.
To confirm identity, age and account ownership where checks are required.
To process deposits, withdrawals and other transactions, and to keep accurate transaction records.
To detect, investigate and prevent fraud, money laundering, account takeover, collusion, cheating, payment abuse and other suspicious or unlawful activity.
To meet legal, regulatory, tax, reporting, record-keeping and responsible gambling obligations that apply to the service.
To respond to questions, resolve complaints, provide technical assistance and improve support quality.
To personalise website settings, remember preferences and understand how the site is used.
To send service messages about your account, security, transactions, changes to the site or this policy.
To send marketing communications where permitted and where you have provided the required consent or otherwise have a lawful basis to receive them.
To protect the rights, property, safety and security of players, the site and relevant service providers.

Information may be shared only where reasonably necessary for these purposes. This may include sharing relevant information with payment providers, identity and verification providers, technology and hosting providers, customer support providers, fraud prevention services, professional advisers, insurers, auditors or other suppliers that help operate the site. These parties should use information only for authorised services and handle it in accordance with applicable privacy requirements.

Information may also be disclosed where reasonably necessary to comply with a lawful request, protect the site or another person, investigate suspected wrongdoing, enforce applicable terms, or support a legal process. If the business or part of its operations changes ownership or structure, information may be transferred as part of that change, subject to appropriate privacy protections.

Some service providers may process information in countries outside Australia. Where information is handled overseas, reasonable steps should be taken to support its protection and to use it only for the relevant business or service purpose. The exact location of processing may depend on the providers used and the technical operation of the website.

Cookies, security and retention

Cookies and similar technologies

The website may use cookies and similar technologies to keep the site working, maintain secure sessions, remember preferences, support account functions, measure performance and understand how visitors use the site. Some cookies may be placed by service providers that help with analytics, security, payments or other website functions.

You can manage or block cookies through your browser settings. If you disable certain cookies, parts of the website may not work correctly, account features may be limited, or preferences may not be saved. Browser settings can also normally be used to delete cookies already stored on your device. Cookie choices may need to be repeated if you use a different browser or device.

Security

Reasonable technical, administrative and organisational measures may be used to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These measures can include access controls, authentication processes, monitoring, secure connections, staff procedures and selecting service providers with appropriate safeguards.

No online service can guarantee complete security. You are responsible for keeping account credentials confidential, using a suitable password, signing out of shared devices and promptly reporting anything that appears unusual. The site may ask for information to verify your identity before discussing an account or acting on a request.

Retention of information

Personal information is kept only for as long as it is reasonably needed for the purposes described in this policy, unless a longer period is required or permitted. Retention may depend on the type of information, the reason it was collected, ongoing disputes or complaints, security needs and operational requirements.

Closing an account does not always mean that every record is deleted immediately. Some account, identity, payment, transaction, security and communication records must be kept for a period required by law, or where needed to establish, exercise or defend legal rights, prevent fraud, resolve disputes or meet legitimate record-keeping obligations. When information is no longer needed, it should be securely deleted, anonymised or otherwise handled in accordance with applicable requirements.

Your privacy rights and how to contact us

Depending on your circumstances and applicable privacy requirements, you may have rights relating to the personal information held about you. These rights are not always absolute, and a request may be subject to identity checks, legal exceptions, security concerns, another person's privacy, or the need to retain certain records.

Access your personal information and receive an explanation of how it is being used.
Ask for information that is inaccurate, incomplete or out of date to be corrected.
Request deletion of your personal information where it is no longer needed or where deletion is otherwise available under applicable requirements.
Withdraw consent to marketing communications or change your marketing preferences.
Ask questions about the handling of your information or raise a privacy concern.

To exercise these rights or make a privacy request, contact support@candycasino.wtf. Please describe your request clearly and provide enough information for the relevant account or records to be identified. For security, additional information may be requested to confirm that the request comes from the account holder. If you ask to stop marketing, service-related messages about your account, transactions or security may still be sent where they are necessary.

A request to delete information may not remove records that must be retained for legal, security, fraud prevention, dispute resolution or other permitted purposes. Where deletion is not possible, the information may be retained with access limited to the purpose that requires it. If you believe a privacy concern has not been resolved, you may seek information about any complaint options available to you under applicable Australian privacy requirements.

Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, technology, privacy practices or applicable requirements. The current version will be made available on the website, with the effective date or other update information where appropriate. You should review the policy periodically, particularly before continuing to use the site after a significant change.