Candyland Casino Privacy Policy

At Candyland Casino, we take your privacy seriously. This page sets out the Candyland Casino privacy policy in full — detailing exactly what personal data we collect, how we use it, who we share it with, and what rights you have over your information. Whether you are a new member or a returning player, understanding our approach to data protection is essential before you use our platform. We are committed to full transparency and to complying with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where relevant, the General Data Protection Regulation (GDPR). This privacy policy applies to all users of casinoscandyland.com and any associated mobile applications or services.

1. Identity of the Data Controller

Candyland Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the entity that determines how and why your personal information is processed, this company acts as the data controller for all user data collected through casinoscandyland.com. If you have any questions or concerns about how your data is handled, you may contact our dedicated Data Protection Officer (DPO) at:

• Email: [email protected]
• General Support: [email protected]

We encourage all players to reach out if they have concerns relating to confidentiality, data security, or any aspect of this privacy policy.

2. Personal Data We Collect

The Candyland Casino data collection process covers several categories of personal data. We only collect information that is necessary for the purposes outlined in this privacy policy. The main categories of personal information we may gather include:

2.1 Identification Data

• Full legal name
• Date of birth
• Country and residential address
• Government-issued identity documents (passport, driver's licence, national ID)

2.2 Contact Data

• Email address
• Phone number
• Preferred communication language

2.3 Financial Data

• Payment method details (card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
• Deposit and withdrawal history
• Transaction records and account balances

2.4 Gaming Activity Data

• Games played, bets placed, wins and losses
• Session duration and frequency of play
• Bonus and promotion usage
• Responsible gambling tool activations (limits, self-exclusion, cooling-off periods)

2.5 Technical and Device Data

• IP address and geolocation
• Device type, operating system, browser version
• Log files and clickstream data

2.6 Communication Data

• Records of live chat conversations and emails with our support team
• Survey responses and feedback you voluntarily provide

2.7 Sensitive Data

In limited circumstances — for example, when processing responsible gambling requests or verifying identity — we may handle sensitive information such as health-related data. We handle all such personal data with the highest degree of care and process it only with your explicit consent or as required by law.

2.8 Data From Third Parties

We may also receive personal information from third-party sources, including payment processors, identity verification agencies, fraud prevention services, and analytics partners, in order to fulfil our legal and operational obligations.

3. How We Collect Your Data

Candyland Casino collects user data through a variety of methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions
• Automatically — through cookies, web beacons, pixel tags, and server logs when you browse casinoscandyland.com
• From third parties — including payment providers, identity verification bureaus, and marketing partners who share data with us in accordance with their own privacy policies

4. Purposes of Data Processing

All data processing activities at Candyland Casino are carried out for specific, legitimate purposes. We do not process your personal data beyond what is necessary for the following objectives:

5. Candyland Casino Cookie Policy

The Candyland Casino cookie policy explains how we use cookies and similar tracking technologies when you visit casinoscandyland.com. A cookie is a small text file placed on your device that helps us recognise you and remember your preferences. We use four main categories of cookies:

5.1 Essential Cookies

These cookies are strictly necessary for the website to function. They enable core features such as login sessions, security tokens, and payment processing. You cannot opt out of essential cookies as the site would not work without them.

5.2 Analytical Cookies

Analytical cookies allow us to understand how visitors interact with casinoscandyland.com. We use tools such as Google Analytics to measure page views, session durations, and traffic sources. This helps us improve our service and identify technical issues. Data collected via analytical cookies is aggregated and, where possible, anonymised.

5.3 Functional Cookies

Functional cookies remember your preferences — such as your language setting, display options, and responsible gambling limits — so you do not have to reconfigure them each time you visit. These cookies contribute to a smoother, more personalised experience.

5.4 Marketing Cookies

With your consent, marketing cookies are used to serve you relevant advertisements and promotional content across our site and on third-party platforms. These cookies track browsing behaviour across sessions and may be set by our advertising partners. You can withdraw consent for marketing cookies at any time via your cookie preferences settings.

Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings or through the cookie policy consent banner displayed when you first visit casinoscandyland.com. Please note that disabling certain cookies may affect the functionality of the site. For more information about managing cookies, visit www.allaboutcookies.org.

6. Sharing Your Personal Data With Third Parties

Candyland Casino does not sell your personal data to third parties. However, we may share user data with the following categories of recipients where it is necessary or required by law:

6.1 Payment Service Providers

To process deposits and withdrawals, we share relevant financial personal information with payment providers including PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, and cryptocurrency processors. These providers act as data processors under strict contractual obligations aligned with our data protection standards.

6.2 Regulatory Authorities

We are legally required to disclose personal data to relevant regulatory and law enforcement authorities — including Australian regulators and the Curaçao Gaming Control Board — when requested as part of AML, KYC, or fraud investigations. Such disclosures are made under legal obligation.

6.3 Identity Verification and KYC Partners

To fulfil mandatory KYC obligations, we work with accredited identity verification agencies. These partners process identification documents and biometric data under contracts requiring the highest standards of information security and confidentiality.

6.4 Technology and Analytics Partners

We share anonymised or pseudonymised user data with analytics and technology partners to improve our platform's performance, security, and personalisation. Game providers such as Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, and Microgaming may receive session data necessary to deliver their games.

6.5 Marketing Partners

Where you have provided consent, we may share limited contact and preference data with marketing affiliates to deliver relevant promotions. You can withdraw this consent at any time.

7. International Data Transfers

As a globally operated platform licensed in Curaçao, Candyland Casino may transfer your personal data outside Australia. In all cases, we ensure that appropriate safeguards are in place to protect your personal information during international transfers. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved under GDPR
• Binding Corporate Rules (BCRs) where applicable
• Transfers to countries with an adequacy decision from the relevant authority
• Contractual obligations requiring recipient parties to maintain equivalent data protection standards

By using casinoscandyland.com, you acknowledge that your personal data may be transferred to and processed in countries outside Australia, including within the European Economic Area and other jurisdictions. We always strive to ensure that your data security is maintained regardless of where processing occurs.

8. Data Security at Candyland Casino

Candyland Casino data security is a core priority. We implement industry-leading technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. Our information security framework includes:

• 256-bit SSL/TLS Encryption — all data transmitted between your browser or app and our servers is encrypted using 256-bit SSL technology, the same standard used by major financial institutions
• Firewalls and Intrusion Detection Systems — our infrastructure is protected by enterprise-grade firewalls and real-time threat monitoring
• Data Encryption at Rest — sensitive personal data stored on our servers is encrypted at rest to prevent unauthorised access in the event of a security breach
• Access Controls — only authorised personnel with a legitimate need may access your user data, and all such access is logged and audited
• Regular Security Audits — we conduct periodic internal and third-party security assessments to identify and remediate vulnerabilities
• RNG Certification — our random number generators are independently certified to ensure fair play, which is also a component of overall platform data integrity

Despite these measures, no system is entirely infallible. If you suspect any security incident affecting your account, please contact us immediately at [email protected].

9. Data Retention and Storage

Candyland Casino data storage practices are governed by our legal obligations, operational requirements, and the principle of data minimisation. We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods include:

After the applicable retention period, your personal data is securely deleted or anonymised. We do not retain user data beyond what is necessary for the stated purposes outlined in this privacy policy.

10. Your Privacy Rights

As an Australian player, you benefit from comprehensive privacy rights under the Australian Privacy Act 1988 and the Australian Privacy Principles. Where GDPR also applies, you may have additional entitlements. The Candyland Casino privacy framework fully supports these rights. Your key privacy rights include:

10.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will respond to verified access requests within 30 days. Submit your request to [email protected].

10.2 Right to Correction

If your personal information is inaccurate, outdated, or incomplete, you have the right to request that we correct it. You can update many details directly through your account settings, or contact us to request corrections to records that you cannot update yourself.

10.3 Right to Deletion (Right to Be Forgotten)

You may request the deletion of your personal data where we no longer have a legal or legitimate basis for retaining it. Please note that certain data must be retained to comply with AML, KYC, and taxation laws, which may limit this right in some circumstances.

10.4 Right to Restrict Processing

You can ask us to restrict how we use your personal data in specific situations — for example, while you contest the accuracy of data we hold, or where you object to our processing but we are assessing that objection.

10.5 Right to Data Portability

Where technically feasible and legally required, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit that data to another controller.

10.6 Right to Object

You may object at any time to data processing carried out on the basis of our legitimate interests, including profiling for marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where data processing is based on your consent — such as receiving marketing emails or allowing marketing cookies — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. To withdraw consent, use the unsubscribe link in our emails or contact [email protected].

Exercising Your Rights

To exercise any of your privacy rights, please contact our Data Protection Officer at [email protected]. We may ask you to verify your identity before processing your request to protect your personal data from unauthorised access. We aim to respond to all requests within 30 days; in complex cases we may extend this by a further 30 days, of which we will notify you.

11. Supervisory Authority — OAIC

If you are not satisfied with how Candyland Casino has handled a complaint or request relating to your privacy rights or personal data, you have the right to lodge a complaint with the relevant supervisory authority. For Australian players, that authority is:

• Office of the Australian Information Commissioner (OAIC)
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

Players in the European Economic Area may also have the right to lodge a complaint with their local Data Protection Authority (DPA).

12. Responsible Gambling and Data

Candyland Casino uses your gaming activity data as part of our commitment to responsible gambling. By monitoring session duration, bet frequency, and deposit patterns, we can identify signs of problem gambling and reach out proactively. Players can also self-manage via our responsible gambling tools, which include:

• Deposit, bet, and loss limits
• Session time limits
• Cooling-off periods (24 hours, 48 hours, 7 days, 30 days)
• Self-exclusion options (6 months, 1 year, 5 years, or permanent)

Data processed for responsible gambling purposes is handled with the utmost sensitivity and confidentiality, in line with this privacy policy and our obligations under Australian law.

13. Children's Privacy

Candyland Casino does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adults only. If we become aware that a minor has provided us with personal information, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on casinoscandyland.com, please contact us immediately at [email protected].

14. Updates to This Privacy Policy

We may update this Candyland Casino privacy policy from time to time to reflect changes in legislation, our services, or our data processing practices. When we make material changes, we will notify registered players by email or by displaying a prominent notice on casinoscandyland.com. The date of the most recent update will always be shown at the top of this page. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal information.

15. Frequently Asked Questions — Privacy at Candyland Casino

What personal data does Candyland Casino collect?

Candyland Casino collects identification, contact, financial, gaming activity, technical, and communication data. The full list of personal information categories is set out in Section 2 of this privacy policy. We only collect data that is necessary for legitimate purposes.

How does Candyland Casino use cookies?

Our cookie policy covers four types of cookies: essential, analytical, functional, and marketing. Essential cookies cannot be disabled as they are needed for the site to function. You can manage your preferences for other cookies through our consent banner or your browser settings. Full details are in Section 5 of this document.

Is my personal data shared with third parties?

Candyland Casino does not sell your personal data. We share user data only with payment providers, regulatory authorities, KYC partners, technology partners, and (with your consent) marketing affiliates. All third-party data sharing is governed by strict contracts and data protection standards.

How secure is my data at Candyland Casino?

We employ industry-standard information security measures including 256-bit SSL/TLS encryption, firewalls, intrusion detection systems, and encrypted data storage. Our platform undergoes regular security audits. Full details of our data security measures are in Section 8.

How long does Candyland Casino keep my data?

Retention periods vary by data category and legal obligation. Account and identification data is held for the duration of your account plus 7 years to satisfy AML requirements. Technical log files are typically retained for up to 12 months. A complete data storage schedule is provided in Section 9.

How do I exercise my privacy rights?

To exercise your privacy rights — including access, correction, deletion, restriction, portability, or objection — contact our Data Protection Officer at [email protected]. We will verify your identity and respond within 30 days. If you are dissatisfied with our response, you may escalate your complaint to the OAIC as outlined in Section 11.

Does Candyland Casino transfer data outside Australia?

Yes — as an internationally operated platform, Candyland Casino may transfer personal data outside Australia. All international data transfers are protected by appropriate safeguards, including Standard Contractual Clauses, to ensure your data protection rights are upheld.

What is the Candyland Casino cookie policy for marketing cookies?

Marketing cookies are only activated with your explicit consent. They allow us and our advertising partners to deliver relevant promotions to you. You can withdraw consent for marketing cookies at any time through the cookie preference centre on casinoscandyland.com or by contacting [email protected]. Withdrawing consent does not affect the lawfulness of prior data processing.

Contact Us

For any questions or concerns about the Candyland Casino privacy policy, data protection, or your personal data, please get in touch with our team:

• Data Protection Officer: [email protected]
• General Support: [email protected] (live chat available 24/7; email replies within 12 hours)
• Privacy Complaints: [email protected]

We are committed to resolving all privacy concerns promptly, transparently, and in full compliance with Australian law. Thank you for trusting Candyland Casino with your personal information.