How LEON Casino Handles Personal Information for Australian Players

1. Where This Starts

Anonymity and a real-money gambling account are incompatible. Documents proving who you are, records of every transaction, a log of what was played: none of these are preferences that could be switched off if enough players asked, because the licence conditions and the anti-money-laundering rules behind them require the lot.

That produces three commitments worth stating before the detail. Nothing collected here is sold. Anything genuinely optional is labelled optional and can be reversed in a click, marketing being the obvious case. And where you have no choice at all, this page says so rather than presenting a legal obligation as a service benefit.

2. The Categories Gathered

Two clarifications belong here. Card numbers in full never reach this platform: the payment processors hold them, which is precisely why a refund can arrive on a card whose digits the operator cannot see. And verification documents are requested once, then again only when one expires or a later check raises a question.

3. The Reason Behind Each Category

Basis matters because it decides what you are able to refuse while keeping the account.

Take away one sentence from this section: identity checks are compulsory, marketing is voluntary, and neither is ever offered as a trade against the other. Turning off promotional email changes nothing about depositing, playing or being paid.

4. Who Receives It

Personal information is disclosed where service delivery or the law demands it, never for another company's marketing, and each recipient gets only the slice its function requires.

Suppliers in the last row are contractually restricted to the job given to them and bound to confidentiality. None of them may repurpose what they hold.

5. Processing Outside Australia

The operating company sits offshore, so your information is handled offshore. It resides on systems run by Bluewave Interactive N.V. . and by the suppliers listed above, in countries other than this one.

Australian Privacy Principle 8 addresses that arrangement directly. Information sent across a border has to stay under protections broadly equivalent to those the Act requires, and the contracts binding every supplier named here carry the same restrictions on confidentiality, security and permitted use, whatever country the hardware occupies.

Here is what a contract cannot achieve, stated openly because you should factor it in: it does not hand an Australian regulator supervisory power over a company incorporated elsewhere. No wording anywhere would change that. Knowing where information travels is part of deciding whether to register at all, which is why the point appears in the body of this policy instead of a footnote.

6. What You Can Require, and How

Access

Australian Privacy Principle 12 entitles you to a copy of what is held about you. Submit the request through section 11. You will get confirmation that it arrived, an identity check before anything leaves the building, and a response inside a reasonable period.

Correction

Australian Privacy Principle 13 covers information that is wrong, stale or half complete. Postal address, phone number and message preferences you can amend yourself inside account settings. Anything locked to a verified document goes through a request instead, since altering it alters the verification that document supports.

Erasure

You can ask for deletion when closing the account, and honesty is required about the result. Everything not held down by a legal duty goes. Verification files and transaction records stay for their mandated period and disappear when it lapses, not before. So a deletion request means: remove all of it except what the law compels us to keep, and remove that too as each clock expires. A policy claiming instant total erasure would be claiming something the law does not permit it to do.

Ending marketing

Use the unsubscribe link on any message or the toggle in your communication preferences. It takes effect without conditions and leaves everything else about the account alone.

If a request goes wrong

Bring it back through section 11 first, since most failures at this stage are clerical. Should it stay unresolved, privacy complaints from individuals are received by the OAIC, Australia's Office of the Australian Information Commissioner, which sets out its own process on its website. To be precise about what that means: the OAIC is a route open to you as a resident, and nothing here claims an offshore company falls under its supervision.

7. Retention Periods

8. Cookies, Briefly

Session security relies on strictly necessary cookies. Fault-finding relies on performance cookies. Remembered preferences such as language rely on functionality cookies. Advertising cookies operate only where you have agreed to them. Refuse any non-essential category at the banner, or revisit the choice later through the cookie preferences link in the footer. Full detail, including lifespans and browser controls, is in the cookie policy.

9. Security Measures

Named mechanisms follow, since a promise to protect data means nothing on its own.

Connections between your device and the platform are encrypted in transit with TLS. Records at rest live on access-controlled systems, and staff reach only what their role requires. Payment processors substitute tokens for card credentials, so the numbers themselves are never on the platform to be lost.

Two defences belong to you rather than to us. Switch on two-factor authentication, which reduces a stolen password to a useless string by itself. Give this account a password used on no other site. Nobody on the support team will request that password or a one-time code, in chat, by email or through any channel whatsoever, so a message asking for either did not come from LEON Casino and belongs in a report rather than a reply.

10. Under-18s

Registration is closed below 18, age is established through documents at verification rather than a self-declared birthday, and no personal information about minors is knowingly held.

Where a check establishes that a holder is underage, the account closes, winnings do not stand under the terms of service, deposits net of withdrawals are dealt with as those terms describe, and the information gathered is erased apart from what section 7 obliges us to retain. Parents and guardians who suspect a minor has registered on their device or with their details should contact support straight away rather than waiting for a routine check to surface it.

11. Sending a Privacy Request

Two channels, both simple. Live chat while signed in, or the support address printed in the site footer. Say that the message is a privacy request and ask for it to reach the data protection officer.

Include what you want done, whether that is access, correction, erasure or an end to marketing, together with the email address the account uses. Identity gets confirmed before anything is released or altered, so a request from an unrelated address will be sent back for verification rather than actioned. Arrival is acknowledged, and the matter is handled inside the periods the Privacy Act sets for the entitlements in section 6.

12. Revisions

Legal change, platform change or a new supplier each trigger a review of this document. Whatever appears on this page is the operative version, and the effective date beside it tells you when it started to apply. Significant revisions are announced inside the account rather than left for you to notice, and playing at leon casino australia once a revision is live means the revised text governs your account.