Privacy & Data Control

What personal data Townsville Casino collects, how to protect your account, what to redact in document uploads, and how to manage your privacy settings safely.

What Data the Operator Collects

Registration and identity data

Online casino registration typically collects your full legal name, date of birth, residential address, email address, and phone number. This data feeds directly into the KYC (Know Your Customer) process required by the operator's licensing conditions. You cannot opt out of identity collection if you want to transact — it is a regulatory requirement, not a preference. What matters is how that data is stored, who has access to it, and whether it is shared with third parties.

🔒 Provide only what is required for KYC. ❌ Never submit data via unverified links or pop-ups. 📄 Review the privacy policy before registration.

Behavioural and session data

Beyond identity, the platform logs session data: pages visited, games launched, bet sizes, session duration, deposit and withdrawal patterns, and device/browser information. This data is used for responsible gambling monitoring, fraud detection, and marketing segmentation. Most players are unaware of how granular this tracking is. Under GDPR-aligned policies, you can request access to or deletion of this data — check the privacy policy for the procedure.

Document Upload and Redaction

What to redact before submitting identity documents

When uploading proof of identity, you only need to show the information necessary for verification: name, date of birth, and document number. On a passport, there is no need to expose the machine-readable zone data. On a bank statement used as proof of address, redact your account number and all transaction history — only the name, address, bank name, and statement date need to be visible. Use a PDF editor or paper + tape before scanning.

Proof of payment method guidelines

If the operator asks for a card image, redact the CVV (the 3-digit code on the reverse) and the middle 8 digits of the card number. Only the first 4 and last 4 digits should be visible. Never submit a full unredacted card image. If asked for a bank statement as proof of payment method, apply the same redaction approach as for address proof: name and last 4 digits of account only.

✂️ Redact CVV always. 🏦 Show only first/last 4 card digits. 📝 On statements: name, bank, date — no transaction detail.

Marketing and Data Sharing Preferences

Opting out of marketing communications

Most operators default new accounts to marketing opt-in. To reduce promotional emails and SMS, navigate to account settings and locate the communication preferences section. Uncheck all marketing channels. Note that transactional messages (withdrawal confirmations, KYC notifications) cannot be disabled — these are operational, not marketing.

Third-party data sharing

Casino operators may share data with payment processors, fraud detection services, responsible gambling tools, and in some jurisdictions, regulatory bodies. Legitimate sharing is disclosed in the privacy policy. If you see clauses about sharing with "affiliates" or "partners" without specific limitation, you can write to the operator's data protection officer to request a scope restriction under applicable privacy law.

Account Closure and Data Deletion

How to close your account

Account closure requests are usually handled via live chat or a formal email to the support team. Before closing, withdraw all available balance and ensure no pending bonuses are active. Note that some operators retain your data for up to 7 years after closure for compliance purposes — this is legally required and cannot be waived. Request confirmation in writing that your account is closed and that no further charges will apply.

Data deletion requests

Under privacy legislation applicable to many AU-facing offshore operators, you can request deletion of your personal data after the mandatory retention period expires. Submit the request in writing, referencing your account ID and the specific data categories you want deleted. The operator must respond within 30 days. If they do not, you can file a complaint with the relevant data protection authority or the licensing body.

📥 Always request account closure in writing. 🗂️ Keep the closure confirmation email. ⏳ Data retention periods are legal — focus on marketing and behavioural data deletion instead.