At 28 Mars Casino, protecting your personal data and maintaining full transparency about our data collection and data processing practices is a fundamental commitment. This 28 Mars Casino privacy policy has been prepared in accordance with the Australian Privacy Act 1988, the thirteen Australian Privacy Principles (APPs), and, where applicable, the European Union General Data Protection Regulation (GDPR). By accessing 28marscasinovip.com, creating an account, or using any of our services, you acknowledge that you have read and understood this privacy policy. If you disagree with any part of this document, please refrain from using the platform.
1. Data Controller Identity
28 Mars Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the data controller, 28 Mars Casino determines the purposes and means of processing your personal information. Our registered operator address is available upon request to our Data Protection Officer (DPO). All questions relating to 28 Mars Casino data protection may be directed to [email protected].
2. Personal Data We Collect
The data collection process at 28 Mars Casino covers several categories of personal information required to provide a secure, compliant, and enjoyable gaming experience.
2.1 Identification Data
- Full legal name, date of birth, and nationality
- Government-issued photo identification (passport, driver's licence)
- Residential address and proof of address documents
- Username and account credentials (password stored in hashed format)
2.2 Contact and Communication Data
- Email address (primary communication channel)
- Phone number (optional, used for two-factor authentication)
- Records of your interactions with our customer support team
- Chat transcripts, email correspondence, and support ticket histories
2.3 Financial and Transaction Data
- Payment method details (PayID, Visa, Mastercard, Skrill, Neteller, Neosurf, Paysafecard)
- Cryptocurrency wallet addresses (Bitcoin, Ethereum, Litecoin)
- Deposit and withdrawal histories, transaction amounts, and timestamps
- Bank transfer references where applicable
2.4 Gaming Activity Data
- Game session logs, wagering amounts, wins and losses
- Bonus activation and wagering records
- Participation in tournaments, jackpots, and VIP programme activities
- Responsible gambling tool usage (limits, cooling-off periods, self-exclusion)
2.5 Technical and Device Data
- IP address, device type, browser type, and operating system
- Geolocation data (country/region level for compliance purposes)
- Session duration, pages visited, and click-path data
- Mobile app usage data (Android APK and iOS PWA)
2.6 Sensitive Data
Where required under Australian Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations, 28 Mars Casino may request sensitive personal data such as source-of-funds declarations. This personal information is handled with the highest levels of information security and confidentiality.
3. How We Collect Your Personal Data
The 28 Mars Casino privacy policy applies to user data gathered through a range of channels:
- Direct collection: Registration forms, KYC verification submissions, support inquiries, and promotional entries
- Automated collection: Cookies, web beacons, server logs, and analytics tools that capture user data during your visit
- Third-party sources: Payment processors, identity verification services, fraud prevention agencies, and marketing affiliates
- Publicly available sources: Sanctions lists, PEP (Politically Exposed Persons) databases, and open-source AML databases
4. Purposes and Legal Basis for Data Processing
All data processing activities at 28 Mars Casino are grounded in a legitimate legal basis. The following table summarises our key data processing purposes:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| KYC/AML identity verification | Legal obligation |
| Processing deposits and withdrawals | Performance of contract |
| Fraud prevention and data security | Legitimate interest |
| Responsible gambling monitoring | Legal obligation / legitimate interest |
| Sending promotional offers and newsletters | Consent |
| Analysing and improving our platform | Legitimate interest |
| Responding to support requests | Performance of contract |
5. Cookie Policy
The 28 Mars Casino cookie policy explains how we deploy cookies and similar tracking technologies on 28marscasinovip.com. Cookies are small text files stored on your device that help us deliver a personalised and efficient gaming experience.
5.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential cookies | Maintain your login session, security tokens, and platform functionality | Session |
| Analytical cookies | Track page views, user journeys, and bounce rates to improve the platform | Up to 2 years |
| Functional cookies | Remember language preferences, currency settings, and game filters | Up to 1 year |
| Marketing cookies | Deliver relevant promotions and track affiliate referrals | Up to 90 days |
You may manage your cookie preferences at any time via the cookie consent banner displayed on your first visit to 28 Mars Casino. Please note that disabling essential cookies may impair core platform functionality. For full details, refer to the standalone 28 Mars Casino cookie policy page.
6. Sharing Personal Data with Third Parties
28 Mars Casino does not sell your personal data to third parties. However, we may share your personal information with carefully selected partners to fulfil our legal and contractual obligations:
- Payment processors: Visa, Mastercard, Skrill, Neteller, Paysafecard, and cryptocurrency gateways require transactional user data to execute payments
- Identity verification providers: Third-party KYC services process copies of your identification documents for AML compliance
- Regulatory and law enforcement authorities: We disclose personal data when required by the Government of Curaçao licensing authority, Australian authorities, or pursuant to a valid court order
- Fraud prevention agencies: We share flagged account data with industry fraud-prevention databases to protect the wider Australian gaming community
- Technology and analytics partners: Cloud hosting providers and analytics platforms operate under strict data processing agreements that comply with our data protection obligations
- Marketing affiliates: Referral tracking data is shared with approved affiliate partners solely for commission attribution purposes
All third-party partners are contractually required to process your personal information only for specified purposes and to maintain appropriate information security standards consistent with the 28 Mars Casino data protection framework.
7. International Data Transfers
As an online casino operating under a Curaçao licence and serving Australian players, 28 Mars Casino may transfer your personal data to countries outside Australia. All international data storage and transfers are subject to safeguards including standard contractual clauses, binding corporate rules, or adequacy decisions, ensuring that your personal information receives protection equivalent to Australian Privacy Principles standards.
8. Data Security
28 Mars Casino data security is a top priority. We employ multiple layers of information security to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- 256-bit SSL/TLS encryption: All data transmitted between your browser and 28marscasinovip.com is encrypted using industry-standard 256-bit SSL/TLS technology
- End-to-end encryption: Sensitive personal information such as payment details and KYC documents are encrypted at rest and in transit
- Firewalls and intrusion detection: Our servers are protected by advanced firewall configurations and real-time intrusion detection systems
- Access controls: Strict role-based access controls ensure that only authorised personnel can access your user data
- RNG certification: Our game outcomes are independently certified to ensure integrity and fairness
- Regular security audits: 28 Mars Casino conducts periodic penetration testing and vulnerability assessments to maintain robust data security
Despite these measures, no online system can guarantee absolute confidentiality. We encourage you to use a strong, unique password and enable any available two-factor authentication on your account.
9. Data Retention Periods
Your personal data is retained only for as long as necessary to fulfil the purposes outlined in this privacy policy or to comply with applicable legal obligations. The table below outlines our standard data storage retention periods:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC / identity verification documents | 5 years after account closure (AML obligation) |
| Financial transaction records | 7 years (Australian tax and AML requirements) |
| Gaming activity logs | 5 years post-account closure |
| Customer support communications | 3 years after last interaction |
| Marketing consent records | Until consent is withdrawn + 3 years |
| Cookie and analytics data | Up to 2 years |
Once retention periods expire, 28 Mars Casino securely deletes or anonymises your personal information so that it can no longer be linked to you.
10. Your Privacy Rights
As an Australian player, you are entitled to a comprehensive set of privacy rights under the Australian Privacy Act 1988. Where GDPR also applies, additional privacy rights may be available. The following summarises your rights regarding the personal data held by 28 Mars Casino:
10.1 Right of Access
You have the right to request a copy of the personal information 28 Mars Casino holds about you. We will respond to access requests within 30 days of receipt.
10.2 Right to Correction
If your personal data is inaccurate, incomplete, or out of date, you may request that we correct it. Minor details such as address changes can be updated directly from your account settings.
10.3 Right to Deletion
You may request erasure of your personal information where it is no longer necessary for the original purpose, or where you withdraw consent. Please note that certain data storage obligations under AML law may prevent immediate full deletion.
10.4 Right to Restriction
You may ask 28 Mars Casino to restrict data processing of your personal data in specific circumstances, such as when you contest its accuracy or object to our use of it.
10.5 Right to Data Portability
Where data processing is based on your consent or a contract, you may request that your personal information be delivered to you (or a nominated third party) in a structured, commonly used, machine-readable format.
10.6 Right to Object
You may object to data processing based on legitimate interests, including profiling for marketing purposes. Upon receipt of a valid objection, 28 Mars Casino will cease processing unless we can demonstrate compelling legitimate grounds.
10.7 Right to Withdraw Consent
Where our data processing relies on your consent (for example, for promotional emails), you may withdraw it at any time by clicking the unsubscribe link in any email or by contacting [email protected]. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of your privacy rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond within 30 days and may need to verify your identity before processing your request.
11. Supervisory Authority — OAIC
If you believe that 28 Mars Casino has mishandled your personal data or violated the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
We encourage you to contact 28 Mars Casino directly in the first instance so that we may attempt to resolve your concern before escalation to the OAIC.
12. Responsible Gambling and Data Processing
28 Mars Casino uses certain personal data and gaming activity data specifically to support responsible gambling. This includes monitoring deposit, bet, and loss patterns to identify potential signs of problem gambling. If you set deposit limits, cooling-off periods, or self-exclusion on your account, these preferences are recorded and enforced as part of our commitment to player welfare. The data processing involved in responsible gambling monitoring is based on both legal obligation and legitimate interest in the wellbeing of our players.
13. Children's Privacy
28 Mars Casino strictly prohibits the use of our platform by individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that personal data from a person under 18 has been collected, we will delete it promptly and close the associated account. If you believe a minor has registered with 28 Mars Casino, please contact us immediately at [email protected].
14. Changes to This Privacy Policy
The 28 Mars Casino privacy policy may be updated periodically to reflect changes in legislation, our services, or data processing practices. The most current version will always be available at 28marscasinovip.com/privacy-policy/. Where changes are material, we will notify registered players by email or via an in-platform notification. Continued use of 28 Mars Casino after publication of an updated privacy policy constitutes acceptance of the revised terms.
15. Contact Our Data Protection Officer
For any questions, concerns, or requests relating to the 28 Mars Casino privacy policy, data protection, or your personal information, please contact our Data Protection Officer:
- Email: [email protected]
- General support: [email protected]
- Live chat: Available 24/7 on 28marscasinovip.com
Frequently Asked Questions
Does 28 Mars Casino sell my personal data to third parties?
No. 28 Mars Casino never sells your personal information to third parties. We only share user data with partners who are essential to delivering our services, such as payment processors and KYC verification providers, under strict data protection agreements.
How does 28 Mars Casino protect my financial data?
All financial transactions on 28marscasinovip.com are protected by 256-bit SSL/TLS encryption. Your payment details are processed by certified payment providers and never stored on our servers in an unencrypted form. 28 Mars Casino data security protocols meet or exceed industry standards for information security.
Can I request deletion of my personal data?
Yes. You can exercise your privacy rights by contacting [email protected] with a deletion request. Note that some data storage is legally mandated for AML compliance, so certain records may be retained for up to seven years.
How do cookies work on 28 Mars Casino?
The 28 Mars Casino cookie policy governs four types of cookies: essential, analytical, functional, and marketing. Essential cookies keep you logged in and the site functioning; others help us improve your experience and deliver relevant promotions. You can manage your cookie preferences via our consent tool.
What are my privacy rights as an Australian player?
Under the Australian Privacy Act 1988, your privacy rights include the right to access, correct, and delete your personal data, to restrict or object to data processing, to data portability, and to withdraw consent. If you believe your rights have been violated, you may escalate to the OAIC.
Who can I contact about data protection queries?
The 28 Mars Casino Data Protection Officer can be reached at [email protected]. For general support, live chat is available 24/7. Our team typically responds to email inquiries within 12 hours.