Candyland Casino Privacy Policy

At Candyland Casino, we treat the protection of your personal data and privacy as a core commitment — not an afterthought. The Candyland Casino privacy policy outlines exactly how we collect, use, store, and safeguard your information whenever you interact with our platform at candylandcasinovip.com. Whether you are creating an account, making a deposit, or simply browsing our game lobby, your personal information is handled with the highest standards of information security and transparency. This document has been prepared in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), as well as the General Data Protection Regulation (GDPR) where applicable to players located in relevant jurisdictions.

We encourage all players to read this privacy policy carefully so that you fully understand your privacy rights and how Candyland Casino manages your user data. If you have any questions, our dedicated privacy team is available at [email protected].

1. Identity of the Data Controller

Candyland Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the entity responsible for your personal data, we act as the data controller for all information collected through candylandcasinovip.com. The data controller determines the purposes and means of data processing in compliance with applicable laws, including Australian privacy legislation and GDPR requirements where relevant.

• Operator: Company registered in Curaçao
• Licence: Government of Curaçao
• Website: candylandcasinovip.com
• Privacy contact: [email protected]
• Data Protection Officer (DPO): [email protected]

2. What Personal Data Candyland Casino Collects

The Candyland Casino data collection process covers a wide range of information categories necessary to provide a secure, compliant, and enjoyable gaming experience. Below is a comprehensive breakdown of the personal information we may collect:

2.1 Identification and Contact Information

• Full legal name
• Date of birth
• Residential address (including suburb, state, postcode)
• Email address
• Phone number
• Username and password (stored in encrypted format)
• Government-issued identity documents (passport, driver's licence)

2.2 Financial Information

• Payment method details (credit/debit card numbers, e-wallet identifiers, crypto wallet addresses)
• Transaction history (deposits, withdrawals, bonuses)
• Bank account information where required for transfers
• Source of funds documentation for AML compliance

2.3 Gaming Activity Data

• Games played, session duration, and wagering history
• Bonus usage and wagering progress
• Win/loss records
• Responsible gambling limit settings (deposit, bet, loss, and session limits)
• Self-exclusion and cooling-off period requests

2.4 Technical and Device Data

• IP address and geolocation data
• Device type, operating system, and browser version
• Cookies and session identifiers (see Section 6 for full cookie policy)
• Log files and access timestamps

2.5 Communication Data

• Live chat transcripts and support email correspondence
• Promotional communications (if you have opted in)
• Survey responses and feedback

2.6 Sensitive Data

In limited circumstances — particularly for responsible gambling assessments or identity verification — Candyland Casino may collect certain sensitive information. This is always done with your explicit consent and in accordance with the applicable data protection framework.

2.7 Data Received from Third Parties

• Identity verification results from KYC/AML service providers
• Fraud detection signals from security partners
• Payment processing confirmations from providers such as Visa, Mastercard, PayID, Skrill, Neteller, and cryptocurrency networks
• Affiliate referral information

3. How We Collect Your Data

Candyland Casino personal data is collected through several channels:

1. Account registration: Information you provide when opening an account at candylandcasinovip.com.
2. KYC verification: Documents you submit prior to your first withdrawal or as required by our compliance obligations.
3. Deposits and withdrawals: Payment details entered during financial transactions.
4. Customer support interactions: Information shared through live chat or email.
5. Website usage: Data automatically collected via cookies, pixels, and server logs as you navigate our platform.
6. Third-party partners: Data received from identity verification agencies, payment processors, and fraud prevention services.
7. Promotional participation: Information provided when you enter competitions, claim bonuses, or respond to surveys.

4. Purposes and Legal Basis for Data Processing

The Candyland Casino data processing activities are grounded in clear legal bases and serve specific, legitimate purposes. We do not process your personal information beyond what is necessary for those purposes.

5. Cookies and the Candyland Casino Cookie Policy

The Candyland Casino cookie policy explains how we use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device that help us deliver a better, more personalised experience.

5.1 Types of Cookies We Use

You can manage your cookie preferences at any time via our Cookie Preferences Centre, accessible from the footer of candylandcasinovip.com. Note that disabling certain cookies may affect the functionality of the platform. For more information, please contact us at [email protected].

6. Sharing Your Data with Third Parties

Candyland Casino does not sell your personal data to third parties. However, we may share your user data with trusted partners and authorities under specific, controlled circumstances:

6.1 Payment Providers

To process deposits and withdrawals, we share necessary financial and identity information with payment partners including PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin processors, and bank transfer networks. These providers are bound by their own stringent data protection obligations.

6.2 Regulatory and Law Enforcement Authorities

We may be required to disclose your personal information to governmental bodies, law enforcement agencies, or regulatory authorities (including the Curaçao Gaming Control Board) when compelled by law or when necessary to prevent fraud, money laundering, or other illegal activity.

6.3 KYC and AML Service Providers

Identity verification and anti-money laundering screening services receive the minimum necessary data to confirm your identity and assess risk. All such providers operate under strict confidentiality agreements and comply with applicable privacy legislation.

6.4 Technology and Analytics Partners

We work with software vendors, hosting providers, analytics platforms, and game content partners (including providers such as Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, and others from our 50+ provider catalogue). These partners access only the data they need to deliver their services and are contractually required to maintain information security standards equivalent to our own.

6.5 Affiliate Partners

Where you arrived at Candyland Casino via an affiliate link, we may share limited tracking information with that affiliate solely for the purpose of commission calculation. No sensitive personal data is shared in this context.

7. International Data Transfers

As Candyland Casino operates internationally and partners with global service providers, your personal data may be transferred to and processed in countries outside Australia. Where such transfers occur, we implement appropriate safeguards to ensure your data receives equivalent protection, including:

• Standard Contractual Clauses (SCCs) approved by the relevant data protection authority
• Binding Corporate Rules (BCRs) where applicable
• Transfers to countries with an adequate level of data protection as recognised by Australian or EU authorities
• Individual consent where required under the Australian Privacy Principles

For questions about international data storage and transfer mechanisms, contact our Data Protection Officer at [email protected].

8. Data Security at Candyland Casino

Candyland Casino data security is underpinned by industry-leading technical and organisational measures. We are committed to protecting your personal information against unauthorised access, loss, alteration, or disclosure.

8.1 Technical Security Measures

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is protected by the same encryption standard used by global financial institutions.
• Firewalls and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems.
• Encrypted data storage: Sensitive fields such as passwords and financial identifiers are stored using strong hashing and encryption algorithms.
• RNG certification: Our Random Number Generators are independently certified by accredited laboratories, ensuring fair play and the integrity of gaming outcomes.
• Two-factor authentication (2FA): Available for account logins to add an extra layer of data security.

8.2 Organisational Security Measures

• Access to personal data is restricted to authorised staff on a need-to-know basis.
• All employees and contractors handling user data are subject to strict confidentiality obligations.
• Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities.
• KYC verification is mandatory before any withdrawal is processed, protecting both players and the integrity of the platform.

Despite these robust measures, no system is entirely immune to risk. In the event of a personal data breach, Candyland Casino will notify affected individuals and the relevant supervisory authority within the timeframes required by applicable law.

9. Data Retention and Storage

The Candyland Casino data storage policy defines how long we retain your personal information based on the purpose for which it was collected and our legal obligations:

Once the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you. If you request deletion before the end of a retention period and no overriding legal obligation exists, we will process your request as outlined in Section 10.

10. Your Privacy Rights

Australian players are entitled to a comprehensive set of privacy rights under the Australian Privacy Act 1988 and the Australian Privacy Principles. Where the GDPR applies, these rights are supplemented by additional GDPR-based entitlements. Candyland Casino is committed to honouring all applicable privacy rights in a timely and transparent manner.

10.1 Right of Access

You have the right to request a copy of the personal data that Candyland Casino holds about you. We will provide this information within 30 days of a verified request.

10.2 Right to Correction

If any of your personal information is inaccurate, incomplete, or out of date, you have the right to request correction. You can update basic account details directly through your player profile, or contact us at [email protected] for more complex changes.

10.3 Right to Deletion

Subject to our legal retention obligations, you may request the deletion of your personal data. Where we are required to retain data for regulatory purposes (e.g. AML record-keeping), we will inform you of the applicable retention period and delete the data as soon as that period expires.

10.4 Right to Restriction of Processing

You can request that we limit how we use your user data in certain circumstances — for example, while you contest the accuracy of your data or object to our processing on legitimate interest grounds.

10.5 Right to Data Portability

Where processing is based on consent or a contractual basis and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

10.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes at any time. You can also object to processing carried out on the basis of legitimate interests, though we may be able to demonstrate compelling grounds that override your objection.

10.7 Right to Withdraw Consent

Where Candyland Casino relies on your consent as the legal basis for data processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, update your preferences in your account settings or contact [email protected].

10.8 How to Exercise Your Rights

To exercise any of the above privacy rights, please submit a request to our Data Protection Officer:

• Email: [email protected]
• Subject line: "Privacy Rights Request — [Your Username]"

We will verify your identity before processing any request. You will receive a response within 30 days; in complex cases, we may extend this by a further 30 days with prior notification.

11. Supervisory Authority — OAIC

If you are an Australian resident and believe that Candyland Casino has not handled your personal data in accordance with the Australian Privacy Act 1988 or the Australian Privacy Principles, you have the right to lodge a complaint with the supervisory authority:

• Office of the Australian Information Commissioner (OAIC)
• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

We encourage you to contact us directly at [email protected] before lodging a complaint with the OAIC, as we are committed to resolving privacy concerns promptly and transparently.

12. Responsible Gambling and Data Privacy

Candyland Casino takes responsible gambling seriously, and your personal data plays an important role in enabling us to protect vulnerable players. Information about your gaming activity, deposit patterns, and self-reported limits is used to:

• Enforce deposit limits, bet limits, loss limits, and session time limits as set by you
• Apply cooling-off periods (24 hours, 48 hours, 7 days, or 30 days)
• Process self-exclusion requests (6 months, 1 year, 5 years, or permanent)
• Identify early warning signs of problem gambling and intervene appropriately

This processing is carried out under both legal obligation and legitimate interest. The confidentiality of your responsible gambling data is strictly maintained, and this information is never used for marketing purposes.

13. Children and Minors

Candyland Casino does not knowingly collect or process personal data relating to individuals under the age of 18. Our platform is intended exclusively for adults. If we become aware that a minor has provided us with personal information, we will take immediate steps to delete that data. If you believe a minor has registered on our platform, please notify us immediately at [email protected].

14. Updates to This Privacy Policy

The Candyland Casino privacy policy may be updated periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify registered players by email and/or by displaying a prominent notice on candylandcasinovip.com. The date of the most recent revision will always be displayed at the top of this page. Continued use of our platform following notification of changes constitutes acceptance of the updated privacy policy.

We recommend reviewing this data protection document regularly to stay informed about how Candyland Casino protects your privacy.

15. Contact — Data Protection Officer

For all inquiries relating to Candyland Casino data protection, privacy rights, data collection practices, or this privacy policy, please contact our designated Data Protection Officer:

• Email: [email protected]
• General support: [email protected]
• Live chat: Available 24/7 via candylandcasinovip.com

Our team endeavours to respond to all privacy inquiries within 12 hours for general queries and within 30 days for formal privacy rights requests.

Frequently Asked Questions — Candyland Casino Privacy Policy

What personal data does Candyland Casino collect?

Candyland Casino collects identification details (name, date of birth, address), contact information (email, phone), financial data (payment methods, transaction history), gaming activity records, technical data (IP address, device info), and communication records. Full details are provided in Section 2 of the Candyland Casino privacy policy.

How does Candyland Casino protect my personal information?

Your personal information is protected by 256-bit SSL/TLS encryption, enterprise-grade firewalls, encrypted data storage, and strict internal access controls. Our commitment to data security means only authorised personnel can access your account data, and all staff are bound by confidentiality obligations.

Can I request deletion of my personal data?

Yes. You have the right to request deletion of your personal data, subject to any legal retention obligations. Submit your request to [email protected] with "Privacy Rights Request" in the subject line. We will respond within 30 days.

Does Candyland Casino use cookies?

Yes. Candyland Casino uses essential, analytical, functional, and marketing cookies. The full Candyland Casino cookie policy is detailed in Section 5 of this document. You can manage your cookie preferences via the Cookie Preferences Centre on our website at any time.

Is my data shared with third parties?

Candyland Casino never sells your user data. We share personal information only with payment providers, KYC/AML service partners, authorised regulatory bodies, and technology vendors — always under strict data protection agreements and only to the extent necessary.

What are my privacy rights as an Australian player?

As an Australian player, your privacy rights under the Privacy Act 1988 include the right to access, correct, and request deletion of your personal data. You also have the right to complain to the OAIC. Where GDPR applies, additional rights include portability, restriction, and objection. Contact [email protected] to exercise any right.

How long does Candyland Casino retain my data?

Candyland Casino data storage periods vary by data type. Account and identity data is retained for the duration of your account plus 5 years. Financial records are kept for a minimum of 5 years. Full retention schedules are provided in Section 9 of this privacy policy.

Who is the supervisory authority for privacy complaints in Australia?

The supervisory authority for privacy matters in Australia is the Office of the Australian Information Commissioner (OAIC). You can reach the OAIC at www.oaic.gov.au or by calling 1300 363 992. We encourage players to contact Candyland Casino directly first so we can resolve any concerns promptly.

At Candyland Casino, your trust is our most valuable asset. Our commitment to robust data protection, transparent data collection practices, and genuine respect for your privacy rights is woven into every aspect of how we operate. Whether you are enjoying our 4,000+ game library, taking advantage of our welcome bonus, or using our mobile platform, you can play with confidence knowing that your personal data is secure, handled lawfully, and always treated with the utmost confidentiality. For any questions about this privacy policy or Candyland Casino data protection, our team is here for you at [email protected].