Privacy
Plain-English summary of what we collect, why we keep it, how long for and the rights you have under Australian privacy law. The full legal text follows below.
We collect what we need to verify you, process payments and keep play fair — nothing more.
All personal data is encrypted at rest with AES-256 and in transit with TLS 1.3.
Request a full copy of every piece of data we hold on you, free, within 30 days.
Request deletion of your data subject to legal retention rules around AML and dispute resolution.
Ignition Casino collects three broad categories of data. Identity data covers what you tell us at sign-up and during verification: name, date of birth, address, email, phone, and photo ID images for KYC. Transactional data covers payments and gameplay: deposits, withdrawals, wagers, wins, losses, bonus claims and session lengths. Technical data covers how you connect: IP address, device type, browser version, anonymised location and cookie preferences.
We do not sell any of this data to third parties. We share specific pieces of it with named processors where it is needed to run the service: payment processors for transactions, identity-verification providers for KYC, anti-fraud services for risk scoring, and our cloud hosting provider for storage. Every processor is bound by a data processing agreement and is named in the full policy below.
Data is retained for as long as your account is active plus a regulatory minimum of seven years after closure to satisfy anti-money-laundering and dispute-resolution obligations. After that period, identity and transactional data is deleted. Marketing-related data (preferences, off-site ad targeting) is deleted immediately on account closure or unsubscribe.
From your registered email address, stating which right you want to exercise (access, correction, deletion, portability).
We will ask for verification because the data we hold is personal and sensitive. This typically takes a few minutes.
Access and portability requests are fulfilled within 30 days. Erasure subject to legal retention rules around AML and disputes.
If unsatisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
| Right | What It Means | Response Time | Limits |
|---|---|---|---|
| Access | Full copy of your data | 30 days | Free, once per year |
| Correction | Fix inaccurate data | Immediately | ID re-verification may apply |
| Erasure | Delete your data | 30 days | 7-year AML retention applies |
| Portability | Receive machine-readable copy | 30 days | Free |
| Object | Stop marketing or profiling | Immediately | None |
| Withdraw consent | Cancel cookie/marketing opt-in | Immediately | May limit service features |
Your data is stored on encrypted, geographically redundant infrastructure within ISO 27001 certified data centres. Personal data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to production systems is restricted to a small named team, logged in full, and reviewed quarterly. Payment card data is tokenised at the point of capture by a PCI-DSS compliant processor — we never see or store raw card numbers.
In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant supervisory authority without undue delay, in accordance with our obligations under the Australian Privacy Act and the Notifiable Data Breaches scheme. The notification will set out what data was affected, what we are doing about it and what steps you can take to protect yourself.
Some processors (notably parts of our cloud infrastructure and anti-fraud services) are based outside Australia. Where data is transferred internationally, we use Standard Contractual Clauses or other recognised safeguards to ensure your data continues to receive equivalent protection. The full list of processors and their locations is maintained in the policy appendix below.
Ignition Casino is an 18+ service. We do not knowingly collect personal data from anyone under 18. If we discover that an underage user has registered, the account is closed immediately and all data deleted within 24 hours.
Things players ask
No. We do not sell, rent or otherwise commercialise your personal data to any third party. Data is shared only with named processors who are bound by a data processing agreement and only to the extent necessary to deliver the service. The full processor list is maintained in the policy appendix.
For as long as your account is active plus a regulatory minimum of seven years after closure to satisfy anti-money-laundering and dispute-resolution obligations. After seven years, identity and transactional data is deleted on a rolling basis. Marketing preference data is deleted immediately on closure or unsubscribe.
Yes. Email privacy@ignitionncasino.com from your registered address requesting a Data Subject Access Request. We will verify your identity and deliver a machine-readable copy of all data we hold within 30 days. This service is free of charge once per calendar year — additional requests within the same year may attract a small admin fee.
Email privacy@ignitionncasino.com first and we will work with you to resolve the issue. If you remain dissatisfied, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992. We take complaints seriously and respond to OAIC enquiries within their statutory timeframes.
How we use cookies, what each type does and how to opt out of marketing cookies.
Player-safety tools and the data they collect.
What happens to your data when you close or self-exclude.
24/7 chat with the privacy team for general questions.
Sign up in under a minute and unlock the 300% welcome bonus up to $3,000 across Poker and Casino.
Claim Your Bonus