Privacy Practices at RocketPlay Oz

Effective date: 2026

1. About This Policy

Rocket Play Casino operates as an interactive gambling service accessible to Australian residents under a licence issued by the Government of Curaçao (GCB). This Privacy Policy explains how we collect, use, disclose and protect your personal information — in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy covers all personal information gathered through our website, mobile platforms and any communication channels connected to Rocket Play Casino. Using our service means you accept these practices. If you disagree with any part of this policy, discontinue use of the platform and contact us at [email protected] to close your account.

2. What Personal Information We Collect

We collect the personal information required to deliver the service, verify your identity and comply with Australian anti-money laundering obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act). This includes your full legal name, date of birth, residential address, email address and phone number. During account registration, you provide this data directly.

We also collect payment information — including bank account or card details — processed through PCI-DSS-certified providers. Rocket Play Casino does not store raw card numbers on its own servers. For identity verification mandated by AUSTRAC, we may request a copy of a government-issued photo ID, proof of address and source-of-funds documentation.

Technical data collected automatically includes your IP address, device type, browser version, session timestamps and gameplay activity logs. This data is collected through cookies and server logs. It is used exclusively for security, fraud prevention and service optimisation — not for profiling or sale.

3. How We Use Your Personal Information

Your personal information serves six defined purposes. First, account creation and maintenance — verifying your identity before you can deposit, wager or withdraw. Second, transaction processing — executing deposits, withdrawals and bonus calculations accurately. Third, regulatory compliance — meeting AUSTRAC reporting obligations and responding to lawful government requests.

Fourth, responsible gambling management — monitoring gameplay patterns and enforcing self-exclusion requests in accordance with the National Consumer Protection Framework for Online Wagering. Fifth, customer support — addressing queries and resolving disputes. Sixth, service communications — sending account notifications, security alerts and, where you have opted in, promotional material. You may withdraw consent for marketing at any time via [email protected] .

4. Disclosure of Personal Information

Rocket Play Casino discloses personal information only where necessary. We share data with identity verification providers, payment processors and fraud detection services engaged under binding data processing agreements. These third parties are contractually prohibited from using your data for any purpose other than the service they provide.

We are legally required to report certain transactions and suspicious activity to AUSTRAC. Court orders, regulatory investigations and law enforcement requests from Australian authorities may also compel disclosure. In all such cases, disclosure is limited to what is strictly required. We do not sell personal information to advertisers or data brokers — this is not a commercial arrangement we engage in.

If Rocket Play Casino is acquired or merged, personal information may transfer to the successor entity. You will be notified in advance via email and given the opportunity to request deletion of your account data before the transfer.

5. International Data Transfers

As a Curaçao-licensed operator, some of your personal information is processed and stored on servers outside Australia. We take reasonable steps, consistent with APP 8, to ensure overseas recipients handle your data with protections comparable to the APPs. Server infrastructure is located within ISO 27001-certified data centres. Transfer agreements with non-Australian processors include standard contractual clauses that mirror Australian privacy standards.

6. Data Retention

We retain your personal information for a minimum of seven years after account closure, consistent with AUSTRAC record-keeping requirements and applicable Australian taxation obligations. Gameplay logs are retained for five years. Technical session data is retained for 12 months and then automatically deleted. When retention periods expire, data is securely destroyed using methods that prevent reconstruction.

7. Security

Rocket Play Casino applies 256-bit TLS encryption for all data in transit. Data at rest is encrypted using AES-256. Access to personal information is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication. We conduct annual penetration testing and maintain an incident response plan. In the event of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals within 30 days, as required under the Notifiable Data Breaches scheme.

8. Your Rights Under the Australian Privacy Principles

Under the Privacy Act 1988, you have the right to access the personal information we hold about you, request correction of inaccurate data and make a complaint if you believe we have mishandled your information. To exercise any of these rights, contact us at [email protected] . We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the OAIC at www.oaic.gov.au.

9. Responsible Gambling and Personal Information

Rocket Play Casino participates in the National Self-Exclusion Register (BetStop). Where a player is registered on BetStop, we are legally prohibited from allowing that individual to hold an account or place wagers. Personal information provided during self-exclusion registration is handled in strict confidence and used solely to enforce the exclusion — it is not used for marketing or shared beyond what the scheme requires.

10. Cookies

Our use of cookies is described in full in the separate Cookie Policy. In summary, we use essential, functional and analytics cookies. You may manage cookie preferences through your browser settings or our consent tool. Disabling certain cookies may limit platform functionality.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, regulation or our data practices. Material changes will be communicated by email to your registered address at least 14 days before they take effect. Continued use of Rocket Play Casino after the effective date constitutes acceptance of the revised policy.

12. Contact

Privacy enquiries, access requests and complaints: [email protected] . Postal enquiries can be directed to our registered legal address, available on request. For urgent matters involving data security incidents, we aim to acknowledge contact within 24 hours.