At 28 Mars Casino, protecting your personal data is one of our highest priorities. This 28 Mars Casino privacy policy explains exactly what information we collect, how we use it, and what rights you hold as an Australian player. Our approach to data protection aligns fully with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and where applicable, the EU General Data Protection Regulation (GDPR). We encourage every player to read this document carefully so you understand how your personal information is handled at 28 Mars Casino.
1. Identity of the Data Controller
28 Mars Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. For all matters relating to data processing and data protection, the operator acts as the data controller. You can reach our dedicated Data Protection Officer (DPO) at [email protected] with any questions, concerns or requests regarding your user data.
2. What Personal Data We Collect
28 Mars Casino collects only the personal data necessary to provide you with a safe, legal and enjoyable gaming experience. The categories of personal information we gather include:
2.1 Identification and Contact Data
- Full name, date of birth and nationality
- Residential address and postcode
- Email address and phone number
- Government-issued ID documents (passport, driver's licence) for KYC/AML verification
2.2 Financial and Payment Data
- Payment method details (card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
- Transaction history, deposit amounts and withdrawal requests
- Bank account details where applicable for bank transfer payments
2.3 Gaming Activity Data
- Games played, session durations and betting patterns
- Bonus usage, free spin activity and wagering progress
- Responsible gambling limit settings and self-exclusion records
2.4 Technical and Usage Data
- IP address, browser type, operating system and device model
- Geolocation data (country and region level)
- Log files, session tokens and clickstream data
2.5 Communication Data
- Records of live chat conversations and email correspondence with support
- Survey responses and feedback submissions
- Marketing preference settings and opt-in/opt-out history
2.6 Sensitive Personal Data
In limited circumstances (for example, where a self-exclusion relates to a health or welfare matter), 28 Mars Casino may handle sensitive categories of personal data. We do so only with your explicit consent or where required by law, and we apply additional safeguards to such information.
3. How We Collect Your Data
Your personal information is collected through the following channels:
- Direct submission — when you register an account, make deposits or withdrawals, contact support, or fill in any form on 28marscasinoo.com
- Automated technologies — cookies, web beacons and similar tracking tools that operate when you browse our site
- Third-party sources — identity verification agencies, payment processors, fraud-prevention providers and our affiliate partners
- Public sources — publicly available databases used for AML/sanctions screening
4. Purposes and Legal Basis for Data Processing
We process your personal data only for lawful and transparent purposes. The table below summarises the main data processing activities at 28 Mars Casino and the corresponding legal basis:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Contractual necessity |
| Processing deposits and withdrawals | Contractual necessity |
| KYC/AML identity verification | Legal obligation |
| Fraud detection and security monitoring | Legitimate interest / Legal obligation |
| Responsible gambling tools | Legal obligation / Legitimate interest |
| Personalised gaming recommendations | Consent / Legitimate interest |
| Marketing communications and promotions | Consent |
| Statistical analysis and service improvement | Legitimate interest |
| Compliance with court orders or regulators | Legal obligation |
5. Cookie Policy
Our cookie policy forms an integral part of this 28 Mars Casino privacy policy. Cookies are small text files placed on your device when you visit 28marscasinoo.com. They help us remember your preferences, analyse site traffic and deliver relevant promotional content. The 28 Mars Casino cookie policy covers four main categories:
5.1 Categories of Cookies
| Category | Purpose | Consent Required |
|---|---|---|
| Essential cookies | Enable login sessions, security tokens and navigation | No — technically necessary |
| Analytical cookies | Measure page visits, traffic sources and user journeys (e.g. Google Analytics) | Yes |
| Functional cookies | Remember language, currency and display preferences | Yes |
| Marketing cookies | Track affiliate referrals and deliver personalised ads | Yes |
You may manage your cookie preferences at any time via the cookie consent banner displayed on your first visit, or through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of 28 Mars Casino. However, some personalisation features may be limited if analytical or functional cookies are turned off.
6. Sharing Personal Data with Third Parties
28 Mars Casino does not sell your personal data to third parties. We do, however, share user data with carefully vetted partners where necessary:
- Payment service providers — PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin and bank transfer partners to process financial transactions
- KYC/AML verification providers — identity verification agencies that check government-issued documents
- Game software providers — Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming and others who may process gameplay data on our behalf
- Regulatory authorities — the Curaçao Gaming Authority and, where required, Australian financial intelligence agencies (AUSTRAC)
- Fraud prevention and cybersecurity providers — services that help us protect information security and detect suspicious activity
- Professional advisers — lawyers, accountants and auditors bound by professional confidentiality obligations
All third-party processors are bound by contractual data protection agreements that require them to handle your personal information with the same level of confidentiality and security that 28 Mars Casino applies internally.
7. International Data Transfers
Because 28 Mars Casino operates globally, your personal data may be transferred to and stored in countries outside Australia. Where such transfers occur, we ensure appropriate safeguards are in place — including standard contractual clauses approved under applicable data protection law — to maintain the same level of protection your data would receive within Australia. We are committed to ensuring that any international data storage arrangement upholds the Australian Privacy Principles.
8. Data Security and Information Security Measures
Protecting your data security is a technical and organisational priority at 28 Mars Casino. Our information security framework includes:
- 256-bit SSL/TLS encryption — all data transmitted between your device and our servers is encrypted using industry-standard protocols
- Firewalls and intrusion detection systems — multi-layered network protection prevents unauthorised access
- Data encryption at rest — sensitive personal information, including payment details, is encrypted in our databases
- Access controls — only authorised personnel with a legitimate business need can access user data
- Regular security audits — independent penetration testing and vulnerability assessments are conducted periodically
- RNG certification — our Random Number Generators are certified by independent testing laboratories, ensuring fair play alongside data integrity
Despite these robust measures, no online system is completely immune to risk. In the unlikely event of a data breach that is likely to result in serious harm, 28 Mars Casino will notify the Office of the Australian Information Commissioner (OAIC) and affected players as required by the Notifiable Data Breaches scheme.
9. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this 28 Mars Casino privacy policy, or as required by law. The table below provides an overview of our data storage periods:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC/AML identity documents | 7 years from account closure (regulatory requirement) |
| Transaction and financial records | 7 years (tax and AML compliance) |
| Gaming activity logs | 3 years after last activity |
| Customer support communications | 3 years from last interaction |
| Marketing preferences and consent records | Until consent withdrawn + 1 year |
| Cookie and analytics data | Up to 24 months |
After the relevant retention period expires, your personal data is securely deleted or anonymised so it can no longer be linked to you.
10. Your Privacy Rights
As an Australian player, you hold a range of privacy rights under the Privacy Act 1988 and the Australian Privacy Principles. The 28 Mars Casino privacy policy is designed to make exercising these privacy rights straightforward. Depending on applicable law, your rights may include:
10.1 Right of Access
You may request a copy of the personal data 28 Mars Casino holds about you. We will provide this information within 30 days of your verified request, free of charge for reasonable requests.
10.2 Right to Correction
If any of your personal information is inaccurate, incomplete or out of date, you have the right to request correction. You can update basic profile details directly in your account settings or contact [email protected] for other amendments.
10.3 Right to Deletion
You may request that 28 Mars Casino delete your personal data where it is no longer necessary, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that certain data must be retained for regulatory compliance reasons and cannot be deleted on request.
10.4 Right to Restriction of Processing
In certain circumstances you may ask 28 Mars Casino to restrict the data processing of your personal information — for example, while a correction request is being assessed.
10.5 Right to Data Portability
Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of your personal data to transfer to another service provider.
10.6 Right to Object
You have the right to object to data processing based on legitimate interests, including profiling for direct marketing. Once an objection is received, 28 Mars Casino will cease the relevant processing unless there are compelling legitimate grounds that override your interests.
10.7 Right to Withdraw Consent
Where processing is based on your consent — such as receiving marketing emails — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Opt-out links are included in every marketing email, or you can manage preferences in your account dashboard.
To exercise any of these privacy rights, please email our Data Protection Officer at [email protected]. We may need to verify your identity before fulfilling your request to protect the confidentiality of your account.
11. Supervisory Authority — OAIC
If you believe 28 Mars Casino has not handled your personal data in accordance with Australian privacy law, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
We encourage you to contact us first at [email protected], as we are committed to resolving any privacy concerns directly and promptly.
12. Children's Privacy
28 Mars Casino is strictly an 18+ platform. We do not knowingly collect personal data from persons under the age of 18. If we become aware that a minor has provided us with personal information, we will promptly delete such data and close the account in question. Parents or guardians who believe their child has created an account should contact [email protected] immediately.
13. Changes to This Privacy Policy
We may update this 28 Mars Casino privacy policy periodically to reflect changes in law, our business practices or the services we offer. When we make material changes, we will notify you via email or a prominent notice on 28marscasinoo.com. The updated privacy policy will display the effective date at the top of the document. Your continued use of 28 Mars Casino after such changes constitutes acceptance of the revised privacy policy.
14. Frequently Asked Questions
What personal data does 28 Mars Casino collect from Australian players?
28 Mars Casino collects identification data (name, DOB, address, ID documents), financial data (payment method details, transaction history), gaming activity data (sessions, bets, bonuses), technical data (IP address, device info), and communication data (support chat records). See Section 2 of the 28 Mars Casino privacy policy for a full breakdown.
Does 28 Mars Casino sell my personal data to third parties?
No. 28 Mars Casino never sells your personal data. We share user data only with essential partners (payment processors, KYC providers, game developers) under strict contractual data protection obligations. For details, see Section 6 on data collection and third-party sharing.
How can I manage my cookie preferences on 28marscasinoo.com?
You can manage cookie preferences through the consent banner that appears on your first visit to our site, or by adjusting your browser settings at any time. The 28 Mars Casino cookie policy in Section 5 explains each cookie category and how to opt out. Essential cookies cannot be disabled as they are necessary for the site to function.
How long does 28 Mars Casino keep my personal information?
Retention periods vary by data type. KYC documents and financial records are kept for 7 years after account closure for regulatory compliance. General account data is retained for 5 years post-closure. Gaming logs are kept for 3 years. See Section 9 for the full data storage schedule in the 28 Mars Casino privacy policy.
How do I exercise my privacy rights at 28 Mars Casino?
Email our Data Protection Officer at [email protected] to submit any request relating to your privacy rights — including access, correction, deletion, portability or objection to data processing. We respond within 30 days. See Section 10 of the 28 Mars Casino privacy policy for a full description of your rights.
Is my data secure at 28 Mars Casino?
Yes. 28 Mars Casino data security relies on 256-bit SSL/TLS encryption, firewalls, encrypted databases and rigorous access controls. Our information security programme also includes regular independent audits. No system can guarantee absolute data security, but we employ industry-best practices to protect your personal information at all times.
What should I do if I think 28 Mars Casino has breached my privacy?
Contact us first at [email protected] — most concerns can be resolved quickly and directly. If you remain unsatisfied, you can lodge a formal complaint with the OAIC (www.oaic.gov.au, 1300 363 992). Your privacy rights are protected under the Australian Privacy Act 1988, and 28 Mars Casino takes all privacy complaints seriously.
This privacy policy was last reviewed in 2025. For ongoing updates to 28 Mars Casino data protection practices, please revisit this page regularly. If you have any questions not covered here, our 24/7 live chat team and privacy email ([email protected]) are always available to assist.