Your Privacy at ZumoBet
This policy sets out what personal information we collect when you use zumobet-au.com, why we hold it, how long we keep it, and the choices you have. We operate under licence 8048/JAZ2021-054 issued by the Government of Curaçao and we treat your data with the care that licence demands.
What Data We Collect
We collect only the information needed to run your account, meet our legal obligations and keep the site safe. The categories below cover everything we hold on you.
- Identity data: full name, date of birth, email address, phone number, residential address
- Verification documents: government-issued photo ID, proof of address, proof of payment method (required before your first withdrawal)
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history, payment method details
- Technical data: IP address, device type, operating system, browser type, session timestamps
- Gameplay behaviour: games played, bet sizes, win/loss records, session duration
- Marketing preferences: which promotions you opted into, communication channels you chose, consent records with dates
How We Use Your Data
Every use of your data maps to a specific purpose. We do not profile you for anything outside the list below, and we never sell your information.
- Creating and maintaining your player account
- Verifying your identity and age under our KYC obligations (processing up to 48 hours)
- Processing deposits and withdrawals, including your AUD, crypto and e-wallet transactions
- Preventing fraud, bonus abuse, chargebacks and multi-accounting
- Monitoring gambling behaviour for responsible-gambling indicators, such as chasing losses or exceeded limits
- Sending marketing messages where you have given consent, and honouring opt-outs
- Meeting legal and regulatory obligations, including anti-money-laundering reporting
Our Legal Bases Explained
Contract
When you register an account and accept our terms, we process your identity, transaction and gameplay data to deliver the service you signed up for. Without this processing we cannot hold your balance, run your bets or pay your withdrawals.
Legal obligation
Anti-money-laundering and KYC laws require us to verify your identity, keep transaction records for a set period and report suspicious activity to the relevant authorities. This processing is not optional for either of us.
Legitimate interest
Fraud prevention, security monitoring and keeping the site free of abuse rest on our legitimate interest in protecting our players and our business. We balance this interest against your rights and keep the data minimal.
Consent
Marketing emails, SMS and promotional push messages need your consent. You can withdraw that consent at any time by changing your communication settings or using the unsubscribe link in every message we send.
How Long We Keep It
We hold each category of data only as long as the purpose requires. Transaction and verification records carry a regulatory minimum of 5 years; marketing data lasts until you tell us to stop.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then up to 5 years after closure |
| KYC verification documents | 5 years after account closure, per AML rules |
| Transaction and wagering records | Minimum 5 years, per regulatory requirement |
| Technical and device logs | Up to 12 months for security purposes |
| Marketing preferences and consent records | Until you withdraw consent, plus 2 years for proof of consent |
| Closed account data | Deleted or anonymised after the retention window expires |
Who We Share It With
We share your data only with parties who need it to deliver a service you use. Contracts with each processor bind them to confidentiality and restrict their use of your information.
- Payment processors handling your Visa, Mastercard, Skrill, Neteller, MiFinity, Jeton, PayID and crypto transactions
- KYC and AML verification providers checking your ID and proof-of-address documents
- Game and platform providers operating the 5,000 titles in our lobby
- Regulators and law-enforcement bodies where a legal request compels disclosure
- Analytics providers measuring site performance in aggregate, with IP anonymisation where feasible
- Email and communication services delivering messages you asked for
Your Rights Over Your Data
You control your personal information, and we answer every request within 30 days. Reach us at [email protected] or through 24/7 live chat, and our data protection officer will handle your enquiry.
- Access: get a copy of the personal data we hold about you
- Rectification: correct data that is inaccurate or out of date
- Erasure: request deletion where no legal retention duty applies
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time, effective immediately
- Complain: raise a complaint with the relevant data protection authority
Verification of requests
For your security we verify identity before acting on a data request. Expect to confirm your registered email and, for account-level changes, complete a quick ID check.
Cookies and Tracking
We use session cookies to keep you logged in, preference cookies to remember your settings, and analytics cookies to understand how the site performs. Marketing cookies activate only with your consent via the banner shown on your first visit. Full detail, including how to block or delete cookies in your browser, sits on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. Stored data sits behind access controls limited to staff who need it for their role, with access logged and reviewed.
- TLS encryption for all data in transit
- Encrypted storage of sensitive verification documents
- Role-based access controls with audit logging
- Regular security testing of our platform
- Breach notification: if a data breach affects you, we notify the relevant authority within 72 hours and inform affected players without undue delay
Your part in security
Keep your password unique, enable every account protection we offer, and contact [email protected] straight away if you suspect unauthorised access. ZumoBet will never ask for your password by email or live chat.
Frequently Asked Questions
Does ZumoBet sell my personal data?
No. We share data only with processors who deliver services you use, such as payment providers and KYC checks, and we never sell it to advertisers or data brokers.
How do I stop marketing messages?
Change your communication settings in your account, use the unsubscribe link in any email, or contact [email protected]. Opt-outs take effect immediately.
Can I get all my data deleted?
You can request erasure, but transaction and verification records carry a 5-year regulatory retention minimum. Everything else is deleted or anonymised once your request is processed.
Who do I contact about a privacy concern?
Email [email protected] for our data protection officer, or use 24/7 live chat. We respond to data requests within 30 days.