Boomerang Bet Australia: Privacy Policy

1. Introduction

This Privacy Policy explains how Boomerang Bet Australia and its affiliated entities (collectively “Boomerang Bet Australia,” “we,” “us,” “our”) collect, use, and protect your personal data. This policy applies to all registered users (“Players”) and visitors of our Website.

Who We Are
Boomerang Bet Australia is the data controller for your personal data. This means we determine the purposes and means of processing your data in line with this policy.

If you have any questions about this policy or wish to exercise your data protection rights, please contact our Data Protection Officer at [email protected].

2. Personal Data We Collect

We collect various types of personal data depending on your interaction with our services.

Data Category	Examples
Registration Data	Full name, date of birth, email address, phone number, country, address, postcode, username, IP address, and location data.
Due Diligence Data (KYC)	ID documents (passport, driver’s license), proof of address, social security number (if applicable), source of wealth/funds, and bank statements.
Financial Information	Bank ID, IBAN, payment system details, and other financial identifiers (e.g., CPR/CPF number where applicable) used for deposits and withdrawals.

Data We Collect Automatically:

Device Information: Your IP address, operating system, browser type, and device identifiers.
Usage Information: Logs of your activity on our Website, including pages viewed, time spent, links clicked, and search queries. This data is collected partly through cookies.
Location Information: We may derive your general location from your IP address.

Data We Receive from Other Sources:

Publicly Available Sources: Information from public databases, social media, and online media.
Third-Party Providers: Data from financial institutions, fraud prevention agencies, and credit reference agencies to verify your identity and manage risk.
Inferences: We may infer your gaming preferences and interests based on your activity.

3. Why We Process Your Data and Our Legal Basis

We process your personal data for specific purposes and only when we have a lawful basis to do so, in accordance with applicable data protection laws, including the GDPR and the Australian Privacy Principles (APPs).

Purpose of Processing	Legal Basis
Providing Our Services<br/>(e.g., account creation, transactions, customer support)	Performance of a Contract. Necessary to fulfil our obligations under our Terms and Conditions.
Legal & Regulatory Compliance<br/>(e.g., KYC/AML checks, age verification, responsible gambling)	Legal Obligation. Necessary to comply with anti-money laundering, licensing, and other legal requirements.
Security & Risk Management<br/>(e.g., fraud prevention, system security, defending legal claims)	Legitimate Interest. Necessary to protect our business, assets, and the integrity of our services.
Service Improvement & Analytics<br/>(e.g., analysing usage trends, improving products)	Legitimate Interest. Necessary to enhance our services and business operations.
Marketing & Personalisation<br/>(e.g., sending promotional offers, customising content)	Consent. We will only send you direct marketing or use certain tracking technologies with your explicit consent.

4. How We Share Your Personal Data

We may share your personal data with the following categories of recipients when necessary:

Internal Group: Authorized employees and affiliated companies within our corporate group.
Payment Providers & Financial Institutions: To process deposits and withdrawals and for their own compliance obligations.
Third-Party Service Providers: Partners who provide essential services, such as customer support, cloud hosting, and technology infrastructure.
Game Providers: To enable you to play the games offered on our platform.
Marketing Partners: With your consent, to deliver relevant promotional content.
Fraud Prevention Agencies: To assist in detecting and preventing fraudulent activity.
Regulatory & Law Enforcement Bodies: As required by law or to assist with official investigations.
Corporate Transactions: In connection with a merger, acquisition, or sale of business assets.

5. Data Retention

We will retain your personal data only for as long as your account is active and as needed to fulfil the purposes outlined in this policy.

We may retain your data for an extended period if required by law, such as for Anti-Money Laundering (AML) regulations. Once your data is no longer needed, it will be securely deleted or anonymised.

6. International Data Transfers

Your personal data may be processed in countries outside of the European Union/European Economic Area (EU/EEA) or Australia. When we transfer your data internationally, we ensure a high level of protection by using legally recognised safeguards, such as Standard Contractual Clauses approved by the European Commission or ensuring the recipient country provides an adequate level of data protection.

7. Your Data Protection Rights

You have specific rights regarding the personal data we hold about you. These include:

Right to Access: To request a copy of your personal data.
Right to Correction: To correct any inaccurate or incomplete data.
Right to Erasure: To request the deletion of your data where there is no compelling reason for us to keep it.
Right to Restrict Processing: To limit how we process your data in certain circumstances.
Right to Data Portability: To receive your data in a structured, machine-readable format.
Right to Object: To object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: To withdraw your consent at any time for processing activities that require it.

To exercise any of these rights, please contact our Customer Support at [email protected] or our Data Protection Officer at [email protected].

You also have the right to lodge a complaint with a supervisory authority, such as the Office of the Australian Information Commissioner (OAIC) in Australia or the relevant authority in your EU member state.

8. Data Security

We are committed to protecting your personal data. We implement robust administrative, technical, and physical security measures to prevent unauthorised access, loss, or misuse. While no system is completely secure, we continuously evaluate and enhance our security practices to ensure the highest level of protection for your data.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Website. We will ask for your consent to use non-essential cookies. For detailed information on the cookies we use and how to manage your preferences, please see our Cookie Notice.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this policy periodically. The effective date will be indicated at the top of the policy.

11. How to Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected] or [email protected].