Privacy Policy

This Privacy Policy explains how Surfplay Casino may collect, use, store and disclose information when you visit the website, create an account, use casino services or contact support. It also explains the choices available to players in Australia regarding their personal information.

Surfplay Casino operates under a licence issued by the Curaçao Gaming Control Board, licence number OGL/2023/174/0082, with SSL encryption and certified random number generators across all game providers.

Information we may collect

When you use Surfplay Casino, information may be collected to provide and administer the website and gaming services. The information handled will depend on how you interact with the site, the services you use and the information needed to meet operational, security and legal requirements. We aim to collect information that is reasonably necessary for these purposes.

Account and contact details

This may include your name, date of birth, residential details, contact details, login information and other information supplied when you register or maintain an account. We may also keep records of preferences, account settings, responsible gaming choices, support requests and communications with you.

Verification and identity information

To confirm identity, age, eligibility and account ownership, we may request verification documents or other information. This can include copies or details from identity documents, proof of address, information about your source of funds where appropriate, and records of checks carried out to prevent fraud, money laundering, underage access and other prohibited activity.

Payment and transaction information

We may handle information about deposits, withdrawals, wagers, winnings, account balances and other transactions. Payment information may be processed by payment service providers. We may receive transaction confirmations or limited payment details needed to reconcile an account, investigate a transaction, provide support and meet applicable obligations. We do not need to retain every payment detail in the same form in which it was originally provided.

Device, technical and usage information

When you visit the website, technical information may be recorded, such as your IP address, browser type, operating system, device identifiers, language settings, approximate location, pages viewed, access times and referring website. We may also collect information about how you use the website, including searches, clicks, session activity and error reports. This information helps us operate the site, improve performance, protect accounts and investigate suspicious activity.

Cookies and similar technologies

Surfplay Casino may use cookies and similar technologies to remember settings, keep you signed in, support security, understand website usage and help deliver relevant communications where permitted. Some cookies are necessary for core site functions, while others help with analytics, preferences or marketing. You can manage or block cookies through your browser settings. Blocking some cookies may affect the availability or performance of parts of the website.

How and why information is used

Personal information may be used for the purposes connected with providing a safe, functional and properly managed casino service. We will generally use information only where there is a reasonable operational, contractual, security, legal or consent-based reason to do so.

To create, maintain and administer your account.
To process deposits, withdrawals, wagers and other account transactions.
To verify your identity, age, account details and eligibility to use the services.
To carry out anti-fraud, security, responsible gaming and financial crime prevention checks.
To provide customer support, respond to questions and resolve complaints or disputes.
To operate, maintain, test and improve the website, systems and user experience.
To personalise settings and remember choices made during website visits.
To send service messages, account notices and other essential communications.
To send marketing communications where permitted and where you have provided consent or another valid basis applies.
To identify, prevent and investigate unauthorised access, misuse, cheating, collusion or other prohibited conduct.
To comply with legal, regulatory, court, tax, accounting and record-keeping requirements.
To protect the rights, property, safety and security of players, Surfplay Casino and other parties.

Where information is used for marketing, you may be able to change your communication preferences or withdraw consent. Withdrawing marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and it does not stop essential service, security or account communications.

When information may be shared

Information may be shared with service providers that help operate the website and services. These may include payment providers, identity and verification services, fraud prevention providers, technology and hosting providers, customer support platforms, analytics providers and professional advisers. Providers are expected to handle information for appropriate purposes and with suitable safeguards.

Information may also be disclosed where necessary to comply with a legal or regulatory requirement, respond to a lawful request, protect users or investigate suspected fraud, security incidents or other unlawful activity. If the business or part of its operations is reorganised, transferred or sold, relevant information may be shared as part of that process, subject to appropriate protections.

Storage, security and retention

We use reasonable administrative, technical and organisational measures to help protect personal information against unauthorised access, alteration, loss, misuse or disclosure. These measures may include access controls, authentication processes, monitoring, secure transmission methods and staff or supplier confidentiality requirements. No internet service or electronic storage system can be guaranteed to be completely secure, so players should also use a strong, unique password and keep login details confidential.

Personal information may be stored or processed by Surfplay Casino or its service providers in Australia or another location, depending on the systems and suppliers used to provide the services. Where information is handled across borders, reasonable steps are taken to support appropriate protection and lawful handling.

We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, unless a longer period is required or permitted. Some account, identity, transaction, security and communication records must be kept for a period required by law even after an account is closed. When information is no longer required, it may be securely deleted, anonymised or otherwise disposed of, subject to technical and legal requirements.

Your responsibilities

Please provide accurate and current information when creating or using an account, and tell us if your details change. You should not provide another person's information unless you are authorised to do so. If you submit documents for verification, make sure they are genuine, current and relevant to the request. Contact support promptly if you believe your account or personal information has been accessed without permission.

Your privacy rights and how to contact us

Depending on your circumstances and applicable privacy requirements, you may have rights relating to the personal information we hold about you. These rights can be subject to reasonable verification, exceptions and limits. We may need to confirm your identity before responding, particularly where a request involves account security or information that could affect another person.

Access: you may ask for access to personal information held about you and, where appropriate, an explanation of how it is used.
Correction: you may ask us to correct information that is inaccurate, incomplete or out of date.
Deletion: you may ask for your personal information to be deleted where it is no longer needed or where another valid ground for deletion applies. Deletion may not be possible for records that must be retained by law or for legitimate security, dispute or transaction purposes.
Marketing consent: you may withdraw consent to marketing communications or update your marketing preferences. You can also use an unsubscribe option included in a marketing message where available.
Concerns and complaints: you may contact us if you believe your information has been handled incorrectly or if you have questions about this policy.

To exercise your rights, request access, ask for correction or deletion, or withdraw consent to marketing, contact support@surfplaycasino.top. Please describe your request clearly and include enough information for us to locate the relevant account or records. Do not send unnecessary sensitive information in your first message. We will review the request and respond within a reasonable period, subject to identity checks, applicable requirements and any necessary exceptions.

If you ask us to delete information or withdraw consent, some services or communications may no longer be available. We may still retain information where required for legal compliance, fraud prevention, account security, dispute resolution, transaction records or other legitimate purposes. We may also keep a limited record of your request so that we can respect your preferences and demonstrate how it was handled.

Updates to this policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, privacy practices or applicable requirements. The latest version will be made available on this page, with the updated date shown where appropriate. You should review the policy periodically. If a change is significant, reasonable steps may be taken to draw it to your attention through the website, your account or another suitable communication channel.