Heaps Of Wins Casino Privacy Policy
Navigation
Welcome to the Heaps Of Wins Casino privacy policy page. At Heaps Of Wins Casino, we take the protection of your personal data extremely seriously. This document sets out how we collect, use, store, and safeguard your personal information when you access and use our platform at heapsofwinscasino.click. Our commitment to data protection is grounded in the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR). We encourage all players — particularly those based in Australia — to read this privacy policy carefully before creating an account or making use of our services. Transparency, confidentiality, and robust information security are the pillars on which Heaps Of Wins Casino has built its approach to data processing.
1. Identity of the Data Controller
Heaps Of Wins Casino is operated by a company incorporated and registered in Curaçao, licensed under the authority of the Government of Curaçao. As the entity responsible for determining the purposes and means by which your personal data is processed, we act as the data controller for all information gathered through our website and services. All questions relating to the Heaps Of Wins Casino privacy policy, or to the handling of your personal information, may be directed to our Data Protection Officer using the contact details provided at the end of this document. Our registered domain is heapsofwinscasino.click, and this privacy policy applies to all services offered through that domain, including our desktop website, mobile web app (PWA), and downloadable Android APK.
2. Personal Data We Collect
As part of providing a secure, compliant, and enjoyable gaming experience, Heaps Of Wins Casino engages in data collection across several distinct categories. Understanding exactly what personal data we hold is a cornerstone of transparent Heaps Of Wins Casino data protection. We collect only what is necessary to fulfil the purposes described in this privacy policy.
2.1 Identification Data
- Full legal name
- Date of birth and age verification documents
- Nationality and country of residence
- Government-issued identification (passport, driver's licence, national ID card)
- Account username and password (stored in encrypted, hashed form)
- Selfie or photographic verification where required for KYC compliance
2.2 Contact Information
- Email address
- Phone number
- Residential postal address
- Preferred language and communication channel preferences
2.3 Financial and Payment Data
- Deposit and withdrawal transaction history
- Payment method details (card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
- Transaction amounts, timestamps, and currency information
- Source of funds declarations where required for KYC/AML compliance
- Bank account details linked to bank transfer or PayID payments
2.4 Gaming Activity Data
- Games played across our catalogue of 4,000+ titles
- Bets placed, wager amounts, and outcome records
- Win/loss history and account balance changes
- Session duration, login frequency, and visit patterns
- Responsible gambling tool usage (deposit limits, self-exclusion periods, cooling-off requests)
2.5 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system version, and browser version
- Unique device identifiers and hardware fingerprints
- Server log files and access logs
- User data gathered through cookies and similar tracking technologies such as web beacons and pixels
2.6 Communication Data
- Live chat transcripts with our 24/7 support team
- Email correspondence sent to [email protected]
- Records of promotional opt-ins and marketing consent history
- Feedback and survey responses where voluntarily provided
2.7 Sensitive Personal Information
In limited circumstances — such as when a player self-identifies as experiencing gambling-related difficulties, or when we apply responsible gambling measures on health grounds — Heaps Of Wins Casino may collect and process sensitive personal information. This information is handled with the highest level of care and confidentiality, used solely for the purpose for which it was disclosed, and never shared with third parties for commercial gain.
2.8 Data Received from Third Parties
We may receive personal information from third parties, including payment processors, fraud-detection service providers, identity verification agencies, and affiliate marketing partners. All such user data is handled in strict accordance with this privacy policy and applicable legal requirements. We do not purchase third-party marketing lists or acquire personal data from data brokers.
3. How We Collect Your Personal Information
Data collection at Heaps Of Wins Casino occurs through a variety of means, each of which is outlined below to ensure full transparency regarding how your personal information enters our systems.
- Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions, you voluntarily provide us with personal data.
- Automated collection: Via cookies, web beacons, pixels, and server logs that record your interactions with our website and mobile applications. This automated data collection helps us maintain platform security and improve your experience.
- Third-party sources: Payment providers, fraud prevention databases, and publicly available sources used for identity verification and anti-money-laundering (AML) compliance checks.
- Device permissions: Where you grant our mobile app permission to access device-level data such as location or camera functionality (used for document upload during the KYC process).
4. Purposes of Personal Data Processing
The Heaps Of Wins Casino data processing activities are carried out for defined, legitimate, and transparent purposes. We do not process your personal data beyond what is reasonably necessary to fulfil the objectives set out below.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your player account; verifying identity; resetting credentials; and managing account preferences. |
| Service Provision | Processing deposits and withdrawals via PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer; granting access to 4,000+ games from 50+ providers; and delivering round-the-clock customer support. |
| Legal and Regulatory Compliance | Meeting KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations; verifying age and identity; and reporting to gaming licence authorities and financial regulators where required by law. |
| Security and Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, unauthorised account access, collusion, and money laundering. Heaps Of Wins Casino data security relies on continuous monitoring of account and transaction patterns. |
| Responsible Gambling | Monitoring gaming behaviour to identify problem gambling indicators; applying deposit limits, bet/loss limits, cooling-off periods (24h, 48h, 7 days, 30 days), and self-exclusion options (6 months, 1 year, 5 years, permanent) on player request or platform initiative. |
| Marketing and Communication | Sending promotional offers, newsletters, bonus notifications, and personalised recommendations to players who have consented; managing the Welcome Bonus programme (up to A$500 + 100 free spins) and VIP loyalty communications. |
| Service Improvement | Analysing user data and platform metrics to improve website performance, game offerings, user interface design, and the overall player experience. |
| Dispute Resolution | Investigating complaints, resolving payment disputes (including withdrawal queries related to the A$5,000/day and A$30,000/month limits), and cooperating with legal or arbitration proceedings. |
5. Legal Basis for Data Processing
Every instance of data processing conducted by Heaps Of Wins Casino rests on one or more lawful bases. Depending on the purpose, the legal grounds we rely on include the following:
- Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted at registration. For example, processing deposits and withdrawals, managing your account, and applying bonus terms.
- Legal obligation: Processing mandated by applicable laws, including the Australian Privacy Act 1988, AML regulations, gaming licence conditions, and tax reporting requirements. This includes mandatory KYC verification before your first withdrawal.
- Legitimate interests: Processing carried out in the genuine interest of our business — such as fraud prevention, network security monitoring, and improving our platform — provided that our legitimate interests are not overridden by your fundamental rights.
- Consent: For direct marketing communications and non-essential cookies, we rely on your explicit, freely given consent. You may withdraw that consent at any time through your account settings or by contacting us, without affecting the lawfulness of processing carried out before withdrawal.
6. Cookie Policy
The Heaps Of Wins Casino cookie policy explains in full how we deploy cookies and similar technologies across our website. A cookie is a small text file stored on your device when you visit a website. Cookies enable us to recognise your browser, remember your preferences, maintain your session, and gather analytical data that helps us continually improve our platform. The Heaps Of Wins Casino cookie policy applies to all visitors of heapsofwinscasino.click, regardless of whether they hold a registered account.
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Essential Cookies | Necessary for the website to function correctly. They enable login sessions, security verification, payment flow integrity, and basic navigation. These cookies cannot be disabled without breaking core site functionality. | No |
| Analytical Cookies | Used to track user data such as page views, session length, bounce rates, and traffic sources. These cookies help us understand how players interact with our site and identify areas for improvement. | Yes |
| Functional Cookies | Remember your preferences — including language selection, currency display, and game favourites — to personalise and enhance your experience across sessions. | Yes |
| Marketing Cookies | Used by us and our affiliate partners to deliver targeted advertising and promotions based on your browsing behaviour and play history. These cookies track cross-site activity and support our affiliate programme. | Yes |
6.2 Managing Your Cookie Preferences
When you first visit heapsofwinscasino.click, you will be presented with a cookie consent banner allowing you to accept all cookies or customise your preferences by category. You may update your cookie settings at any time via the "Cookie Settings" link in our website footer. Please note that disabling certain cookies — particularly functional and analytical ones — may affect the performance and personalisation features of the site. You can also manage or delete cookies directly through your browser settings; however, this may impact how some features of Heaps Of Wins Casino operate. Clearing cookies will log you out of your current session and reset your stored preferences.
7. Sharing Your Data with Third Parties
The Heaps Of Wins Casino data protection framework includes strict controls on when and how your personal data is shared with outside parties. We do not sell, rent, or trade your personal information to any third party. However, we do share user data in the circumstances described below, always subject to appropriate contractual and technical safeguards.
7.1 Payment Service Providers
To process deposits and withdrawals via methods such as PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer, we share relevant transaction data with the respective payment providers. These providers are contractually bound to handle your personal data in compliance with applicable data protection laws and are prohibited from using your information for any purpose beyond facilitating your transactions.
7.2 Regulatory and Law Enforcement Authorities
We may be required by law to disclose your personal information to government authorities, gaming regulators, financial intelligence units, or law enforcement agencies — for example, in connection with AML investigations, fraud cases, suspected criminal activity, or court orders. All such disclosures are made in strict confidentiality and only to the extent required by applicable law. We will notify you of any such disclosure where legally permitted to do so.
7.3 Identity Verification and KYC Providers
Before processing your first withdrawal, Heaps Of Wins Casino is required to complete KYC verification as mandated by our gaming licence. This involves sharing your identification documents and associated personal data with specialist third-party verification services that are certified to handle sensitive identity data securely.
7.4 Technology and Infrastructure Partners
We work with cloud hosting providers, game studios (including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming), and platform technology providers. These partners may have access to limited personal information as strictly necessary to deliver their respective services. All are bound by confidentiality agreements and data processing agreements requiring adherence to data protection standards equivalent to our own.
7.5 Affiliate and Marketing Partners
Where you have consented to marketing, certain anonymised or pseudonymised user data may be shared with affiliate partners to track referrals and manage promotional campaigns. Your full personal identity is not disclosed to affiliates. Any affiliate data sharing is governed by our cookie policy and your applicable consent settings.
8. International Data Transfers
Because Heaps Of Wins Casino operates globally and relies on cloud-based infrastructure and technology partners across multiple jurisdictions, your personal data may be transferred to and stored in countries outside Australia. When such cross-border transfers occur, we take appropriate steps to ensure your information security and data protection are maintained to a standard at least equivalent to that required under Australian law. These protective measures may include:
- Entering into Standard Contractual Clauses (SCCs) with data recipients located in countries without an adequate data protection framework
- Relying on adequacy decisions issued by relevant authorities where applicable
- Implementing binding corporate rules across group entities where the organisation operates multiple legal entities
- Applying technical safeguards — including end-to-end encryption — for all personal data in transit across borders
- Conducting transfer impact assessments to evaluate risks to data subjects in the destination jurisdiction
9. Data Security
Heaps Of Wins Casino data security is maintained through a layered, defence-in-depth approach that combines industry-leading technical measures with rigorous organisational policies. We are committed to protecting your personal information from unauthorised access, accidental disclosure, alteration, and destruction. Information security is not an afterthought at Heaps Of Wins Casino — it is embedded into every layer of our platform architecture.
9.1 Technical Safeguards
- 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS technology — the same encryption standard employed by global financial institutions and government agencies.
- Encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption, ensuring that even in the unlikely event of a server breach, raw data remains unreadable.
- Enterprise firewalls: Multi-layered firewalls protect our entire network infrastructure from external intrusion attempts and denial-of-service attacks.
- Intrusion detection and prevention systems (IDS/IPS): Automated systems detect and respond to suspicious activity on our network in real time, triggering alerts and containment protocols as needed.
- RNG certification: All game Random Number Generators are independently tested and certified by accredited third-party laboratories to guarantee fairness and unpredictability.
- Secure payment tokenisation: Card and payment details are tokenised to ensure that full payment credentials are never stored directly on our servers.
9.2 Organisational Safeguards
- Role-based access controls that limit personal data access to authorised personnel with a legitimate business need
- Regular staff training programmes on data protection, information security best practices, and phishing awareness
- Periodic security audits, penetration testing, and vulnerability assessments conducted by independent specialists
- Documented incident response procedures for reporting, containing, and recovering from data breaches
- A dedicated data security team responsible for maintaining and improving our security posture on an ongoing basis
Despite these robust measures, no digital system is entirely immune to risk. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, Heaps Of Wins Casino will notify you and any relevant supervisory authority as required by law, within the timeframes prescribed by applicable regulations.
10. Data Storage and Retention Periods
We apply a structured and legally grounded policy for data storage and retention to ensure we do not hold your personal data for longer than is necessary for the purpose for which it was collected. Heaps Of Wins Casino data storage periods are determined based on the nature of the data, the purpose of processing, and applicable legal obligations.
| Data Category | Retention Period | Legal / Business Reason |
|---|---|---|
| Account and identity data | 5 years after account closure | KYC/AML regulatory requirement under gaming licence conditions |
| Financial transaction records | 7 years after transaction date | Tax compliance and financial regulatory obligations |
| Gaming activity logs | 5 years after account closure | Dispute resolution, responsible gambling monitoring, and regulatory compliance |
| Customer support communications | 3 years after last interaction | Quality assurance, dispute resolution, and audit trail |
| Marketing consent records | Until consent is withdrawn + 3 years | Demonstrating lawful basis for marketing communications |
| Cookie and analytical data | Up to 13 months | Platform analytics, performance improvement, and user experience optimisation |
| Responsible gambling records | Minimum 5 years after exclusion ends | Regulatory requirement and duty of care obligations |
Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. For data storage queries or requests for earlier deletion, please refer to the Your Privacy Rights section below. Where we are legally required to retain data despite a deletion request, we will inform you of the applicable data storage period and the legal basis for continued retention.
11. Your Privacy Rights
Under the Australian Privacy Act 1988 and, where applicable, the GDPR, you hold a range of privacy rights with respect to your personal data held by Heaps Of Wins Casino. The Heaps Of Wins Casino approach to privacy rights is designed to make exercising these rights as straightforward and accessible as possible. All requests are processed free of charge.
11.1 Summary of Your Rights
| Privacy Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all personal data we hold about you and receive information about how it is processed, including the categories of data, the purposes, and the recipients. |
| Right to Correction | If any personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it without undue delay. |
| Right to Deletion ("Right to Be Forgotten") | In certain circumstances, you may request the erasure of your personal data. Note that we may be legally required to retain certain data under KYC, AML, and gaming regulations, even after account closure. |
| Right to Restriction | You may ask us to restrict the data processing of your personal information in specified situations, such as while you dispute the accuracy of data we hold, or while a complaint is being investigated. |
| Right to Data Portability | You may request that we provide your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) so that it can be transferred to another service provider of your choice. |
| Right to Object | You may object to the processing of your personal data for direct marketing purposes at any time, and where processing is based on our legitimate interests, you may object if your individual circumstances warrant it. |
| Right to Withdraw Consent | Where data processing is based on your consent — such as for marketing emails or non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing. |
11.2 How to Exercise Your Privacy Rights
To exercise any of the above privacy rights, you may contact Heaps Of Wins Casino through the following channels:
- Privacy email: [email protected]
- General support email: [email protected]
- Live Chat: Available 24/7 directly through the heapsofwinscasino.click website
- Data Protection Officer: [email protected]
We will respond to all privacy rights requests within 30 days of receipt. In more complex cases, this period may be extended by a further 60 days, in which case we will notify you promptly of the delay and the reason for it. To protect you against fraudulent access requests, we may be required to verify your identity before fulfilling your request. We will not charge a fee for exercising your privacy rights unless a request is manifestly unfounded or excessive.
12. Supervisory Authority — OAIC
If you are an Australian resident and believe that Heaps Of Wins Casino has not handled your personal data in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC), which serves as the supervisory authority for privacy matters in Australia:
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
We encourage you to contact us directly in the first instance so that we have the opportunity to address your concerns promptly and fairly. However, you are always entitled to approach the OAIC at any time without first contacting us. If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority in your country of residence.
13. Data Protection Officer
In line with our commitment to best-practice data protection governance, Heaps Of Wins Casino has appointed a dedicated Data Protection Officer (DPO) to oversee compliance with our data protection obligations and this privacy policy. The DPO acts as the primary point of contact for data subjects, supervisory authorities, and internal stakeholders on all matters relating to personal data and information security.
If you have any questions or concerns about the way Heaps Of Wins Casino processes your personal information, or if you wish to exercise any of your privacy rights, you may contact the DPO directly:
- Email: [email protected]
- Response time: Initial acknowledgement within 5 business days; full response within 30 days.
14. Changes to This Privacy Policy
Heaps Of Wins Casino reserves the right to amend this privacy policy at any time to reflect changes in our operational practices, legal obligations, or regulatory requirements. Any material changes to the Heaps Of Wins Casino privacy policy will be communicated to you via email or through a prominent notice on our website, prior to the changes taking effect. The date of the most recent update will always be displayed at the top of this page. Continued use of our platform after an updated privacy policy has been published constitutes your acceptance of the revised terms. We recommend reviewing this privacy policy periodically to stay informed of how Heaps Of Wins Casino protects your personal data and upholds your privacy rights.