Privacy Policy

Popmolly Online Casino — Privacy Policy

Effective Date and Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by Popmolly, an online casino and iGaming platform operated under a license issued by the Government of Curacao. This policy applies to all users who access, register with, or otherwise interact with the Popmolly platform, including through its website, mobile applications, and any associated digital services. By registering an account or continuing to use our services, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy. This document has been prepared in accordance with applicable data protection principles, including those relevant to Australian users under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained within that legislation. Popmolly is committed to maintaining the highest standards of data governance and regulatory compliance across all aspects of its operations.

1. Information We Collect

1.1 Registration and Account Data

When you create an account with Popmolly, we collect personal information that is necessary to establish and manage your player account. This includes your full legal name, date of birth, residential address, email address, phone number, username, and password credentials. This information is required to verify your identity, ensure you meet the minimum age requirement of 18 years, and comply with our obligations under applicable gambling and anti-money laundering regulations.

1.2 Payment and Financial Information

To facilitate deposits and withdrawals, Popmolly collects payment-related information, including credit and debit card details, bank account information, e-wallet identifiers, and transaction histories. We do not store full card numbers on our servers. Payment data is processed through secure, encrypted channels in compliance with applicable financial data protection standards. We retain transaction records as required by law for AML compliance and audit purposes.

1.3 Identity Verification Documents

As part of our Know Your Customer (KYC) obligations, we may request copies of government-issued identification documents such as passports, driver’s licenses, proof of address documents such as utility bills or bank statements, and source of funds documentation. These documents are collected to verify your identity, confirm your place of residence, and satisfy our legal obligations under anti-money laundering and counter-terrorism financing legislation.

1.4 Technical and Usage Data

We automatically collect technical information when you access our platform. This includes your IP address, browser type and version, device identifiers, operating system, referring URLs, session duration, pages visited, and clickstream data. This information is collected through server logs, cookies, and similar tracking technologies. Technical data assists us in maintaining platform security, detecting fraudulent activity, and improving the overall user experience.

1.5 Communications and Support Data

When you contact our customer support team, we collect records of those communications, including emails, live chat transcripts, and support ticket details. This information is used to resolve your queries, improve our service quality, and maintain records of interactions for compliance and audit purposes.

1.6 Responsible Gambling Data

We may collect information related to your gaming behavior, including betting patterns, session frequency, deposit limits, and self-exclusion preferences. This data is processed to support our responsible gambling obligations and to identify players who may require intervention or additional support.

2. How We Use Your Personal Data

2.1 Account Management and Service Delivery

We use your personal data to create and manage your player account, process deposits and withdrawals, provide access to our gaming products, and communicate with you regarding your account activity. The lawful basis for this processing is the performance of a contract between you and Popmolly.

2.2 Identity Verification and KYC Compliance

Popmolly is legally obligated to verify the identity of all registered players before permitting withdrawals or when required by our compliance framework. KYC procedures are conducted to prevent underage gambling, confirm the legitimacy of funds, and satisfy regulatory requirements imposed by our Curacao license and applicable Australian law. Failure to complete KYC verification may result in the suspension or closure of your account.

2.3 Anti-Money Laundering and Financial Crime Prevention

We process your personal and financial data to detect, investigate, and report suspicious activity in accordance with our AML obligations. This includes monitoring transaction patterns, verifying the source of funds, and reporting to relevant authorities where required. Our AML program is designed to prevent the use of our platform for money laundering, terrorism financing, or other financial crimes.

2.4 Fraud Prevention and Platform Security

Technical and behavioral data is used to identify and prevent fraudulent activity, unauthorized account access, bonus abuse, and other forms of platform manipulation. We may use automated decision-making tools and manual review processes to assess risk and take appropriate action where necessary.

2.5 Marketing Communications

With your consent, we may use your contact details to send you promotional offers, bonus notifications, product updates, and other marketing communications. You may withdraw your consent to receive marketing communications at any time by using the unsubscribe mechanism provided in each communication or by updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.6 Regulatory Compliance and Legal Obligations

We process personal data as required to comply with our obligations under applicable laws and regulations, including those related to gambling licensing, data protection, financial reporting, and law enforcement cooperation. This may include retaining records for specified periods and disclosing information to regulatory bodies upon lawful request.

2.7 Responsible Gambling Monitoring

We use data relating to your gaming behavior to monitor for signs of problem gambling, enforce self-imposed limits, and comply with responsible gambling standards. This processing is carried out in the interest of player welfare and in fulfillment of our obligations as a licensed operator.

3. Data Sharing and Disclosure

3.1 Payment Service Providers

We share your financial data with third-party payment processors and banking partners for the purpose of facilitating transactions. These providers are contractually bound to handle your data securely and in accordance with applicable data protection standards.

3.2 Identity Verification and KYC Partners

We engage third-party identity verification services to assist with KYC checks, document authentication, and sanctions screening. These partners process your personal data on our behalf and are subject to data processing agreements that restrict the use of your information to the purposes specified by Popmolly.

3.3 Regulatory and Law Enforcement Authorities

We may disclose your personal data to regulatory authorities, law enforcement agencies, or government bodies where we are legally required to do so. This includes disclosures made in connection with AML investigations, court orders, or requests from the Curacao Gaming Control Board and any applicable Australian regulatory bodies.

3.4 Fraud Prevention Agencies

We may share data with fraud prevention agencies and industry databases to detect and prevent fraudulent activity across the iGaming sector. Information shared for this purpose may be retained by those agencies and used by other organizations to conduct fraud and money laundering checks.

3.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this policy.

3.6 No Sale of Personal Data

Popmolly does not sell, rent, or trade your personal data to third parties for their own commercial purposes. All data sharing is conducted for legitimate operational, legal, or compliance-related reasons as described in this policy.

4. Data Retention

We retain your personal data for as long as your account remains active and for such additional periods as are required by law or our internal compliance policies. In most cases, financial and identity records are retained for a minimum of five years following account closure in accordance with AML and gambling regulatory requirements. Technical logs may be retained for shorter periods unless required for ongoing investigations. When data is no longer required, it is securely deleted or anonymized.

5. Your Rights as a Data Subject

5.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond to verified access requests within a reasonable timeframe and provide the information in a clear and accessible format.

5.2 Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update that information. You may also update certain account details directly through your account settings.

5.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Please note that we may be required to retain certain data to comply with our legal obligations, including AML and gambling regulatory requirements, and such data cannot be deleted upon request.

5.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.

5.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.

5.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

5.7 Exercising Your Rights

To exercise any of the rights described above, please contact our Data Protection team through the contact details available on the Popmolly website. We may require you to verify your identity before processing your request. We will respond to all valid requests within 30 days.

6. Cookie Policy

6.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit our platform. They are used to store information about your preferences and activity, enabling us to deliver a more personalized and functional experience.

6.2 Essential Cookies

Essential cookies are necessary for the operation of our platform. They enable core functions such as user authentication, session management, security enforcement, and access to restricted areas of the site. These cookies cannot be disabled without impairing the functionality of the platform.

6.3 Analytical and Performance Cookies

We use analytical cookies to collect information about how users interact with our platform, including pages visited, time spent on site, error messages encountered, and navigation paths. This data is used in aggregated form to improve platform performance, identify technical issues, and enhance the user experience. We may use third-party analytics tools for this purpose, and such providers are subject to data processing agreements with Popmolly.

6.4 Marketing and Targeting Cookies

With your consent, we may use marketing cookies to deliver relevant promotional content and to track the effectiveness of our advertising campaigns. You may manage your cookie preferences through the cookie consent tool available on our platform or through your browser settings.

6.5 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform and your ability to access some features or services.

7. Data Security

Popmolly implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff training on data protection obligations. While we take all reasonable precautions, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

As a Curacao-licensed operator serving Australian users, your personal data may be transferred to and processed in jurisdictions outside Australia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including contractual clauses and compliance with applicable cross-border data transfer requirements under the Privacy Act 1988 (Cth).

9. Responsible Gambling and Data Use

Popmolly is committed to promoting responsible gambling and uses personal data to support this commitment. We may use your behavioral data to enforce deposit limits, cooling-off periods, and self-exclusion requests. If you wish to self-exclude or seek support for problem gambling, please contact our responsible gambling team through the details available on our website. We cooperate with recognized responsible gambling organizations and may share limited data with such organizations where necessary to support player welfare.

10. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Your continued use of our services following the publication of changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

11. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which Popmolly processes your personal data, please contact our Data Protection Officer through the contact details provided on the official Popmolly website. If you are not satisfied with our response, you may have the right to lodge a complaint with the Office of the Australian Information Commissioner or another relevant supervisory authority.