Our Privacy Policy

This policy sets out how we collect, use, store and share your personal information when you play at Oshi Casino. It applies to every account holder on oshicasino-pokies.com and covers the rights you can exercise over your data at any time.

The Data We Collect

We collect only what we need to run your account, verify your identity and meet our legal obligations. When you register, we ask for your name, date of birth, email address, phone number and residential address. Before your first withdrawal we request KYC documents: a government-issued photo ID, proof of address and proof of your payment method.

Beyond identity data, we record transaction details for every deposit and withdrawal, including amounts, timestamps, currencies and payment method references. We also log device and connection information such as IP address, browser type, operating system and session times, because this helps us detect fraud and keep your account secure.

• Identity data: name, date of birth, email, phone, residential address
• Verification documents: photo ID, proof of address, payment method proof
• Transaction data: deposits, withdrawals, amounts, timestamps, currencies
• Technical data: IP address, device model, browser, operating system
• Gameplay behaviour: games played, bets placed, wins, losses, session duration
• Marketing preferences: which offers you opt in to and which channels you accept

How We Use Your Data

Your data works for you in six concrete ways. We create and maintain your account, process your deposits and withdrawals in AUD or crypto, and complete KYC checks required before we release funds. We also run automated anti-fraud checks on login patterns and betting behaviour.

Responsible-gambling monitoring is a core use: we track play patterns to spot signs of harm and can step in with limits or a check-in. With your consent we send promotional offers such as our Monday reload 50% up to 800 AUD or Wednesday 100 free spins. Finally, we meet legal obligations including anti-money-laundering reporting and tax record keeping.

• Account creation, login and account maintenance
• KYC identity verification before first withdrawal
• Payment processing for deposits and withdrawals
• Fraud prevention and account security monitoring
• Responsible-gambling monitoring and intervention
• Marketing messages, only with your consent
• Compliance with legal and regulatory obligations

Our Legal Bases for Processing

Contract: we process your identity and transaction data to set up and run your account. Without it we cannot honour deposits, bets or withdrawals, so this processing is necessary for the service you signed up for.

Legal obligation: gaming regulation requires us to verify your identity, keep transaction records for at least 5 years and report suspicious activity. We cannot offer you play without meeting these duties.

Legitimate interest: we use device and gameplay data for fraud prevention, security and responsible-gambling monitoring. These interests balance your rights, and we keep the data involved to the minimum needed.

Consent: marketing emails and SMS arrive only if you opt in. You can withdraw that consent at any time by updating your communication preferences or following the unsubscribe link in any message.

How Long We Keep It

We hold each category of data only as long as we have a reason to. Regulatory rules require transaction and KYC records to be kept for 5 years or more after the last activity on your account, even if you close it. Marketing data is deleted as soon as you withdraw consent or ask us to erase it.

Gameplay logs, device records and security logs are kept for shorter periods, typically 12 months, unless they form part of an open dispute, fraud investigation or regulatory request.

Who We Share It With

We never sell your personal data. We share it only with processors and authorities who need it to deliver the service or enforce the rules, and each one works under a data processing agreement with strict confidentiality terms.

• Payment processors handling your deposits and withdrawals
• KYC and AML verification providers checking your documents
• Game and platform providers powering the 3,000 games in our lobby
• The Curaçao regulator and, where required, Australian authorities
• Analytics providers helping us understand site performance in aggregate

Your Rights Over Your Data

You control your data. Email [email protected] or contact our support team (available 24/7 via live chat) and we will respond within 30 days. Where we cannot comply fully, we will explain why.

You may also complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have handled your personal information incorrectly.

• Access: get a copy of the personal data we hold about you
• Rectification: correct data that is wrong or out of date
• Erasure: request deletion where no legal retention applies
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: opt out of marketing at any time
• Complain: escalate to the OAIC or your local data authority

Cookies and Tracking

We use essential cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies you can accept or reject at the banner. Full details, including how to block or delete cookies in your browser, sit on our dedicated Cookies Policy page. Nothing here overrides that page, which governs all cookie use on the site.

How We Protect Your Data

All traffic between you and Oshi Casino runs over TLS encryption, and stored KYC documents sit in encrypted storage with access limited to trained compliance staff. Our systems sit behind firewalls and continuous monitoring, and staff access your data only on a need-to-know basis with logged, audited permissions.

If a data breach affects your personal information, we will notify the relevant regulator without undue delay and tell you directly if the breach creates a serious risk of harm. Our data protection officer can be reached at [email protected] for any question about this policy.

Frequently asked questions

How long do you keep my KYC documents?

We keep verification documents for at least 5 years after your account closes, as gaming regulation requires. After that they are securely destroyed.

Can I get a copy of the data you hold about me?

Yes. Email [email protected] from your registered address and we will send a full copy of your personal data within 30 days.

How do I stop marketing emails?

Use the unsubscribe link in any message or switch off marketing in your account settings. Withdrawal of consent takes effect immediately and your marketing data is then deleted.

Do you sell my data to anyone?

No. We share data only with payment processors, verification providers, regulators and analytics partners under strict processing agreements.