Privacy Policy

01 Who this policy covers

This Privacy Policy is issued by Racing and Wagering Western Australia (ABN 21 347 055 603), trading as Tabtooch, of 14 Hasler Road, Osborne Park, Western Australia 6017, Australia. It applies to tabtooch.mobi and to every service we provide.

We are an APP entity under the Privacy Act 1988 (Cth) and handle personal information in accordance with the 13 Australian Privacy Principles. Our Privacy Officer can be reached at privacy@tabtooch.mobi or by post at the address above.

02 What we collect

We collect only what we need to run a regulated wagering account:

• Identity — full name, date of birth, residential address, and government-issued identifiers such as a driver licence or passport number where an electronic check does not return a match;
• Contact — email address, phone number and postal address;
• Financial — payment method details, deposits, withdrawals and account balance;
• Wagering — bets placed, stakes, prices taken, settlements and account history;
• Safer-gambling — the limits you set, breaks and exclusions you request, the outcome of BetStop checks, and any interaction with our responsible-gambling team;
• Technical — IP address, device and browser information, approximate location derived from IP, and how you use the site;
• Correspondence — the messages you send us and our replies.

03 How we collect it

Most information comes directly from you: when you register, verify your identity, deposit or withdraw, place a bet, set a limit or contact us. Some is generated as you use the site, through cookies and server logs. Some comes from third parties — identity-verification providers, payment providers, fraud-prevention services and the BetStop register operator.

If you do not provide the information we ask for, particularly for identity verification, we may be unable to open or continue to operate your account.

04 Why we use it

We use personal information to open and operate your account; to verify your age and identity and to meet our obligations under the AML/CTF Act 2006 (Cth), including reporting to AUSTRAC; to accept, settle and pay out wagers; to check the BetStop register and apply your responsible-gambling settings; to detect and prevent fraud, collusion and integrity breaches; to meet requirements set by the Gaming and Wagering Commission of WA; to answer your enquiries and handle complaints; to improve the service; and, where you have opted in, to send you service and marketing communications.

05 How we store and protect it

Information is held in access-controlled systems, encrypted in transit and at rest, with logging, regular security review and staff training. Access is limited to people who need it to do their job.

Identity documents are treated with heightened security, used only for verification and legal obligations, and never used for marketing.

We comply with the Notifiable Data Breaches scheme: if a breach is likely to cause serious harm we will notify you and the Office of the Australian Information Commissioner as required.

06 How long we keep it

We keep personal information only as long as we need it and as long as the law requires. Records connected with a wagering account and its transactions are retained for the minimum periods set under the AML/CTF Rules and wagering regulation — generally seven years after the account relationship ends. After that, information is securely destroyed or de-identified.

07 Who we disclose it to

We do not sell your personal information. We disclose it only where it is necessary, to:

• identity-verification and KYC providers;
• payment providers, banks and fraud-screening services;
• AUSTRAC, for AML/CTF reporting;
• the Gaming and Wagering Commission of Western Australia and Racing, Gaming and Liquor, Department of Local Government, Industry Regulation and Safety (LGIRS), our regulators;
• the operator of the BetStop register;
• racing and sporting controlling and integrity bodies, where an integrity issue arises;
• IT, hosting, analytics and communications providers acting for us under contract;
• our professional advisers; and
• law enforcement, courts and government agencies where required or authorised by law.

08 Overseas disclosure

Some of our service providers store or process information outside Australia, including in the United States and the European Union. Where we disclose personal information overseas we take reasonable steps, consistent with APP 8, to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including by contract.

09 Direct marketing and your choices

We send marketing only to customers who have opted in, consistent with the Spam Act 2003 (Cth). Consent boxes are never pre-ticked. Every message identifies us and carries a working unsubscribe link, and you can also turn marketing off in your account settings at any time.

We do not direct marketing at people under 18, and registering with BetStop removes you from marketing by every licensed Australian wagering provider, including us.

10 People under 18

This service is for adults. We do not knowingly collect personal information from anyone under 18. If we discover that an account belongs to a minor we close it immediately, void the bets, return deposits as the law requires, and delete the personal information we hold, other than what we must keep to record the incident.

11 Cookies and tracking

We use cookies and similar technologies. Some cookie data, such as an IP address or device identifier, may be personal information under the Privacy Act 1988 (Cth). Optional cookies load only after you consent. See our Cookie Policy for the full list and how to change your choices.

12 Your rights

You may ask us for access to the personal information we hold about you (APP 12) and ask us to correct anything inaccurate, out of date or incomplete (APP 13). Email privacy@tabtooch.mobi. There is no fee to make a request, we will verify your identity first, and we will respond within 30 days. If we refuse access or correction we will explain why in writing and tell you how to complain.

You may also withdraw marketing consent, ask us to stop using optional cookies, and request closure of your account.

13 Privacy complaints

If you believe we have mishandled your personal information, email privacy@tabtooch.mobi. We acknowledge within two business days and respond within 30 days. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner — oaic.gov.au, 1300 363 992.

14 Changes to this policy

We may update this policy to reflect changes in law, technology or our services. The current version and its effective date always appear at the top of this page. Material changes will be notified on tabtooch.mobi.