At A Big Candy Casino, safeguarding the personal data of every player is one of our highest priorities. This A Big Candy Casino privacy policy explains in plain language exactly what personal information we collect, why we collect it, how we use it, and the rights you hold over your own data. It has been drafted in line with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR). Whether you are browsing our site, registering an account, or playing one of our 4,000+ games, data protection principles govern every interaction. We encourage you to read this document carefully and contact us if you have any questions about our approach to confidentiality and information security.
1. Identity of the Data Controller
A Big Candy Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the entity that determines the purposes and means of data processing, this company acts as the data controller for all user data collected via the website abigcandyscasino.com. Any reference to "we", "us", or "our" in this privacy policy refers to this operator. If you need to contact us regarding data protection matters, please use the details provided in the Data Protection Officer section below.
2. Personal Data We Collect
A Big Candy Casino collects several categories of personal data depending on how you interact with our platform. Data collection at our casino is limited to what is genuinely necessary for the purposes described in this document. Below is a comprehensive overview of the types of personal information we process.
2.1 Identification and Contact Data
- Full legal name
- Date of birth
- Residential address (including country, state, and postcode)
- Email address and telephone number
- Username and encrypted password
- Government-issued identification documents (passport, driver's licence, or equivalent) for KYC verification
2.2 Financial Data
- Payment method details (credit/debit card numbers are masked and tokenised; we never store full card numbers)
- Bank account or e-wallet identifiers (PayID, Skrill, Neteller, etc.)
- Cryptocurrency wallet addresses (Bitcoin, Ethereum, Litecoin)
- Deposit and withdrawal transaction history
- Account balance information
2.3 Gaming Activity Data
- Games played, bets placed, wins, and losses
- Session duration and frequency of play
- Bonus activations and wagering progress
- VIP level and loyalty points
- Responsible gambling tools activated (limits, cooling-off periods, self-exclusion)
2.4 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system, and browser version
- Cookies and similar tracking technologies (see Cookie Policy section)
- Log files, access times, and referring URLs
2.5 Communication Data
- Live chat transcripts with our 24/7 support team
- Email correspondence (replies within 12 hours)
- Survey responses and feedback forms
- Marketing preferences and opt-in/opt-out status
2.6 Sensitive Data
We may collect sensitive information — such as details relating to problem gambling or self-exclusion — strictly to fulfil our responsible gambling obligations. This data is treated with the highest level of confidentiality and is never used for marketing purposes.
2.7 Data Received from Third Parties
In certain circumstances we receive personal information from external sources, including identity verification partners, fraud-prevention agencies, and payment processors. This data supplements our own data collection to ensure regulatory compliance, detect fraudulent activity, and protect the integrity of our platform.
3. How We Collect Your Personal Data
A Big Candy Casino data collection occurs through multiple channels:
- Direct submission — when you register, complete KYC forms, make deposits or withdrawals, or contact our support team.
- Automated technologies — cookies, web beacons, and server logs capture technical and behavioural data each time you visit our site or use our mobile app.
- Third-party providers — payment processors, KYC/AML service providers, fraud-detection agencies, and game suppliers may share relevant user data with us.
- Public sources — in limited cases we may verify information against publicly available databases for fraud-prevention or regulatory purposes.
4. Purposes of Data Processing
Every piece of personal data held by A Big Candy Casino is processed for one or more legitimate purposes. We do not use your information for any purpose incompatible with those listed below.
| Purpose | Examples of Data Used |
|---|---|
| Account creation and management | Identification data, contact data, username/password |
| Provision of gaming services | Gaming activity data, financial data, device data |
| Payment processing | Financial data, identification data |
| KYC and AML compliance | Identification documents, financial transaction records |
| Fraud prevention and security | IP address, device fingerprint, transaction history |
| Responsible gambling | Gaming activity, self-exclusion records, limit settings |
| Customer support | Communication data, account history |
| Marketing and promotions (with consent) | Contact data, marketing preferences, gaming activity |
| Platform improvement and analytics | Technical data, behavioural data, cookie data |
| Legal and regulatory obligations | All relevant data categories as required by law |
5. Legal Basis for Processing
Under the Australian Privacy Act 1988 and the APPs, as well as the GDPR where applicable, A Big Candy Casino relies on the following legal bases for data processing:
- Contractual necessity — processing required to create and manage your account, process payments, and deliver the gaming services you have requested.
- Legal obligation — processing mandated by anti-money laundering (AML) law, Know Your Customer (KYC) requirements, taxation obligations, and gambling regulations.
- Legitimate interests — processing carried out for fraud prevention, platform security, responsible gambling monitoring, and improving our services, provided these interests do not override your fundamental rights.
- Consent — processing for direct marketing emails, push notifications, and non-essential cookies, where you have given explicit, informed consent and may withdraw it at any time.
6. Cookie Policy
The A Big Candy Casino cookie policy sets out how we use cookies and similar tracking technologies on our website and mobile app. Cookies are small text files placed on your device that allow us to recognise returning visitors, remember preferences, and analyse traffic patterns. By continuing to use our site after accepting our cookie policy banner, you consent to the placement of non-essential cookies on your device.
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Essential cookies | Enable core functions such as login, session management, and security checks. Without these the site cannot operate. | No (strictly necessary) |
| Analytical cookies | Measure traffic, page views, bounce rates, and user journeys to help us improve the platform. We use anonymised or pseudonymised data wherever possible. | Yes |
| Functional cookies | Remember your language preference, currency, and display settings to deliver a more personalised experience. | Yes |
| Marketing cookies | Track browsing activity across sites to deliver targeted advertising and measure campaign effectiveness. | Yes |
6.2 Managing Cookies
You can manage or withdraw consent for non-essential cookies at any time by accessing the Cookie Preferences Centre available in the footer of every page. You may also configure your browser to block or delete cookies; however, disabling essential cookies will impair the functionality of the site. Note that our cookie policy does not cover third-party cookies set by external partners — please refer to their respective privacy notices.
7. Sharing Personal Data with Third Parties
A Big Candy Casino never sells your personal data to third parties. We may, however, share user data in the following circumstances to ensure the lawful, secure, and efficient operation of our services:
7.1 Payment Providers
Processing deposits and withdrawals via PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer requires us to share certain financial and identification data with our payment partners. These providers maintain their own data protection standards and are bound by contractual obligations to keep your personal information secure.
7.2 Regulatory and Law-Enforcement Authorities
We may be legally required to disclose personal data to the Government of Curaçao, the Office of the Australian Information Commissioner (OAIC), or other competent authorities in response to lawful requests, court orders, or to fulfil AML/KYC obligations.
7.3 Identity Verification and Fraud-Prevention Partners
Before processing a player's first withdrawal, A Big Candy Casino carries out mandatory KYC verification. We engage specialist third-party providers who compare your submitted documents against official records to confirm your identity and protect against fraud.
7.4 Game and Software Providers
Our catalogue features 50+ game providers, including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming. Certain technical and gameplay data may be passed to these suppliers for game delivery and RNG certification purposes.
7.5 Group Companies and Business Transfers
In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the relevant successor entity, provided that the recipient agrees to honour the terms of this privacy policy.
8. International Data Transfers
Because A Big Candy Casino operates globally, your personal data may be transferred to and processed in countries outside Australia, including in Curaçao and other jurisdictions where our service providers are located. Wherever such transfers occur, we ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — to maintain the same level of data protection that applies within Australia. If you have questions about international transfers of your personal information, please contact our Data Protection Officer.
9. Data Security
A Big Candy Casino data security is underpinned by industry-leading technical and organisational measures designed to prevent unauthorised access, disclosure, alteration, or destruction of your personal data.
9.1 Technical Safeguards
- 256-bit SSL/TLS encryption protects all data transmitted between your device and our servers.
- Firewalls and intrusion-detection systems monitor our network perimeter around the clock.
- End-to-end encryption is applied to sensitive financial data in transit and at rest.
- Our Random Number Generators (RNG) are independently certified by accredited testing laboratories, ensuring fair play and the integrity of your gaming data.
9.2 Organisational Safeguards
- Access to personal data is restricted on a strict need-to-know basis.
- All staff with access to user data receive regular training on data protection and information security.
- We conduct periodic security audits and vulnerability assessments.
- Data processors are vetted and bound by data-processing agreements that impose equivalent confidentiality and security obligations.
Despite these robust measures, no method of electronic transmission or data storage is 100% secure. If you suspect that your account has been compromised, please contact us immediately at [email protected].
10. Data Storage and Retention
A Big Candy Casino data storage practices comply with applicable laws and reflect the principle of data minimisation. We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by law.
| Data Category | Retention Period |
|---|---|
| Account and identification data | Duration of account plus 7 years after closure (AML/tax obligations) |
| Financial transaction records | 7 years from the date of the transaction |
| KYC documents | 5–7 years following account closure |
| Gaming activity logs | 5 years from the date of the activity |
| Communication records (chat, email) | 3 years from the date of the interaction |
| Marketing consent records | Until consent is withdrawn, then 3 years for audit purposes |
| Cookie data | Up to 24 months, depending on cookie type |
Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Our data storage infrastructure is hosted on servers that meet internationally recognised security standards.
11. Your Privacy Rights
The A Big Candy Casino privacy policy recognises and upholds the privacy rights afforded to you under the Australian Privacy Act 1988 and, where the GDPR applies, under European data-protection law. You may exercise the following privacy rights at any time by contacting us at [email protected]:
11.1 Right of Access
You have the right to request a copy of the personal data we hold about you and to obtain information about how that data is processed. We will respond to access requests within 30 days.
11.2 Right to Correction
If any personal information we hold is inaccurate, incomplete, or out of date, you have the right to request that we correct or update it. Many details can be amended directly in your account settings; for others, please contact our Data Protection Officer.
11.3 Right to Deletion ("Right to be Forgotten")
You may request the erasure of your personal data where there is no compelling reason for us to continue processing it. Please note that this right is not absolute — we may be required to retain certain data to comply with AML, KYC, or tax-reporting obligations. We will inform you of any such restrictions when we respond to your request.
11.4 Right to Restriction of Processing
In certain circumstances you may request that we limit the way we use your personal data — for example, while the accuracy of data is contested or while an objection is being considered.
11.5 Right to Data Portability
Where data processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of your personal data and to request that we transmit it directly to another controller where technically feasible.
11.6 Right to Object
You may object to data processing carried out on the basis of our legitimate interests — including profiling — at any time. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
11.7 Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing communications, use the unsubscribe link in any email or contact [email protected].
11.8 Right Not to Be Subject to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing — including profiling — where those decisions produce legal or similarly significant effects on you. If you believe such a decision has been made, please contact us and a human review will be arranged.
12. Supervisory Authority
If you are an Australian resident and believe that A Big Candy Casino has interfered with your privacy rights or failed to handle your personal information in accordance with the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Mail: GPO Box 5218, Sydney NSW 2001
We encourage you to contact us first so that we can attempt to resolve your concern directly. However, you are always entitled to approach the OAIC without first contacting us.
If you are located in the European Economic Area or the United Kingdom, you may also lodge a complaint with your local data-protection supervisory authority.
13. Data Protection Officer
A Big Candy Casino has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this privacy policy and applicable data protection laws. The DPO is your primary point of contact for any questions, concerns, or formal requests relating to the processing of your personal data.
- Email: [email protected]
- Postal address: Data Protection Officer, A Big Candy Casino, c/o Registered Office, Curaçao
- Response time: We aim to acknowledge all DPO enquiries within 5 business days and provide a full response within 30 days.
14. Changes to This Privacy Policy
We reserve the right to update this A Big Candy Casino privacy policy at any time to reflect changes in law, regulatory guidance, or our internal practices. When material changes are made, we will notify registered players by email or by displaying a prominent notice on our website. The date of the most recent revision is always displayed at the top of this page. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data. Continued use of our platform following notification of changes constitutes your acceptance of the updated terms.
15. Children's Privacy
A Big Candy Casino is strictly an adults-only platform. We do not knowingly collect personal information from anyone under the age of 18. Our registration process includes age-verification checks, and KYC procedures further confirm that all account holders are of legal gambling age in their jurisdiction. If we discover that a minor has provided us with personal data, we will take immediate steps to close the account and securely delete all associated information. If you believe a minor has registered on our platform, please notify us at [email protected] without delay.
16. Responsible Gambling and Privacy
Our responsible gambling programme requires us to process certain personal data — including gaming activity, self-exclusion requests, and limit settings — to identify players who may be experiencing difficulties. This processing is carried out in the public interest and forms part of our regulatory obligations. Players can set deposit, bet, loss, and session limits, as well as cooling-off periods of 24 hours, 48 hours, 7 days, or 30 days, and self-exclusion periods of 6 months, 1 year, 5 years, or permanently. Data relating to self-exclusion is retained for as long as the exclusion is in force, plus an additional period as required by law, to prevent re-registration by excluded players.
Frequently Asked Questions (FAQ)
What personal data does A Big Candy Casino collect when I register?
When you create an account, A Big Candy Casino collects identification data (name, date of birth, address), contact details (email and phone), and login credentials. Additional personal information such as payment details and identity documents is requested at the point of deposit or withdrawal. Our data collection is proportionate and limited to what is strictly necessary.
How does A Big Candy Casino protect my personal data?
A Big Candy Casino data security is built on 256-bit SSL/TLS encryption, enterprise-grade firewalls, and strict access controls. All staff handling user data receive regular information security training, and we conduct scheduled security audits to detect and remediate vulnerabilities. For any security concerns, contact [email protected].
Can I request deletion of my personal data?
Yes. Under the Australian Privacy Act 1988 and, where applicable, the GDPR, you have the right to request the erasure of your personal data. Submit your request to [email protected]. We will process it within 30 days, subject to any legal retention obligations (e.g., AML records). Full details are in the Your Privacy Rights section above.
What is the A Big Candy Casino cookie policy?
The A Big Candy Casino cookie policy covers four categories of cookies: essential, analytical, functional, and marketing. Essential cookies are always active as they are required for the site to function. For all other cookies, we ask for your consent via our cookie banner, and you can update your preferences at any time through the Cookie Preferences Centre in the site footer.
Does A Big Candy Casino share my data with third parties?
A Big Candy Casino never sells your personal information. We share user data only with payment processors, KYC verification partners, and regulatory authorities, and only to the extent necessary to provide our services and meet legal obligations. All third parties are contractually bound to maintain appropriate data protection standards and confidentiality.
How long does A Big Candy Casino retain my data?
A Big Candy Casino data storage periods vary by data type. Account and identification records are kept for the duration of the account plus up to 7 years after closure to satisfy AML and tax-reporting requirements. Gaming logs are retained for 5 years. Once a retention period expires, data is securely deleted or anonymised. See the full data storage table in Section 10 for details.
How do I exercise my privacy rights under this policy?
To exercise any of your privacy rights — access, correction, deletion, restriction, portability, objection, or withdrawal of consent — contact our Data Protection Officer at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. If you are unhappy with our response, you have the right to escalate to the OAIC or your local data-protection authority.
Is my financial data safe when I deposit or withdraw at A Big Candy Casino?
Absolutely. A Big Candy Casino uses 256-bit SSL/TLS encryption for all financial transactions and works exclusively with reputable, PCI-DSS-compliant payment providers. Card numbers are tokenised and never stored in full. Cryptocurrency transactions benefit from the inherent security of blockchain technology. Our data security measures meet the highest industry standards to ensure the confidentiality of your financial personal data.
This privacy policy was last reviewed and updated in 2025. For the most current version, please visit the /privacy-policy/ page on abigcandyscasino.com. If you have any further questions about A Big Candy Casino privacy practices, data protection, or information security, do not hesitate to reach out to us at [email protected] — we are committed to keeping your personal data safe and your experience on our platform fully transparent.