Privacy Policy

This Privacy Policy explains how Aud 365, operated via the website https://aud365-au.com and related review resources for Aud 365, collects, uses, discloses, and protects your personal information. It applies to all visitors to our websites, prospective and existing players, and any person who interacts with our online gambling and informational services. By using our services, you agree to the practices described in this Privacy Policy. This Privacy Policy is effective from 1 January 2026 and replaces any previous versions published on our websites.

Who We Are

OBSERVE: Identify the operator, contact channels, and scope. EXPAND: Clarify that some registration and address data are not specified and explain how users may still contact us. REFLECT: Provide transparent identity and contact information for privacy matters.

For the purposes of this Privacy Policy, references to "Aud 365", "we", "us" or "our" refer to the operator responsible for the processing of your personal information in connection with the aud365-au.com website and associated review and informational services for Aud 365.

The operator acts as the data controller for the processing described in this Privacy Policy. Certain corporate information such as the exact legal entity name, legal address and registration number are not specified in the current corporate records available to this site. We therefore provide the following confirmed contact channels for all privacy, data protection and support queries:

• Official website: https://aud365-au.com
• Support email (including privacy queries): [email protected]
• General information email: [email protected]

We have appointed an internal contact person responsible for privacy and data protection matters (Data Protection Officer or "DPO" equivalent). You may contact our privacy contact/DPO at:

• Email (preferred): [email protected] (please include "Privacy" in the subject line)
• Postal address: As our legal and mailing address are currently not specified in public records, any written correspondence should initially be requested via email so that we can provide the most appropriate and up-to-date postal details.

Regional compliance note: We target players and visitors located in Australia as an offshore online service. We also acknowledge that our gambling licence status is claimed as Curaçao-based but is unverified and should be treated as unlicensed for player risk assessment purposes. This Privacy Policy governs data processing regardless of licensing status.

What Personal Data We Collect

OBSERVE: Identify all categories of data collected. EXPAND: Include data arising from gambling behaviour, logs, cookies, and fraud checks. REFLECT: Present this categorisation clearly so users understand what is collected and why.

We collect and process various categories of personal information when you visit aud365-au.com, interact with Aud 365 content, create or manage an account with us (where applicable), or otherwise use our services.

Identity and Contact Data

• Full name, date of birth, and gender (where provided).
• Residential address, country of residence, and proof-of-address details (e.g., utility bills) when required for verification.
• Email addresses and telephone numbers you submit (including for support, marketing opt-ins, or account recovery).
• Identification documents (e.g., passport, driver's licence, national ID) for Know Your Customer (KYC) and anti-money laundering (AML) checks.

Account and Usage Data

• Username, passwords and security credentials associated with your account (hashed or otherwise secured).
• Account settings, preferences, consent records, communication choices, and support history.
• Logs of your interactions with our services, such as sign-in timestamps, actions taken, and pages visited.

Technical and Device Data

• IP address, approximate location inferred from IP, and time zone.
• Device type, operating system, browser type and version, screen resolution, and other device identifiers.
• Log data including access dates and times, referral URLs, clickstream data, and session duration.

Payment and Financial Data

• Limited payment details required to process deposits and withdrawals (e.g., masked card numbers, payment method type, transaction identifiers).
• Transaction history, including amounts, currency, payment status, dates, and related records.
• Verification data required by payment providers for fraud prevention and compliance.

Behavioural and Gambling Data

• Betting and gaming history, including games played, sessions, wagers, wins/losses, bonuses used, and gameplay patterns.
• Click behaviour, navigation paths, interactions with promotional offers, and responses to marketing campaigns.
• Indicators relevant to responsible gambling analysis, such as self-exclusion requests, cooling-off periods, and risk patterns.

Cookies and Similar Technologies

• Information collected through cookies, web beacons, pixels, tags, SDKs and similar technologies placed on your device.
• Unique identifiers associated with your browser or device to recognise repeat visits and maintain sessions.
• Analytics and advertising data, such as attribution information and aggregated statistics relating to user journeys.

Special Categories and Sensitive Data

• We generally do not seek to collect special categories of personal data (e.g., health or religious beliefs). However, information related to problem gambling communications, self-exclusion, or financial hardship may incidentally reveal sensitive aspects. Such information is treated with heightened confidentiality and used only for responsible gambling and compliance purposes.

Legal Basis for Processing

OBSERVE: Align processing with applicable legal grounds under international principles (including GDPR-style bases), adapted for Australian users. EXPAND: Clarify different bases for different activities. REFLECT: Help users understand why their data is lawfully processed.

Depending on the context, we rely on one or more of the following legal bases to process your personal information:

Consent

• We rely on your explicit consent for:
  • Sending direct marketing communications (email, SMS, push notifications) where required by law.
  • Non-essential cookies and tracking technologies used for advertising and personalised content.
  • Processing certain optional information that you voluntarily provide (e.g., feedback or survey responses not necessary for service delivery).
• You may withdraw your consent at any time as described in the "Your Rights" and "Cookies & Tracking Technologies" sections.

Performance of a Contract

• We process your personal information where it is necessary to:
  • Create, verify, and manage your user account.
  • Provide access to games, betting services, and related functionalities.
  • Process deposits, wagers, winnings, withdrawals, and account adjustments.
  • Provide customer support, resolve issues, and implement your requests.
• Without this information, we cannot enter into or fulfil our contractual relationship with you.

Compliance with Legal Obligations

• We are required to process certain data to comply with applicable laws and regulatory requirements, including those relating to:
  • Anti-money laundering (AML) and counter-terrorism financing (CTF).
  • Know Your Customer (KYC) obligations and age verification.
  • Accounting, tax, reporting obligations and record-keeping duties.
  • Responding to lawful requests from courts, law enforcement, and regulatory authorities.

Legitimate Interests

• We process data where it is necessary for our legitimate interests, provided these are not overridden by your rights and interests, including:
  • Ensuring network and information security, preventing fraud and abuse of our services.
  • Running analytics, service improvement, and business intelligence to enhance user experience.
  • Protecting our legal rights, pursuing or defending legal claims, and enforcing our Terms and Conditions.
  • Conducting responsible gambling monitoring and implementing risk controls.
• Where required, we perform a balancing test to ensure our interests do not unduly impact your privacy.

Purpose of Processing

OBSERVE: Outline why data is processed. EXPAND: Link purposes to gambling operations, analytics, marketing, and security. REFLECT: Provide transparency on how each category of data supports these purposes.

We use your personal information for the following purposes:

• Provision of Services:
  • To register and maintain your account, authenticate you, and allow you to use our websites and gambling services.
  • To process payments, credit your winnings, handle withdrawals, bonuses, and loyalty schemes.
  • To provide customer support, respond to your queries, and manage disputes.
• Website and Service Improvement:
  • To analyse usage patterns, identify technical issues, and optimise site performance for Australian and other users.
  • To develop new features, games, and content tailored to user preferences.
• Marketing and Personalisation:
  • To send promotional communications (where lawful) about our services, bonuses, offers, and news relevant to Aud 365.
  • To personalise content, recommendations, and promotional banners based on your interests and behaviour.
• Analytics and Statistics:
  • To generate aggregated statistics for business reporting and strategy (e.g., user engagement metrics, campaign performance).
  • To measure the effectiveness of our marketing channels and affiliates.
• Fraud Prevention and Security:
  • To detect, investigate, and prevent fraud, money laundering, bonus abuse, unauthorised access, and other misuse.
  • To secure our systems, monitor for suspicious activities, and enforce our Terms and Conditions.
• Responsible Gambling:
  • To monitor gameplay behaviours and implement responsible gambling tools (e.g., limits, self-exclusion) where appropriate.
  • To communicate with you about safer gambling and support options when risk indicators appear.
• Legal and Regulatory Compliance:
  • To meet our obligations under applicable laws (including AML/CTF, record-keeping, and taxation).
  • To cooperate with competent authorities and comply with lawful requests.

Disclosure & Sharing

OBSERVE: Identify categories of recipients and conditions for sharing. EXPAND: Include payment providers, technical vendors, regulators, affiliates, and ad networks. REFLECT: Ensure users know that data is shared only as necessary and under protections.

We do not sell your personal information. We may share your data with carefully selected third parties, strictly for the purposes outlined in this Privacy Policy and subject to appropriate safeguards.

Service Providers and Processors

• Payment processors and financial institutions: To process your deposits, withdrawals, and other financial transactions.
• IT, hosting, and infrastructure providers: To host our websites, databases, and related services.
• Customer support and communication tools: To manage support tickets, live chat, and email delivery.
• Analytics and security vendors: To provide website analytics, security monitoring, and fraud detection.

Regulators, Authorities, and Legal Recipients

• Law enforcement agencies, courts, regulators, and government bodies (including those in Curaçao or other relevant jurisdictions) where we are legally compelled to disclose information, or where disclosure is necessary to protect our rights or the rights of others.
• Professional advisers such as lawyers, auditors, or consultants, under confidentiality obligations.

Affiliates and Marketing Partners

• Affiliated marketing partners, advertising networks, and tracking providers, to:
  • Measure the performance of affiliate links and campaigns.
  • Attribute traffic and conversions to the correct partner.
  • Serve targeted advertising where you have provided the necessary consent.

Corporate Transactions

• In connection with any merger, acquisition, restructuring, sale of assets, or similar transaction involving Aud 365, your information may be disclosed to relevant parties under confidentiality obligations and, where necessary, with appropriate notice to you.

Aggregated and De-Identified Data

• We may share aggregated or de-identified statistics (which do not identify you directly) with partners, advertisers, or for public reporting, for example, summarised data about usage trends.

International Transfers

OBSERVE: Recognise offshore status and global processing. EXPAND: Explain that data may be transferred outside Australia, including to the EU/EEA and Curaçao-type jurisdictions. REFLECT: Describe safeguards (contractual and organisational) used to protect data in such transfers.

As an offshore online gambling and informational service targeting Australian users, we may process and store your personal information in countries outside your country of residence, including:

• Member States of the European Economic Area (EEA) and the United Kingdom.
• Jurisdictions associated with gambling operations such as Curaçao.
• Other locations where our service providers and infrastructure are based (including the United States, Asia-Pacific regions, or other third countries).

Where we transfer your data internationally, we take appropriate steps to ensure an adequate level of protection consistent with this Privacy Policy, including:

• Using standard contractual clauses or equivalent contractual protections where required.
• Imposing strict confidentiality, security and data protection obligations on service providers.
• Limiting access to your information to persons with a legitimate need to know for the purposes described above.

By using our services, you acknowledge that your data may be processed in countries which may have different data protection laws than your home country but commit to ensuring that your personal information remains protected to a comparable standard.

Data Retention

OBSERVE: Determine retention periods for each data category. EXPAND: Tie retention to AML/CTF, dispute limitation, and operational needs. REFLECT: Clarify deletion and anonymisation criteria.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, to meet legal and regulatory obligations, and to resolve disputes. Retention periods may vary by data category and jurisdictional requirements.

• Account and Identification Data: Typically kept for the duration of your account and for up to 5 - 7 years after account closure, in line with AML/CTF, KYC and record-keeping obligations.
• Transaction and Financial Records: Retained for at least 7 years from the date of the last transaction or as otherwise required by applicable tax and financial legislation.
• Behavioural and Gambling Data: Stored while your account is active and, thereafter, generally for 5 years to support responsible gambling assessments, dispute resolution and fraud investigations.
• Marketing Data: Retained until you withdraw consent or object to processing, after which we will promptly cease marketing communications and either delete or anonymise related data, save for minimal records to maintain suppression lists.
• Technical Logs and Security Data: Typically stored for 6 - 24 months depending on security, audit and operational needs.

When data is no longer required, we will either:

• Securely delete or destroy it; or
• Irreversibly anonymise it so that it can no longer be associated with you.

If you exercise your rights to deletion or objection, we will also review whether we must continue to retain certain data to comply with our legal obligations or protect our legitimate interests (for example, in case of ongoing disputes or investigations).

Your Rights

OBSERVE: Recognise that users expect rights aligned with leading data protection standards (e.g., GDPR) and the mention of Mexican law in the brief, even though our primary audience is in Australia. EXPAND: Present a broad, rights-based framework: access, rectification, deletion, restriction, objection, portability, and marketing consent withdrawal. REFLECT: Describe clear procedures, timelines (30 days), and free-of-charge guarantees while noting that specific rights may depend on local law.

Regardless of your location, we aim to align our practices with robust international privacy standards, including principles similar to those found in the EU General Data Protection Regulation (GDPR) and modern Latin American privacy frameworks (such as Mexican data protection regulations), to the extent compatible with applicable Australian and offshore laws.

Key Rights You May Exercise

• Right of Access: You may request confirmation as to whether we process your personal data and obtain a copy of such data, together with information about how we use it.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information we hold about you.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal information where:
  • It is no longer necessary for the purposes for which it was collected; or
  • You have withdrawn consent (where consent was the legal basis); or
  • You have successfully objected to our legitimate interest-based processing; or
  • We are required to delete the data to comply with a legal obligation.
  We may still need to retain certain records where required by AML/CTF or other laws.
• Right to Restrict Processing: You may ask us to suspend processing of your information (other than storage) in certain circumstances, for example while we verify its accuracy or assess an objection.
• Right to Object: You may object at any time to:
  • Processing based on our legitimate interests, on grounds relating to your particular situation; and
  • Processing for direct marketing, in which case we will stop such marketing.
• Right to Data Portability: Where technically feasible and legally required, you may receive your personal data in a structured, commonly used, machine-readable format and request that we transmit it to another controller.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights

1. Submit a Request: Contact us via [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise.
2. Verification: We may request additional information to verify your identity (for example, confirming account details or asking you to reply from your registered email) to protect your information from unauthorised access.
3. Response Time: We aim to respond to your request within 30 days of receipt. For complex or multiple requests, this period may be extended by an additional 30 days, in which case we will inform you of the extension and reasons.
4. Fees: We handle rights requests free of charge. However, where requests are manifestly unfounded or excessive (for example, repeated requests), we may charge a reasonable fee or refuse to act, as permitted by applicable law.

Please note that the availability and scope of certain rights can vary depending on the law applicable to your situation. We will always explain any lawful basis for refusing or limiting a request.

Cookies & Tracking Technologies

OBSERVE: Identify cookie types and purposes. EXPAND: Describe management options and their implications. REFLECT: Provide users clear choices and references back to consent and marketing sections.

We use cookies and similar technologies on aud365-au.com and related services for Aud 365 to provide, secure and improve our services, as well as to support marketing and analytics.

Types of Cookies We Use

• Strictly Necessary (Functional) Cookies:
  • Required for the operation of our websites (e.g., to log you in, maintain sessions, and remember selections during navigation).
  • These cookies cannot be switched off via our systems and are generally set only in response to your actions.
• Preference Cookies:
  • Remember your settings and choices (e.g., language, region, display options) to provide a more personalised experience.
• Analytics and Performance Cookies:
  • Collect aggregated, pseudonymous information about how visitors use our sites (pages visited, time spent, error messages).
  • Help us improve site performance, content relevance, and user experience.
• Advertising and Tracking Cookies (Third-Party):
  • Set by us and by third-party partners (e.g., advertising networks, affiliate tracking providers) to deliver and measure personalised ads and campaigns.
  • Used to understand the effectiveness of marketing efforts and to ensure that referral partners receive correct attribution.

Cookie Duration

• Session Cookies: Temporary cookies that expire when you close your browser.
• Persistent Cookies: Remain on your device for a period specified in the cookie (from a few minutes to several months or longer) or until deleted by you.

Managing Cookies

• You can manage or disable cookies through your browser settings. The method varies by browser but typically can be found under "Settings", "Privacy", or "Security".
• For some cookies, we may provide an internal preference or consent panel on our website to allow you to opt in or out of non-essential cookies.
• If you block or delete certain cookies (particularly strictly necessary ones), some features of our websites may not function correctly, and your experience may be affected.

Data Security

OBSERVE: Recognise the sensitivity of gambling, financial, and identity data. EXPAND: Detail technical, organisational, and procedural safeguards. REFLECT: Emphasise ongoing improvement and incident response while avoiding overcommitting to certifications not actually held.

We implement a range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

Technical Measures

• Encryption in Transit: Data transmitted between your browser and our servers is protected using industry-standard Transport Layer Security (TLS 1.2 or higher), where supported.
• Encryption at Rest: Sensitive data (such as passwords and selected financial or identification details) is stored using hashing, tokenisation, or encryption techniques appropriate to the risk level.
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis using role-based access controls and authentication mechanisms.
• System Hardening and Monitoring: We maintain firewalls, intrusion detection and prevention systems, and log monitoring tools to help identify and mitigate threats.

Organisational and Procedural Measures

• Policies and Training: Staff with access to personal data receive training on data protection, confidentiality, and responsible handling of gambling-related information.
• Vendor Management: We require our service providers to maintain appropriate security standards, including contractual obligations around data protection and incident reporting.
• Incident Response: We maintain procedures for responding to potential personal data breaches, including investigation, mitigation, and, where required, notification to affected individuals and relevant authorities.

While we strive to use commercially reasonable protections and may align with recognised security best practices and standards, no system can be guaranteed to be 100% secure. You also play an important role in keeping your account secure (for example, by choosing strong passwords, keeping them confidential, and logging out after each session).

Complaints & Contacts

OBSERVE: Provide clear contact paths and escalation options. EXPAND: Describe internal handling, timelines, and reference to supervisory bodies. REFLECT: Help users understand how to seek redress if they are dissatisfied.

If you have questions, concerns, or complaints about how we handle your personal information, we encourage you to contact us first so we can attempt to resolve the issue directly.

How to Contact Us

• Primary contact for privacy and complaints: [email protected]
• General enquiries: [email protected]

Internal Complaint Procedure

1. Submit Your Complaint: Send us an email describing your concerns, including any relevant account information and supporting documentation.
2. Acknowledgement: We aim to acknowledge receipt of your complaint within 5 business days.
3. Investigation: We will review your complaint, consult relevant internal teams, and may ask you for additional information if necessary.
4. Response: We strive to provide a substantive response within 30 days of receiving your complete complaint. If we cannot respond within this timeframe due to complexity or volume, we will inform you of the delay and provide an updated timeline.

Escalation to Supervisory Authorities

If you are not satisfied with our response or believe that we are not handling your personal information in a lawful manner, you may have the right to lodge a complaint with a competent data protection or privacy authority in your jurisdiction. Depending on your location, this may include:

• Australia: Office of the Australian Information Commissioner (OAIC)
  • Website: https://www.oaic.gov.au
• European Union (if applicable): Your local EU Data Protection Authority (contact details available via the European Data Protection Board).
• Other jurisdictions (including Mexico where applicable): Local data protection authorities or consumer protection agencies as provided under local law.

We will cooperate with relevant supervisory authorities and follow their lawful directions in relation to any investigation concerning our processing of personal data.

Updates

OBSERVE: Recognise that privacy practices, laws, and operations evolve. EXPAND: Specify how users will be informed, including notice periods for major changes. REFLECT: Provide transparency through versioning and change descriptions.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. When we make material changes, we will take appropriate steps to notify you and give you the opportunity to review the updated policy.

Notification Methods

• Publishing the updated Privacy Policy on https://aud365-au.com with a revised "Last updated" date.
• Displaying prominent banners or notices on our website and/or within your account area, where applicable.
• Sending email notifications to the email address associated with your account, particularly for significant changes affecting your rights or how we use your data.

Advance Notice for Significant Changes

• For material changes that significantly affect your rights or our use of your personal data (for example, expanding categories of data collected or changing key purposes of processing), we will endeavour to provide at least 30 days' advance notice before the changes take effect, unless immediate implementation is required by law or for security reasons.
• During this notice period, you may review the changes, ask questions, and, if you do not agree, you may choose to discontinue using our services and request account closure.

Version Control

• Last updated: January 2026
• Material changes since prior versions may include:
  • Clarification of our offshore operational status for Australian players.
  • Enhanced details on data categories, retention, and international transfers.
  • Expanded explanation of user rights, complaint procedures, and security measures.

Your continued use of our websites and services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.