Privacy Policy

To provide an online casino service, Big Candy Casino may collect information that identifies you, relates to your account or helps us operate and protect the website. The information we handle depends on how you use the service, the features available to you and the choices you make. You may provide some information directly, while other information may be collected automatically when you use the website.

Account and personal details

This can include information used to create and manage an account, such as your name, date of birth, contact details, username, account preferences and records of communications with support. We may also record information about your activity on the account, including responsible gaming settings, account status, requests and other choices made while using the service.

Verification and security information

Where required, we may request information or documents to confirm identity, age, account ownership or eligibility to use the service. This may include verification documents and information used for customer due diligence, fraud prevention, financial crime checks, account security and the protection of players and the website. We handle these materials with care and limit access to people or service providers who need them for legitimate purposes.

Payment and transaction records

We may collect records connected with deposits, withdrawals, wagers, winnings, refunds and other account transactions. Depending on the payment method, this may include limited payment details, transaction references, amounts, dates, status information and information needed to investigate a payment or prevent unauthorised activity. Payment providers may process payment information under their own privacy terms. We do not need to collect or retain every detail held by a payment provider.

Device, usage and cookie data

When you visit or use the website, we may receive technical and usage information such as your IP address, browser type, device details, operating system, approximate location, pages viewed, access times, referring website and interactions with website features. We may use cookies and similar technologies to remember preferences, keep the service working, understand website performance and support security. You can manage or restrict cookies through your browser settings, although some website functions may not work as intended if cookies are disabled.

We use personal information for purposes connected with operating Big Candy Casino and providing a safe, reliable service. We seek to use information in a fair and proportionate way and do not use it for purposes that are incompatible with the reason it was collected, unless permitted or required by law.

• Creating, maintaining and administering your player account.
• Providing casino features, processing account activity and keeping relevant service records.
• Processing deposits, withdrawals, refunds and other transactions through available payment methods.
• Confirming identity, age and account ownership where verification is required.
• Detecting, preventing and investigating fraud, money laundering, unauthorised access, collusion, abuse and other harmful or unlawful activity.
• Protecting the security, availability and integrity of the website, systems, players and business operations.
• Providing customer support, responding to enquiries and investigating complaints or account issues.
• Communicating with you about your account, service changes, security matters, transactions and other important operational information.
• Sending marketing or promotional communications where permitted and where you have provided the required consent or otherwise have a lawful basis to receive them.
• Understanding how the website is used, improving its content and performance, and testing or developing features.
• Meeting legal, regulatory, tax, accounting, auditing, dispute resolution and other compliance obligations that apply to the service.
• Establishing, exercising or defending legal rights and responding to lawful requests from courts, authorities or other authorised bodies.

Where processing depends on consent, you may withdraw that consent at any time. Withdrawing consent does not affect processing that took place before withdrawal and may not stop processing that is necessary for account operation, security, legal compliance or other legitimate purposes. If you unsubscribe from marketing, you may still receive essential service messages, such as account, transaction or security notifications.

Who may receive information

Personal information may be shared where reasonably necessary to provide and protect the service. This may include technology providers, hosting and security providers, payment and verification providers, customer support providers, professional advisers, auditors and other contractors that assist with website operations. These providers should use information only for authorised purposes and in accordance with appropriate confidentiality and security arrangements.

Information may also be disclosed where required or permitted by law, to protect rights and safety, to investigate suspected wrongdoing, or as part of a business change such as a restructuring, sale or transfer of relevant services. We do not treat the sharing of information as permission for unrelated third-party marketing. Where information is handled outside Australia, the relevant provider’s location and privacy practices may also apply.

Security measures

We use reasonable administrative, technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration and disclosure. Measures may include access controls, authentication processes, monitoring, secure transmission and restricted handling of sensitive records. No website, network or electronic storage method can be guaranteed to be completely secure. You should keep your passwords and account access details confidential and contact support promptly if you suspect unauthorised access.

How long information is kept

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, to manage an ongoing relationship, resolve issues, protect the service and meet our obligations. Some account, transaction, identity and security records must be kept for a period required by law even after an account is closed. When information is no longer required, it may be securely deleted, anonymised or otherwise handled in accordance with applicable requirements.

Depending on your circumstances and applicable privacy requirements, you may have rights concerning the personal information we hold about you. These rights can be subject to reasonable exceptions, including where access would affect another person’s privacy, compromise security or conflict with a legal obligation.

• Access: ask for access to personal information held about you and information about how it is used.
• Correction: ask us to correct information that is inaccurate, incomplete, out of date or misleading.
• Deletion: ask for personal information to be deleted where it is no longer needed or where applicable requirements allow deletion. Some records cannot be deleted immediately because they must be retained for legal, security, transaction or dispute purposes.
• Marketing consent: withdraw consent to marketing communications or ask for your marketing preferences to be changed. You can also use an unsubscribe option included in a marketing message where available.

How to make a privacy request

To exercise your rights, ask a privacy question or request access, correction or deletion, contact support@bigcandycasino.best. Please describe your request clearly and include enough information for us to identify the relevant account. We may need to verify your identity before responding, particularly where the request involves sensitive information or account security. We may ask for additional details if they are reasonably necessary to locate records or understand your request.

We aim to respond within a reasonable period and will explain if a request cannot be fully completed or if an exception applies. If information has been shared with a service provider, we may need to coordinate with that provider. We may retain a record of your request and our response for accountability, security and compliance purposes.

Updates to this policy

This Privacy Policy may be updated from time to time to reflect changes to the service, technology, privacy practices or applicable requirements. The updated version will be made available on the website with a revised effective date where appropriate. We encourage you to review this page periodically. If a change is significant, we may provide additional notice through the website or by another suitable communication channel.