Wicked Pokies Privacy Policy

Last updated: June 8, 2026

Wicked Pokies processes personal data in accordance with offshore online casino privacy standards and international compliance frameworks. This policy explains how information is collected, used, shared and protected when players interact with the platform. All data processing reflects operational requirements, legal obligations and user consent where applicable.

This privacy policy applies to all players who access the casino through desktop, mobile browser or installable web app channels. It covers account registration, gameplay activity, payment processing, identity verification and promotional engagement. Players should review this document before submitting personal information or using services.

Interpretation and Definitions

Clear terminology ensures players understand data processing. This section defines key terms used throughout the policy and explains how they relate to real interactions on the platform.

Interpretation rules apply to language and references. Singular includes plural, and vice versa. References to gender include all genders. Headings exist for convenience only and do not affect the meaning of clauses. Where a term is capitalised, it carries the specific definition provided below.

Defined Terms

Key terms connect to real user actions. Account means the player profile created after registration, used to manage funds, gameplay and promotional offers. Company refers to the offshore online casino operator under placeholder WP Holdings International 2026. Device means any hardware used to access the platform, including desktop computers, smartphones, tablets and operating systems such as Windows, macOS, Android or iOS. Personal Data includes any information that identifies a natural person directly or indirectly. Service refers to the casino website, web app and all associated gameplay, promotional and support functions.

User and Service Definitions

You means the player or account holder interacting with the platform. We, Us and Our refer to WickedPokies and the operating entity. Website includes the domain and all subdomains, pages and app-style install interfaces. Cookies are small files stored on your device to enable functionality, analytics and personalisation. Consent means any freely given, specific, informed and unambiguous indication of your agreement to processing.

Personal Data We Collect

Wicked Pokies collects multiple data types during registration, gameplay and verification. This section describes what information is gathered, when it is collected and why it is necessary for platform operation.

Data collection occurs during account creation, deposit activity, game sessions, promotional claims and withdrawal requests. Some data is provided manually by the player, while other data is captured automatically through device interaction. All collection serves operational, security or compliance purposes.

Identity and Contact Data

Identity data includes full name, date of birth, nationality, gender and government-issued identification documents. During KYC verification, Wicked Pokies may collect passport copies, driver licence scans, national photo ID or Medicare-linked identity proof to confirm age and identity. This information validates that players meet the 18+ age requirement and satisfy anti-money-laundering obligations.

Contact data comprises email address, phone number, residential address and proof-of-address documents. A utility bill, bank statement, council letter or mobile bill dated within 90 days may be requested to confirm address accuracy. Contact data enables account recovery, payment ownership verification and regulatory communication.

Technical and Device Data

Technical data captures IP address, browser type, operating system, device identifier, screen resolution and language settings. This information is logged automatically when a player visits the site or launches a game. It supports fraud detection, duplicate account screening, VPN detection and geographic restriction enforcement.

Usage data includes session timestamps, game titles played, bet sizes, win/loss records, bonus claim history and navigation patterns. This data helps the platform monitor player activity, detect software exploitation, enforce bonus max-bet rules and comply with audit requirements. It also informs game popularity shelves such as On Fire Right Now and Top Picks.

Financial and Transaction Data

Financial data includes payment method type, card details, e-wallet identifiers, crypto wallet addresses, transaction amounts, deposit timestamps and withdrawal requests. Wicked Pokies stores masked card details and payment ownership records to verify that funds originate from the account holder. Wire transfer details, Bitcoin addresses and Tether wallet screenshots may be collected during AML checks or large transaction reviews.

Source-of-funds documentation may be requested for deposits above AU$1,000 or suspicious activity. This includes bank statements, payslips, crypto transaction records or business sale documents. Enhanced source-of-wealth checks may apply during large withdrawal reviews exceeding AU$5,000 weekly limits.

How We Use Personal Data

Personal data processing supports platform operation, compliance and player engagement. This section explains the purposes behind data usage and connects each category to real scenarios.

Data usage spans service provision, identity verification, payment processing, fraud prevention, marketing delivery and legal compliance. Each use case reflects operational necessity, consent or legitimate interests. Players should understand how their data powers the casino experience.

Service Provision and Account Management

Wicked Pokies processes identity and contact data to create and maintain player accounts. Registration requires name, email, date of birth and address to generate a profile, assign credentials and enable login. Account data supports balance tracking, game history storage, promotional coupon application and loyalty tier assignment.

Payment data is processed to execute deposits and withdrawals. Card details enable Visa, Mastercard and American Express transactions, while crypto wallet addresses facilitate Bitcoin, Litecoin, Tether and Ethereum transfers. Transaction records ensure accurate balance updates, bonus eligibility checks and pending withdrawal management.

Analytics and Platform Improvement

Usage data informs game performance analysis, lobby optimisation and promotional effectiveness. Wicked Pokies tracks which pokies attract the most sessions, which bonuses convert best and which user journeys lead to deposit activity. This analysis shapes game selection, bonus design and interface improvements.

Technical data supports error detection, server load balancing and mobile compatibility testing. Device and browser information helps developers optimise the web app install flow for Android and iOS users. Session logs identify gameplay interruptions, payment failures and support ticket patterns.

Marketing and Promotional Engagement

Contact data enables delivery of promotional emails, bonus codes and VIP offers. Players who opt in receive daily promo codes such as ESCAPE-50, WEEKEND-60 and BOOST-100, along with Wicked Wheel spin reminders and Boomerang cashback notifications. Marketing data includes coupon redemption history, preferred game categories and deposit frequency.

Personalised offers rely on gameplay activity. VIP tiers—Bronze, Silver, Gold and Black—are assigned based on clean deposit volume and wagering turnover. High rollers receive personal host contact, VIP Monthly Boost access and turbocharged comp point multipliers. All marketing respects unsubscribe requests and consent preferences.

Legal Compliance and Fraud Prevention

KYC documents satisfy regulatory obligations under the offshore licence framework. First withdrawal requests, 90-day inactivity, duplicate account signals and bonus abuse suspicion trigger identity verification. AML checks include payment ownership confirmation, third-party payment detection, chargeback monitoring and source-of-funds review.

Fraud prevention measures analyse IP addresses, device fingerprints and session patterns. Shared IP addresses, VPN usage, proxy servers and location masking may prompt security reviews. Duplicate accounts, false KYC submissions, collusion signals and bot usage result in account restriction, bonus forfeiture or permanent closure.

Legal Basis for Processing

Wicked Pokies relies on multiple legal grounds to process personal data. This section clarifies when each basis applies and connects it to real platform scenarios.

Legal basis determines whether data processing is lawful. Four primary grounds apply: consent, contractual necessity, legal obligation and legitimate interests. Players should understand which basis governs each data use.

Consent and Voluntary Submission

Consent applies when players voluntarily opt in to marketing emails, promotional SMS messages or personalised bonus offers. During registration, players tick checkboxes to confirm they agree to receive communications. Consent is freely given, specific and revocable at any time through account settings or unsubscribe links.

Bonus claims also rely on consent. Players enter coupon codes such as WICKED, WELCOME or POKIES20 to activate welcome matches and free spins. By redeeming a code, players consent to the associated wagering requirements, max bet limits and game restrictions.

Contractual Necessity and Service Delivery

Contractual necessity governs account creation, deposit processing, game access and withdrawal execution. Without processing identity, contact and payment data, Wicked Pokies cannot deliver casino services. Account balance updates, game RTP calculations, bonus application and payout processing all require data handling.

KYC verification during first withdrawal reflects contractual necessity. Players agree to identity checks when accepting terms at registration. Failure to provide valid documents prevents withdrawal processing, as the platform cannot release funds without confirming account ownership.

Legal Obligation and Regulatory Compliance

Legal obligation applies to AML checks, underage prevention, fraud reporting and licence compliance. Offshore operators must verify player identity, detect suspicious transactions and maintain audit trails. Data retention for compliance purposes extends beyond account closure, as regulators may require historical records during audits.

Source-of-funds documentation satisfies anti-money-laundering obligations. When a player deposits over AU$1,000 or exhibits unusual transaction patterns, the casino must investigate fund origins. Legal obligation overrides player objections in these cases.

Legitimate Interests and Platform Security

Legitimate interests cover fraud prevention, duplicate account detection, bonus abuse control and technical security. Wicked Pokies processes IP addresses, device identifiers and session logs to protect the platform and player community. These measures prevent collusion, bot exploitation and account hacking.

Marketing to existing players also reflects legitimate interests. Sending bonus codes to deposited accounts supports customer retention without requiring fresh consent for each message. Players retain the right to object and unsubscribe.

Data Sharing and Disclosure

Wicked Pokies shares personal data with third parties to deliver services, comply with laws and protect platform integrity. This section explains who receives data, why sharing occurs and under what conditions.

Data is not sold to marketing agencies, data brokers or unrelated commercial entities. All sharing serves operational, compliance or legal purposes. Players should understand when their information leaves the platform.

Service Providers and Technical Partners

Payment processors handle deposit and withdrawal transactions. Visa, Mastercard, American Express, Bitcoin, Litecoin, Tether and wire transfer providers receive payment details to execute transactions. Card processors access masked card numbers, expiry dates and CVV codes during authorisation. Crypto gateways receive wallet addresses and transaction IDs to confirm blockchain transfers.

Game providers such as SpinLogic Gaming, RTG and CDS deliver casino software. These suppliers process gameplay data, session logs and RTP calculations. Technical partners hosting the platform access server logs, device data and session activity to maintain uptime and performance.

Affiliates and Marketing Networks

Affiliate partners who refer players may receive commission data tied to player activity. This includes deposit volume, wagering turnover and bonus redemption rates. Personal identity is not disclosed, but anonymised or aggregated data may confirm referral success.

Marketing platforms such as email delivery services, SMS gateways and push notification providers process contact data to send promotional messages. These vendors operate under data processing agreements and cannot use player information for independent purposes.

Regulators and Legal Authorities

Regulatory bodies overseeing the Curacao licence 8048/JAZ may request compliance data, audit logs or player records. Wicked Pokies discloses identity documents, transaction histories, KYC files and AML reports when legally required. Regulatory requests override player objections or deletion requests.

Law enforcement agencies in sanctioned or restricted jurisdictions may compel disclosure during investigations. Fraud inquiries, money laundering probes or underage gambling reports may trigger data sharing. Legal obligation justifies these disclosures.

Business Transfers and Corporate Events

During mergers, acquisitions or asset sales, player data may transfer to successor entities. The new operator inherits privacy obligations and must continue protecting personal data. Players will be notified if ownership changes affect data handling practices.

Data Retention and Deletion

Wicked Pokies retains personal data for defined periods based on operational, legal and compliance needs. This section explains how long data is stored and when deletion occurs.

Retention balances service continuity, legal obligations and player rights. Active accounts require ongoing data storage, while closed accounts follow deletion schedules. Regulatory requirements may override standard timelines.

Retention Periods by Data Type

Identity and KYC documents are retained for seven years after account closure to satisfy AML obligations and audit requirements. Passport scans, driver licence copies, proof-of-address bills and payment ownership screenshots remain archived until regulatory retention periods expire. This ensures compliance with offshore licence conditions and investigation support.

Transaction records persist for five years after the last account activity. Deposit logs, withdrawal histories, bet records, win/loss statements and bonus redemption data support financial audits, dispute resolution and tax reporting. Players cannot request deletion while regulatory retention applies.

Marketing data is deleted within 90 days of account closure or unsubscribe requests. Email addresses, phone numbers and promotional preferences are purged once consent is withdrawn. However, audit trails showing that consent existed remain archived for compliance purposes.

Criteria for Storage Duration

Retention criteria include contractual obligations, legal requirements, legitimate interests and player consent. Active accounts retain data indefinitely to support gameplay, deposits and withdrawals. Inactive accounts triggered by 90-day inactivity may face KYC re-verification before reactivation.

Security logs such as IP addresses, device fingerprints and fraud signals persist for three years to detect duplicate accounts, bonus abuse patterns and collusion networks. These records protect the player community and platform integrity.

Deletion Rules and Anonymisation

Deletion occurs automatically after retention periods expire, or upon player request where legally permissible. Personal identifiers such as name, email and address are purged, while aggregated or anonymised data may remain for statistical analysis. Anonymised records cannot identify individuals and fall outside privacy protections.

Players may request deletion by contacting support via email at support@wickedpokies.com or live chat. Requests are processed within 30 days, subject to regulatory exceptions. Wicked Pokies confirms deletion through email notification.

Your Privacy Rights

Players hold specific rights over their personal data. This section explains how to exercise these rights and what limitations apply.

Rights empower players to access, correct, delete or restrict data processing. Each right connects to real actions players can take through support channels. Understanding these rights helps players maintain control over their information.

Access and Data Portability

Players may request a copy of all personal data held by Wicked Pokies. Access requests should be submitted via email to support@wickedpokies.com with the subject line “Data Access Request.” The casino provides identity data, contact records, transaction histories, KYC documents, bonus activity and session logs in portable format within 30 days.

Data portability allows players to receive their information in structured, machine-readable format such as CSV or PDF. This right applies to data processed under consent or contractual necessity. Players may transfer data to another casino or service provider, though technical compatibility varies.

Rectification and Correction

Players who identify inaccurate or incomplete data may request corrections. Name misspellings, outdated addresses, incorrect phone numbers or expired payment methods can be updated through account settings or support requests. Rectification ensures profile accuracy for KYC verification and withdrawal processing.

Correction requests trigger verification checks. Players may need to provide updated proof-of-address documents or identity scans to confirm new information. Rectification is completed within 14 days once verification clears.

Erasure and Right to Be Forgotten

Players may request account closure and data deletion under certain conditions. Erasure is permitted after account closure, provided no regulatory retention obligations apply. Outstanding balances, pending withdrawals, active bonuses or unresolved disputes prevent immediate deletion.

Erasure requests should include account username, registered email and confirmation of closure intent. Wicked Pokies processes deletion within 30 days, excluding data subject to legal retention. Anonymised records used for statistics remain after deletion.

Restriction and Objection

Players may restrict processing if data accuracy is contested, processing is unlawful but deletion is not desired, or regulatory retention applies but processing is no longer needed. Restricted data is stored but not actively used until disputes resolve.

Players may object to marketing communications, automated decision-making and profiling for personalised offers. Objections are honoured within seven days. However, players cannot object to processing required for service delivery, such as payment processing or KYC verification.

Security Measures and Data Protection

Wicked Pokies implements technical and organisational safeguards to protect personal data. This section explains how security measures reduce risks and limit unauthorised access.

Security is not absolute, but multiple layers reduce exposure. Encryption, access controls and monitoring systems protect data during transmission, storage and processing. Players should understand both protections and limitations.

Encryption and Secure Transmission

All data transmitted between player devices and Wicked Pokies servers uses SSL/TLS encryption. Login credentials, payment details and KYC documents travel through encrypted channels to prevent interception. HTTPS protocol ensures browser-to-server security for desktop, mobile and app-style install sessions.

Stored data is encrypted at rest. Identity documents, payment records and KYC files reside in encrypted databases accessible only to authorised personnel. Encryption keys are rotated periodically and stored separately from encrypted data.

Access Control and Internal Permissions

Internal access follows role-based permissions. Customer support staff access contact data and account balances but cannot view full payment details. Compliance officers review KYC documents and AML reports. Technical administrators manage servers but do not access player identities without audit trails.

Two-factor authentication protects employee accounts. Unauthorised access attempts trigger alerts. Access logs are monitored for suspicious patterns, and terminated employees lose credentials immediately.

Fraud Prevention and Monitoring Systems

Automated systems detect duplicate accounts, VPN usage, bot activity and collusion signals. IP address monitoring flags shared devices or location masking. Device fingerprinting identifies hardware reuse across multiple accounts. Abnormal bet patterns, bonus abuse and max-bet breaches trigger manual reviews.

Withdrawal fraud controls include payment ownership verification, first withdrawal KYC checks and large transaction reviews. Players withdrawing over AU$1,000 for the first time or AU$5,000 weekly face enhanced AML screening. Source-of-funds documentation may be required.

Limitations of Security Systems

No system guarantees absolute security. Data breaches, hacking attempts and social engineering attacks present risks despite safeguards. Wicked Pokies cannot protect data transmitted through unsecured networks, compromised devices or phishing scams targeting players.

Players share responsibility by securing account credentials, avoiding password reuse and enabling email account protection. Reporting suspicious activity promptly helps limit damage.

Cookies and Tracking Technologies

Wicked Pokies uses cookies and similar technologies to enhance functionality, personalisation and analytics. This section explains cookie types, purposes and player controls.

Cookies are small text files stored on devices during site visits. They enable session persistence, login management and preference storage. Players should understand how cookies affect their experience and how to manage them.

Cookie Categories and Purposes

The table below summarises cookie usage:

Essential cookies cannot be disabled without breaking functionality. Analytics and marketing cookies may be controlled through browser settings or cookie consent banners where applicable.

Tracking Technologies Beyond Cookies

Pixel tags and web beacons track email opens and promotional engagement. These invisible images embedded in marketing emails confirm delivery and interaction. Session replay tools may record anonymised user journeys to identify usability issues.

Device fingerprinting combines browser type, screen resolution, installed fonts and plugin data to generate unique identifiers. This technology detects duplicate accounts and VPN usage even when cookies are cleared.

User Controls and Browser Settings

Players may delete cookies through browser settings. Chrome, Firefox, Safari and Edge offer cookie management tools under privacy menus. Clearing cookies logs players out, resets preferences and removes marketing trackers.

Browser-level controls include blocking third-party cookies, enabling Do Not Track signals and using private/incognito modes. However, these settings may disable game functionality, payment processing and login persistence. Wicked Pokies cannot guarantee full site operation if essential cookies are blocked.

Third-Party Links and External Services

Wicked Pokies may link to external websites, payment processors and game providers. This section clarifies responsibility boundaries when players navigate away from the platform.

Third-party sites operate independently with separate privacy policies. Wicked Pokies is not responsible for external data practices, security breaches or policy changes. Players should review third-party policies before submitting information.

External Website Disclaimer

Links to payment processors, game provider sites, responsible gambling organisations and affiliate partners appear in footers, support articles and promotional emails. Clicking these links transfers control to external domains. Wicked Pokies does not monitor, endorse or guarantee the privacy practices of third parties.

Game providers such as SpinLogic Gaming and RTG may collect gameplay data, session logs and device information when games load. These providers operate under independent terms and privacy frameworks. Players accessing games consent to provider data collection.

Payment Processor and Crypto Gateway Policies

Visa, Mastercard, American Express, Bitcoin exchanges, Tether wallets and wire transfer banks process payment data under their own policies. Wicked Pokies transmits transaction details to these processors but does not control how they store, share or protect information. Players should review processor terms before depositing.

Crypto transactions involve blockchain transparency. Bitcoin, Litecoin and Tether addresses are publicly visible on distributed ledgers. Blockchain data is permanent and cannot be deleted. Players using crypto wallets should understand that transaction histories are decentralised and outside Wicked Pokies control.

Children and Underage Protection

Wicked Pokies enforces strict age restrictions to prevent underage gambling. This section explains how the platform protects minors and responds to violations.

The minimum age for account registration and gameplay is 18 years in Australia. Players must confirm they meet this requirement during registration. Underage accounts are closed immediately upon detection.

Age Verification and Enforcement

Age verification occurs during KYC checks triggered by first withdrawal, 90-day inactivity or suspicious activity. Passport copies, driver licence scans and government-issued photo ID confirm date of birth. Players who fail age verification face account closure, fund forfeiture and regulatory reporting.

Automated systems flag accounts with suspicious birthdates, mismatched identity documents or underage social media profiles. Manual reviews investigate age discrepancies. Parents or guardians who detect unauthorised underage accounts should contact support immediately at support@wickedpokies.com.

Data Collection from Minors Policy

Wicked Pokies does not knowingly collect data from individuals under 18. If underage data collection is discovered, the account is closed, data is deleted within 30 days and deposits are refunded where legally required. Marketing databases are purged of underage contacts.

Parents concerned about underage gambling may request account closure and data removal on behalf of minors. Proof of guardianship and the minor’s identity document are required. Reports are processed within 48 hours.

Policy Updates and Amendments

This privacy policy may change as the platform evolves, regulations shift or services expand. This section explains how updates are communicated and when changes take effect.

Policy updates reflect operational changes, compliance adjustments or security enhancements. Players should review the policy periodically to stay informed.

Update Frequency and Notification

Wicked Pokies reviews this policy quarterly or when significant changes occur. Material updates affecting data usage, sharing practices or player rights trigger email notifications to active accounts. The effective date at the top of this document indicates the most recent revision.

Minor updates such as clarifications, formatting changes or link corrections may occur without notification. Players should check the policy before submitting new data or exercising rights.

Effective Date and Continued Use

Updates take effect on the date specified at the top of this document. Continued use of the platform after an update constitutes acceptance of revised terms. Players who disagree with changes may close accounts and request data deletion, subject to regulatory retention obligations.

Historical policy versions are not archived publicly. Players needing prior versions for legal or dispute purposes may request them through support at support@wickedpokies.com.

Contact and Privacy Inquiries

Players with questions about this policy, data processing or privacy rights should contact Wicked Pokies through available channels. This section provides contact information and response expectations.

Support channels handle privacy requests, deletion inquiries, access requests and policy questions. Response times vary by request complexity and verification requirements.

Privacy Contact Channels

The list below shows available contact methods:

• 📧 Email: support@wickedpokies.com with subject line “Privacy Inquiry”
• 💬 24/7 Live Chat: accessible through site footer or account dashboard
• 📝 Contact Form: available on support page for detailed requests
• 🎩 VIP Host: eligible players contact personal host for priority handling

Privacy requests require account verification. Players should include registered email, account username and request details. Identity documents may be required for access or deletion requests.

Response Times and Escalation

Standard privacy inquiries receive responses within 72 hours. Access requests, deletion requests and data portability requests are processed within 30 days. Complex AML reviews, regulatory inquiries or dispute resolutions may extend timelines.

Players unsatisfied with responses may escalate to the compliance team via email with subject line “Escalated Privacy Request.” Escalations are reviewed by senior personnel within 14 days. Regulatory complaints may be directed to the offshore licensing authority overseeing Curacao 8048/JAZ.

All privacy inquiries are handled confidentially. Personal data is not shared with third parties unless required by law or necessary to resolve the request.