Boho casino Privacy Policy

The operator collects personal information necessary to provide online gambling and betting services to users in Australia and to comply with applicable regulation.

Personal data that may be collected includes:

• Identification data: name, date of birth, address, nationality, identification documents, and verification records.
• Contact details: email address, phone number, residential address, and communication preferences.
• Account and usage data: username, account history, game and betting activity, responsible gambling settings, and communication logs.
• Financial and transactional data: payment method details (such as masked card numbers or account identifiers), deposit and withdrawal records, and currency information.
• Technical data: IP address, device identifiers, browser type, operating system, access times, and website interaction data collected through cookies and similar technologies.

These details are collected and processed to:

• Create and manage user accounts and provide agreed services.
• Verify identity, age, and location.
• Process payments and manage financial transactions.
• Support responsible gambling measures and self-exclusion tools.
• Detect and prevent fraud, money laundering, and other unlawful activity.
• Meet reporting and record-keeping duties under Australian law and any applicable licensing framework.

Technical and organisational measures are applied to protect personal information, including:

• Encryption of data in transit and at rest where appropriate.
• Role-based access controls and authentication procedures.
• Segregation of systems handling payment details.
• Regular monitoring, logging, and security reviews.
• Staff training on confidentiality and data protection obligations.

Users have the right, subject to legal limits, to:

• Request access to their personal information held by the operator.
• Ask for correction of inaccurate or incomplete data.
• Request deletion of data where it is no longer needed or where permitted by law.
• Object to certain processing activities or request restriction of processing.
• Lodge a complaint with a competent supervisory authority if they believe their privacy rights have been breached.

Data protection practices aim to align with applicable Australian privacy law, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as any higher standard that may apply due to international data protection norms relevant to users.

Personal information is processed only for lawful purposes and in a fair and transparent manner. The main uses of collected data include:

• Account creation and management: to register users, maintain profiles, verify identity and age, manage login credentials, and administer responsible gambling tools.
• Provision of services: to provide online casino games, sportsbook markets, and related functionality, including customer support and dispute resolution.
• Payments and transactions: to process deposits, bets, withdrawals, refunds, and chargebacks, and to keep necessary financial and accounting records.
• Service improvement and operations: to analyse website usage, monitor performance, prevent technical issues, and enhance the reliability and security of the platform.
• Responsible gambling and risk controls: to monitor betting patterns, apply limits, manage self-exclusion, and support harm minimisation programs.
• Compliance and legal obligations: to meet anti-money laundering and counter-terrorism financing requirements, record-keeping rules, tax and reporting obligations, and orders from regulators or law enforcement.
• Analytics and statistics: to generate aggregated, de-identified statistics about user behaviour and game performance, which do not identify individual users.
• Marketing and communication: to send service messages, updates, and, where permitted, promotional communications that users can manage or opt out of at any time.

The operator relies on different lawful bases for processing, including performance of a contract, compliance with legal obligations, legitimate interests such as fraud prevention and service improvement, and user consent where required, such as for certain types of marketing or cookies.

Users have control over much of their personal information through their online account settings. Within the account area, where available, users can:

• View key registration and contact details.
• Update certain information such as contact data and communication preferences.
• Review account activity, transaction history, and responsible gambling settings.

In addition, users can submit a request to exercise their privacy rights. Subject to identity verification and legal limits, the operator will:

• Provide a copy of the personal information held, in a commonly used format where reasonable.
• Correct or update inaccurate information.
• Delete or anonymise data that is no longer required for the purposes for which it was collected, except where retention is required for legal or regulatory reasons.

Requests may be refused or limited where the law allows, for example where providing access would affect the privacy of others or prejudice an investigation. Users will be informed of the reasons where the operator is not able to fully comply.

By using the services, users acknowledge and consent that:

• Security checks and verification processes may be carried out, including checks against external databases and verification services.
• Payment data and transaction details may be processed by accredited payment service providers, banks, card schemes, and fraud prevention services.

These third parties handle payment and verification information under their own obligations, and contractual safeguards are applied to protect user data and limit its use to authorised purposes.

The services are intended only for persons aged 18 years and over and are not directed at children or minors.

The operator:

• Does not knowingly collect personal information from individuals under 18.
• Requires age and identity verification where appropriate to meet legal and licensing duties.
• May ask for official documents to confirm that a user is legally permitted to gamble online.

It is not always possible to determine a user’s age without receiving identification documents. If it is discovered that an account has been created by, or personal information collected from, a person under 18:

• The account will be closed as soon as reasonably practicable.
• Any personal information relating to that user will be deleted or anonymised, subject to any legal retention requirements.

A parent or legal guardian who becomes aware that a minor has provided personal information can contact the operator and request that access be disabled and the minor’s information be removed in line with applicable law.

Personal information may be stored or processed in countries outside Australia, where the operator or its service providers maintain operations, data centres, or support teams.

Categories of overseas recipients may include:

• Payment processors and banking partners.
• Identity verification and fraud prevention services.
• Technical hosting providers, data storage facilities, and cloud platforms.
• Professional advisers and support contractors assisting in the operation of the online services.

By using the website and services, users consent to the transfer, storage, and processing of their personal information in these locations, including jurisdictions that may have different data protection standards from those in Australia.

The operator seeks to ensure that any third party handling personal information provides safeguards that are consistent with this Privacy Policy and applicable law, including through contractual obligations of confidentiality, data security, and restricted use of the data for authorised purposes only.

This Privacy Policy describes how personal information is handled but does not limit any rights or obligations that arise under mandatory law. To the extent permitted by law, the operator is not responsible for any loss arising from unauthorised access to data that could not reasonably have been prevented by appropriate security safeguards.

The operator may update or amend this document from time to time to reflect changes in services, legal requirements, or technical measures. In the event of a conflict between this Privacy Policy and mandatory legal rules, the latter will prevail.

This Privacy Policy applies once a user has accepted it as part of the website terms, including by signing an agreement where applicable, by actively accepting during registration, or by continuing to access and use the services in circumstances where the policy has been made available for review.

Cookies are small text files stored on a user’s device when visiting websites. Similar tracking technologies such as pixels and local storage may also be used.

On this website, cookies are used to:

• Maintain session information and keep users logged in where chosen.
• Compile statistics about visits, traffic sources, and navigation patterns.
• Analyse behaviour on the site to help improve layout, content, and performance.
• Remember user preferences such as language, display settings, or saved choices.
• Support fraud detection, security, and responsible gambling controls.

Cookies are typically retained for up to 1 year, after which they expire or are removed, unless a shorter or longer period is required for technical or legal reasons.

Users can manage or delete cookies through their browser settings. Disabling certain cookies may affect the functionality of the services and limit the ability to log in or use some features.

By accessing or using the website, creating an account, or continuing to use the online casino and sportsbook services, users acknowledge that they have read and understood this Privacy Policy and agree that their personal information may be collected and processed in line with it.

The most recent version of this document applies to all current data handling activities. If the Privacy Policy is updated, the revised version will be posted on the website, and continued use of the services after the effective date will constitute acceptance of the updated terms, subject to any additional consent requirements under applicable law.

Personal information may be shared with third parties where this is necessary, lawful, and consistent with the purposes described in this document.

Typical categories of third-party recipients include:

• Payment institutions, banks, and card schemes handling deposits and withdrawals.
• Identity verification, age verification, and fraud-prevention services.
• Regulatory bodies, law enforcement agencies, and dispute resolution bodies where required by law or to protect legal rights.
• Technical providers offering hosting, data storage, security, support, and communication tools.
• Professional advisers such as auditors, legal, or compliance consultants.

The website may list some of these partners, or users will be informed in another appropriate manner about the purpose and scope of data sharing where required. Providing personal information for account registration, payments, or verification is taken as consent to share that data with third parties that support those functions, to the extent allowed by law and contractual arrangements.

Each third party is expected to process personal information in accordance with its own privacy obligations. Contractual measures are used to require that such information is kept confidential, used only for authorised purposes, and protected by appropriate security safeguards.

The website may contain links or references to other online services operated by third parties, including payment providers, partners, or information resources.

These external websites are not controlled by the operator, and their privacy practices may differ. Users are responsible for reviewing the privacy policies and terms of any third-party services they visit or use.

The operator is not responsible for how external sites collect, use, store, or disclose personal information, and no guarantee is provided regarding their security or compliance. Caution is recommended when leaving this website and providing data on any other online platform.