Privacy Policy for Cocoa Casino

Last updated: 23 April 2026

Introduction

This Privacy Policy explains how Cocoa Casino collects, uses, stores, shares, and protects personal information when you access or use the website cocoa-aussy.net and any related gambling, account management, customer support, payment, promotional, or verification services made available through that website.

For the purposes of applicable privacy and data protection laws, Cocoa Casino acts as the organisation responsible for determining how and why your personal information is processed in connection with the services offered on cocoa-aussy.net. Where required by law, Cocoa Casino also processes certain information to meet obligations relating to gambling operations, fraud prevention, identity verification, anti-money laundering and counter-terrorism financing controls, account security, and lawful reporting.

By registering an account, submitting your information, or using the services, you acknowledge that your personal information will be handled in accordance with this Privacy Policy. Where consent is required by law for a particular processing activity, your registration, settings selection, or other clear affirmative action may be relied upon as that consent. However, where processing is necessary to perform a contract, comply with a legal obligation, protect vital interests, prevent fraud, or pursue legitimate operational interests that are not overridden by your rights, Cocoa Casino may process information on those grounds without relying solely on consent.

This Privacy Policy is intended to be read together with any applicable Terms and Conditions, Responsible Gambling rules, bonus terms, cookie notice, and any notices presented to you at the point where personal information is collected.

Information We Collect

Cocoa Casino may collect personal information directly from you, automatically from your device or use of the website, and from third parties involved in verification, payments, fraud screening, or regulatory compliance.

The categories of information we may collect include the following:

Identity details, such as your full name, date of birth, gender, nationality, residential address, postal address, and username.
Contact details, such as your email address and any communication preferences linked to your account.
Account details, such as account ID, login credentials, password history, security questions, account status, registration date, and verification status.
Gambling activity data, such as bets placed, stake amounts, game participation, wagering patterns, bonus use, winnings, losses, deposits, withdrawals, session durations, and responsible gambling settings.
Financial and transaction information, such as payment method type, partial payment instrument details, billing information, deposit and withdrawal records, chargeback history, and transaction references.
Verification and know-your-customer information, such as copies of identity documents, passport details, driving licence details, proof of address documents, payment source verification, source of funds information, source of wealth information, selfies, video verification files, or other compliance documentation.
Correspondence and support records, such as emails sent to or received from [email protected], complaint records, dispute records, feedback, survey responses, and notes created by support staff.
Technical and device data, such as IP address, browser type, operating system, device identifiers, language settings, time zone, referral URLs, cookie identifiers, login timestamps, geolocation indicators, and website interaction logs.
Risk and security data, such as fraud flags, suspicious activity indicators, failed login attempts, account lock events, velocity checks, and internal investigation notes.
Marketing and preference data, such as whether you have chosen to receive direct marketing, your engagement with promotional messages, and your preferred products or services.
Regulatory and compliance records, such as self-exclusion status, responsible gambling interactions, affordability or risk assessments where required, and records retained to satisfy legal obligations.

Cocoa Casino does not knowingly collect personal information from individuals who are under the legal age required to participate in gambling activities. If we become aware that information has been provided by an underage individual, we will take steps to restrict the account and handle the data in accordance with our legal obligations.

How We Use Your Information

Cocoa Casino uses personal information only where there is a valid legal basis and a legitimate operational reason to do so. The purposes for which your information may be used include:

To provide gambling and account services

To create and administer your account.
To verify your identity and eligibility to use the services.
To process bets, gaming transactions, deposits, withdrawals, and bonus entitlements.
To maintain records of account balances, gameplay, and transaction history.
To provide customer support and respond to service requests.

To comply with legal and regulatory obligations

To perform know-your-customer checks.
To comply with anti-money laundering and counter-terrorism financing obligations, including customer due diligence, ongoing monitoring, and reporting where required.
To identify and prevent prohibited activity, including underage gambling, fraud, collusion, money laundering, bonus abuse, and misuse of the platform.
To maintain records required by regulators, courts, law enforcement agencies, and other competent authorities.

To protect users, the platform, and the public interest

To detect security incidents and unauthorised access attempts.
To monitor gambling behaviour and apply responsible gambling controls, including deposit restrictions, cooling-off periods, account reviews, or self-exclusion measures where applicable.
To investigate complaints, disputes, suspicious transactions, and possible breaches of terms or law.

To improve and develop the service

To analyse website performance, service use, and user journeys.
To test system functionality, maintain platform stability, and improve usability.
To conduct internal reporting, audit activities, training, quality assurance, and business research.

To communicate with you

To send important service notices, security alerts, verification requests, account updates, and changes to legal documents.
To reply to enquiries submitted to [email protected].
To send marketing communications where permitted by law or where you have opted in or not opted out, depending on the applicable rule.

Marketing Communication

Cocoa Casino may use your contact details, account activity, and preference data to send information about products, services, offers, features, and campaigns that may be relevant to you. Any such communication will be carried out in accordance with applicable privacy and electronic marketing requirements.

Marketing data may be used to:

Tailor promotions based on your account history and stated preferences.
Suppress marketing to users who have opted out.
Maintain records of consent or objection for compliance purposes.
Measure whether a promotional email has been delivered, opened, or acted upon, where lawful technologies are used.

You may opt out of marketing communications at any time by:

Using any unsubscribe function included in the relevant message, where available.
Contacting [email protected] and clearly stating that you wish to stop receiving marketing communications.

Please note that opting out of marketing does not affect transactional or service-related communications that are necessary for account administration, legal compliance, or security.

Obtaining Personal Information

Cocoa Casino obtains personal information through several channels.

Information you provide directly

We collect information when you:

Register an account.
Complete profile or payment details.
Upload KYC or verification documents.
Make deposits or request withdrawals.
Participate in games, place bets, or use promotions.
Contact [email protected].
Respond to surveys or compliance requests.
Set responsible gambling preferences or account restrictions.

Information collected automatically

When you use cocoa-aussy.net, certain information is collected automatically through server logs, cookies, and similar technologies, including:

Device and browser information.
Website usage and navigation data.
Session records and timestamps.
Login, security, and fraud-prevention logs.
General location indicators derived from IP address or device signals.

Information from third parties

We may also receive personal information from:

Identity verification service providers.
Payment processors and financial institutions.
Fraud prevention, sanctions screening, and risk management partners.
Analytics providers and website infrastructure providers.
Public registers, law enforcement, regulators, and dispute resolution bodies where lawful.
Corporate affiliates involved in operational support, compliance review, or customer administration.

Where personal information is obtained from third parties, Cocoa Casino will process it consistently with this Privacy Policy and applicable law.

Data Recipients

Access to personal information within Cocoa Casino is limited to persons who require that information for legitimate business, compliance, security, or support purposes. Depending on operational need, recipients may include:

Customer support personnel.
Payments and finance personnel.
Fraud, risk, and security teams.
Responsible gambling and safer gambling staff.
Compliance, legal, and audit teams.
Technical, analytics, and infrastructure staff.
Senior management where access is necessary for oversight, investigations, or legal obligations.

All such access should be restricted according to role, confidentiality requirements, and internal security controls.

Releasing Data to Third Parties

Cocoa Casino may disclose personal information to third parties only where there is a lawful basis and a defined business, legal, or regulatory need. Such third parties may include:

Payment processors, banks, and financial service providers to process deposits, withdrawals, refunds, and payment verification.
Identity verification providers and KYC specialists to confirm your identity, age, address, and source of funds where necessary.
Fraud detection, sanctions screening, cybersecurity, and risk management providers.
Game providers, platform suppliers, and software vendors where access is necessary to deliver games, maintain platform integrity, or investigate incidents.
Cloud hosting, data storage, communications, analytics, and IT support providers acting under contractual obligations.
Professional advisers, including lawyers, auditors, insurers, and consultants, where reasonably necessary.
Law enforcement bodies, regulators, courts, governmental agencies, and competent authorities where disclosure is legally required or permitted.
Corporate affiliates, successors, acquirers, or counterparties involved in a merger, acquisition, restructuring, financing, or sale of assets, subject to appropriate safeguards.

Cocoa Casino may also disclose information if it reasonably believes that disclosure is necessary to:

Comply with a legal obligation.
Enforce contractual terms or platform rules.
Detect, prevent, or investigate crime, fraud, or security incidents.
Protect the rights, property, safety, or legitimate interests of Cocoa Casino, its users, or the public.

Where third-party service providers process personal information on our behalf, we require them to process that information only on documented instructions, maintain confidentiality, and implement suitable technical and organisational safeguards.

International Data Transfers

Due to the nature of online gambling, payment processing, cloud hosting, identity verification, and fraud monitoring, your personal information may be transferred to or accessed from countries outside Australia. Where this occurs, Cocoa Casino will take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with applicable privacy requirements.

These steps may include:

Contractual safeguards requiring appropriate privacy and security standards.
Vendor due diligence and risk assessments.
Access controls and data minimisation measures.
Transfer arrangements required by applicable data protection laws where relevant.

By using the services, you acknowledge that some processing may involve international data handling where operationally necessary.

Data Retention

Cocoa Casino retains personal information only for as long as reasonably necessary for the purposes set out in this Privacy Policy, including legal, accounting, regulatory, security, dispute resolution, and enforcement purposes.

Retention periods may vary depending on the type of information and the reason it was collected. In particular:

Account, transaction, and gambling activity records may be retained for the duration of the customer relationship and for a further period afterwards to meet legal and operational requirements.
KYC, AML, CTF, fraud, and investigation records may be retained for at least 5 years where required for compliance with applicable anti-money laundering and counter-terrorism financing obligations.
Correspondence, complaints, and dispute records may be retained for as long as necessary to manage the issue and any related legal limitation period.
Technical logs and security records may be retained for as long as reasonably needed to maintain system integrity, investigate incidents, and satisfy audit obligations.

At the end of the applicable retention period, Cocoa Casino will take reasonable steps to securely delete, de-identify, or destroy personal information unless further retention is required or authorised by law.

Where a user requests erasure of personal information, Cocoa Casino will assess the request in light of legal obligations and operational necessity. Erasure may not be available immediately where retention is required for identity verification records, anti-money laundering compliance, fraud prevention, legal defence, or unresolved disputes. Once mandatory retention periods have expired and no overriding legal basis remains, eligible data may be deleted or irreversibly anonymised.

Security of Your Data

Cocoa Casino applies technical and organisational measures designed to protect personal information against unauthorised access, misuse, loss, alteration, or unlawful disclosure. While no online environment can be guaranteed to be completely secure, we aim to maintain safeguards proportionate to the sensitivity of the data processed.

Security measures may include:

Account access controls using unique ID and password credentials.
Encryption of data in transit using current transport security protocols.
Encryption or equivalent protection of sensitive data at rest where appropriate.
Role-based access limitations and internal authentication procedures.
Monitoring systems for suspicious access, fraud indicators, and intrusion attempts.
Logging, audit trails, and incident response procedures.
Secure storage and controlled handling of KYC and compliance documents.
Staff training, confidentiality obligations, and internal policies relating to information security.
Vendor management processes for third-party processors and service providers.

You are also responsible for helping to protect your account by keeping your login credentials confidential and informing Cocoa Casino promptly via [email protected] if you suspect unauthorised use of your account.

Your Rights

Subject to applicable law and verification of your identity, you may have rights in relation to your personal information, including the right to:

Request access to the personal information Cocoa Casino holds about you.
Request correction of inaccurate, incomplete, or outdated information.
Request deletion of certain information where there is no lawful basis to continue processing it.
Object to or request restriction of certain forms of processing in some circumstances.
Withdraw consent where processing depends on consent, without affecting the lawfulness of processing carried out before withdrawal.
Request information about the source of data where it was not collected directly from you, where required by law.
Request information about third parties or categories of third parties to whom your data has been disclosed, subject to legal and commercial limitations.
Opt out of direct marketing communications.

These rights are not absolute. Cocoa Casino may decline a request where an exemption applies, where the request cannot be verified, or where the data must be retained for legal, regulatory, security, or contractual reasons.

Cookies and Similar Technologies

Cocoa Casino may use cookies and similar tracking technologies to support website functionality, security, session management, analytics, and user preferences. These technologies may help us:

Keep users logged in securely.
Remember user preferences and settings.
Detect fraudulent or automated activity.
Measure website performance and diagnose issues.
Improve navigation and service delivery.

You may be able to manage cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality, security features, or the availability of some services.

Complaints and Contacting Us

If you have a question, request, or complaint about how Cocoa Casino handles your personal information, you may contact us by email at [email protected].

When contacting us, please provide enough detail for us to identify your account and understand your request. We may ask for additional information to verify your identity before processing a privacy-related request.

Cocoa Casino will review privacy complaints in a reasonable timeframe and respond in accordance with applicable legal requirements. If you believe that your complaint has not been handled appropriately, you may have the right to lodge a complaint with the Office of the Australian Information Commissioner or another competent supervisory authority, depending on the circumstances of the processing and your location.

Changes to This Privacy Policy

Cocoa Casino may update this Privacy Policy from time to time to reflect legal, technical, operational, or regulatory developments. The latest version will be published on cocoa-aussy.net and will show the revised Last updated date.

Where changes are material, Cocoa Casino may also take reasonable steps to draw them to your attention through account notices or email communication where appropriate. Your continued use of the services after an updated Privacy Policy takes effect will be taken into account to the extent permitted by law.

Legal and Regulatory References

This Privacy Policy has been drafted with regard to general privacy and compliance principles relevant to Australia and, where applicable to data handling practices, internationally recognised data protection standards. Relevant sources may include:

Privacy Act 1988 (Cth).
Australian Privacy Principles issued under the Privacy Act 1988 (Cth).
Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
Anti-Money Laundering and Counter-Terrorism Financing Rules Instrument 2007 (Cth).
Guidance published by the Office of the Australian Information Commissioner.
Guidance and regulatory materials published by AUSTRAC.

This Privacy Policy is provided for transparency and compliance purposes and should be interpreted consistently with any mandatory legal obligations that apply to Cocoa Casino and cocoa-aussy.net.