Privacy Policy
This Privacy Policy explains how personal information is collected, used, disclosed, and safeguarded when you access or use lightninglink.casino. It applies to all players, website visitors, and users engaging with our services within Australia and other supported jurisdictions. Effective date: 1 January 2025.
Who We Are
lightninglink.casino is operated as part of the Aristocrat Leisure Limited group, an international gaming company. While certain corporate information is withheld due to regulatory or internal policies, our commitment to privacy, AU regulatory compliance, and transparent communication is maintained at all times. For all data protection matters, our Data Protection Officer (DPO) can be contacted below:
- Operator Group: Aristocrat Leisure Limited (Parent Company)
- Official Website for this service: https://lightninglink.casino
- Responsible Contact: Data Protection Officer (DPO)
- Contact Person: Oliver Hayes
- Email Contact: Please use our official website's contact form or the designated DPO email as published in our help section
- Legal Address & Registration: Not specified; available upon verified request according to Australian Privacy Principles (APP 1 & 12)
Regional Compliance Note: All data processing is in accordance with the Australian Privacy Act 1988 (Cth), AU gambling regulations, and applicable state or territory law.
What Personal Data We Collect
In providing services on lightninglink.casino, we process multiple categories of personal data as required by gaming and financial regulation, operational needs, and to ensure a secure customer experience:
- Personal Identification Data:
- Full name, date of birth, gender, address (where provided)
- Email address, phone number, account credentials
- Technical Data:
- IP address, browser information, device identifiers
- Access logs, session data, geographic location (city/country level)
- Payment and Financial Data:
- Bank details, transaction history, deposit and withdrawal information
- Identification documents for KYC/AML purposes
- Behavioral and Analytical Data:
- Game play records, betting history, website interactions (clicks, preferences)
- Survey responses, customer support communications
- Cookies and Tracking Technologies:
- Session and persistent cookies to support functionality, analytics, security, and marketing
- Third-party cookie data for analytics and targeted advertisements (subject to consent)
Implicit Regulatory Note: Collection of additional data may occur when mandated by AU law, anti-money laundering (AML), and counter-terrorism financing (CTF) obligations.
Legal Basis for Processing
lightninglink.casino processes your personal information only where legally justified, based on the following grounds:
- User Consent: We obtain your consent for optional uses, such as marketing communications and non-essential cookies. You may withdraw consent at any time via account settings or directly through our DPO.
- Contract Fulfilment: Processing is required to operate your gaming account, process payments, issue withdrawals, manage customer service, and enforce our Terms of Service.
- Compliance with Legal Obligations: AU gambling laws, AML/CTF regulations, and other statutory duties compel us to verify identity (KYC), monitor transactions, and retain certain data for recordkeeping and reporting to regulatory authorities.
- Legitimate Interests: We use personal data for service improvement, fraud prevention, responsible gambling monitoring, and statistical analysis. These activities are subject to proportionality and user rights under the Privacy Act 1988 (Cth).
Protective Clause: Where processing is based on legitimate interests, we always balance your fundamental privacy rights and offer opt-out mechanisms where appropriate.
Purpose of Processing
Personal data on lightninglink.casino is processed strictly for legitimate business, regulatory, and responsible gaming purposes, as outlined below:
- Provision of Casino Services: To register, authenticate, manage, and maintain your player account and deliver gaming functions.
- Transaction Handling: To facilitate deposits, withdrawals, and real-money transactions, including payment partner compliance.
- Regulatory Compliance: To satisfy AU gambling, KYC/AML, tax, and record retention requirements pursuant to local law and regulatory agency rules.
- Responsible Gambling Monitoring: To detect and support responsible play, identify risky behaviors, and implement exclusion or intervention mechanisms.
- Analytics and Service Improvement: To improve and personalize gaming experiences, detect technical issues, and enhance website performance and security.
- Marketing Communications: Subject to your consent, to send promotional content, offers, and information about new features or games via email and other electronic channels. You can opt out at any time.
- Fraud and Abuse Prevention: To identify and manage fraudulent activity, technical abuse, or unauthorized access attempts ensuring platform integrity.
Implicit Compliance Note: Processing may adapt to future regulatory changes or lawful business needs, always meeting or exceeding AU privacy standards.
Disclosure & Sharing
Your personal data is shared externally only when necessary, in accordance with regulatory requirements and with robust protective measures in place:
- Payment Service Providers: Data is disclosed to banks, electronic payment agencies, and financial institutions for processing transactions and AML due diligence. Only essential data is shared, protected under binding contracts.
- Authorized Service Providers: Trusted partners delivering IT, marketing analytics, operational support, and customer service functions may access personal data under strict confidentiality agreements.
- Government, Regulatory Agencies & Law Enforcement: Information may be provided where required to comply with AU legal obligations, licensing conditions, or law enforcement investigations (e.g., AUSTRAC, state gambling authorities).
- Affiliates & Group Companies: Shared with Aristocrat Leisure Limited group subsidiaries (including Product Madness) only for legitimate operational or compliance purposes.
- Advertising Networks & Marketing Partners: Data is shared for targeted advertising or promotional activities solely when you have expressly opted in, in compliance with the Spam Act 2003 (Cth).
Protective Clause: All third-party recipients are contractually bound to maintain confidentiality, implement security measures, and process your information only as instructed by lightninglink.casino.
International Transfers
Due to the global nature of the Aristocrat Leisure Limited group, some personal data collected via lightninglink.casino may be transferred or accessed outside Australia (including the United Kingdom and other approved jurisdictions):
- Protection Mechanisms: All international transfers are performed in accordance with the Australian Privacy Principles (APP 8). Standard contractual clauses or equivalent data protection agreements are applied to ensure information remains protected at or above AU standards.
- Transnational Compliance: Where data is transferred to a foreign affiliate or service provider, lightninglink.casino carefully evaluates the recipient's privacy safeguards, security reputation, and legal environment.
- User Notification: You may request details of overseas disclosures affecting your data by contacting our DPO.
Jurisdiction Note: Data processing locations may include, but are not limited to, Australia and the United Kingdom, always under robust security and privacy protocols.
Data Retention
lightninglink.casino retains your personal information only for as long as reasonably necessary to achieve the purposes described herein, or as required by legal, regulatory, or business obligations:
- Personal Account Data: Retained for the active duration of your account plus up to 5 years after account closure, to comply with AU recordkeeping, AML, and dispute resolution obligations (through 31 December 2025 at minimum).
- Payment and Transaction Records: Stored for at least 7 years from the date of transaction in accordance with AU tax and anti-fraud regulations.
- Technical, Analytical, and Cookie Data: Maintained for up to 2 years unless otherwise required for fraud detection or longer by law.
- Deletion and Anonymisation: Where data is no longer needed, it will be securely deleted or anonymised, subject to limitations arising from ongoing proceedings, regulatory retention, or unresolved user disputes.
- User Requests: Upon verified request, personal data will be deleted or anonymised, unless retention is required by law or for compliance with outstanding obligations.
Note: Exceptions may apply for unresolved complaints, legal holds, or active investigations involving a user's account.
Your Rights
In accordance with the Australian Privacy Act 1988 (Cth) and industry standards, you have the following rights concerning your personal data held by lightninglink.casino:
- Right to Access: You may access personal information held about you by submitting a request through our official contact channels. We will respond within 30 days unless an exemption applies.
- Right to Correction: You may request corrections to incomplete or inaccurate information. lightninglink.casino must take reasonable steps to ensure corrections are made within a reasonable timeframe.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your data when no longer required for the intended purpose, subject to lawful exceptions.
- Right to Restrict Processing: You may request suspension of certain data processing, such as for marketing or analytics, while a complaint is resolved.
- Right to Object: You may object to processing based on legitimate interests or direct marketing at any time. Opt-out instructions are available within communication channels.
- Right to Data Portability: You may request a digital copy of your personal data held by lightninglink.casino, provided in a structured, commonly used, machine-readable format if technically feasible and not adversely affecting third party rights.
- Withdrawal of Consent: You may withdraw consent for marketing or non-essential data processing at any time.
Procedure: To exercise these rights, contact our DPO through the official website's channels. ID verification may be required.
Cookies & Tracking Technologies
lightninglink.casino utilises cookies and similar technologies to enhance site functionality, track usage, and support advertising. The following types are used:
- Session Cookies: Temporary cookies enabling secure, consistent navigation and login state; deleted when browser closes.
- Persistent Cookies: Remain on your device to remember preferences, support site analytics, and improve user experience.
- Third-Party Cookies: Set by analytics (e.g., Google Analytics) and advertising partners with your explicit consent, enabling audience measurement and targeted marketing.
Purposes:
- Functional: Ensuring stable login, gameplay, and account preferences.
- Analytics: Monitoring website performance, identifying user trends, and optimizing services.
- Advertising: Supporting relevant offers and tailored content, subject to consent and opt-out controls.
Cookie Management: Control cookies via browser settings or, where available, through our in-site privacy panel. Disabling cookies may limit certain site features. For more details, refer to our Cookies Notice available on our website.
Data Security
lightninglink.casino adopts robust technical and organizational measures to protect your personal information from loss, misuse, and unauthorized access:
- Secure Socket Layer (SSL) Encryption: All data transmissions are protected using industry-standard SSL encryption protocols.
- Data Storage Security: Information is securely stored in access-controlled environments, encrypted at rest where possible.
- Access Controls: Role-based access ensures only authorized staff can process personal information for legitimate purposes.
- Routine Security Audits: Regular assessments identify vulnerabilities and update protocols in accordance with AU cybersecurity standards.
- Staff Training: Employees and contractors undergo regular privacy and data protection training tailored to AU legal requirements and gaming industry standards.
- Incident Response: In the event of a data breach, affected users and regulatory agencies will be notified as required by the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth).
Note: Despite best efforts, no system is completely immune from security risks. We maintain a commitment to continuous improvement and prompt response to all security concerns.
Complaints & Contacts
If you have questions, concerns, or complaints regarding your privacy or the handling of your personal data by lightninglink.casino, you may contact our Data Protection Officer (DPO) through our dedicated website channels.
- Contact Point: Oliver Hayes, Data Protection Officer, available via contact form or listed email at https://lightninglink.casino.
- Complaint Submission: Submit complaints or requests in writing. Please provide sufficient details to facilitate investigation and response.
- Complaint Procedure: We will promptly review your submission and aim to provide a formal response within 30 calendar days. If not resolved, you have the right to escalate to the Office of the Australian Information Commissioner (OAIC).
- External Recourse: OAIC contact details are available at https://www.oaic.gov.au.
Regional Compliance Note: All privacy-related matters are managed in accordance with AU law and OAIC escalation protocols.
Updates
We may amend this Privacy Policy to comply with evolving laws or business changes. Updates will be communicated by posting the new date and version on https://lightninglink.casino and, where appropriate, via direct notification. We encourage regular review of this policy to stay informed of your rights and our current practices.
Last revised: 1 January 2025.