This Privacy Policy explains how Spaceman collects, uses, stores, and protects personal information in connection with its casino operations in Australia. It describes the data-handling practices applied to account management, transactions, and compliance with applicable privacy laws, including the Australian Privacy Principles under the Privacy Act 1988 (Cth). The policy is provided to ensure transparency regarding the processing of personal data and to outline the lawful bases for such processing, including consent, contractual necessity, and legal obligations. It details the procedures for account management, verification, security, and the rights of individuals. The brand maintains administrative, technical, and physical safeguards to protect user information from unauthorised access or disclosure.

1. Information Collected and Categories of Personal Data

Spaceman collects personal data directly from individuals during registration, account management, and the use of casino services. The categories of information processed include identification details such as full name, date of birth, residential address in Australia, and contact information including email address and telephone number. Verification data is also collected to satisfy anti-money laundering and counter-terrorism financing obligations under Australian law, which may include copies of government-issued identification documents, proof of address, and financial statements.

Transactional information is recorded for each deposit, withdrawal, and wager placed through the platform. This includes transaction amounts, dates, payment methods, and associated account identifiers. Technical data is gathered automatically when users access the website or mobile application, including Internet Protocol (IP) addresses, browser type and version, operating system, device identifiers, and session logs. Compliance-related records are maintained for regulatory reporting and auditing purposes, including records of responsible gambling interactions and self-exclusion requests. The brand does not intentionally collect sensitive information such as health or biometric data unless required by law or explicitly provided by the user in connection with a support request.

The slot spaceman product operates within the broader casino environment, and data collected through that feature is subject to the same processing rules as other platform activities. No information is obtained from third-party sources without the user's express authorisation or a lawful basis to do so.

2. Purposes of Data Use and Legal Grounds for Processing

Personal data is used to establish and maintain user accounts, process transactions, verify identity, and ensure compliance with Australian regulatory requirements. The legal basis for processing includes the performance of a contract between the user and Spaceman, specifically the terms and conditions governing account use. Consent is relied upon for optional data processing activities, such as receiving marketing communications, which users may withdraw at any time without affecting core account operations.

Legitimate interest is invoked for security-related processing, including fraud detection, network monitoring, and account integrity checks. The brand also processes data to satisfy legal obligations imposed by Australian gambling regulators and financial authorities. This includes reporting suspicious transactions, maintaining records for the required retention period, and cooperating with lawful investigations. The spaceman bet365 integration, where applicable, involves data sharing limited to operational and compliance needs, with contractual safeguards in place to restrict unauthorised use.

Data is not used for automated decision-making that produces legal effects without human review, except where explicitly authorised by law and disclosed to the user. Processing for secondary purposes, such as analytics or product improvement, is conducted on an anonymised or aggregated basis where possible.

3. Data Storage, Safeguards, and Retention Schedules

Personal data is stored on servers located within Australia and secure data centres in jurisdictions that provide equivalent data protection standards. Access to personal information is restricted to authorised personnel who require it for their duties, including customer support, compliance, and technical operations. Logical access controls, including firewalls, encryption in transit using TLS protocols, and encryption at rest for sensitive fields, are applied to prevent unauthorised access or disclosure.

Physical security measures are in place at data storage facilities, including biometric access controls, surveillance, and visitor logs. Regular vulnerability assessments and penetration testing are conducted to identify and remediate potential security gaps. In the cassino spaceman environment, data is segregated from non-essential systems to minimise exposure in the event of a security incident. Retention periods are determined by the minimum timeframes required under Australian law, including the Anti-Money Laundering and Counter-Terrorism Financing Act 2006, which mandates record-keeping for seven years after the closure of an account.

Once the retention period expires, personal data is either permanently deleted using secure overwriting methods or archived in a format that prevents re-identification. Users who close their accounts should note that certain records, such as transaction logs and identification documents, may be retained for the legally prescribed duration before destruction.

4. Player Rights and Procedures for Data Access

Individuals have the right to request access to personal data held by Spaceman and to obtain a copy of that information in a structured, commonly used, and machine-readable format. Requests for data portability will be fulfilled within 30 days where technically feasible and compatible with the rights of others. Users may also request correction of inaccurate or incomplete personal data, provided they submit supporting evidence for the revised information.

The right to erasure, or deletion of personal data, applies where the data is no longer necessary for the purpose for which it was collected, where consent is withdrawn, or where processing is unlawful. However, deletion is subject to overriding legal obligations that require continued retention, such as anti-money laundering record-keeping rules. Users may object to processing based on legitimate interests, including direct marketing, and may request restriction of processing during the verification of data accuracy or the assessment of legal objections.

All requests to exercise these rights must be submitted in writing to the brand's privacy officer, and identity verification will be required before processing any request. Verification typically involves confirming account details and, where necessary, providing a certified copy of government-issued identification. Spaceman will respond to requests within the timeframes prescribed by the Privacy Act 1988 (Cth), usually 30 days, unless a longer period is required due to the complexity or volume of the request. Users also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if they believe their privacy rights have been breached.