Your Privacy, Our Responsibility
This Privacy Policy explains what personal information Leonbet Casino collects when you play at leonbet-aud.com, why we need it, how long we keep it and the rights you hold over it. We operate under Curaçao licence 8048/JAZ2021-042 and apply GDPR-aligned standards for every player.
What Data We Collect
Categories of personal data
We collect only the information needed to run your account, process your payments and meet our legal obligations. Here is the full picture of what reaches our systems.
- Identity data: full name, date of birth, email address, phone number and residential address
- Verification documents: ID copy, proof of address and payment method confirmation for KYC
- Transaction data: deposits, withdrawals, bets, wins, losses and bonus usage in AUD or your chosen currency
- Technical data: IP address, device type, browser, operating system and approximate location
- Gameplay behaviour: games played, session length, wagering patterns and responsible-gambling indicators
- Marketing preferences: whether you opted in to promotions such as our Friday reload or monthly prize draws
How We Use Your Data
Your data powers six core functions. We create and manage your account, verify your identity before your first withdrawal (review takes up to 72 hours), process deposits and withdrawals through methods like PayID, Skrill and crypto, and detect fraud such as chargeback abuse or multi-accounting.
We also monitor play patterns for responsible-gambling purposes, since Australian regulations require us to watch for signs of harm, and we send marketing messages only when you have consented. Legal obligations, including tax and AML reporting, round out the list.
Why the Law Permits It
One basis per purpose
Contract: account management, bonuses, payments and game delivery happen because you asked for them and we need your data to perform our side of the deal.
Legal obligation: KYC checks, AML monitoring, record-keeping for regulators and responses to lawful authority requests are mandated by gambling and financial crime law.
Legitimate interest: fraud prevention, security monitoring, service improvement and aggregate analytics, always balanced against your rights and privacy.
Consent: marketing emails, SMS offers and non-essential cookies run only on your explicit opt-in, which you can withdraw at any time.
How Long We Keep It
Retention by category
Gambling regulations require us to keep transaction and account records for at least five years after account closure. Everything else is kept only as long as its purpose lasts.
- Transaction and betting records: minimum 5 years after account closure (regulatory requirement)
- KYC documents: 5 years after verification or account closure, whichever is later
- Account and identity data: while your account is active, then 5 years
- Marketing preferences: until you withdraw consent or delete your account
- Technical and analytics data: up to 24 months, then aggregated or deleted
Who Else Sees It
Categories of recipients
We never sell your data. We share it only with parties who help us operate, and each one is bound by contractual confidentiality.
- Payment processors handling your deposits and withdrawals
- KYC and AML verification providers checking your documents
- Game and platform providers delivering casino content
- Regulators and law enforcement when legally required
- Analytics and IT service providers supporting our site
- Email and SMS delivery services for marketing you consented to
Rights You Can Exercise
Your controls over your data
You control your information, and exercising these rights is free. Email [email protected] or contact our live chat, available 24/7, and we respond within statutory timeframes.
- Access: get a copy of the personal data we hold about you
- Rectification: fix inaccurate or incomplete details
- Erasure: request deletion where no legal retention duty applies
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time, effective immediately
- Complain: lodge a complaint with your local data protection authority
Cookies, In Brief
We use session cookies to keep you logged in, preference cookies to remember settings, and analytics cookies to understand how the site performs. Non-essential cookies activate only after you accept them via the banner on your first visit, and you can change your choice anytime. Full details, including the exact cookies we set and how to block them, live on our dedicated Cookies Policy page.
How We Protect You
Security and breach response
All traffic between your device and leonbet-aud.com runs over TLS encryption, and stored payment details are tokenised rather than kept as raw card numbers. Access to player data is limited to trained staff who need it for their role, with logging on every access.
If a data breach occurs that risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players without undue delay, as GDPR-aligned standards require.
Talk to Our DPO
Our Data Protection Officer answers privacy questions, handles data requests and reviews any concern you raise. Write to [email protected] and we reply within a few business days. You can also reach the general support team at [email protected] or via 24/7 live chat for account-level matters.
We review this policy at least annually; the version published in 2026 is the current one. Material changes are announced on site before they take effect.
Frequently Asked Questions
Can I play without giving ID documents?
You can register and deposit, but we must verify your ID, proof of address and payment method before your first withdrawal. KYC review takes up to 72 hours.
How do I stop marketing messages?
Withdraw consent anytime via your account settings or the unsubscribe link in any email. Marketing stops immediately; transactional and account messages continue as needed.
Do you keep my data after I close my account?
Regulation requires us to keep transaction and betting records for at least 5 years after closure. Marketing data is deleted once consent is withdrawn.
Do you share data with game providers?
Only the minimum needed to deliver the game, such as your session ID and play activity. Providers are contractually barred from using it for other purposes.
How fast do you answer data requests?
We respond to access, rectification, erasure and portability requests within one month, extendable by two further months for complex cases with notice to you.