At A Big Candy Casino, safeguarding your personal information is a cornerstone of how we operate. This privacy policy explains what data we collect, why we collect it, how we process it, and what rights you hold as a user of our platform. The A Big Candy Casino privacy policy has been written in accordance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR). Whether you are browsing our site, registering an account, or enjoying our 4,000+ games, we want you to feel confident that your personal data is in safe hands. Data protection is not a legal formality for us — it is an ongoing commitment to every player who trusts us with their information.
1. Who We Are — Identity of the Data Controller
A Big Candy Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the data controller, we are responsible for determining how and why your personal information is collected and used. You can reach our dedicated Data Protection Officer (DPO) at any time:
- Email: [email protected]
- Support email: [email protected]
- Website: casinosabigcandy.com
Our DPO oversees all matters relating to A Big Candy Casino data protection, ensures that our practices comply with applicable law, and acts as your first point of contact for any privacy-related queries or complaints.
2. What Personal Data We Collect
In the course of providing our services, A Big Candy Casino collects several categories of personal data. We only collect what is necessary, and we are transparent about every category of data collection we undertake.
2.1 Identification and Contact Data
- Full legal name, date of birth, and nationality
- Residential address and postcode
- Email address and phone number
- Username and account password (stored in encrypted form)
- Copies of government-issued ID documents (passport, driver's licence) for KYC verification
2.2 Financial Data
- Payment method details (masked card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
- Transaction history — deposits, withdrawals, bonuses credited or forfeited
- Source-of-funds documentation provided during enhanced due-diligence checks
2.3 Gaming Activity Data
- Game sessions, bet amounts, win/loss history, and bonus usage
- Responsible gambling settings (deposit limits, loss limits, self-exclusion periods)
- Interaction with promotional offers and the VIP programme
2.4 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system, browser type and version
- Session timestamps, log-in and log-out records
- Cookies and similar tracking technologies (see Section 6)
2.5 Communication Data
- Live chat transcripts and support ticket correspondence
- Emails sent to or received from our support team
- Survey responses and feedback you voluntarily provide
2.6 Sensitive Data
We do not intentionally collect sensitive categories of data (health, racial or ethnic origin, political opinions, religious beliefs, etc.). However, if you voluntarily disclose such information — for example when seeking assistance through our responsible gambling tools — we will handle it with the highest level of confidentiality and will only use it to provide the help you have requested.
2.7 Data Received from Third Parties
- Identity and fraud-screening results from KYC/AML service providers
- Payment verification data from payment processors (PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, bank transfer)
- Geolocation signals from IP-intelligence providers used to verify your eligibility to play
- Publicly available information used for enhanced due-diligence purposes
3. How We Collect Your Personal Information
A Big Candy Casino collects user data through a variety of methods:
- Direct submission: when you register an account, complete KYC verification, contact support, or voluntarily provide information through forms on casinosabigcandy.com.
- Automated technical means: via cookies, log files, pixel tags, and similar technologies that record how you interact with our website and mobile application.
- Third-party sources: from payment providers, identity-verification agencies, and fraud-prevention partners who supply additional data points necessary for compliance.
- Device and browser signals: automatically captured when you access our platform on any device, including our Android APK, iOS Progressive Web App, or desktop browser.
4. Why We Process Your Data — Purposes and Legal Basis
Every instance of data processing at A Big Candy Casino is tied to a clearly defined purpose and a recognised legal basis under the Australian Privacy Principles and, where the GDPR applies, under Article 6 GDPR.
| Purpose | Personal Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identification, contact, login credentials | Contract performance; consent |
| Provision of gaming services | Gaming activity, financial, technical | Contract performance |
| KYC / AML compliance obligations | Identification, financial, third-party verification data | Legal obligation |
| Payment processing and fraud prevention | Financial, technical, device data | Legitimate interest; legal obligation |
| Responsible gambling measures | Gaming activity, communication, sensitive (voluntary) | Legal obligation; legitimate interest; consent |
| Marketing and promotional communications | Contact data, gaming preferences | Consent (opt-in) |
| Customer support | Communication data, account data | Contract performance; legitimate interest |
| Platform analytics and improvement | Technical, device, usage data | Legitimate interest; consent (cookies) |
| Legal and regulatory reporting | All categories as required | Legal obligation |
When we rely on legitimate interests as a legal basis, we carry out a balancing test to ensure that our interests do not override your fundamental rights. You may request details of this balancing test by contacting [email protected].
5. A Big Candy Casino Data Protection and Security Measures
A Big Candy Casino data security is built on multiple layers of technical and organisational controls. We take information security extremely seriously, and our infrastructure is designed to protect your personal data at every stage of its lifecycle.
5.1 Technical Safeguards
- 256-bit SSL/TLS encryption on all data transmitted between your device and our servers
- Advanced firewall protection and intrusion detection systems
- Encrypted data storage for sensitive data at rest
- Regular penetration testing and vulnerability assessments
- RNG algorithms certified by independent laboratories, ensuring fair play and integrity of game outcomes
5.2 Organisational Safeguards
- Role-based access controls — staff can only access personal information on a strict need-to-know basis
- Mandatory privacy and data protection training for all employees
- Data breach response procedures with regulatory notification timelines
- Vendor due-diligence processes for all third-party processors
Despite these robust measures, no system is entirely immune to risk. If you suspect that your account has been compromised, please contact [email protected] immediately.
6. A Big Candy Casino Cookie Policy
Our A Big Candy Casino cookie policy governs how we use cookies and similar tracking technologies on casinosabigcandy.com. A cookie is a small text file placed on your device when you visit our website. Cookies help us deliver a personalised, secure, and efficient experience.
6.1 Types of Cookies We Use
| Cookie Category | Purpose | Consent Required? |
|---|---|---|
| Essential / Strictly Necessary | Maintain your session, enable log-in, ensure site security and basic functionality | No — required for the site to function |
| Analytical / Performance | Collect anonymised statistics on page views, traffic sources, and user journeys to improve the platform | Yes — consent via cookie banner |
| Functional | Remember your preferences (language, currency, lobby layout) for a personalised experience | Yes — consent via cookie banner |
| Marketing / Targeting | Serve relevant promotional content and track the effectiveness of our advertising campaigns | Yes — consent via cookie banner |
6.2 Managing Your Cookie Preferences
When you first visit casinosabigcandy.com, a cookie policy banner gives you the option to accept, reject, or customise non-essential cookies. You can update your preferences at any time via the "Cookie Settings" link in our website footer. You may also control cookies through your browser settings; however, disabling certain cookies may limit your access to some features of the site.
7. Sharing Your Data with Third Parties
A Big Candy Casino does not sell your personal information to third parties. We share data only when necessary and always under appropriate contractual protections. The categories of recipients are:
7.1 Payment Service Providers
We share financial and identification data with our payment partners — including providers of PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, and cryptocurrency payment rails — to process deposits and withdrawals securely.
7.2 KYC and AML Verification Partners
Identity and document verification data is shared with accredited third-party KYC/AML providers to fulfil our regulatory obligations. This includes mandatory verification before your first withdrawal.
7.3 Game Software Providers
Limited technical and session data is shared with our 50+ game providers — including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming — solely to enable the delivery of gaming content.
7.4 Regulatory and Law Enforcement Authorities
We may be required by law, court order, or regulatory directive to disclose user data to competent authorities. We will comply with all such requests while endeavouring to protect your privacy rights to the maximum extent possible.
7.5 Analytics and Marketing Technology Providers
Analytical data (often pseudonymised or aggregated) may be shared with analytics platforms and advertising networks to help us understand player behaviour and optimise our marketing. These partners are bound by strict data-processing agreements.
8. International Data Transfers
As a Curaçao-licensed operator serving Australian players, A Big Candy Casino may transfer your personal data across international borders — for example, to servers located in Europe or other jurisdictions where our technology partners operate. Whenever such transfers occur, we implement appropriate safeguards, which may include:
- Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
- Binding corporate rules where transfers occur within a corporate group
- Adequacy decisions where the destination country offers a comparable level of data protection
- Explicit consent where no other mechanism applies and it is appropriate to do so
You may request information about the specific safeguards applicable to any international transfer by writing to [email protected].
9. Data Retention Periods
We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, to comply with our legal obligations, or to resolve disputes. The table below summarises our standard data storage periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identification data | Duration of account + 5 years after closure | AML/KYC legal requirement |
| Financial transaction records | 7 years from transaction date | Tax and regulatory compliance |
| Gaming activity logs | 5 years from account closure | Regulatory audit trail; responsible gambling |
| Communication and support records | 3 years from last interaction | Dispute resolution; service improvement |
| Marketing preferences and consent logs | Until consent is withdrawn, then 1 year | Evidence of consent; legal obligation |
| Technical and log data | 12 months from collection | Security monitoring; fraud prevention |
When your data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked to your identity. A Big Candy Casino data storage practices are reviewed annually to ensure ongoing compliance.
10. Your Privacy Rights
Australian players who use A Big Candy Casino enjoy a comprehensive set of privacy rights under the Australian Privacy Act 1988 and the Australian Privacy Principles. Where the GDPR also applies (for instance, if you are in the EU), additional rights are available. Your A Big Candy Casino privacy rights are outlined below:
10.1 Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is used. We will respond to access requests within 30 days and provide information in a clear, readable format.
10.2 Right to Correction
If any personal information we hold is inaccurate, incomplete, or outdated, you have the right to request a correction. You can update basic account details directly in your player profile, or contact us at [email protected] for more complex amendments.
10.3 Right to Deletion ("Right to be Forgotten")
Subject to our legal retention obligations, you may request that we delete your personal data. We cannot always fulfil deletion requests in full — for example, where data must be retained for AML compliance — but we will delete everything we are legally permitted to remove and explain any limitations.
10.4 Right to Restriction of Processing
You may request that we restrict data processing in certain circumstances — for example, if you contest the accuracy of data while we verify it, or if you object to processing based on legitimate interests while we assess your objection.
10.5 Right to Data Portability
Where our data processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.
10.6 Right to Object
You may object at any time to the processing of your personal information for direct marketing purposes. You can also object to processing based on our legitimate interests, though we may demonstrate compelling legitimate grounds that override your objection in certain situations.
10.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing emails, use the unsubscribe link in any marketing communication or contact [email protected].
To exercise any of these privacy rights, submit a written request to [email protected]. We may ask you to verify your identity before processing your request, to prevent unauthorised access to your account. We aim to acknowledge all requests within 5 business days and to resolve them within 30 days.
11. Responsible Gambling and Data
A Big Candy Casino uses gaming activity data and behavioural analytics as part of its responsible gambling programme. Specifically, we may use your personal data to:
- Monitor playing patterns for signs of problem gambling and trigger proactive outreach
- Enforce self-imposed limits (deposit limits of your choosing, bet limits, loss limits, and session limits)
- Apply cooling-off periods — available in durations of 24 hours, 48 hours, 7 days, or 30 days — automatically when requested
- Implement self-exclusion periods of 6 months, 1 year, 5 years, or permanent exclusion
- Share anonymised data with problem gambling research organisations where permitted by law
Responsible gambling data processing is treated with the highest degree of confidentiality and is only accessible to staff members who require it to provide appropriate support.
12. Children's Privacy
A Big Candy Casino is strictly an adult-only platform. We do not knowingly collect personal information from anyone under the age of 18. If we discover that a minor has provided us with data, we will delete it immediately and close the associated account. If you believe a minor has registered on our platform, please notify us at [email protected] without delay.
13. Supervisory Authority — OAIC
If you believe that A Big Candy Casino has handled your personal data in a way that is inconsistent with the Australian Privacy Principles, you have the right to make a complaint. We encourage you to contact us first at [email protected] so that we can attempt to resolve the matter directly.
If you remain dissatisfied after our internal process, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
If the GDPR applies to your situation, you also have the right to lodge a complaint with the supervisory authority in your EU member state of residence.
14. Changes to This Privacy Policy
We may update the A Big Candy Casino privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address on file) or by displaying a prominent notice on casinosabigcandy.com prior to the change taking effect. The "Last Updated" date at the bottom of this page will always reflect the most recent revision. We encourage you to review this privacy policy periodically to stay informed about how we protect your personal information.
15. Contact Us
For any questions, concerns, or requests relating to A Big Candy Casino data protection or this privacy policy, you can reach us through the following channels:
- Data Protection Officer: [email protected]
- General Support: [email protected]
- Live Chat: Available 24/7 via the chat widget on casinosabigcandy.com
Our customer support team responds to email enquiries within 12 hours, and our live chat agents are available around the clock to assist with any privacy or account-related concerns.
Frequently Asked Questions — A Big Candy Casino Privacy Policy
What personal data does A Big Candy Casino collect?
A Big Candy Casino collects identification data (name, date of birth, address), contact data (email, phone number), financial data (payment details, transaction history), gaming activity data, technical data (IP address, device information), and communication data (support chat logs). Full details are provided in Section 2 of this privacy policy.
How does A Big Candy Casino use cookies?
We use four categories of cookies: essential cookies required for the site to function, analytical cookies to understand usage patterns, functional cookies to remember your preferences, and marketing cookies for targeted promotions. The A Big Candy Casino cookie policy in Section 6 provides a full breakdown. You can manage your cookie preferences via our cookie settings panel at any time.
Is my personal information shared with third parties?
A Big Candy Casino does not sell your data. We share personal information only with payment processors, KYC/AML verification partners, game software providers, and, when legally required, with regulatory authorities. All third-party recipients are bound by contractual obligations to maintain the same standard of data security we apply ourselves.
How long does A Big Candy Casino retain my data?
Data storage periods at A Big Candy Casino depend on the type of data and the legal requirements attached to it. Account data is kept for the duration of your membership plus five years; financial records are held for seven years; support communications for three years. See Section 9 for a full data storage schedule.
How is my data kept secure?
A Big Candy Casino data security relies on 256-bit SSL/TLS encryption for data in transit, encrypted storage for data at rest, advanced firewalls, regular penetration testing, and strict role-based access controls. Our commitment to information security means your personal data is protected by industry-leading safeguards at every touchpoint.
How do I exercise my privacy rights?
To exercise any of your privacy rights — including the right to access, correct, delete, or port your personal data — send a written request to [email protected]. We will verify your identity and respond within 30 days. If you are dissatisfied with our response, you may escalate to the OAIC, as described in Section 13.
Does A Big Candy Casino process data for marketing purposes?
Yes, but only with your explicit consent. If you opt in to marketing communications, we may use your contact details and gaming preferences to send you information about bonuses, promotions, and new game releases. You can withdraw consent and unsubscribe at any time using the link in any marketing email or by contacting [email protected]. Your A Big Candy Casino privacy preferences are always respected.
What is the difference between the Privacy Policy and the Cookie Policy?
The privacy policy covers all forms of personal data processing across our platform. The cookie policy is a focused section within it that deals specifically with how cookies and similar tracking technologies are deployed on casinosabigcandy.com. Both form part of A Big Candy Casino's overall commitment to transparent data protection.
Last updated: August 2026. This document supersedes all previous versions of the A Big Candy Casino privacy policy.