Your privacy, our responsibility

This Privacy Policy explains what personal data we at Shark Casino collect when you play at sharkcasino-aud.com, why we collect it, who we share it with, and the rights you hold over it. We are licensed by the Malta Gaming Authority (MGA/B2C/531/2019) and apply GDPR-standard protections for every player, regardless of location.

What data we collect

We collect only the data we need to run your account, meet our licence obligations and keep the site safe. That collection starts the moment you register and continues with every deposit, spin and withdrawal you make.

• Identity data: name, date of birth, email address, phone number, residential address
• Verification documents: passport or driver's licence, proof of address, payment method verification for KYC
• Transaction data: deposits, withdrawals, bonuses claimed, wagering records in AUD, BTC, ETH or USDT
• Technical data: IP address, device type, browser, operating system, session logs
• Gameplay behaviour: games played, bets placed, win/loss history, session duration
• Marketing preferences: whether you opted in to promotions, bonus offers and tournament emails

How we use your data

Every use of your data maps to a specific purpose. We do not profile you for anything beyond fraud prevention and responsible-gambling monitoring, and we never sell your data.

• Creating and managing your player account
• Verifying your identity and age before your first withdrawal (KYC)
• Processing deposits and withdrawals through PayID, cards, e-wallets and crypto
• Detecting fraud, bonus abuse and multi-accounting
• Monitoring play for responsible-gambling indicators and enforcing deposit or loss limits
• Sending marketing offers only where you have given consent
• Meeting legal, tax and MGA regulatory obligations

Our legal bases explained

Contract

To open an account and let you play, we must process your identity and transaction data. Without it we cannot deliver the service you signed up for, including your 100% welcome bonus up to 160 AUD and its 38x wagering.

Legal obligation

MGA licence conditions and anti-money-laundering law require us to verify your identity, monitor transactions and keep records for set periods. We cannot skip these steps even if you ask us to.

Legitimate interest

We process technical and gameplay data to detect fraud, secure the platform and enforce our terms. This interest is weighed against your rights, and we keep the data minimal for the purpose.

Consent

Marketing emails, SMS offers and non-essential cookies run only on your consent. You can withdraw it at any time via account settings or the unsubscribe link, at no cost to your account.

How long we keep it

Retention depends on the type of data. Regulatory rules set minimums we cannot shorten, and marketing data is deleted as soon as you ask.

Who we share it with

We share data only with parties who need it to deliver a service you use, and always under a data-processing agreement that limits their use of it.

• Payment processors handling your deposits and withdrawals
• KYC and AML verification providers checking your documents
• The Malta Gaming Authority and other regulators, on request
• Game and platform providers hosting the 1000 titles in our lobby
• Analytics providers measuring site performance in aggregate
• IT and security vendors protecting our infrastructure

Your rights over your data

You control your data. Submit any request through [email protected] or live chat (24/7) and we respond within 30 days. Proof of identity may be required before we act.

• Access: get a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete records
• Erasure: request deletion where no legal retention duty applies
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: stop marketing at any time
• Complain: escalate to the Office of the Australian Information Commissioner (OAIC) or the relevant data protection authority

Cookies and tracking

We use essential cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that load only with your consent. The cookie banner on your first visit sets your choices, and you can change them any time in your account settings. Full details, including the list of cookies we set, are on our separate Cookies Policy page.

How we protect your data

All traffic to and from sharkcasino-aud.com is encrypted with TLS. Data at rest is encrypted on our servers, and access is limited to staff who need it for support, payments or compliance, each bound by confidentiality obligations and two-factor authentication.

We log every access to player records and review those logs regularly. If a breach affects your personal data, we notify the relevant supervisory authority within 72 hours and inform you directly where the risk to you is high.

Frequently Asked Questions

How do I request a copy of my data?

Email [email protected] or message our 24/7 live chat. We verify your identity and send the full record within 30 days.

Can I close my account and have my data deleted?

Yes. Closure and erasure requests are handled immediately for marketing data. Identity and transaction records are retained for 5 years after closure, because MGA rules require it.

Do you share my data with advertisers?

No. We never sell or rent your personal data. Analytics providers receive aggregate data only, and marketing runs on our own systems with your consent.

Why do you need my ID before withdrawal?

Our MGA licence and anti-money-laundering law require us to verify every player before the first withdrawal. This is the KYC check described in this policy.