Privacy Policy

This Privacy Policy explains how 7Bit Casino, operated via the website bet7bit-au.com ("we", "us", "our", "7Bit Casino"), collects, uses, discloses and protects personal information. It applies to all players and visitors who access or use bet7bit-au.com and any related services. By using our website, creating an account or otherwise providing personal information, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and is intended to align with the Australian Privacy Act 1988 (Cth), relevant international standards (including the GDPR and Mexican privacy law) to the extent they apply.

Who We Are

OBSERVE: Users need to know who controls their data and how to contact them. EXPAND: We operate from Curaçao with a Cyprus payment processor and target Australian users. REFLECT: We clearly identify each legal entity and provide dedicated privacy contacts.

The online casino service marketed as 7Bit Casino and accessible at bet7bit-au.com is owned and operated by:

• Data controller / operator: Dama N.V., a company registered under the laws of Curaçao
• Registration number: 152125
• Registered & legal address: Scharlooweg 39, Willemstad, Curaçao
• Gaming licence: Sub-licence 8048/JAZ2020-013 issued by Antillephone N.V., under the authority of the Government of Curaçao

For certain fiat payment transactions, we use our wholly owned subsidiary:

• Payment processor: Friolion Limited
• Jurisdiction: Cyprus
• Registration number: HE 419102

For Australian privacy law purposes, Dama N.V. is an overseas "APP entity" responsible for your personal information collected via bet7bit-au.com.

Data Protection Contact

• Data Protection Officer (DPO) / Privacy Team: Dama N.V. - Privacy Department
• Email (privacy inquiries): [email protected]
• General support email: [email protected]
• Website: https://bet7bit-au.com
• Live chat: 24/7 via the live chat widget available on the website
• Postal contact (privacy): Dama N.V. - Privacy Department, Scharlooweg 39, Willemstad, Curaçao

You may contact our DPO or Privacy Team at any time with questions, requests or complaints about how 7Bit Casino handles your personal information.

What Personal Data We Collect

OBSERVE: Operating an online casino requires identity, technical, payment and behavioural data. EXPAND: Some data is provided directly by you, while other data is generated or collected automatically (including via cookies). REFLECT: We group data into clear categories so you understand what we hold about you.

Account & Identification Data

• Basic identification: full name, date of birth, country of residence, residential address, username, password, preferred language.
• Contact details: email address, phone number (if provided), communication preferences.
• KYC/verification data: copies or details of identity documents (e.g., passport, ID card, driver licence), proof of address (e.g., utility bill, bank statement), payment method ownership proof, and any additional documentation requested under KYC/AML obligations.

Technical & Usage Data

• Technical identifiers: IP address, device identifiers, operating system, browser type and version, screen resolution, language settings.
• Log data: access dates and times, pages viewed, login attempts, session duration, referrer URLs, clickstream data, error logs.
• Security-related data: device fingerprints, failed login information, suspected fraud patterns and associated technical metadata.

Payment & Financial Data

• Transaction records: deposits, withdrawals, bonuses credited, winnings, losses, currency, payment timestamps, transaction identifiers.
• Payment instrument data: partially masked card numbers, card type, cardholder name, expiry date, e-wallet identifiers, bank account details (to the extent required to process payments) handled by us or our processors (including Friolion Limited and other licensed payment partners).
• Anti-fraud and AML data: risk scores, source-of-funds information, transaction monitoring flags, sanctions and PEP screening results where applicable.

Behavioural & Gaming Data

• Gameplay history: games played, stakes, bet sizes, bet frequency, wins and losses, jackpots, bonuses used, tournaments joined.
• Website interaction data: clicks, navigation paths, time spent on pages, interaction with promotions, response to marketing campaigns.
• Responsible gambling data: self-exclusion settings, deposit and loss limits, cooling-off requests, communications related to gambling behaviour.

Communications & Support Data

• Customer support records: chat logs, emails, complaint records, call-related notes (if any), and internal summaries.
• Marketing communications: records of your subscription status, opt-in/opt-out choices, marketing channels used and engagement metrics.

Cookies & Similar Technologies

• Cookies: small text files stored on your device to recognise your browser and remember your preferences.
• Similar technologies: web beacons, tracking pixels, local storage, device fingerprinting and analytics tags used for security, analytics and advertising.

We do not intentionally collect data about persons under 18 years of age. If we become aware that we hold personal information about a minor, we will take reasonable steps to delete it.

Legal Basis for Processing

OBSERVE: Our processing must comply with Australian Privacy Principles and, where relevant, GDPR and Mexican law. EXPAND: Different activities rely on different lawful grounds. REFLECT: We map our core operations to clear legal bases.

Consent

• When it applies:
  • optional marketing communications (email, SMS, push);
  • non-essential cookies and tracking technologies (analytics, advertising);
  • certain KYC/verification steps in jurisdictions that require explicit consent in addition to legal obligations.
• Legal references: Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs), EU GDPR Art. 6(1)(a), Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) on express or implied consent where applicable.

Contract Performance

• Purpose: To enter into and perform our contract with you, including:
  • creating and managing your player account;
  • processing deposits, bets and withdrawals;
  • providing our gaming services and customer support;
  • honouring bonuses and loyalty programs;
  • resolving disputes and handling chargebacks.
• Legal references: Necessary for the performance of a contract or to take steps at your request prior to entering into a contract (e.g., GDPR Art. 6(1)(b); conceptually similar under Australian and Mexican privacy frameworks).

Compliance with Legal Obligations

• Purpose: To comply with:
  • anti-money laundering (AML) and counter-terrorism financing (CTF) obligations;
  • fraud, crime and sanctions screening requirements;
  • tax and accounting rules;
  • record-keeping duties imposed by regulators (e.g., Curaçao licensing authorities) and by generally applicable laws.
• Legal references: GDPR Art. 6(1)(c) (where applicable), LFPDPPP obligations, and our duties as a licensed operator under Curaçao law and other applicable regimes.

Legitimate Interests

• Purpose: We process certain data where this is necessary for legitimate interests that are not overridden by your rights, such as:
  • protecting our platform, players and systems against fraud and abuse;
  • maintaining IT security and preventing unauthorised access;
  • performing analytics to improve our services, games and user experience;
  • personalising content and promotions (subject to applicable consent requirements);
  • defending and exercising legal claims.
• Legal references: GDPR Art. 6(1)(f) (where applicable), principles of necessity and proportionality under Australian Privacy Act and Mexican LFPDPPP.

Where we rely on consent, you may withdraw it at any time (see "Your Rights" below). Where we rely on other legal bases, we may continue processing even if you object, provided the law allows us to do so.

Purpose of Processing

OBSERVE: Players must understand why their data is used. EXPAND: We distinguish operational, legal, marketing and security purposes. REFLECT: We provide granular, purpose-based explanations.

Provision of Casino Services

• Creating and administering player accounts for 7Bit Casino on bet7bit-au.com.
• Allowing you to deposit, wager, participate in games, tournaments and promotions, and withdraw winnings.
• Providing 24/7 customer support via live chat and email.

Regulatory Compliance & Risk Management

• Verifying your identity, age and residency (KYC checks).
• Conducting AML/CTF screening, source-of-funds and enhanced due diligence when required.
• Maintaining appropriate records for regulators, auditors and tax authorities.
• Preventing, detecting and investigating fraud, money laundering, abuse, chargebacks and security incidents.

Service Improvement & Analytics

• Monitoring website performance and usage patterns to improve navigation, game selection and features.
• Conducting statistical analyses of bets, game performance and product usage.
• Testing new features and offerings in a controlled manner.

Marketing & Personalisation

• Sending you promotional offers, newsletters, bonuses and surveys (where permitted by law and your preferences).
• Segmenting players for tailored promotions and loyalty campaigns.
• Using analytics and cookies to measure campaign effectiveness and avoid irrelevant or excessive marketing.

Legal Claims & Business Operations

• Handling disputes, complaints and chargebacks, and enforcing our Terms & Conditions.
• Protecting our rights, property, staff and players in legal or regulatory proceedings.
• Managing corporate operations such as audits, risk assessments and compliance reviews.

Disclosure & Sharing

OBSERVE: Casino operations require multiple third parties. EXPAND: We differentiate between processors, partners and authorities. REFLECT: We explain when, why and with whom data is shared.

Group Companies & Payment Processors

• Internal affiliates: Dama N.V. and its Cyprus subsidiary Friolion Limited may share data for payment processing, fraud checks, customer support and compliance.
• Payment service providers: Banks, card schemes, e-wallets, payment gateways and crypto payment processors receive data necessary to process deposits, withdrawals and refunds.

Service Providers & Contractors

• IT and hosting providers: Cloud infrastructure, data storage, content delivery networks, email service providers and SMS gateways.
• Game providers & platform vendors: Third-party game studios and platform providers (e.g., SoftSwiss-based providers) processing gameplay data to deliver games and validate outcomes.
• Analytics & security vendors: Tools for website analytics, fraud detection, anti-bot solutions and security monitoring.

Regulators, Authorities & Dispute Bodies

• Regulators and law enforcement: Curaçao licensing authorities, financial intelligence units, courts, police and other competent authorities when required by law or in connection with suspected illegal activity or regulatory investigations.
• Alternative dispute resolution (ADR): If you file a complaint via third-party ADR platforms (for example, recognised gambling complaint portals), we may share necessary case information to resolve the dispute.

Affiliates & Marketing Partners

• Affiliate networks: We may share limited performance and tracking data with affiliates that referred you, to calculate commissions.
• Advertising partners: With your consent where required, we may use advertising networks, remarketing services and social media platforms that receive pseudonymised identifiers and cookie-based information.

Corporate Transactions

• In the event of a merger, acquisition, sale of assets, restructuring or similar transaction involving 7Bit Casino or Dama N.V., your data may be transferred as part of that transaction, subject to confidentiality and applicable law.

We do not sell your personal information as understood under many privacy regimes. Any sharing is limited to the purposes set out in this Privacy Policy and subject to appropriate safeguards and contractual obligations.

International Transfers

OBSERVE: Data of Australian players is processed internationally. EXPAND: We must describe where data goes and which safeguards apply. REFLECT: We explain transfers in a transparent, jurisdiction-aware way.

Locations of Processing

• Curaçao: Core operational and account data is processed by Dama N.V. at its registered office and associated data centres.
• Cyprus and other EEA countries: Payment processing and some support/administrative functions may be operated from or through Cyprus or other EEA locations.
• Other countries: Certain cloud, analytics, email and security providers may process data in the European Economic Area, the United Kingdom, the United States or other jurisdictions, depending on their infrastructure.

Safeguards for Cross-Border Transfers

• We select providers that implement robust technical and organisational security measures.
• Where required under GDPR and other laws, we use appropriate safeguards such as:
  • European Commission Standard Contractual Clauses (SCCs) or equivalent contractual protections;
  • data processing agreements that include confidentiality, security and audit obligations;
  • reliance on participation in recognised international frameworks (such as the EU - U.S. Data Privacy Framework or its successors), where applicable.
• By using bet7bit-au.com, you understand that your information may be processed outside your country of residence, including in countries that may have different data protection standards than those in your home jurisdiction. We take reasonable steps to ensure that your privacy remains adequately protected.

Data Retention

OBSERVE: Laws (especially AML/CTF) often require long retention. EXPAND: We must balance this with minimisation principles. REFLECT: We set category-based timeframes and deletion criteria.

Retention Periods

• Account & KYC data: Generally retained for the life of your account and for up to 5 years after account closure, or longer if required by AML/CTF, tax or regulatory obligations.
• Transaction & financial records: Retained for at least 5 - 7 years after the relevant transaction or account closure, in line with accounting and AML requirements.
• Gameplay & behavioural data: Retained while your account is active and for a reasonable period (typically up to 5 years) after closure for fraud prevention, dispute resolution and legal claims.
• Marketing data: Retained until you withdraw consent or opt out, and thereafter kept only as necessary to maintain a record of your preferences and to comply with law.
• Support & complaint records: Retained for the duration of the issue and for a subsequent period (typically 3 - 5 years) for legal and quality assurance purposes.
• Cookies & tracking data: Stored in accordance with their individual lifetimes (see browser settings and our cookie controls), typically ranging from session-only to several months or years for certain preferences and analytics cookies.

Deletion & Anonymisation

• When data is no longer needed for the purposes described in this Privacy Policy, or when legal retention periods expire, we will either securely delete or irreversibly anonymise the information.
• We may keep anonymised or aggregated data (which does not identify you) for statistical, analytical or business planning purposes indefinitely.

Your Rights

OBSERVE: Different laws grant overlapping but not identical rights. EXPAND: We harmonise these rights for transparency. REFLECT: We provide one coherent set of rights aligned with GDPR, Australian and Mexican requirements, plus practical procedures.

Overview of Your Rights

Depending on your location and the laws that apply to you (including the EU/UK GDPR, the Australian Privacy Act 1988 (Cth) and the Mexican LFPDPPP), you may have some or all of the following rights:

• Right of access: to obtain confirmation whether we process your personal data and to receive a copy of that data, together with information about how it is used.
• Right to rectification (correction): to ask us to correct inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): to request deletion of your personal data in certain circumstances (for example, where it is no longer needed, or you withdraw consent and there is no other legal basis), subject to our legal retention obligations.
• Right to restriction of processing: to request that we limit the processing of your personal data in specific situations (e.g., while we verify the accuracy of your data or a legal claim).
• Right to object: to object at any time to processing based on our legitimate interests, including profiling, and to object specifically to direct marketing (after which we will stop such marketing).
• Right to data portability: where technically feasible and required by law, to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
• Right to withdraw consent: where we rely on consent (e.g., marketing, non-essential cookies), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Rights under Mexican law (LFPDPPP): similar ARCO rights (Access, Rectification, Cancellation and Opposition) with respect to your personal data processed by private parties, to the extent that law applies to you and to our activities.

How to Exercise Your Rights

1. Submit a request: Contact us via:
   • Email: [email protected]
   • Live chat on bet7bit-au.com (request to speak to the Privacy Team)
   • Postal mail: Dama N.V. - Privacy Department, Scharlooweg 39, Willemstad, Curaçao
2. Provide necessary information: Indicate which right you wish to exercise and provide sufficient information to identify your account (e.g., username, registered email) so we can verify your identity.
3. Verification: For security, we may request additional information or documents to confirm that you are the account holder or authorised representative.
4. Response time: We aim to respond to all valid requests within 30 days of receipt. If a request is particularly complex or numerous, we may extend this period once by up to a further 30 days, and we will inform you of any extension and reasons.
5. Fees: Requests are handled free of charge, unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act in accordance with applicable law.

Please note that these rights are not absolute. We may be unable to fully comply with a request if doing so would conflict with our legal obligations (for example, AML record-keeping) or the rights of other individuals. Where we refuse or limit a request, we will explain the reasons, subject to legal restrictions.

Cookies & Tracking Technologies

OBSERVE: Cookies are essential for gaming platforms but also used for analytics and marketing. EXPAND: We classify them and explain controls. REFLECT: We give you clear choices consistent with best practice.

Types of Cookies We Use

• Strictly necessary (functional) cookies: Required for the website to function, such as enabling logins, maintaining sessions, processing bets, securing transactions and remembering your privacy preferences. These cannot be switched off in our systems.
• Performance & analytics cookies: Help us understand how visitors use bet7bit-au.com (for example, which pages are most popular, how long sessions last, where errors occur) so we can improve our services.
• Preference cookies: Store your choices such as language, currency, region and display settings.
• Advertising & marketing cookies: May be set by us or our advertising partners to build a profile of your interests and show relevant ads, limit ad frequency and measure campaign performance. These often rely on unique identifiers and may involve third-party networks.
• Third-party cookies: Set by external providers integrated into our site (e.g., analytics, fraud prevention, game providers, social media plug-ins) and subject to those providers' own privacy policies.

Managing Cookies

• You can manage or disable cookies through:
  • Browser settings: Most browsers allow you to block or delete cookies. Disabling strictly necessary cookies may impair the functioning of bet7bit-au.com, including access to your account and games.
  • On-site controls: Where available, our cookie banner or preference centre allows you to accept or reject certain categories of non-essential cookies.
• You may also opt out of certain interest-based advertising via industry tools (for example, network advertising opt-out platforms), subject to each tool's availability in your region.

Data Security

OBSERVE: Online casinos process sensitive financial and identity data. EXPAND: We need layered technical and organisational measures. REFLECT: We summarise our security posture in an accessible but concrete way.

Technical Measures

• Encryption in transit: Data transmitted between your browser and bet7bit-au.com is protected using Transport Layer Security (TLS) version 1.2 or higher, wherever technically supported.
• Encryption at rest: Sensitive data (including authentication credentials and certain financial information) is stored using industry-standard encryption or hashing algorithms.
• Access controls: Access to production systems and databases is restricted on a need-to-know and role-based basis, protected by strong authentication (including multi-factor authentication for administrative accounts, where applicable).
• Network protection: Firewalls, intrusion detection/prevention systems and DDoS protection help safeguard our infrastructure.
• Logging & monitoring: Security logs and alerts are used to detect suspicious activities, fraud attempts and system anomalies.

Organisational Measures

• Policies & training: Staff with access to personal data are bound by confidentiality obligations and receive regular training on data protection, security and responsible handling of player information.
• Vendor management: We assess key service providers and include data protection and security clauses in contracts.
• Security reviews: Our systems are subject to ongoing technical maintenance, vulnerability management and periodic security assessments. We seek to align our practices with recognised security standards (such as ISO/IEC 27001 principles and comparable frameworks) and use third-party providers who may hold certifications such as ISO 27001 or SOC 2.

Incident Response

• We maintain procedures to detect, investigate and respond to potential data breaches or security incidents.
• Where required by law, we will notify the relevant supervisory authorities and affected individuals of a qualifying data breach without undue delay, providing information about the nature of the breach, likely consequences and measures taken or proposed to address it.

While we take reasonable steps to protect your information, no system can be guaranteed to be 100% secure. You are responsible for keeping your account credentials confidential and using unique, strong passwords.

Complaints & Contacts

OBSERVE: Users need accessible complaint paths. EXPAND: We define internal escalation then external regulators. REFLECT: We give clear steps, timeframes and contact details, including for Mexican and EU authorities.

Contacting Us First

1. Initial inquiry: If you have questions, concerns or complaints about this Privacy Policy or our handling of your personal data, please contact:
   • Email: [email protected]
   • Live chat: via bet7bit-au.com (request escalation to the Privacy Team)
   • Postal: Dama N.V. - Privacy Department, Scharlooweg 39, Willemstad, Curaçao
2. Acknowledgement & investigation: We aim to acknowledge your complaint promptly and to investigate it carefully. We will typically provide a substantive response within 30 days of receiving all relevant information.
3. Further steps: If we need more time due to complexity, we will let you know and provide an updated timeframe. We will also explain any decisions we make and options available to you.

Escalation to Supervisory Authorities

If you are not satisfied with our response, or you believe your privacy rights have been infringed, you may have the right to lodge a complaint with a data protection authority:

• Australia - Office of the Australian Information Commissioner (OAIC)
  • Website: https://www.oaic.gov.au
  • Complaints guidance and forms are available on the OAIC website.
• European Union / EEA / UK - Data Protection Authorities
  • If the GDPR or UK GDPR applies to you, you may complain to your local supervisory authority in the country of your habitual residence, place of work or alleged infringement.
  • A list of EU supervisory authorities is available via the European Data Protection Board: https://edpb.europa.eu/about-edpb/about-edpb/members_en
• Mexico - National Institute for Transparency, Access to Information and Personal Data Protection (INAI)
  • Website: https://www.inai.org.mx
  • INAI provides procedures for asserting ARCO rights and filing complaints regarding personal data under Mexican law.

We encourage you to contact us first, so we can attempt to resolve your concern directly and efficiently.

Updates

OBSERVE: Privacy practices may evolve. EXPAND: We need version control and notice mechanisms. REFLECT: We define how and when users are informed about changes.

Changes to This Privacy Policy

• We may update this Privacy Policy from time to time to reflect changes in laws, regulatory guidance, our services, technologies or business practices.
• Each version will be identified by a "Last updated" date at the end of the document.

Notification Procedures

• Minor changes: For non-material updates (for example, clarifications or formatting changes), we may simply post the updated Privacy Policy on bet7bit-au.com without additional notice.
• Material changes: For significant changes that affect how we process your data or your rights, we will provide additional notice, which may include:
  • email notifications sent to the address registered to your account;
  • prominent banners or pop-up notices on bet7bit-au.com;
  • alerts within your account dashboard when you next log in.
• Advance notice: Where feasible and required, we will provide at least 30 days' advance notice before material changes take effect, so you can review them.

Your Options

• If you continue to use bet7bit-au.com after the effective date of an updated Privacy Policy, you will be deemed to have accepted the changes, to the extent allowed by law.
• If you do not agree with material changes, you may choose to stop using our services and request account closure. We will continue to process your data as necessary to comply with our legal obligations and to the extent permitted by applicable law.

Last updated: January 2026