Legal
Privacy Policy
Wild Tokyo Casino operates as an offshore interactive gambling service under a licence issued by the Curacao Gaming Control Board. This document explains how we handle personal information belonging to Australian residents who register and play on the platform. The main advantage of a written policy is transparency, and we treat it as a working commitment rather than a formality.
Who Controls Your Information
The operator of wildtokyo.com is GBL Solutions N.V., a company registered under the laws of Curacao. Under the Privacy Act 1988 and the Australian Privacy Principles, we act as the entity responsible for the collection, storage and use of personal information about players located in Australia, even though the servers and corporate seat sit outside your jurisdiction. Worth keeping in mind: your data crosses borders the moment you register, and the platform is not supervised by an Australian regulator.
The main drawback of an offshore setup is limited local recourse. If a dispute cannot be resolved directly with us, the Office of the Australian Information Commissioner may accept a complaint, but enforcement against a Curacao-licensed operator is not the same as enforcement against a locally licensed one.
What We Collect
Registration requires a full name, date of birth, email address, phone number, residential address and a password. During identity verification we also collect scans or photographs of your identity document, a proof of address no older than three months, a screenshot of the payment instrument used to fund the account and, when the risk department requests it, a selfie holding the identity document. Payment information includes card details in truncated form, e-wallet identifiers and bank account references such as BSB and account number where relevant.
Beyond what you provide, we automatically log technical information about each session: IP address, device model, operating system, browser fingerprint, approximate geolocation derived from the IP, wager history, deposit and withdrawal records, and behavioural patterns used for responsible gambling monitoring and anti-fraud checks.
Why We Collect It
Personal information is collected to open and maintain your account, process financial transactions, run identity and source-of-funds checks, comply with anti-money laundering obligations under the Curacao National Ordinance and equivalent international standards, and to detect fraud, collusion, bonus abuse and use of prohibited software. It is also used to send transactional emails, respond to support requests and, where you have opted in, deliver marketing messages about promotions and tournaments.
Worth keeping in mind that the lawful basis for most of this processing is either the contract between you and the operator or a legal obligation binding the operator, not your standalone consent. Withdrawing consent will not switch off the checks required by AML law.
How Long We Keep It
Account records, transaction logs and KYC documents are retained for the full period of the account relationship and for at least ten years after account closure, in line with anti-money laundering record-keeping standards recognised by the Curacao regulator and by AUSTRAC-aligned practice. Marketing preferences are held until you unsubscribe. Session logs used for fraud and responsible gambling monitoring are kept for shorter cycles, typically twelve to twenty-four months, and then aggregated.
Who Sees Your Information
We share personal information with payment processors that execute deposits and withdrawals, KYC providers that verify identity documents, game and live-casino studios that supply the software, cloud hosting providers, analytics vendors and, when we are legally required, with regulators, law-enforcement bodies and courts. All third-party recipients are bound by written contracts covering confidentiality and security.
The main drawback of using specialist vendors is that your information moves through several jurisdictions, including the European Economic Area, the United Kingdom and Curacao itself. Cross-border transfer safeguards depend on the country involved and, in some cases, rely on the recipient’s own certifications rather than direct Australian oversight.
Your Rights
You may request access to your personal information, correction of inaccurate records, deletion of information no longer needed for the purposes above and a copy of your data in a portable format. Marketing consent can be withdrawn at any time through the account settings or by replying to any promotional email. Requests are handled through the support desk and answered within a reasonable period, typically thirty days.
Deletion is not absolute. Records that we are required to hold under anti-money laundering, tax or dispute-resolution rules will remain in restricted storage until the retention period expires. This is a legal limit on the right to erasure, not a discretionary choice.
Security
Traffic between your device and our servers is encrypted. Payment data is handled inside PCI-DSS-scoped systems operated by our processors, and internal access to KYC files is limited to trained staff on a need-to-know basis. Two-factor authentication is available for player accounts and we recommend enabling it. No system is completely immune to breach, and if a data incident materially affects you, we will notify you and, where required, the relevant regulator.
Children
The service is for adults only, meaning eighteen years or older. We do not knowingly collect information from minors. If we discover that an account has been opened by someone under eighteen, we will close it, void any winnings and, where applicable, forfeit deposits to the regulator, in line with the platform’s terms.
Changes
Material changes to this policy are communicated by email and posted on the site. Continued use of the account after a change means you have read the updated version.
Effective from publication | https://wildtokyo.com.au | [email protected]