Privacy Policy
This Privacy Policy explains how Casino Mate, operating via the website mate-au.com (the "Site"), collects, uses, discloses and protects personal information of players and other visitors. It applies to all individuals who access or use the Site, create an account, participate in games, contact support or otherwise interact with Casino Mate online. By using the Site, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective from 1 January 2026 and replaces any prior versions published on mate-au.com.
Who We Are
The online casino service marketed as Casino Mate and made available through mate-au.com (together, "Casino Mate", "we", "us", "our") is operated by an offshore online gambling operator that uses infrastructure and licensing arrangements based in Curaçao and related payment-processing structures in Cyprus.
According to available information, the platform operates under, or in reliance on, the master licence infrastructure Antillephone N.V. 8048/JAZ in Curaçao. The precise legal entity name, company registration number and registered office address of the operating company have not been publicly disclosed on mate-au.com as at 2026 and therefore cannot be reliably reproduced here. Once these details are officially published on mate-au.com, they should be treated as forming part of this Privacy Policy.
For privacy and data-protection matters, Casino Mate assigns responsibility to its internal Data Protection Team.
How to Contact Us About Privacy
- Primary channel: Use the support contact methods provided on mate-au.com (in
Introduction (OBSERVE -> EXPAND -> REFLECT): This Privacy Policy explains how Casino Mate (the "Service") collects, uses, stores, and shares personal information when you visit or use https://mate-au.com, including when you register, deposit, play, or contact support. OBSERVE: users need clear notice about data handling. EXPAND: because online gambling involves identity checks, payments, and fraud monitoring, privacy terms must be explicit and legally defensible. REFLECT: this policy applies to website visitors, account holders, and players interacting with mate-au.com features, communications, and linked services. Effective date: 6 November 2026.
Who We Are
OBSERVE: The casino profile available for Casino Mate contains incomplete operator identity details (legal entity name, registration number, and legal address are not specified). EXPAND: AU privacy transparency expectations (including under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)) require us to identify the entity controlling personal information and provide a reliable contact point. REFLECT: until the operator's legal identity is formally published, we provide the most accurate disclosure possible and a dedicated privacy contact channel; we also describe how you can escalate concerns externally.
- Service / Brand: Casino Mate, operating online as Casino Mate via https://mate-au.com (previous/origin domain referenced in legacy materials: casino-mate.com).
- Operator (legal entity): Not specified (needs clarification/publishing by the operator).
- Legal address: Not specified.
- Registration details (company no., tax ID): Not specified.
- Reported operational/regional notes (not a substitute for legal identity):
- Curacao: reported infrastructure under a Curacao master license, likely Antillephone N.V. 8048/JAZ (reported; not officially confirmed for this exact website entity; expiry not specified).
- Cyprus: reported payment-processing shell-entity presence (address not specified).
- Australia: the service is described as not holding an Australian licence and may be considered an unlawful offshore interactive gambling service for Australian residents under the Interactive Gambling Act 2001 (Cth).
Privacy Contact (Data Protection / Privacy Team)
OBSERVE: The provided profile lists privacy and support contact points as "not specified." EXPAND: users must still have a clear route to submit privacy requests and complaints. REFLECT: until official contact details are published in the account dashboard or site footer, use the channels below as they appear within mate-au.com at the time of your request, and keep screenshots/receipts of submissions.
- Privacy / DPO email: Not specified (use the privacy/contact channel displayed within your mate-au.com account area or support interface).
- Support email: Not specified.
- Phone (main office): Not specified.
- Phone (support): Not specified.
- Support chat or form: Not specified (profile indicates support via chat is available, but no direct URL is provided).
- Postal address for notices: Not specified.
What Personal Data We Collect
OBSERVE: operating an online casino typically requires account data, verification (KYC), payments, device/security data, and gameplay records. EXPAND: offshore gambling models may also rely on third-party processors and anti-fraud vendors, increasing the number of data flows. REFLECT: we categorize the personal information that may be collected on mate-au.com so you can understand what is collected, from where, and why.
Data you provide directly
- Identification & account data: full name, date of birth, username, password (stored in hashed form), email address, phone number, residential address, nationality/country of residence, and account preferences.
- KYC/verification data: copies/photos of identity documents, proof of address, selfie/liveness checks (where used), and age/identity verification results.
- Communications: messages to support, chat transcripts, emails, complaint submissions, call recordings (if calls are used), and any attachments you provide.
Data collected automatically
- Technical data: IP address, approximate location derived from IP, device identifiers, device type, operating system, browser type, language, time zone, referral URLs, and crash/error logs.
- Usage & behavioral data: pages viewed, clicks, session durations, game interactions, feature usage, and aggregated engagement metrics.
- Gaming activity data: gameplay records, betting history, win/loss history, bonus usage, session timestamps, and responsible gambling tool usage (where available).
Payments & financial data
- Transaction data: deposits, withdrawals, chargebacks, payout confirmations, transaction timestamps, amounts, currency, and payment status.
- Payment instrument data: limited card details (typically tokenised), bank/processor routing references, e-wallet identifiers, and processor risk scores (depending on the payment method used).
- Compliance flags: AML/CTF screening outcomes, fraud indicators, and internal risk assessments connected to transactions.
Cookies and similar technologies
OBSERVE: mate-au.com uses technologies that store or access information on your device. EXPAND: these may be first-party and third-party (analytics/advertising). REFLECT: details are explained in the "Cookies & Tracking Technologies" section, including how to control them.
Legal Basis for Processing
OBSERVE: In Australia, the Privacy Act 1988 and APPs focus on lawful, fair, and transparent handling rather than a single "legal basis" taxonomy. EXPAND: because mate-au.com may also interact with international service providers, we align our explanations with widely used global frameworks (e.g., GDPR-style bases) as an interpretive mapping, without suggesting that GDPR applies in all cases. REFLECT: we process your data only when we have a valid justification, as set out below.
- Consent: where you opt in to marketing communications, non-essential cookies, or specific optional features. You may withdraw consent at any time (see "Your Rights").
- Contract performance: to create and administer your account, provide casino gameplay, process deposits/withdrawals, apply bonuses, and provide customer support in line with the mate-au.com Terms and operational rules.
- Legitimate interests: to maintain platform security, prevent fraud/abuse, measure performance, improve user experience, run internal analytics, and protect our legal rights - balanced against your privacy expectations.
- Compliance with legal obligations: where we must perform verification (KYC), AML/CTF-style screening, financial recordkeeping, responding to lawful requests, and meeting reporting obligations that may apply to our service providers and operational infrastructure.
Purpose of Processing
OBSERVE: users need a clear "why" for each main data use. EXPAND: gambling services add risk controls (fraud, AML) and player protection signals. REFLECT: we use personal information on mate-au.com for the following purposes.
- Providing the service: registration, authentication, account management, gameplay delivery, bonus administration, and customer support.
- Payments and payouts: processing deposits/withdrawals, transaction confirmations, reconciliation, dispute handling, and chargeback management.
- Security, integrity, and fraud prevention: detecting suspicious activity, enforcing platform rules, preventing account takeover, and investigating breaches or prohibited activity (including VPN-related risk where relevant to verification and anti-fraud controls).
- Compliance and risk management: KYC/AML screening, recordkeeping, auditing, and responding to lawful requests.
- Analytics and improvement: measuring usage, diagnosing technical issues, improving games and features, and monitoring performance.
- Marketing (where permitted): sending promotional messages, segmented offers, and loyalty communications, subject to your preferences and applicable rules (including consent where required).
Disclosure & Sharing
OBSERVE: mate-au.com relies on third parties to operate payments, hosting, analytics, and security. EXPAND: sharing must be limited, purpose-bound, and protected by contractual safeguards consistent with APP 6 (use/disclosure) and APP 11 (security). REFLECT: we disclose personal information only as necessary and proportionate for the purposes described in this policy.
- Payment partners and financial service providers: banks, card networks, payment gateways, e-wallet providers, fraud screening partners, and chargeback handlers. Note: the profile indicates Australian banks may block offshore merchant codes; therefore, third-party processors and alternative channels may be used, which can increase the number of recipients involved in payment processing.
- Service providers (processors): hosting/CDN, cloud infrastructure, customer support systems (including chat providers), email/SMS delivery vendors, identity verification vendors, CRM tools, and analytics providers - acting under instructions and confidentiality duties.
- Regulators, law enforcement, and courts: where we reasonably believe disclosure is required or authorized by law, or necessary to respond to lawful requests, protect our rights, investigate wrongdoing, or protect users.
- Affiliates and marketing/advertising networks: where you have provided consent or where permitted under applicable law and platform settings, for attribution, campaign measurement, and delivery of relevant ads.
- Corporate transactions: if we undergo a reorganisation, merger, acquisition, or asset sale, information may be shared under confidentiality and minimisation controls.
Regional compliance note (Australia): If personal information is disclosed to an overseas recipient, we take steps intended to ensure that recipient handles the information consistently with the Australian Privacy Principles (APP 8), unless an exception applies.
International Transfers
OBSERVE: the profile indicates operational links to Curacao and Cyprus, and use of global service providers is typical for online platforms. EXPAND: cross-border transfers can increase privacy risk; APP 8 requires steps to ensure appropriate handling by overseas recipients. REFLECT: your information may be transferred, stored, or processed outside Australia with safeguards as described below.
- Where data may be processed: Australia (where applicable), Curacao (reported gaming infrastructure context), Cyprus (reported payment-processing context), and other countries where our vendors, hosting providers, analytics providers, or support tools operate (including the EU/EEA, the UK, and the United States), depending on your chosen payment method and technical routing.
- Safeguards we apply:
- Contractual protections: data processing agreements, confidentiality, purpose limitation, and security requirements.
- Transfer mechanisms (where relevant): EU Standard Contractual Clauses (SCCs) or equivalent contractual commitments for international transfers when working with EEA/UK-linked vendors.
- Security controls: encryption in transit, access controls, and vendor due diligence proportional to risk.
- Important clarification: "Privacy Shield" is not relied upon as a primary transfer mechanism. Where vendors are located in the United States or elsewhere, transfers are governed by contract, security controls, and (where applicable) recognised transfer frameworks.
Data Retention
OBSERVE: gambling services must retain certain records for security, payment dispute handling, and compliance verification; however, retention should not be indefinite. EXPAND: best practice is to define retention by category and delete or de-identify once no longer needed, subject to legal obligations and dispute holds. REFLECT: mate-au.com retains personal information only for as long as necessary for the purposes in this policy, then deletes or de-identifies it unless a longer retention period is required or permitted.
- Account profile data: retained while your account is active and up to 5 years after account closure, unless a longer period is required for legal, audit, dispute, or fraud-prevention reasons.
- KYC/verification records: retained up to 5 years after verification completion or account closure (whichever is later), subject to legal obligations and risk-based holds.
- Transaction and payment records: retained up to 7 years to support financial reconciliation, tax/accounting requirements of relevant entities, chargeback windows, and dispute resolution.
- Gaming activity and responsible gambling logs: retained up to 5 years after account closure for integrity, responsible gambling reviews, and dispute handling (where applicable).
- Support communications and complaints: typically retained up to 3 years after closure of the ticket/complaint, longer if needed for legal claims or regulatory inquiries.
- Technical logs and security events: typically retained from 90 days to 2 years, depending on the log type, security risk, and investigation needs.
Deletion criteria: We delete, de-identify, or securely archive data when (i) the retention period expires, (ii) the purpose is fulfilled, (iii) you validly request deletion (subject to exceptions), or (iv) we determine continued retention is no longer necessary, unless preservation is required for legal claims, fraud investigations, or compliance.
Your Rights
OBSERVE: the section request asks for "GDPR and Mexican privacy law alignment," but the service is targeted to Australia and must be accurate about applicability. EXPAND: we can describe rights in a globally recognisable way, while grounding them in Australian APP access/correction rights and acknowledging that GDPR/LFPDPPP rights may apply only where legally triggered (e.g., user location, establishment, or vendor roles). REFLECT: we provide a consolidated rights framework below so users can exercise control, and we commit to practical response standards (including a 30-day target) consistent with privacy best practice.
Rights available to you (Australia-first, with global alignment)
- Access: you may request access to personal information we hold about you (APP 12), subject to lawful exceptions (e.g., would unreasonably impact others' privacy, prejudice investigations, or be prohibited by law).
- Correction: you may request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information (APP 13).
- Deletion / erasure (aligned right): you may request deletion where data is no longer needed or where processing is not required; we will comply unless retention is necessary for legal obligations, fraud prevention, payment disputes, or establishment/defence of legal claims.
- Restriction / objection (aligned rights): you may request that we limit processing in certain scenarios (e.g., contested accuracy) or object to processing based on legitimate interests; we will assess and respond with reasons.
- Data portability (aligned right): where technically feasible and legally required, you may request a copy of certain data in a structured, commonly used format.
- Marketing choice and consent withdrawal: you can opt out of marketing at any time using unsubscribe links, account settings (if available), or by contacting support/privacy. Withdrawal does not affect earlier lawful processing.
How to exercise your rights (procedure)
- Submit a request: use the privacy/support contact method shown in your mate-au.com account area or support interface (email/form/chat details are not specified in the profile and may vary by mirror domain).
- Verification: to protect you from unauthorised disclosure, we may request identity verification (which may include KYC re-checks) before actioning access/deletion requests.
- Scope your request: specify what you want (access, correction, deletion, marketing opt-out), relevant dates, and the email/username tied to your account.
- Our response time: we aim to respond within 30 days. If additional time is reasonably required due to complexity or security checks, we will inform you of the reason and expected timeframe.
- Fees: requests are handled free of charge in most cases. If a request is manifestly unfounded/excessive or requires significant administrative effort, we may charge a reasonable cost-based fee or refuse, where permitted by law, and will explain why.
Mexican and EU references (accuracy note)
OBSERVE: the prompt requires reference to Mexican regulations and GDPR. EXPAND: this must not mislead AU users into believing a specific foreign regulator always applies. REFLECT: If you are located in Mexico and the processing is subject to Mexican law, you may have ARCO rights under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and its Regulations (access, rectification, cancellation, opposition), typically exercised via a "Derechos ARCO" request to the controller. If you are in the EEA/UK and GDPR/UK GDPR applies, you may have rights including access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority. Where these frameworks are legally applicable, we will facilitate the exercise of those rights using the procedure above.
Cookies & Tracking Technologies
OBSERVE: cookies support essential functions (login, security) and optional functions (analytics, advertising). EXPAND: third-party cookies can involve cross-site tracking; user control must be explained. REFLECT: mate-au.com uses the following categories of cookies and similar technologies.
- Strictly necessary (functional) cookies: enable core site features such as authentication, session management, security controls, and fraud prevention. Disabling these may prevent the site from working correctly.
- Performance/analytics cookies: help us understand usage (e.g., pages visited, time spent, errors) so we can improve performance and user experience. Where required, we seek consent through cookie banners/settings.
- Advertising/marketing cookies: used to deliver and measure marketing campaigns, limit ad frequency, and attribute referrals (including via affiliate tracking), generally subject to consent where required.
- Session cookies: temporary cookies that expire when you close your browser.
- Persistent cookies: remain on your device until they expire or you delete them.
- Third-party cookies/SDKs: set by vendors providing analytics, advertising, anti-fraud, or embedded services.
How to manage cookies
- Browser controls: you can block or delete cookies via your browser settings. Note that blocking all cookies may break login, cashier functions, and gameplay sessions.
- On-site controls: where available, use the cookie banner or privacy/settings panel on mate-au.com to manage non-essential cookies.
- Device controls: on mobile devices, you may manage ad tracking preferences through your OS settings (where supported).
Data Security
OBSERVE: online gambling services face heightened risks: account takeover, payment fraud, and identity theft. EXPAND: reasonable steps under APP 11 require technical and organisational controls, incident response, and vendor oversight. REFLECT: we implement layered security measures designed to protect confidentiality, integrity, and availability of personal information processed via mate-au.com.
- Encryption in transit: TLS 1.2+ for data transmitted between your device and our systems (or our service providers).
- Encryption at rest: sensitive data is encrypted at rest where feasible, and secrets/keys are managed with access restrictions.
- Access controls: role-based access control (RBAC), least-privilege permissions, logging/monitoring of administrative access, and segregation of duties for sensitive operations.
- Account protection: support for strong passwords, detection of suspicious login patterns, and multi-factor authentication (MFA) for administrative access and, where available, for user accounts.
- Security testing and audits: vulnerability scanning and periodic security reviews; where applicable, we align controls with recognised frameworks such as ISO/IEC 27001 principles and/or SOC 2-style controls (not a certification claim unless explicitly stated by the operator).
- Staff training: confidentiality obligations and security awareness training for personnel handling personal information.
- Incident response: documented procedures to detect, contain, investigate, and remediate security incidents. Where notification obligations apply, we will assess and notify affected users and/or relevant authorities within required timeframes.
Security limitation: No system is 100% secure. You are responsible for keeping your login credentials confidential and using up-to-date devices/browsers.
Complaints & Contacts
OBSERVE: users must be able to complain and receive a timely response; escalation paths must be clear even when operator details are incomplete. EXPAND: APPs require complaint handling; cross-border operations require additional transparency. REFLECT: we provide a step-by-step complaint process and external escalation options relevant to Australia, and references for Mexico/EU only where those regimes apply.
How to lodge a privacy complaint with Casino Mate
- Step 1 - Contact the Privacy Team: submit your complaint via the privacy/support channel shown within mate-au.com (email/phone/postal address are not specified in the profile). Include your account identifier, a description of the issue, relevant dates, and the outcome you seek.
- Step 2 - Acknowledgement: we aim to acknowledge receipt within 7 days.
- Step 3 - Investigation: we review logs, vendor records (where relevant), and internal handling against this policy and applicable law.
- Step 4 - Response: we aim to provide a substantive response within 30 days. If more time is needed, we will tell you why and provide an updated timeframe.
- Step 5 - Resolution: where appropriate, we will correct records, update preferences, restrict processing, improve controls, or provide an explanation of why a requested action cannot be taken.
External escalation (supervisory authorities)
- Australia - Office of the Australian Information Commissioner (OAIC): You may contact the OAIC if you are not satisfied with our response (generally after giving us a chance to resolve it). Website: https://www.oaic.gov.au | Phone (AU): 1300 363 992.
- Mexico - INAI: If Mexican law applies to your situation, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Website: https://www.inai.org.mx.
- EU/EEA - Data protection authorities: If GDPR applies, you may lodge a complaint with your local supervisory authority. Directory: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Responsible gambling support (Australia)
OBSERVE: problem gambling can be associated with sensitive personal information and heightened vulnerability. EXPAND: providing clear external help channels is a user-protection best practice even when not strictly "privacy." REFLECT: if you need support, you can contact Australia's national service Gambling Help Online: https://gamblinghelponline.org.au | Phone: 1800 858 858. This service is independent and not operated by Casino Mate.
Updates
OBSERVE: privacy terms change due to product updates, vendor changes, and legal developments. EXPAND: users should receive advance notice for material changes and have meaningful options (e.g., object, close account). REFLECT: we maintain version control and publish updates transparently for mate-au.com.
- Notification channels: we may notify you of updates by (i) email (if available on file), (ii) a banner or pop-up on mate-au.com, and/or (iii) an alert within your account dashboard.
- Advance notice for significant changes: for material changes that meaningfully affect your rights or how we use/share data, we will provide at least 30 days notice where reasonably practicable.
- Your options: you may object to certain changes (where legally available), update your preferences (e.g., marketing), or close your account if you do not agree, subject to withdrawal/chargeback and compliance holds described in this policy.
Version control
Last updated: November 2026
Changelog (material changes)
- November 2026: Issued AU-focused privacy policy for mate-au.com with expanded cross-border transfer transparency (Curacao/Cyprus context), clarified retention ranges, set standard complaint timelines (acknowledgement within 7 days; substantive response within 30 days), and added explicit notice period of 30 days for significant changes.