Privacy Policy

This Privacy Policy explains how Reels Of Joy, operating via the website https://reelsofjoy-aussie.com (the "Website"), collects, uses, discloses, and protects personal information of players and other visitors. It applies to all users who access or use the Website, whether or not they register an account or play for real money. By using the Website, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective as of 1 January 2026 and supersedes any previous version published on the Website.

Who We Are

For the purposes of this Privacy Policy, references to "we", "us", "our", "Reels Of Joy" or "Reels Of Joy" refer to the operator responsible for the processing of personal information collected through reelsofjoy-aussie.com. The operator is an offshore online gambling service provider that targets Australian players, and claims to operate under a licence issued in Curaçao. However, as at 2026, no verifiable licence details, master licence holder reference, or validator seal have been made publicly available.

Important legal note (Australia): Reels Of Joy is treated by the Australian Communications and Media Authority (ACMA) as an illegal offshore gambling service under the Interactive Gambling Act 2001 (Cth). Access to the Website may be blocked by Australian internet service providers following ACMA directions. This Privacy Policy does not constitute a statement that our activities comply with Australian gambling law, nor does it create any right of recourse under Australian law.

Because the underlying corporate details (registered company name, legal address, company registration number, and tax identification) are not publicly verified, the data controller for the purposes of this Privacy Policy is described functionally as the "Reels Of Joy Operator". Should we later publish an exact corporate name and address, those details will be deemed incorporated into this section.

Contact Details

E-mail (main contact / support): [email protected]
E-mail (general information): [email protected]
Data Protection Contact / DPO function: You may contact our data protection contact point at [email protected] with "Privacy - DPO" in the subject line.
Postal address: Not publicly specified; any formal correspondence should initially be sent via email. If a physical address is required for legal reasons, it will be provided to you directly upon written request, where legally feasible.

Transparency disclaimer: Due to the absence of independently verifiable corporate registration and licence data, your effective legal remedies against the operator may be significantly limited, particularly for users located in Australia.

What Personal Data We Collect

We collect and process different categories of information in connection with your use of reelsofjoy-aussie.com. The exact data collected may depend on your interactions with the Website (for example, whether you register, deposit funds, or only browse).

Identification and Contact Data

Basic registration data: full name, username, password (stored in hashed form), date of birth, country of residence.
Contact details: email address, phone number (if provided), communication preferences, language preference.
Verification data (KYC): copies or images of identity documents (passport, ID card, driver's licence), proof of address (utility bill, bank statement), and any other documentation requested to comply with anti-money laundering (AML) and age verification requirements, where such procedures are implemented.

Technical and Usage Data

Device and connection data: IP address, approximate geolocation derived from IP, browser type and version, operating system, device identifiers, screen resolution, and similar technical parameters.
Log data: dates and times of access, pages viewed, clicks, referring/exit pages, session identifiers, and other standard web log information.
Security and system data: login attempts, failed login indicators, account lockout records, and technical information related to suspected abuse, bots, or fraud.

Financial and Transaction Data

Payment data: partial payment card details (e.g., masked card number), card expiry date, cardholder name, billing address, e-wallet identifiers, bank transfer references, transaction IDs.
Gaming and wallet data: account balance, deposits, withdrawals, bonus balances, wagering activity, and any applied limits.

We do not store full card numbers or CVV codes on our systems; such data is processed by third-party payment service providers, where applicable.

Behavioral and Profile Data

Gaming behaviour: game types and titles played, stakes and bet sizes, frequency and duration of sessions, wins and losses, bonus usage, and betting history.
Website interaction data: click paths, scrolling behaviour, time spent on pages, responses to promotions, and general interaction with content.
Profile data: preferred payment methods, preferred games, marketing and communication preferences, risk and affordability cues inferred from your activity.

Cookies and Similar Technologies

Cookies: small text files stored on your device that enable us to recognize your browser, maintain sessions, and personalise content.
Tracking technologies: web beacons, pixels, tags, scripts, and local storage objects used for analytics, security, and advertising.
Third-party tags: analytics and advertising cookies set by third parties (for example, web analytics providers or affiliate tracking networks) when you visit or interact with the Website.

Further details on cookies are provided in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

Although the operator is not established in the European Union or Australia, we adopt data protection principles similar to those in the EU General Data Protection Regulation (GDPR) to provide transparency and a structured legal framework. Depending on the processing activity, we rely on one or more of the following legal bases:

Performance of a Contract

Account creation and management: We process your registration, verification, and login data to create and administer your player account, provide access to games, and manage your wallet and transactions.
Execution of transactions: We use payment and transaction data to process deposits, withdrawals, bonuses, and other financial operations that you request.
Customer support: We handle your personal and communication data to respond to your inquiries, complaints, and requests related to the services you use.

Compliance with Legal and Regulatory Obligations

Anti-money laundering (AML) and counter-terrorism financing (CTF): Where applicable under the laws of the operator's jurisdiction (e.g., Curaçao), we conduct identity checks, transaction monitoring, and record-keeping to comply with AML/CTF obligations.
Responsible gambling and age verification: We may process your identity and behavioural data to verify your age, identify problematic behaviour patterns, and implement account restrictions, where such measures are offered.
Taxation and record-keeping: We may retain transaction records and account information to comply with fiscal, audit, and statutory retention requirements of the operator's jurisdiction.

Legitimate Interests

Security and fraud prevention: Protecting our systems and users from misuse, fraudulent activities, money laundering, bonus abuse, and account takeovers.
Service improvement and analytics: Analysing aggregate and pseudonymised usage data to enhance the performance, usability, and features of the Website and gaming platform.
Business operations: Operating, maintaining, and developing our business, including affiliate relations and internal reporting, while balancing our interests against your privacy rights.

Where we rely on legitimate interests, we implement appropriate safeguards and perform balancing assessments to ensure that your interests and fundamental rights are not overridden.

Consent

Direct marketing: We may send you promotional emails, SMS messages, push notifications, or in-account marketing communications based on your consent or, where permitted, soft opt-in. You may withdraw consent or object at any time.
Non-essential cookies and advertising technologies: We use certain cookies and third-party tracking tools only with your consent where required by applicable law. You may manage your choices via browser settings or internal tools, if provided.
Special categories of data (if any): We do not intentionally collect special categories of personal data (e.g., health, religion). If such data is inadvertently collected, it will only be processed with your explicit consent or as strictly required by law.

Purpose of Processing

We process your personal data only for specified, explicit, and legitimate purposes. These include, but are not limited to, the following:

Provision of Casino Services

Account registration and authentication: Setting up your account, verifying your credentials, and enabling secure login and account access.
Game access and operation: Allowing you to access and play online casino games, record outcomes, apply game rules, and manage sessions.
Payments and financial operations: Processing deposits, withdrawals, chargebacks, refunds, bonuses, and loyalty rewards, including communication with payment providers.

Service Management and Improvement

Performance monitoring: Measuring and improving technical performance, load times, stability, and error rates.
User experience optimisation: Analysing how users navigate and interact with the Website to improve design, navigation, and feature sets.
Product development: Using aggregated usage data to develop new games, features, and promotional offerings.

Marketing and Promotions

Direct marketing communications: Sending promotional offers, newsletters, bonus information, and tailored campaigns, subject to your preferences and consent.
Personalisation: Customising content, offers, and recommendations based on your gameplay, preferences, and past interactions.
Affiliate and advertising measurement: Tracking the effectiveness of marketing campaigns, affiliate referrals, and advertising partners.

Analytics, Risk Management and Fraud Prevention

Risk and fraud analysis: Monitoring transactions and gameplay to detect suspicious activity, bonus abuse, collusion, or account compromise.
Responsible gambling analysis: Assessing behavioural data to identify patterns that may indicate problem gambling and, where applicable, suggesting tools or interventions.
Compliance monitoring: Ensuring that the use of the Website complies with terms and conditions, and applicable legal and regulatory requirements in the operator's jurisdiction.

Disclosure & Sharing

We do not sell your personal data to third parties. However, we share or disclose data in the following circumstances, subject to appropriate safeguards:

Payment Service Providers and Financial Institutions

Card processors, banks, and e-wallets: To process deposits, withdrawals, chargebacks, and related financial operations, we share necessary payment data and identity details with licensed payment processors and financial institutions.
Fraud and risk prevention services: We may engage third-party tools to assess transaction risk and prevent fraud.

Technical and Operational Service Providers

Hosting and infrastructure providers: Cloud or data centre providers that host the Website, game servers, and databases.
IT and security partners: Providers of security services (e.g., DDoS protection, intrusion detection), backup and recovery, monitoring, and maintenance.
Analytics and performance tools: Third-party analytics services that help us understand usage patterns and improve the Website.

Gaming, Software and Platform Providers

Game providers and platform vendors: To provide access to casino games and related services, we share pseudonymised or user-linked identifiers, gameplay data, and technical data with gaming software suppliers and integrated platform partners.

Affiliates and Marketing Partners

Affiliate networks: To track referrals, calculate commissions, and attribute marketing performance, we may share limited data such as unique IDs, registration and deposit events, and high-level revenue data.
Advertising networks and third-party marketing providers: With your consent where required, we may share device identifiers, cookie IDs, and behavioural data necessary to deliver and measure targeted advertising.

Regulators, Authorities and Dispute Bodies

Regulatory or supervisory authorities: Where required by law in the operator's jurisdiction (e.g., Curaçao authorities), we may disclose personal data to regulators, financial intelligence units, or law enforcement.
ACMA and Australian enforcement: ACMA primarily targets operators, not players. While our cooperation with Australian authorities is limited, data may be disclosed where we are legally compelled under applicable law. Users should be aware that Australian authorities have classified Reels Of Joy as an illegal offshore operator.
Dispute resolution and legal advisors: In the context of defending or establishing legal claims, resolving disputes, or obtaining legal advice, we may share relevant data with lawyers, auditors, and courts.

Corporate Transfers

Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our assets, user data may be transferred as part of the transaction, subject to confidentiality and continued protection.

International Transfers

Given the cross-border nature of online services, your personal data may be processed in, or transferred to, multiple countries, some of which may offer a different level of data protection than your home jurisdiction.

Locations of Processing

Primary operational jurisdiction: The operator claims to be licensed in Curaçao; certain processing is therefore likely to occur in Curaçao or other Caribbean locations, although specific infrastructure details are not publicly verifiable.
Infrastructure and hosting: Servers and cloud infrastructure used to operate reelsofjoy-aussie.com may be located in the European Union, the United States, Asia-Pacific, or other regions, depending on the chosen hosting providers.
Third-party service providers: Payment processors, analytics providers, and other vendors may process data in the EU/EEA, the UK, the US, or other countries.

Protection Measures

Contractual safeguards: Where required by law, we aim to use contractual mechanisms such as standard contractual clauses (SCCs) or equivalent data transfer agreements to protect data transferred to third countries.
Technical and organisational measures: Encryption, access controls, and other security techniques (described below) are used to reduce risks associated with cross-border data flows.
Vendor due diligence: We endeavour to select service providers that implement appropriate data protection and security standards; however, users should be aware that offshore and grey-market operations may limit the practical enforceability of such safeguards.

Regional compliance note (Australia): Because the operator is offshore and classified as illegal under Australian gambling law, Australian privacy legislation and enforcement mechanisms (including those of the Office of the Australian Information Commissioner) may have limited practical effect against the operator.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory, or contractual requirements. Retention periods may vary depending on the type of data and the legal context.

Indicative Retention Periods

Account and identification data: Typically kept for the duration of your active account and for up to 5 years after account closure, to comply with AML/CTF and record-keeping obligations, defend legal claims, and maintain business records.
KYC documentation: Copies of identity documents and proof of address are generally retained for 5 - 7 years after the end of the business relationship or the last transaction, subject to applicable law in the operator's jurisdiction.
Transaction and gaming history: Transaction logs, betting records, wins/losses, and related financial data may be retained for at least 5 - 7 years from the relevant transaction date.
Marketing data: Data used for marketing (e.g., email address and preferences) is retained until you opt out or withdraw consent, and for a limited period thereafter (typically up to 2 years) to document your request and avoid reactivation.
Technical and log data: Server logs and security-related technical data are usually kept for 6 - 24 months, unless longer retention is required for security investigations or legal reasons.

Deletion and Anonymisation

Deletion upon request: Where applicable and subject to legal retention obligations, we will delete or anonymise your personal data in response to a valid deletion request.
Anonymisation: We may retain anonymised or aggregated data (which no longer identifies you) indefinitely for statistical, analytical, and business purposes.
Account inactivity: We may close or archive inactive accounts and subsequently delete or anonymise related data after expiry of relevant retention periods.

Your Rights

We aim to align our practices with core data protection principles similar to those found in the GDPR. The Website also serves users in jurisdictions with distinct privacy regimes (including, potentially, Mexico); however, the operator's offshore and grey-market status may limit the practical enforceability of some of these rights against the operator. Subject to applicable law and certain limitations, you may have the following rights:

Right of Access

You may request confirmation as to whether we process your personal data and, if so, obtain a copy of such data together with information about the processing (sources, purposes, categories, recipients, retention periods).

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete data (for example, updating your contact details or correcting your name).

Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data where:
- the data is no longer necessary for the purposes for which it was collected;
- you withdraw consent (where consent was the sole basis);
- you validly object to processing and no overriding legitimate grounds exist; or
- the data has been unlawfully processed.
This right is subject to legal retention requirements; we may retain certain records (e.g., AML/CTF, transaction data) for the periods required by law.

Right to Restriction of Processing

You may request that we temporarily restrict processing of your data where:
- you contest the accuracy of the data (pending verification);
- processing is unlawful and you prefer restriction instead of deletion;
- we no longer need the data but you require it for legal claims; or
- you have objected to processing pending verification of our legitimate grounds.

Right to Object

You may object, on grounds relating to your particular situation, to processing based on our legitimate interests (including profiling). We will cease processing unless we demonstrate compelling legitimate grounds or need the data for legal claims.
You may object at any time to processing for direct marketing purposes, including profiling to the extent related to such marketing. Upon objection, we will stop using your data for direct marketing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, transmit it to another controller.

Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications or certain cookies), you may withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.

How to Exercise Your Rights

Submit a request: Contact us at [email protected] with "Privacy Request" in the subject line, clearly indicating the right(s) you wish to exercise and providing sufficient information to identify your account.
Verification: We may request additional information to verify your identity and ensure that we do not disclose data to an unauthorised person.
Response timeframe: We aim to respond to your request within 30 days of receipt. If we need more time due to complexity or volume, we will inform you of the extension and reasons.
Cost: Requests are generally handled free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly because of their repetitive character.

Important limitation notice: Because the operator is an offshore, high-risk gambling provider lacking verifiable corporate identity and subject to enforcement as an illegal service in Australia, your ability to enforce these rights in practice, or to obtain redress through courts and regulators, may be significantly constrained.

Cookies & Tracking Technologies

We use cookies and similar technologies to operate and enhance reelsofjoy-aussie.com. Some cookies are necessary for the Website to function, while others are optional and used for analytics or advertising.

Types of Cookies

Session cookies: Temporary cookies that exist only while your browser is open and are deleted when you close it. They help maintain your session state (e.g., staying logged in during a visit).
Persistent cookies: Cookies that remain on your device for a set period or until you delete them. They are used to remember preferences, such as language or login details, and to recognise you on return visits.
First-party cookies: Cookies set directly by reelsofjoy-aussie.com for functional and analytical purposes.
Third-party cookies: Cookies set by external providers, such as analytics services, affiliate tracking networks, or advertising partners.

Purposes of Cookies

Strictly necessary / functional: Essential for the operation of the Website and core functions (e.g., authentication, security, account management, game loading). These cannot be disabled via internal tools and are usually exempt from consent requirements.
Analytics / performance: Used to collect information about how visitors use the Website (e.g., pages visited, time on page, error messages). This helps us improve performance and user experience.
Advertising / targeting: Used to deliver relevant ads, track marketing campaign effectiveness, and limit the number of times you see an advertisement. These may involve third-party advertising networks and affiliate partners.

Managing Cookies

Browser settings: You can configure your browser to refuse all or some cookies, or to alert you when cookies are being set. The method varies by browser; consult your browser's help section for instructions.
Internal tools: Where available, we may provide an internal cookie or privacy preference panel allowing you to manage non-essential cookies (such as analytics and advertising).
Third-party opt-outs: Some third-party providers offer their own opt-out mechanisms (for example, opt-out links for advertising networks). Using these does not necessarily disable all tracking but may reduce targeted advertising.

Please note that disabling certain cookies may affect the functionality and performance of the Website, and some services or features may not work correctly.

Data Security

We implement technical and organisational measures intended to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no online service can guarantee absolute security, and users should be aware of the inherent risks of using offshore gambling services.

Technical Measures

Encryption in transit: Data transmitted between your browser and our servers is protected using industry-standard encryption protocols such as TLS 1.2 or higher, where supported by your device and browser.
Encryption at rest: Sensitive data, such as authentication credentials and certain financial information, is stored using encryption and hashing techniques that reduce the risk of compromise.
Access controls: Access to production systems and databases is restricted to authorised personnel only, based on role and necessity, and protected via authentication and logging mechanisms.
Network and application security: Firewalls, intrusion detection/prevention systems, DDoS protection, and security monitoring tools are used to detect and mitigate potential threats.

Organisational Measures

Staff confidentiality: Personnel with access to personal data are bound by confidentiality obligations and receive guidance on information security and data protection.
Policies and procedures: Internal policies govern data handling, access management, incident response, and retention practices.
Incident response: Procedures exist to identify, assess, and respond to security incidents. Where required by law, we will notify relevant parties of breaches that materially affect their rights or freedoms.

Standards note: While we endeavour to align with recognised security practices and may use vendors that are certified under frameworks such as ISO/IEC 27001 or SOC 2, the operator itself does not publicly claim formal certification under these standards as of 2026.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal data, you may contact us using the details below.

Contact Channels

Data protection / privacy contact: [email protected]
General information: [email protected]
Online forms: If and when a contact or complaint form is made available on reelsofjoy-aussie.com, you may also use it for privacy-related queries by selecting the appropriate subject.

Internal Complaint Procedure

Submission: Send a detailed description of your concern or complaint to [email protected], including your username, contact details, and any relevant evidence or screenshots.
Acknowledgement: We aim to acknowledge receipt of your complaint within 7 days.
Investigation: We will review your complaint, consult internal records, and, where needed, request additional information from you.
Response: We will endeavour to provide a substantive response within 30 days of receipt. In complex cases, this period may be extended; if so, we will inform you of the extension and reasons.

Escalation to Supervisory Authorities

Depending on your location, you may have the right to lodge a complaint with a data protection authority. For example:

European Union / EEA: If you are located in the EU/EEA, you may contact the data protection authority in your member state of residence, place of work, or place of the alleged infringement.
Mexico: If you are located in Mexico, you may have rights under Mexican data protection regulations (including the Federal Law on the Protection of Personal Data Held by Private Parties). The competent authority is the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), reachable via https://www.inai.org.mx.
Australia: In Australia, privacy matters are overseen by the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au.

Enforcement limitation notice: Because Reels Of Joy operates as an offshore, unverified, and ACMA-blocked gambling provider, regulators in your jurisdiction may face practical limitations in enforcing decisions or orders against the operator, and your ability to obtain effective remedies may be restricted.

Updates

We may modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational environment (including changes in our licensing or corporate structure). The most current version will always be available on reelsofjoy-aussie.com.

Notification of Changes

Website publication: Any updated version of this Policy will be posted on the Website with an updated "Last updated" date.
Email notifications: Where changes are material and we have your email address, we will endeavour to notify you by email.
On-site alerts: We may display banners, pop-ups, or notifications in your account dashboard to inform you of significant changes.

Advance Notice and User Options

Advance notice: For material changes that significantly affect your rights or how your data is processed (for example, new purposes or new categories of recipients), we will, where practicable, provide at least 30 days' advance notice before the changes take effect.
Review and acceptance: Continued use of the Website after the effective date of the updated Policy will constitute your acceptance of the changes. If you do not agree with the updated terms, you should stop using the Website and may request account closure.
Account closure: You can request closure of your account by contacting [email protected]. We will then handle your data in accordance with the "Data Retention" section of this Policy.

Last updated: January 2026