Privacy Policy

Last updated: March 27, 2026

At Herospin, we are committed to protecting your privacy in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services.

Information We Collect

We collect personal information such as your full name, date of birth, residential address, email address, phone number, and government-issued identification (e.g., driver's licence or passport) for account creation, age verification, and compliance with Australian anti-money laundering laws. We also gather financial details like banking information and transaction records for payment processing. Additionally, we collect technical data including IP address, device information, browser type, and gaming activity such as betting history and game preferences to enhance security and service delivery.

How We Use Your Information

We use your personal information to create and manage your account, verify your identity, process deposits and withdrawals, and provide gaming services. It enables us to personalise your experience, detect fraud, ensure responsible gambling, and comply with regulatory requirements under Australian gambling and AML/CTF laws. We also analyse usage data to improve our platform, develop new features, and send relevant communications about promotions or account updates, where you have consented.

Information Sharing

We may share your information with trusted service providers such as payment processors and hosting companies, who are bound by confidentiality agreements and the Australian Privacy Principles. Disclosure occurs when required by law, including to AUSTRAC for anti-money laundering compliance, state gambling regulators, or law enforcement for investigations into illegal activities. We do not sell your personal information to third parties.

Data Security

We implement robust security measures including end-to-end encryption for data transmission and storage, secure servers in controlled environments, and PCI DSS compliance for payment information. Regular penetration testing, vulnerability assessments, and automated threat detection systems protect against unauthorised access. Our employees undergo privacy training and sign confidentiality agreements, with data retained only as long as necessary to meet legal obligations such as 7-year retention for AML/CTF records.

Your Rights

Under the Privacy Act 1988 and Australian Privacy Principles, you have the right to access, correct, or delete your personal information held by us, subject to legal exceptions. You may request details of the information we hold, object to certain processing, or withdraw consent where applicable. We will respond to such requests within 30 days; contact us to exercise these rights or lodge a complaint with the Office of the Australian Information Commissioner if dissatisfied.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance site functionality, analyse user behaviour, and personalise content. These collect data like IP addresses and browsing patterns for security, analytics, and advertising. You can manage cookie preferences through your browser settings.

Contact Us

For privacy concerns or to exercise your rights, please contact our Privacy Officer. We aim to respond promptly.

Email: [email protected]