Privacy Policy

This Privacy Policy explains how My Empire Casino, operated via the website myempire-aussie.com (the "Site"), collects, uses, discloses, and protects personal information of players and other visitors. It applies to all users who access or use the Site or any services offered through it, whether you register an account or browse as a visitor. By using the Site, you acknowledge that you have read and understood this Privacy Policy.

We are committed to complying with applicable privacy requirements, including, where relevant, the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as generally accepted international standards for data protection in the online gambling industry.

This Privacy Policy is effective as of 01 January 2026 and replaces any previous version published on the Site.

Who We Are

The My Empire Casino service is provided through the brand "My Empire Casino" on the domain myempire-aussie.com. The platform historically operated under the Curaçao Antillephone License No. 8048/JAZ2020-001 via Rabidi N.V. and may be provided within a broader network of related entities, potentially including Liernin Enterprises LTD and Tilaros Limited as payment or service partners. Because the underlying corporate and licensing structure is undergoing sector-wide restructuring (including potential relocation from Curaçao to alternative offshore jurisdictions such as the Philippines or Anjouan), the identity of the current license-holding entity and its precise registered address may change over time.

To ensure transparency while these transitions occur, we treat the entity that at any given time operates and controls myempire-aussie.com (the "Operator", "we", "our", "us") as the primary data controller for your personal information. The Operator's full legal name, registration number, and current registered address will be published at the footer of the Site and/or within the "Rules" page at https://myempire.com/en/rules and may be updated from time to time in accordance with the "Updates" section of this Privacy Policy.

You may contact our data protection point of contact (Data Protection Officer or equivalent function) using the following primary channel:

Email: [email protected] (general support, privacy questions, responsible gambling, self-exclusion, and data subject requests)

Where required by applicable law, additional contact details for the Operator, including any EU representative or other regional representative, will be provided upon request and/or published on the Site.

What Personal Data We Collect

Personal Identification and Contact Data

Registration and profile data: full name, date of birth, country of residence, residential address, username, password, preferred language, and account identifiers.
Contact details: email address, telephone number, and any messenger or communication handles you choose to provide.
Verification (KYC/AML) data: copies and details of identity documents (e.g., passport, national ID card, driver's licence), proof of address (e.g., utility bill, bank statement), and, where applicable, source-of-funds or source-of-wealth documentation.

Technical and Device Data

Technical identifiers: IP address, approximate location derived from IP (e.g., country or region), browser type and version, operating system, device model, device identifiers, language settings.
Usage and log information: login timestamps, session duration, pages visited, clicks, scrolling, navigation paths, error logs, and interaction with customer support.

Payment and Financial Data

Transaction data: deposits, withdrawals, bonuses credited, wagering activity, balances, payment methods used, currency (including AUD), timestamps, and transaction identifiers.
Payment instrument details: limited data relating to the payment method used (e.g., masked card numbers, card type, e-wallet or voucher identifiers such as Neosurf, PayID through aggregators, bank account nickname), as processed and tokenised by our payment service providers. We do not store your full card number or CVV where this can be avoided and rely on PCI-compliant payment processors.

Behavioural and Gaming Data

Gameplay information: game sessions, bets placed, stakes, wins and losses, bonus use, jackpots, frequency and duration of play, favourite games, and other in-game behaviour.
Marketing and preference data: opt-in/opt-out status for email, SMS, and on-site marketing; your responses to promotions; your preferences regarding communication frequency and channel.
Responsible gambling data: self-exclusion details, cooling-off periods, limits (deposit, loss, wager, session), behavioural markers of harm recorded by our systems, and interactions relating to responsible gambling support.

Communications and Customer Support Data

Communications content: emails, live-chat transcripts, attachments you send us, support tickets, complaints, and feedback forms.
Call-related data (if applicable): audio recordings and notes from customer support calls, subject to notice and legal requirements.

Cookies and Similar Technologies

Cookies: small text files stored on your device to recognise your browser, maintain your session, remember your preferences, and analyse Site usage.
Tracking technologies: web beacons, pixels, local storage, SDKs, and similar tools, including from third-party analytics and advertising partners, where allowed by law and, where required, based on your consent.

Where we are legally required to collect certain information (for example, to verify your age and identity to comply with anti-money laundering obligations or gambling regulations), we may be unable to provide services if you choose not to provide such information.

Legal Basis for Processing

Depending on your location and the specific processing activity, we rely on one or more of the following legal grounds to process your personal information:

Performance of a contract: we process data necessary to:
- create and manage your My Empire Casino account;
- provide access to games, process deposits and withdrawals, award bonuses, and settle bets;
- provide customer support and resolve technical issues.
Compliance with legal obligations: we process data where required by:
- applicable anti-money laundering (AML), combatting the financing of terrorism (CFT), and know-your-customer (KYC) laws in our licensing jurisdiction;
- record-keeping, accounting, tax, and reporting obligations;
- regulatory requirements imposed by gaming authorities and, where applicable, enforcement of self-exclusion requests.
Legitimate interests: we process data where necessary for our legitimate business interests, provided these are not overridden by your rights, including:
- maintaining IT and payment security, fraud detection and prevention;
- monitoring gameplay to enforce our terms and prevent abuse of bonuses;
- developing, testing, and improving the Site and services (including analytics and statistics);
- defending and exercising legal claims and managing business risk.
Consent: where required by law, we rely on your explicit consent to:
- send marketing communications by email, SMS, push notification, or similar channels unrelated to service messages;
- deploy non-essential cookies and similar technologies for advertising and advanced analytics;
- share certain data with advertising networks or affiliates for targeted marketing.
You may withdraw your consent at any time as described in the "Your Rights" and "Cookies & Tracking Technologies" sections. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Purpose of Processing

Provision and Operation of Casino Services

Account management: creating, verifying, and maintaining your user account and profile, managing access credentials, and authenticating logins.
Gaming operations: enabling gameplay, processing bets, calculating and crediting winnings, settling wagers, and administering tournaments and leaderboards.
Payments: processing deposits, withdrawals, refunds where applicable, bonus credits, and managing payment-related issues in cooperation with payment processors.

Regulatory Compliance and Risk Management

AML/KYC and age verification: verifying your identity, age, and residence to meet legal, regulatory, and licensing obligations.
Fraud and abuse prevention: identifying suspicious transactions, collusion, account takeovers, bonus abuse, or other prohibited conduct.
Legal obligations and dispute handling: maintaining records to comply with reporting obligations, respond to lawful requests from authorities, and handle disputes and chargebacks.

Service Improvement and Analytics

Service optimisation: analysing Site performance, identifying bugs, and improving user experience across devices and regions (including for Australian users).
Business analytics: aggregating and anonymising data to produce statistics on game performance, product development, and market trends.

Marketing and Personalisation

Direct marketing: sending promotional emails, SMS, or notifications (where permitted) about bonuses, new games, tournaments, and special offers.
Personalisation: tailoring content, bonuses, and recommendations to your interests, betting history, and preferences.
Affiliate and campaign tracking: recording how you arrived at the Site (for example, through an affiliate link) to measure campaign performance.

Responsible Gambling and Player Protection

Monitoring and limits: tracking gameplay to apply self-exclusion, deposit limits, time-outs, and other safer-gambling tools that you request or that we apply based on risk indicators, subject to applicable law.
Interventions: contacting you, where appropriate, with information or warnings related to responsible gambling and providing tailored support.

Disclosure & Sharing

We do not sell your personal information to third parties. However, we may share your information with the following categories of recipients, strictly for the purposes set out in this Privacy Policy and subject to contractual safeguards:

Group entities and associated operators: current or future entities within the same corporate network as the Operator (for example, Rabidi N.V., Liernin Enterprises LTD, Tilaros Limited) for operational, compliance, risk management, and reporting purposes.
Payment service providers and banks: entities that process deposits, withdrawals, vouchers (e.g., Neosurf), and PayID or similar payment aggregators. These providers receive only the data necessary to process your transactions and comply with their own legal obligations.
Technical and business service providers: hosting providers, game providers, CRM systems, email delivery platforms, customer support tools, analytics providers, identity verification and KYC/AML providers, and IT security vendors who process data on our behalf under written data processing agreements.
Regulators, licensing authorities, and law enforcement: gaming regulators in our licensing jurisdiction (for example, Curaçao authorities historically, and any successor regulator), financial intelligence units, and other public authorities or courts where we are legally required or permitted to disclose information, such as for AML reporting, enforcement of gambling rules, or defence of legal claims.
Affiliates and advertising networks: carefully selected partners that promote our services and, where permitted, advertising networks for measurement and attribution. Where this involves the use of cookies or similar technologies for targeted advertising, it will be carried out only with your consent where required.
Professional advisers: lawyers, auditors, consultants, and other professional advisers bound by confidentiality obligations, to the extent necessary to obtain advice or protect our legal interests.
Business transfers: in connection with any actual or contemplated merger, acquisition, reorganisation, sale of assets, or similar corporate transaction involving the Operator or the network in which it participates, your data may be disclosed to potential or actual purchasers or successors, subject to appropriate confidentiality protections and continued protection of your rights.

Where we share data with third-party service providers, we require them to process your personal information only in accordance with our instructions, to implement appropriate security measures, and to comply with applicable data protection laws.

International Transfers

As an offshore online casino targeting Australian players and operating through an international network of service providers, your personal information may be transferred to, and processed in, countries other than the country in which you are located. These countries may include, without limitation:

Curaçao: where certain historical operational, licensing, or hosting functions have been or remain located.
European Economic Area (EEA), the United Kingdom, and Cyprus: where some group entities, payment intermediaries (such as Tilaros Limited in Cyprus), or platform/security providers (including holders of ISO 27001 certification) may be based.
Philippines or Anjouan: or other offshore jurisdictions, if and when licensing or operational functions are migrated as part of industry-wide restructuring.
Other regions: where third-party providers (for example, cloud hosting, analytics, marketing, or game studios) maintain infrastructure or support centres.

Where your information is transferred internationally, we implement appropriate safeguards to protect it, such as:

contractual safeguards, including standard contractual clauses (SCCs) or equivalent arrangements where required by applicable law;
technical and organisational measures such as strong encryption, access controls, and data minimisation;
contractual obligations on recipients to comply with confidentiality and data protection requirements that are no less protective than those described in this Privacy Policy.

By using the Site, you acknowledge that your data may be transferred to and processed in jurisdictions that may have different data protection rules than your home country. Regardless of where processing occurs, we will take reasonable steps to ensure that your personal information is treated securely and in accordance with this Privacy Policy.

Data Retention

We retain personal information only for as long as is reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with legal, regulatory, and operational requirements. Retention periods may differ depending on the type of data and applicable legal obligations in our licensing and operational jurisdictions.

Account and identification data: typically retained for the duration of your account and for a period of up to five (5) to seven (7) years after account closure, or longer where required by AML, CFT, and gaming regulations or to defend legal claims.
Transaction and financial data: retained for at least five (5) to seven (7) years following the relevant transaction or account closure, in line with accounting, tax, and AML requirements.
Gameplay and behavioural data: retained while you maintain an active account and for a limited period after closure, generally not longer than five (5) years, except where necessary for responsible gambling records, dispute resolution, or regulatory investigations.
Marketing data: retained while you remain opted in to marketing and, after you withdraw consent, for a short period (usually no more than twelve (12) months) to record your opt-out preference and demonstrate compliance.
Customer support communications: retained for the duration necessary to handle your query or complaint and for a subsequent period (generally up to five (5) years) to maintain records of our interactions and to comply with legal obligations.

When data is no longer needed for the purposes for which it was collected and we are not legally required to keep it, we will take reasonable steps to delete, anonymise, or de-identify it. If deletion is not technically feasible (for example, due to backup constraints), we will ensure that your data is stored securely and isolated from further processing until deletion is possible.

Your Rights

Subject to applicable law and certain limitations, you may have the following rights in relation to your personal information. These rights are broadly aligned with international data protection norms (such as the GDPR) and, where applicable, with privacy principles in other jurisdictions (including Mexican and other Latin American data protection norms where they might be relevant to particular users). While My Empire Casino primarily targets Australian players, we endeavour to handle rights requests in a manner consistent with these standards.

Right of access: you may request confirmation of whether we hold personal information about you and, if so, receive a copy of that information along with details about how we process it.
Right to rectification: you may request correction of inaccurate or incomplete personal information we hold about you.
Right to erasure ("right to be forgotten"): you may request deletion of your personal information where:
- the data is no longer necessary for the purposes for which it was collected;
- you withdraw consent where processing was based solely on consent;
- you validly object to processing and there are no overriding legitimate grounds; or
- the data has been processed unlawfully.
This right may be limited where we must retain data to comply with legal obligations (for example, AML/KYC retention rules) or to protect ourselves against legal claims.
Right to restriction of processing: you may request that we restrict processing of your data in certain circumstances, such as while we verify its accuracy or assess an objection.
Right to object: you may object at any time to:
- processing of your data for direct marketing (including profiling for marketing) - in which case we will stop such processing; and
- processing based on legitimate interests, on grounds relating to your particular situation, unless we demonstrate compelling legitimate grounds that override your interests or we need the data for legal claims.
Right to data portability: where technically feasible and where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal information in a structured, commonly used, and machine-readable format and ask us to transmit it to another controller.
Right to withdraw consent: where we rely on your consent to process personal information (for example, for marketing or non-essential cookies), you may withdraw that consent at any time. This will not affect processing carried out before withdrawal.

How to Exercise Your Rights

Submit your request: send an email from your registered account email address to [email protected] with the subject line "Privacy request" and clearly state:
- your full name and username;
- the right(s) you wish to exercise; and
- any relevant details that will help us process your request.
Identity verification: for your security, we may ask you to provide additional information or documentation to verify your identity before acting on your request.
Response timeframe: we aim to respond to all valid requests within thirty (30) calendar days of receipt. If we require more time due to complexity or volume, we will inform you of the extension and reasons.
Fees: we handle rights requests free of charge. However, where requests are manifestly unfounded or excessive (for example, repeated requests), we may charge a reasonable fee or refuse to act, as permitted by law.

Your rights may be subject to certain conditions and exemptions under applicable laws. If we cannot comply with your request in full, we will explain the reasons, subject to any legal or regulatory restrictions.

Cookies & Tracking Technologies

Types of Cookies We Use

Strictly necessary (session) cookies: essential for the operation of the Site and to enable you to log in, navigate, place bets, and access secure areas. These cookies are typically session-based and expire when you close your browser.
Functional (persistent) cookies: used to remember your preferences (such as language, region, and display settings) and to provide enhanced, personalised features. These may remain on your device for a defined period.
Analytics and performance cookies: first- or third-party cookies (e.g., analytics providers) that help us understand how users interact with the Site, which pages are popular, and how we can improve performance and usability. Data is generally aggregated and used for statistical purposes.
Advertising and affiliate cookies: third-party cookies and similar technologies used by advertising networks, affiliates, and tracking partners to measure campaign effectiveness, attribute sign-ups, and, where permitted, present relevant offers. These cookies may track your browsing across different websites.

Managing and Disabling Cookies

Browser settings: most browsers allow you to block or delete cookies via their settings. Please refer to your browser's help section for specific instructions. Blocking some types of cookies (particularly strictly necessary cookies) may affect the functionality of the Site and your ability to use our services.
Site-level controls: where available and required by law, we will provide on-site tools (such as a cookie banner or preference centre) that allow you to manage your preferences for non-essential cookies and tracking technologies.
Third-party opt-outs: some third-party providers offer their own opt-out mechanisms (for example, through industry self-regulatory programmes). These may complement, but not replace, browser and Site-level controls.

By continuing to use the Site after adjusting your cookie settings, you acknowledge that some cookies and tracking technologies may remain in use in accordance with your choices and applicable law.

Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised access, misuse, loss, or alteration.

Encryption: data transmitted between your browser and our servers is protected using industry-standard Transport Layer Security (TLS) technology (TLS 1.2 or higher). Where feasible, we use encryption or pseudonymisation for sensitive data at rest.
Access controls: access to personal information is restricted to authorised personnel and service providers who require it to perform their duties and who are bound by confidentiality obligations. Access is granted on a "need to know" and role-based principle.
Authentication and account security: we implement measures such as strong password requirements and, where supported, multi-factor authentication (MFA) to protect user accounts from unauthorised access.
Secure infrastructure: we use reputable hosting and data-centre providers with robust physical and logical security measures. The underlying platform and selected providers within our network are certified or aligned with recognised information security standards (for example, ISO 27001 or similar frameworks) where applicable.
Monitoring, testing, and audits: systems are monitored for suspicious activity, and we conduct regular vulnerability assessments, security reviews, and, where appropriate, independent audits or certifications.
Staff training: employees and contractors who handle personal information receive training on data protection, information security, and responsible gambling obligations.
Incident response: we maintain procedures to detect, assess, and respond to potential data breaches. In the event of a breach that is likely to result in a significant risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements.

While we strive to use commercially reasonable means to protect your personal information, no system can be guaranteed as completely secure. You are responsible for keeping your login credentials confidential and for using appropriate security measures on your own devices.

Complaints & Contacts

Contacting Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, you may contact us at:

Email (primary channel): [email protected]

Internal Complaint Procedure

Initial submission: send your complaint to [email protected] with the subject line "Privacy complaint". Provide your name, username, contact details, and a clear description of your concern.
Acknowledgement: we will aim to acknowledge receipt of your complaint within five (5) business days.
Investigation: your complaint will be reviewed by our data protection contact or an appropriate senior staff member. We may request additional information from you if needed to clarify the facts.
Response: we will aim to provide a substantive response within thirty (30) calendar days of receiving your complete complaint. If we require more time, we will inform you of the delay and the reasons.
Further steps: if you are not satisfied with our response, you may seek external remedies as described below.

Escalation to Supervisory Authorities

Depending on your location and applicable law, you may have the right to lodge a complaint with a data protection or privacy authority. For example:

Australia: if you are an Australian user and believe we have not adequately addressed your privacy concerns under Australian privacy law, you may contact the Office of the Australian Information Commissioner (OAIC):
- Website: https://www.oaic.gov.au
European Union / EEA: if EU or EEA data protection laws apply to you (for example, if you are physically located in the EU while using our services), you may have the right to lodge a complaint with the data protection authority in your country of residence or work, or where you believe a breach has occurred. Contact details can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Other jurisdictions: if your local law provides for a specific data protection or privacy authority, you may contact that authority in accordance with its procedures.

We encourage you to contact us first so that we can attempt to resolve your concern directly.

Updates

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry practices. When we make material changes, we will take reasonable steps to inform you in advance where required by law.

Notification methods: we may notify you of changes via:
- email sent to the address associated with your account;
- prominent notice or banner on the Site;
- in-account notifications or dashboard alerts.
Advance notice: for significant changes that materially affect your rights or the way we process your data, we will, where reasonably practicable, provide at least thirty (30) days' advance notice before the updated Privacy Policy takes effect.
Version control and effective date: each version of this Privacy Policy will be identified by a "Last updated" date at the end of the document. We may also provide a brief summary of material changes (a changelog) accessible from the Privacy Policy page.
Your options: if you do not agree with the updated Privacy Policy, you may choose to stop using the Site and, where permitted, request account closure and/or exercise your rights under the "Your Rights" section. Your continued use of the Site after the effective date of an updated Privacy Policy will constitute your acknowledgment and acceptance of the changes, to the extent permitted by law.

Last updated: January 2026.