Privacy Policy

This privacy policy is intended to inform players and visitors of goldenstarcasino, accessible via goldenstarvip.com, about how their personal information is collected, processed, and protected. The policy applies to all individuals accessing or using our services and is effective as of 1 January 2025 (last updated: 1 June 2025).

Who We Are

OBSERVE: Operator identity and regulatory data are vital for transparency and legal compliance.
EXPAND: AU regulatory standards require clear disclosure of legal entity, registration, contact point for privacy concerns.
REFLECT: Ensure all provided and requisite contact, company, and DPO information is presented accessibly.

Legal Entity: goldenstarcasino is operated by Dama N.V., a company duly registered under the laws of Curaçao, registration number 152125, with principal legal address at Scharlooweg 39, Willemstad, Curaçao.
Gaming License: Dama N.V. is licensed by the Curaçao Gaming Control Board (Online Gaming License No. OGL/2023/174/0082, valid until 2025).
Contact for Data Inquiries: The Data Protection Officer (DPO) may be reached at [email protected] for any privacy concerns or data protection matters.
Official Website: goldenstarvip.com

What Personal Data We Collect

OBSERVE: Full disclosure is mandatory under AU and international standards.
EXPAND: Data categories include direct submission, technical collection, and behavioral analytics.
REFLECT: Special consideration is given to sensitive financial and behavioral data, ensuring legal clarity and user awareness.

Personal Identification Data: Full name, date of birth, residential address, e-mail address, and phone number provided upon account registration or during verification (KYC/AML compliance).
Technical Data: IP address, device information, browser type, operating system, access dates and times, server logs.
Payment and Transaction Data: Details of financial transactions, including payment methods, card or banking information, withdrawal and deposit history.
Behavioral Data: Gameplay and betting history, session records, preferences, interactions, clicks, and navigation patterns.
Cookies and Similar Technologies: Session cookies, persistent cookies, third-party analytics, and advertising cookies; usage described under the "Cookies & Tracking Technologies" section.

Legal Basis for Processing

OBSERVE: Data processing must satisfy AU's Privacy Act (including APPs), anti-money laundering, and consumer protection requirements.
EXPAND: Legal bases extend across contract, consent, compliance, and legitimate interests.
REFLECT: Each ground is linked to specific operational needs and obligations as per the Privacy Act 1988 (Cth) and the Anti-Money Laundering and Counter-Terrorism Financing Act 2006.

User Consent: Where required, we seek your explicit consent for data processing activities such as marketing communications. Consent may be withdrawn at any time via account settings or by contacting [email protected].
Contract Fulfillment: Processing necessary to provide our casino services (account creation, management, payment processing, customer support, promotions) under the terms agreed between you and goldenstarcasino via goldenstarvip.com.
Legal Obligations: Compliance with applicable laws (AML/CTF, age verification, reporting to regulatory bodies), including requirements under the AU Anti-Money Laundering and Counter-Terrorism Financing regulations.
Legitimate Interests: Ensuring service integrity, preventing fraud, enhancing security, conducting analytics and product improvement, provided such interests do not override your rights and freedoms.

Regional Compliance Note: Data processing for AU residents is strictly aligned with the Australian Privacy Principles, and obligations under the Privacy Act 1988 (Cth).

Purpose of Processing

OBSERVE: Legal and operational transparency require a full account of processing activities.
EXPAND: Processing purposes range from core service provision to compliance, security, and marketing.
REFLECT: Purposes are detailed to clarify necessity and proportionality in accordance with AU laws.

Provision of Services: Operating player accounts, facilitating gameplay, processing payments and withdrawals.
Service Improvement and Personalisation: Analysing user engagement to enhance site functionality, personalising player experience.
Marketing Communications: Sending promotional offers, surveys, updates, or newsletters (where you have consented).
Analytics and Research: Collecting aggregate data to analyse usage trends and optimise our offerings.
Fraud Detection and Security: Monitoring transactions, activities, and systems to prevent abusive conduct, money laundering, or other criminal acts.
Legal and Regulatory Compliance: Meeting obligations under applicable laws, regulatory requirements, and reporting duties.

Disclosure & Sharing

OBSERVE: AU privacy law mandates precise information on data disclosure.
EXPAND: Recipients include payment processors, service providers, regulators, and-subject to consent-affiliates and advertising networks.
REFLECT: All disclosures are subject to contractual data protection safeguards, and only occur to the extent necessary for lawful processing.

Payment Partners: Financial institutions and payment service providers to process deposits, withdrawals, and payment-related verifications, with adherence to strict confidentiality and compliance standards.
Technical Service Providers: Providers of IT, data storage, customer support, and anti-fraud technology requiring limited access to your personal data under controlled agreements.
Regulatory Authorities: Disclosure to gambling regulators (Curaçao Gaming Control Board), AU law enforcement, or government agencies as required to comply with legal or regulatory obligations.
Affiliates and Marketing Partners: Third parties involved in the promotion of goldenstarcasino via goldenstarvip.com, only where you have explicitly granted marketing consent.
Professional Advisors: Auditors, legal counsel, or insurers engaged by goldenstarcasino for compliance and business operations.

Legal Obligation: Except as specified herein, we do not sell or rent personal data to third parties. Data transfers are always protected by contractual or regulatory safeguards ensuring privacy and security.

International Transfers

OBSERVE: Personal information of AU users may be stored or processed outside Australia (e.g., within the EEA, Curaçao, or other jurisdictions as operationally required).
EXPAND: AU law (APP 8) obliges notification of cross-border transfers and implementation of adequate safeguards.
REFLECT: All transfers are governed by binding agreements incorporating Standard Contractual Clauses (SCCs) or equivalent mechanisms aligning with AU data export requirements.

Countries of Transfer: Data may be transferred to and stored in the EEA, Curaçao, or other countries where our partners and service providers are located.
Safeguards: Standard Contractual Clauses and similar legal mechanisms are used to protect your data in accordance with Australian and international privacy standards. Partners are contractually required to implement robust data protection policies.

Regional Compliance Note: All international transfers comply with the Australian Privacy Principles, including APP 8, ensuring overseas recipients do not breach comparable standards to those required in Australia.

Data Retention

OBSERVE: Data retention periods must be specified for each category and justified.
EXPAND: Criteria include statutory retention, operational necessity, user requests, and data minimisation.
REFLECT: All retention and deletion policies are documented in line with AU and Curaçao obligations.

Account Data: Retained while the account is active and for up to five (5) years following account closure, unless a longer period is required by law (e.g., in the case of an investigation or dispute).
Transactional Data: Kept for at least five (5) years from the date of transaction or account closure, per AML/CTF record-keeping requirements.
Marketing Data: Retained until you withdraw consent or unsubscribe, subject to technical removal periods.
Deletion Criteria: Personal data is regularly reviewed and deleted or anonymised when no longer necessary for the purposes specified or upon justified request, except where further retention is mandated by law.

Legal Obligation: All retention periods reflect obligations under the AU Privacy Act 1988 (Cth) and anti-money laundering regulations. Data is securely disposed of to prevent unauthorised use.

Your Rights

OBSERVE: AU Privacy Act mandates clear articulation of user data rights.
EXPAND: Rights include access, correction, deletion, restriction, objection, data portability, and marketing consent withdrawal.
REFLECT: All rights are described with procedural guidance and necessary disclaimers regarding legal limitations.

Right of Access: You may request a copy of your personal data processed by goldenstarcasino via goldenstarvip.com, subject to identity verification.
Correction and Deletion: Request correction of inaccurate data or deletion of information where it is no longer lawfully required.
Restriction of Processing: Request restriction of processing under certain conditions, such as while contesting data accuracy.
Objection: Object to data processing for direct marketing or on grounds relating to your particular situation, as permitted by law.
Data Portability: Where technically feasible, request data you have provided to us in a structured, commonly used, and machine-readable format.
Withdrawal of Consent: Withdraw marketing or other consents at any time using your account interface or by e-mailing [email protected].

Procedural Note: Exercising your rights may be subject to identity verification and legal exceptions where data must be retained for regulatory or statutory compliance.

Cookies & Tracking Technologies

OBSERVE: Precise types and management details are required for AU compliance.
EXPAND: AU law and industry best practice mandate transparency on cookie types, purposes, and user controls.
REFLECT: Clear, actionable information regarding cookies, their usage, and opt-out mechanisms is provided below.

Session Cookies: Temporary cookies essential for your navigation and authentication during a session; automatically expire after you log out or close your browser.
Persistent Cookies: Remain on your device for a specified period to remember preferences or settings.
Third-Party Cookies: Used by analytics providers (e.g., Google Analytics) and advertising networks to monitor usage and deliver targeted content, with your consent.

Cookie Purposes:
- Functional: Enable key site operations and security.
- Analytics: Assess how users interact with goldenstarcasino's services via goldenstarvip.com for continuous improvement.
- Advertising: Deliver informative, relevant promotions where permitted.
Cookie Management: You may manage or disable cookies at any time through your browser's settings or, where available, our internal cookie consent panel. Disabling some cookies may limit site functionality.

Data Security

OBSERVE: Security standards must reflect technical and organisational best practices.
EXPAND: Comprehensive measures are employed to mitigate risks of breach, loss, or misuse.
REFLECT: Framework satisfies both AU and Curaçao regulatory expectations; employees are trained and systems regularly reviewed.

Encryption and SSL: All sensitive information is transmitted over secured connections using SSL (Secure Socket Layer) and stored using industry-standard encryption.
Access Controls: Strict access restrictions are enforced; only personnel with legitimate business purpose may access personal data, subject to confidentiality obligations.
Organisational Safeguards: Regular security audits, staff privacy and security training, and enforced incident response procedures are performed.
Technical Protections: Firewalls, intrusion detection, and secure hosting environments are continuously maintained to prevent data breaches and unauthorised access.

Legal Obligation: Prompt notification procedures are in place in the event of a suspected data breach, as required by the Notifiable Data Breaches Scheme under Australian law.

Complaints & Contacts

OBSERVE: AU law requires clear complaint channels for unresolved privacy grievances.
EXPAND: Contact methods must be accessible, with independent escalation procedures explained.
REFLECT: Ensure users may reach the DPO and escalate to the Office of the Australian Information Commissioner (OAIC) if unsatisfied.

Primary Contact: All data protection inquiries should be directed to the Data Protection Officer at [email protected].
Complaint Procedure: Complaints may be made in writing by e-mail. Each complaint will be investigated and responded to within 30 days. If your concern is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/.

Updates

OBSERVE: Policy update procedures must ensure continued legal compliance and user awareness.
EXPAND: Notification methods and update timestamp are mandatory.
REFLECT: Revisions are published on goldenstarvip.com; material policy changes are highlighted to users.

Notification of Changes: Updates to this privacy policy will be posted on goldenstarvip.com. Where changes materially affect user rights, e-mail or prominent site notices will be provided.
Effective Date: This policy is effective as of 1 January 2025 and was last updated on 1 June 2025. The next scheduled review is before 1 January 2025.

Please review this policy regularly to stay informed of how goldenstarcasino, via goldenstarvip.com, protects your privacy.