Privacy Policy

This Privacy Policy explains how Sweetspot N.V., trading as "Pure Casino" and operating the website purebet-au.com (also referred to in this context as Pure Casino), collects, uses, discloses, and protects your personal information when you access or use our services. It applies to all visitors to our website, registered players, and any other individuals whose data we process in connection with the operation of our online casino platform.

The Policy is designed to meet the requirements of the Curaçao regulatory framework that governs our licence, align with the Australian Privacy Act 1988 (including the Australian Privacy Principles) for Australian users, and reflect key concepts from international standards such as the EU General Data Protection Regulation (GDPR) and applicable Mexican data protection rules.

By using purebet-au.com (Pure Casino) or creating an account, you acknowledge that you have read and understood this Privacy Policy.

Effective date: 1 January 2026

Who We Are

The online casino services provided via purebet-au.com under the "Pure Casino" / Pure Casino branding are owned and operated by:

Operator: Sweetspot N.V.
Legal form: Public limited company (N.V.) incorporated under the laws of Curaçao
Company registration number: 143207
Registered jurisdiction: Curaçao (exact registered office address available on request)
Gaming licence: Sub-licence no. 8048/JAZ2015-004 issued by Antillephone N.V., operating under authority of the Government of Curaçao

In some cases, payment processing for fiat transactions may be carried out on our behalf by subsidiary or partner entities located in Cyprus (for example, entities similar to "SS Techno Services Limited" or other unnamed payment-processing subsidiaries). These entities act as our payment agents or processors and do not use your data for their own independent purposes.

Data Protection Contact

Sweetspot N.V. is responsible for your personal information as the "controller" (or equivalent term under applicable law). We have designated an internal data protection contact point:

Data Protection Officer / Data Protection Team: Sweetspot N.V. - Data Protection
Email: [email protected] (please include "Privacy" or "DPO" in the subject line)
Website: https://purebet-au.com

You may also contact us via the 24/7 live chat function available on the website. We aim to respond to privacy-related queries within 30 days.

What Personal Data We Collect

We collect only the personal information that is reasonably necessary for the operation of Pure Casino via purebet-au.com, for compliance with our legal obligations, and for improving our services. The categories of data we may collect include:

Identification and Contact Data

Full name, date of birth, nationality, and gender (where provided)
Residential address and country of residence
Email address (including your primary account email)
Telephone number or mobile number (if you choose to provide it)
Copies of identification documents (e.g., passport, ID card, driving licence) and address verification documents (e.g., utility bills, bank statements) required for KYC (Know Your Customer) checks

Account and Gaming Data

Username, account ID, and security credentials (stored in encrypted form)
Account settings, preferences, and communication choices
Betting and gaming history, including wagers, wins, losses, bonuses used, game sessions, and tournament participation
Responsible gambling data (self-exclusion status, limits set, interactions related to safer gambling)

Payment and Financial Data

Payment card information (handled via secure, PCI-compliant payment providers)
Bank account details, e-wallet identifiers, and other payment instrument details needed to process deposits and withdrawals
Transaction history, including amounts, currencies, timestamps, and payment channels
Anti-money laundering (AML) and counter-terrorist financing (CTF) screening data where legally required

Technical and Usage Data

IP address, approximate geolocation (country/region level), and associated connection data
Device information such as device type, operating system, browser type and version, language settings, and unique device identifiers where available
Log data relating to your use of the website and applications, including access times, pages viewed, click paths, and interaction with site features
Technical diagnostic data related to errors, crashes, and performance metrics

Behavioural and Marketing Data

Information about how you interact with our services, such as games played, frequency and duration of sessions, and response to in-game features
Marketing preferences, statistics on email opening and click-through rates, and information about your participation in promotions and loyalty programs
Data derived from profiling for responsible gambling monitoring (for example, unusual betting patterns) and for personalising offers, where permitted by law

Cookies and Similar Technologies

Cookies, web beacons, pixels, local storage, and similar technologies used on our website and in our marketing communications
Information collected via cookies includes session identifiers, authentication tokens, language settings, referral URLs, and analytics data

You can choose not to provide certain information; however, this may affect our ability to open or maintain your account, verify your identity, process payments, or provide specific services or promotions.

Legal Basis for Processing

Because Pure Casino (via purebet-au.com) serves users from multiple jurisdictions, we apply a layered approach to legal grounds for processing, designed to meet Curaçao licensing obligations and align with international standards (including the Australian Privacy Principles, GDPR, and relevant Mexican privacy rules). Depending on the specific context, we rely on one or more of the following legal bases:

Performance of a Contract

To create, manage, and operate your player account, including authentication and account security
To provide you with access to casino games, process deposits and withdrawals, and credit bonuses
To provide customer support and handle requests, complaints, and technical queries

Compliance with Legal and Regulatory Obligations

To comply with Curaçao gaming regulations and licence conditions, including mandatory reporting to Antillephone N.V.
To conduct KYC (Know Your Customer), AML (Anti-Money Laundering), CTF, and sanctions screening as required by applicable laws
To comply with accounting, taxation, record-keeping, and fraud-prevention obligations
To respond to lawful requests or orders from courts, regulators, or law enforcement agencies in relevant jurisdictions (including, where applicable, Australian and other national authorities)

Legitimate Interests

Where permitted by applicable law, we process certain data because it is necessary for our legitimate business interests, balanced against your privacy rights. These interests include:

Ensuring the security and integrity of our platform, networks, and systems
Preventing abuse, cheating, money laundering, bonus misuse, and other fraudulent activities
Conducting internal analytics and statistical reporting to improve our services and user experience
Protecting and enforcing our legal rights, including the defence of legal claims

Consent

For sending marketing communications (email, SMS, push notifications) where consent is required under applicable law
For the use of certain cookies and tracking technologies that are not strictly necessary for the functioning of the website
For specific optional features (for example, participation in research surveys or beta testing) where we ask you explicitly

You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Instructions for withdrawing consent are provided in our communications and in the "Your Rights" section below.

Purpose of Processing

We use the personal data collected through purebet-au.com (Pure Casino) for clearly defined purposes. The main purposes include:

Provision of Casino Services: Creating and managing your account, providing access to games, processing deposits and withdrawals, calculating and paying out winnings, and administering bonuses and promotions.
Compliance and Risk Management: Performing identity verification, age verification, AML/CTF checks, sanctions screening, transaction monitoring, responsible gambling monitoring, and other risk assessments required by law or our gaming licence.
Customer Support: Responding to inquiries submitted via email (including [email protected]) or live chat, resolving technical and transactional issues, and handling complaints and disputes.
Service Improvement and Analytics: Analysing usage patterns, game performance, and behavioural data to improve site navigation, game selection, and functionality, and to develop new features and products.
Personalisation and Marketing: Customising content and offers, sending promotional communications (where permitted), and managing loyalty or VIP programs, including segmentation for relevant offers.
Security and Fraud Prevention: Detecting and preventing suspicious logins, account takeovers, fraudulent payments, collusion, and other security threats to our platform and users.
Legal and Regulatory Purposes: Keeping records required for audits, tax, regulatory reporting, and responding to lawful requests from regulators and law enforcement authorities.
Corporate Administration: Internal management, financial planning, and, where relevant, business continuity and corporate restructuring activities.

Disclosure & Sharing

We do not sell your personal information. We may, however, share your data with carefully selected third parties where this is necessary for the operation of Pure Casino (purebet-au.com), for compliance with legal obligations, or where you have given your consent. These recipients may include:

Service Providers and Processors

Payment processors and banking partners: Entities (including those located in Cyprus and other jurisdictions) that process deposits, withdrawals, chargebacks, and other financial transactions on our behalf.
Game providers and platform vendors: Third-party software suppliers that deliver games and related technical services; in some cases they may receive limited player identifiers and session data.
Technology and security providers: Hosting providers, content delivery networks, email delivery services, security monitoring tools, and analytics providers that support the operation, protection, and improvement of our platform.

Group and Corporate Structure

Subsidiary and affiliated entities acting as payment or service providers, particularly in Cyprus, that process data strictly in accordance with our instructions and this Privacy Policy.
Professional advisers (lawyers, auditors, accountants) where necessary for the protection of our legal and financial interests and subject to confidentiality obligations.

Regulators and Public Authorities

Our Curaçao licensing master, Antillephone N.V., and associated oversight bodies, for compliance, auditing, and dispute-resolution purposes.
Law enforcement, courts, and regulatory authorities in relevant jurisdictions (which may include, where applicable, Australian authorities such as the Australian Communications and Media Authority (ACMA) or the Office of the Australian Information Commissioner (OAIC)), where disclosure is required by law or necessary to protect our rights, users, or third parties.

Advertising and Analytics Partners

Third-party marketing, advertising, and analytics providers may receive pseudonymised or aggregated data for campaign measurement and optimisation, only where this is allowed by law and, where required, based on your consent to cookies or direct marketing.

Business Transfers

In the event of a merger, acquisition, asset sale, restructuring, or insolvency, your data may be transferred to a successor entity, subject to equivalent privacy protections and, where required, advance notice.

All third parties that process personal data on our behalf are bound by contractual obligations to process such data only in accordance with our instructions, to maintain appropriate confidentiality and security, and not to use the data for their own purposes.

International Transfers

As an online casino serving users in multiple countries, including Australia, your personal information may be transferred to, and processed in, jurisdictions other than your country of residence. These may include:

Curaçao: Where Sweetspot N.V. is registered and where key operational and regulatory functions are performed.
Cyprus and other EEA countries: Where payment processing subsidiaries, technical service providers, or support teams are located.
Other countries: Where our cloud hosting providers, security vendors, or specialised service providers maintain infrastructure or support services.

Some of these jurisdictions may not provide the same level of data protection as your home country. Where required by law (for example, for users in the EU/EEA or Mexico), we implement appropriate safeguards to protect your personal information, such as:

Standard contractual clauses (SCCs) or equivalent data-transfer agreements approved by relevant authorities;
Contractual commitments requiring third parties to maintain adequate data protection standards and security;
Technical measures (encryption, pseudonymisation) and strict access controls to reduce transfer-related risks.

By using purebet-au.com (Pure Casino), you understand that your personal information may be transferred internationally as described above. Where local law requires your explicit consent for such transfers, we will seek it separately.

Data Retention

We retain personal information only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Retention periods may vary depending on the category of data and applicable law, but we apply the following general principles:

General Retention Periods

Account and identification data: Typically retained for the lifetime of your account and, after account closure, for a period of up to 5 years, unless a longer period is required by AML, tax, or gaming regulations.
Payment and transaction records: Retained for at least 5 years after the relevant transaction or account closure, in line with financial and AML record-keeping requirements.
Gaming and betting history: Retained for the lifetime of your account and for a further period of up to 5 years after closure, primarily for regulatory and dispute-resolution purposes.
Customer support communications: Retained for up to 3 - 5 years after the communication or resolution of a case, depending on the nature of the issue.
Technical logs and security data: Retained for a shorter period, typically between 6 months and 3 years, depending on security and operational requirements.
Marketing data and consent records: Retained for as long as you remain subscribed and for a limited period after you unsubscribe, to demonstrate compliance and honour opt-out requests.

Deletion and Anonymisation

When data is no longer required for any permitted purpose, we will either securely delete it or irreversibly anonymise it so that it no longer identifies you.
If you request deletion of your data, we will comply to the extent permitted by gaming, AML, and other applicable laws, which may require certain records to be retained for minimum statutory periods.

We review our data holdings and retention schedules periodically to ensure ongoing compliance as of and beyond 2026.

Your Rights

We respect your rights regarding your personal information. The specific rights available to you depend on your place of residence and the laws that apply. Regardless of location, we aim to provide a transparent and accessible process for exercising these rights at no charge.

Core Rights (All Users, Including Australia)

Right of access: You can request confirmation of whether we hold personal information about you and obtain a copy of such data in a commonly used format.
Right to correction: You can ask us to correct or update inaccurate or incomplete information (for example, your contact details).
Right to deletion (where applicable): You may request that we delete certain personal data, subject to our obligations to retain records under gaming, AML, tax, and other laws.
Right to withdraw marketing consent: You can opt out of marketing communications at any time by using the unsubscribe links in emails, adjusting your account settings, or contacting us.

Additional Rights Under GDPR (EU/EEA) and Similar Frameworks

If you are located in the European Union/EEA or in a jurisdiction that recognises comparable rights, you may also have the following rights (subject to conditions and legal limitations):

Right to restriction of processing: You can request that we limit processing in certain circumstances (e.g., while we verify accuracy or assess an objection).
Right to object: You may object to processing based on our legitimate interests, including profiling related to such interests, and to processing for direct marketing.
Right to data portability: You may request that we provide certain information to you or another controller in a structured, commonly used, and machine-readable format.
Rights related to automated decision-making: Where we use automated decisions that significantly affect you, you may request human review and express your point of view.

Rights Under Mexican Privacy Law (LFPDPPP and Related Regulations)

If you are a resident of Mexico, you may have specific ARCO rights under the Federal Law on the Protection of Personal Data Held by Private Parties and its regulations, in addition to the general rights described above:

Access: Obtain confirmation of the processing of your personal data and access to such data.
Rectification: Request corrections to inaccurate or incomplete data.
Cancellation: Request the cancellation (deletion) of your data when you consider that it is not necessary, appropriate, or relevant for the purposes set out, subject to legal retention requirements.
Opposition: Object to the processing of your data for specific purposes, such as marketing or certain profiling activities.

We will handle ARCO requests in accordance with applicable Mexican regulations, including applicable formalities and time limits.

How to Exercise Your Rights

Submit a request: Contact us at [email protected] (subject line "Data Rights Request") or via live chat, specifying:
- Your full name, username, and country of residence;
- The right(s) you wish to exercise;
- Any additional information needed to locate your data (e.g., date range, type of transaction).
Verify your identity: To protect your account and data, we may request additional information or documentation to confirm your identity before acting on your request.
Response timeframe: We aim to respond to all valid requests within 30 days of receipt, and sooner where required by local law. In complex cases, this period may be extended in line with legal requirements, and we will inform you of any extension and reasons.
Cost: We do not charge a fee for handling reasonable and legitimate requests. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request as permitted by law.

Cookies & Tracking Technologies

purebet-au.com (Pure Casino) uses cookies and similar technologies to ensure the proper functioning of the site, enhance your user experience, and support analytics and marketing activities. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Session cookies: Temporary cookies that remain on your device only while your browser is open. They are essential for basic site functions such as login, navigation, and maintaining your session across pages.
Persistent cookies: Cookies that remain on your device for a specified period or until you manually delete them. They help us remember your preferences (e.g., language) and recognise you when you return to the site.
First-party cookies: Cookies set directly by purebet-au.com for operational and functional purposes.
Third-party cookies: Cookies placed by external providers, such as analytics services or advertising partners, to measure performance, track conversions, and deliver personalised content.

Purposes of Cookies

Strictly necessary / functional: Enable core features like secure login, account management, transaction processing, and consent management. These cookies are essential for the service.
Analytics and performance: Collect aggregated statistics about site usage, game performance, and navigation patterns to help us improve our services.
Advertising and personalisation: Support the delivery of relevant offers and marketing communications, and measure campaign effectiveness, where permitted by law and subject to your consent.

Managing Cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse all or some cookies and to delete existing cookies.
Some non-essential cookies may be controlled via an internal preference panel or consent banner on our website, where available.
Please note that disabling certain cookies may impact the functionality of our services and your ability to log in, play games, or perform transactions.

Data Security

We implement technical and organisational security measures designed to protect your personal information against unauthorised access, loss, misuse, or alteration. While no system can be guaranteed as completely secure, we continuously review and update our controls in line with evolving risks and industry practices.

Technical Measures

Encryption in transit: Data transmitted between your device and our servers is protected using modern cryptographic protocols (such as TLS 1.2 or higher).
Encryption at rest: Sensitive data, including authentication credentials and payment-related tokens, is stored in encrypted form using robust algorithms.
Network and infrastructure security: Firewalls, intrusion detection and prevention systems, and regular vulnerability assessments help protect our infrastructure from unauthorised access.

Organisational Measures

Access controls: Access to personal data is restricted to authorised personnel who require it for their job functions and is governed by role-based permissions and logging.
Multi-factor authentication (MFA): MFA is used for critical internal systems and administrative accounts, and we encourage players to use strong, unique passwords and available security features.
Staff training: Employees with access to personal data receive regular training on data protection, confidentiality, and security best practices.

Governance and Monitoring

Policies and procedures: We maintain internal data protection and information security policies that define our obligations and standards.
Audits and reviews: Security controls are periodically reviewed, and we may engage independent experts to test and assess our security posture.
International standards: Our security framework is designed with reference to established standards such as ISO/IEC 27001 and SOC 2. While we may not publicly claim formal certification at all times, we seek to align our controls with these recognised best practices.

Incident Response

We have procedures in place to detect, investigate, and respond to suspected data breaches or security incidents. In the event of a breach that is likely to result in a serious risk of harm to you, we will notify you and relevant authorities as required by applicable law (including the Australian Notifiable Data Breaches regime where it applies).

Complaints & Contacts

If you have questions, concerns, or complaints about how Pure Casino (via purebet-au.com) handles your personal information, we encourage you to contact us first so we can attempt to resolve the issue directly.

Contacting Us

Email (primary): [email protected] (include "Privacy" or "Complaint" in the subject line)
Website: https://purebet-au.com
Live chat: Available 24/7 via the website's support interface

Because our registered office postal address is not publicly listed here, you may request the current correspondence address from our support team if you need to submit documents by post.

Internal Complaint Procedure

Submit your complaint: Provide a clear description of your concern, your username, and any relevant dates or reference numbers.
Acknowledgment: We will acknowledge receipt of your complaint within a reasonable period, usually within 5 business days.
Investigation: Your complaint will be reviewed by our support or compliance team, and, where necessary, escalated to our Data Protection Officer or senior management.
Response: We aim to provide a substantive response within 30 days. If we require more time due to complexity, we will let you know and keep you updated.
Resolution: If you are not satisfied with our response, you may request further review or pursue external remedies as described below.

Regulatory and Supervisory Authorities

If you are not satisfied with our handling of your complaint, you may have the right to contact a relevant data protection or regulatory authority:

Australia (privacy matters): Office of the Australian Information Commissioner (OAIC) - see https://www.oaic.gov.au for contact details and complaint procedures.
Mexico (privacy matters): Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) - see https://www.inai.org.mx for information on submitting ARCO and privacy complaints.
EU/EEA (privacy matters): Your local Data Protection Authority - a list and contact details are available at the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en.

Gaming Licence Complaints (Curaçao)

For disputes related to our gaming services under licence no. 8048/JAZ2015-004, you may also contact our licensing master:

Antillephone N.V. complaint / validation page: https://certria.com/pass/check/

Please note that these bodies may require you to first attempt to resolve the matter directly with us and may have their own procedural requirements and time limits.

Updates

We may update this Privacy Policy from time to time to reflect changes in our operations, legal obligations, or industry best practices. When we make material changes, we will take appropriate steps to inform you.

Notification Procedures

Email notifications: We may send an email to your registered address summarising material changes.
Website notices: A notice or banner may be displayed on purebet-au.com drawing attention to the updated Policy.
Account dashboard alerts: Where relevant, we may display notifications within your account area, especially for changes affecting core features or your rights.

Advance Notice and Your Options

For changes that significantly affect your rights or how we process your data, we will provide, where reasonably practicable, at least 30 days' advance notice before the changes take effect.
If you do not agree with the updated Policy, you may choose to stop using our services and request account closure. We will continue to process your data in accordance with the previous version of the Policy to the extent necessary to close your account and comply with legal obligations.

Version Control

Last updated: January 2026
Historical versions of this Privacy Policy may be made available upon request so that you can see how our practices have evolved over time.

Continued use of purebet-au.com (Pure Casino) after the effective date of any updated Privacy Policy will be taken as your acknowledgement of the changes, subject always to your rights under applicable law.