Our Privacy Policy at Limitless Casino

Last updated 2026. This policy applies to every visitor and registered player on limitless-aud.com. It explains what we collect, why we collect it, who receives it and how you can control it. By registering an account you accept the practices described here.

Data We Collect From You

We collect several categories of personal data, and each category exists for a specific purpose. You give some of it to us directly when you register or verify your account. The rest we generate automatically when you use our site or play our games.

The categories below cover everything we hold on you. If we start collecting a new category, we will update this policy and notify you before processing begins.

• Identity data: your name, date of birth, residential address, email address and phone number, collected at registration.
• Verification documents: government-issued photo ID, proof of address and payment method verification, collected under our KYC obligations before your first withdrawal.
• Transaction data: deposits, withdrawals, bonuses claimed, wagering records and bet history, tied to your AUD or crypto balances.
• Technical data: IP address, device type, operating system, browser version, cookies and approximate location derived from your IP.
• Gameplay behaviour: games played, session duration, stakes placed, win and loss patterns, and responsible-gambling indicators.
• Marketing preferences: which channels you opted into, which promotions you opened and whether you consented to receive offers.

How We Use Your Information

Every processing activity we run maps to a purpose listed here, and we do not use your data for anything outside these purposes without asking you first. Our license from Anjouan (number ALSI-202501014-FI8) requires several of these activities, and refusing them means we cannot operate your account.

• Creating and managing your account, including login, profile settings and password resets.
• Verifying your identity and age under KYC rules before we release your first withdrawal.
• Processing deposits and withdrawals across PayID, cards, e-wallets and crypto, and reconciling them against your balance.
• Detecting fraud, bonus abuse, multi-accounting and money laundering through automated and manual review.
• Monitoring play patterns for signs of problem gambling and applying deposit limits or interventions where our tools indicate a risk.
• Sending marketing material where you have consented, and honouring your opt-out the moment you withdraw consent.
• Meeting legal, regulatory and audit obligations owed to our licensing authority and to payment regulators.

Our Legal Bases for Processing

Contract. We process your identity, transaction and account data because they are necessary to perform the agreement you entered when you registered. Without them we cannot open an account, hold your AUD balance or pay out winnings, so this basis applies to the core of our relationship with you.

Legal obligation. Anti-money-laundering and KYC rules oblige us to verify who you are, to screen transactions and to keep records for a minimum statutory period. We cannot switch this processing off, and we cannot delete the underlying records before the retention period expires, even if you ask us to.

Legitimate interest. We process device data, IP addresses and gameplay patterns to detect fraud, secure our platform and keep play fair for everyone. We weighed our interest in a safe casino against your expectations of privacy, and we restrict this processing to what a reasonable player would anticipate.

Consent. Marketing emails, SMS offers and non-essential cookies run only on your consent. You give it through an explicit opt-in, and you can withdraw it at any time through your account settings or a link in every message we send. Withdrawal never affects the lawfulness of messages sent before it.

Retention Periods We Apply

We keep each category of data only as long as the purpose requires or the law demands. Gambling regulations oblige us to hold transaction and KYC records for at least five years, and we apply that floor to every category listed as regulatory in the table below. When a period ends, we delete or irreversibly anonymise the data.

Who We Share Your Data With

We never sell your personal data, and we share it only with processors and authorities who need it to deliver a service we cannot run ourselves. Each recipient is bound by a written data-processing agreement that limits what it may do with your information.

Game and platform providers receive your player ID and session data to operate the games you launch. Payment processors receive only the fields they need to move your funds, such as your wallet address, card token or e-wallet identifier.

• Payment processors handling deposits and withdrawals across cards, e-wallets, bank transfer and crypto networks.
• KYC and AML verification providers that check your ID documents and screen transactions against sanctions lists.
• Our licensing authority and, on formal request, law enforcement or tax regulators.
• Analytics and site-performance services that receive pseudonymised usage data.
• Email and SMS delivery services used for transactional messages and, with your consent, marketing.
• Professional advisers such as auditors and lawyers, strictly on a need-to-know basis.

How to Exercise Your Rights

You control your data, and we answer every request within 30 days. Send requests to [email protected] from your registered email address, and include enough detail for us to verify you own the account. Requests cost nothing, and exercising a right never reduces your access to your balance or your winnings.

• Access: get a copy of the personal data we hold on you.
• Rectification: correct data that is inaccurate or out of date.
• Erasure: ask us to delete data where no regulatory retention duty applies.
• Portability: receive your account and transaction history in a machine-readable format.
• Objection: object to processing based on legitimate interest, including profiling for fraud checks.
• Withdrawal of consent: opt out of marketing at any time, effective immediately.
• Complaint: escalate to our data protection officer, and you retain the right to complain to the relevant data protection authority in your jurisdiction.

Cookies and Tracking Technologies

We use session cookies to keep you logged in, security cookies to block fraud, and, with your consent, analytics and marketing cookies to measure site performance and tailor offers. The cookie banner on your first visit sets your choices, and you can change them any time in your browser or account settings.

Our full Cookies Policy lists every cookie we set, its purpose and its lifetime. Read it for the complete breakdown before adjusting your browser settings.

Security Measures at Limitless Casino

We transmit all traffic over TLS encryption and store KYC documents in encrypted storage with restricted access. Only staff who need your data for verification, payments or support can reach it, and every access is logged and reviewed. Withdrawal approvals and document checks sit behind role-based access controls and dual review for high-value transactions.

If a breach affects your personal data, we will notify the relevant supervisory authority without undue delay and tell you directly what happened, what data was exposed and what we are doing about it.

• TLS 1.3 encryption for all connections to our site.
• Encrypted storage for identity documents and payment details.
• Role-based access controls with logged, auditable access.
• Continuous monitoring for suspicious login and transaction patterns.
• Documented incident-response and breach-notification procedures.

Frequently Asked Questions

Can I delete my KYC documents after verification?

No. Gambling regulations require us to keep verification records for at least 5 years after your account closes. Once that period ends, we delete them or irreversibly anonymise them.

How do I stop marketing messages?

Use the unsubscribe link in any message, or switch off marketing in your account settings. Withdrawal of consent takes effect immediately, and transactional messages such as withdrawal confirmations continue because they are necessary for the contract.

Do you share my data with game providers?

Yes, in a limited way. When you open a game, the provider receives your player ID and session data so the game can run and outcomes can be settled. Providers never receive your full identity or payment details.

Where do I send a data subject request?

Email [email protected] from your registered address. We verify your identity, then respond within 30 days at no cost.