burger icon

Privacy Policy

This Privacy Policy explains how playzilla, operating through playzillaz.com, manages personal information for all players and website visitors. Protecting your privacy and complying with applicable privacy laws is critical to us. This policy is effective as of 18 June 2025 and applies to all individuals interacting with our services via playzillaz.com.

Who We Are

OBSERVE: The privacy obligations of playzillaz.com require transparent identification of the operator and contact details for privacy inquiries.
EXPAND: The legal operator for playzillaz.com is Rabidi N.V., holding a Curacao eGaming license (8048/JAZ), valid through 2025. Although the registered office details are not specified in current corporate disclosures, Rabidi N.V. remains the controller of your personal data under this policy.

  • Operator: Rabidi N.V. (parent company, established 2021), licensed and regulated by the Government of Curacao.
  • License Details: eGaming License 8048/JAZ, valid until 2025.
  • Contact: For all privacy and data protection matters, you may contact our Data Protection Lead, Maddison Taylor, via or through the official website playzillaz.com.
  • Jurisdiction: playzillaz.com is operated from Curacao and primarily serves players outside Australia, with clients in AU subject to regulatory restrictions (see AU section).

What Personal Data We Collect

OBSERVE: We collect data as required for regulated online gambling operations and optimal web functionality.
EXPAND: Data categories include those required for player registration, game play, fraud detection, regulatory reporting, and user analytics.
REFLECT: The following describes the categories of your information that may be processed:

  • Personal Identification Data: Full name, date of birth, address details (when provided), email address, and phone number.
  • Account Data: Username, security credentials, unique player identifiers, and communication preferences.
  • Technical Data: IP address, device type, operating system, browser information, language preferences, log files, and access timestamps.
  • Payment & Financial Data: Payment card or e-wallet details (where applicable), transaction history, deposit and withdrawal records, and related compliance documentation.
  • Behavioral & Usage Data: Betting history, navigation activity, interactions, gaming preferences, and clickstream data.
  • Cookies & Tracking: Data from cookies, pixels, and similar technologies to improve user experience and for analytics/marketing (see "Cookies" section).

Legal Basis for Processing

OBSERVE: playzillaz.com must have lawful grounds for all data processing under AU Privacy Act 1988 (Cth) and relevant international standards.
EXPAND: The lawful bases detailed below reflect both explicit regulatory requirements and implicit operational needs.
REFLECT: Data may be processed for the following primary reasons:

  • User Consent: When the user provides explicit consent, such as for receiving marketing communications or enabling optional features. Consent may be withdrawn at any time.
  • Performance of Contract: To create and manage your playzillaz.com account, deliver gambling services, process payments, and honor bonus terms.
  • Legal Obligations: To comply with Anti-Money Laundering (AML), Counter-Terrorism Financing (CTF), Know Your Customer (KYC) regulations, regulatory reporting, taxation, and dispute resolution mechanisms under AU laws or applicable licensing conditions.
  • Legitimate Interests: For operation protection, fraud detection, security, service improvement, data analytics, and incident investigation-conducted with user privacy impact minimization as required by AU privacy standards.

Regional Compliance Note: Where AU local laws require a higher standard of protection or restrict certain data practices, playzillaz.com will implement additional controls as necessary for residents or users within Australia, though playzillaz.com may restrict or block access where required by AU regulators (ACMA).

Purpose of Processing

OBSERVE: All processing of user data must have a legitimate documented purpose.
EXPAND: Purposes are governed by both operational necessities and AU legal requirements.
REFLECT: The personal information collected on playzillaz.com may be used for the following:

  • Provision of Casino Services: Enabling user registration, facilitating gaming and wagering, ensuring account management, and processing financial transactions.
  • Regulatory Compliance: Fulfilling AML/CTF, KYC, and reporting obligations.
  • Personalization & Service Improvement: Analyzing behavior to tailor services, recommend games, optimize content, and enhance user experience.
  • Marketing & Communications: Sending promotional offers, service updates, and newsletters-only where user consent is present; opt-out available at any time.
  • Analytics & Statistical Reporting: Conducting performance measurement, site usage statistics, and aggregated reporting (non-identifiable data where feasible).
  • Fraud Prevention & Security: Detecting, preventing, and investigating suspicious activities, unauthorized access, and related security threats.

Disclosure & Sharing

OBSERVE: The AU Privacy Act and global best practices require transparency regarding data disclosures.
EXPAND: Disclosures are limited to facilitate service delivery, regulatory compliance, and legitimate business functions.
REFLECT: playzillaz.com may disclose your information as follows:

  • Payment Partners: Financial institutions and payment processors for deposits and withdrawals, requiring data as a condition of service.
  • Authorized Service Providers: IT, customer support, analytics, email, and security solution providers-subject to strict data protection agreements.
  • Regulatory/Licensing Authorities: Disclosure to the Government of Curacao and (where required) to AU telecom or gambling authorities to ensure compliance.
  • Affiliates & Advertising Networks: Limited sharing for marketing with explicit user consent, never for unauthorized third-party marketing.
  • Legal Process: Where required by law, in connection with legal claims, enforcement of terms, or for the protection of player rights and casino property.

Protective Clauses: All third parties are contractually required to use data solely for authorized purposes and maintain equivalent levels of data protection. Cross-border sharing is strictly regulated (see next section).

International Transfers

OBSERVE: As playzillaz.com is operated from Curacao and serves users in multiple jurisdictions (including AU), certain data transfers occur internationally.
EXPAND: The Privacy Act (AU) sections 13B and 16C regulate overseas data disclosures, especially where clients are in AU.
REFLECT: playzillaz.com ensures data is transferred only where adequate safeguards are provided:

  • Countries: User data may be transferred to Curacao, EEA jurisdictions, and countries where service partners or data centers are located.
  • Safeguards: Transfers are executed using Standard Contractual Clauses (SCCs) or equivalent data protection mechanisms, ensuring the third country provides a similar standard of data security.
  • User Rights: Users are informed of such transfers and may request further information regarding the safeguards in place.
  • Regulatory Limitations: Australian clients may face restricted access to playzillaz.com due to ACMA blocking and local law. All data processing for AU residents is conducted in compliance with the Australian Privacy Principles (APPs).

Data Retention

OBSERVE: Data retention must balance regulatory requirements (e.g., AML laws) with user privacy rights.
EXPAND: Timeframes and deletion triggers are prescribed by both operational policies and legal mandates.
REFLECT: Our data retention policy is as follows:

  • Personal and Account Data: Retained for the duration of the user relationship, and for up to 5 years after account closure or last user activity, in line with AML/CTF and KYC regulatory records-keeping requirements (to 2025 or as required by law).
  • Financial Transaction Records: Minimum 5-year retention after transaction or account closure, as mandated for regulatory and audit purposes.
  • Behavioral, Technical, and Analytics Data: Retained as needed for operational efficacy, generally not exceeding 5 years from collection.
  • Cookies & Tracking Data: As per cookie duration (session or up to 2 years/persistent), with user override available.
  • Deletion Criteria: User-initiated deletion requests (where permitted by law), expiration of statutory retention, or when processing purpose ceases.

Retention Policy Note: Data may not be deleted where required for ongoing legal obligations, dispute resolution, or if anonymization is necessary for audit purposes.

Your Rights

OBSERVE: Under the Australian Privacy Principles (APPs), and aligned with local and global legal standards, users are entitled to robust data rights.
EXPAND: Rights may occasionally be limited by overriding legal or regulatory requirements for gambling operators.
REFLECT: You are empowered as follows:

  • Access: Request access to a copy of your personal information held by playzillaz.com.
  • Correction: Request correction or update of incomplete, inaccurate, or outdated personal data.
  • Deletion: Request deletion of your information where no longer lawfully required and not subject to a legal or regulatory retention obligation.
  • Restriction of Processing: Request limits on how your data is used, including objections to particular types of processing.
  • Data Portability: Request transfer of your personal data to yourself or a nominated third party.
  • Withdraw Consent: Revoke marketing or non-essential consent at any time through your playzillaz.com account or by contacting us (see "Complaints & Contacts").
  • Complaints: Submit privacy complaints or concerns regarding data handling (see next section).

Note: We may require verification of identity prior to fulfilling your rights requests. In certain circumstances, your rights may be limited where required for regulatory compliance or legitimate interests (e.g., AML/CTF obligations).

Cookies & Tracking Technologies

OBSERVE: Transparency and user control regarding cookies are mandatory under AU law and industry standards.
EXPAND: We use cookies and related technologies to facilitate key site functions.
REFLECT: Details as follows:

  • Session Cookies: Temporary cookies that enable essential gameplay and site navigation. Removed at session end.
  • Persistent Cookies: Remain on the user's device up to 2 years for remembering preferences and login credentials.
  • Third-Party Cookies: Set by analytics, advertising, and affiliate partners (e.g., Google Analytics, ad networks). Used only with user consent for audience measurement and marketing.
  • Purposes: Functional (site operation), Analytics (usage insights), Marketing (targeted offers and ads).
  • Management: Cookies may be managed or disabled through browser settings or within user panel settings on playzillaz.com. Disabling certain cookies may impact site functionality.

Cookie Policy Note: For more detailed information, please refer to our dedicated Cookie Policy page on playzillaz.com.

Data Security

OBSERVE: AU requirements and industry standards demand strong data security measures to protect user information.
EXPAND: Our commitment is to safeguard data from unauthorized access, disclosure, alteration, and destruction.
REFLECT: Protections in place include:

  • Encryption: All data transmissions use Secure Socket Layer (SSL) technology and other encryption protocols.
  • Access Controls: Only authorized personnel have access to personal data, with system-based access restrictions and audit trails.
  • Organizational Measures: Staff are trained regularly on data protection obligations, and security policy reviews are conducted at least annually.
  • Technical Measures: Firewalls, intrusion detection systems, 24/7 system monitoring, and periodic vulnerability assessments.
  • Incident Response: Clearly defined procedures for addressing suspected data breaches, including user notification where required under AU Notifiable Data Breaches (NDB) scheme.

Security Statement: While robust measures are employed, no system can guarantee absolute security. Users are responsible for protecting their own login credentials and should report suspected fraud immediately via playzillaz.com.

Complaints & Contacts

OBSERVE: Users must have a clear, compliant channel for privacy concerns and regulatory complaints.
EXPAND: A formal process for investigating and responding to user complaints is a requirement under the APPs.
REFLECT: For questions or complaints regarding privacy or data protection:

  • Contact the Data Protection Lead: Maddison Taylor (DPO) at , or via the official website.
  • Resolution Procedure: We aim to acknowledge all privacy-related communications within 7 business days and to resolve issues within 30 days where possible.
  • Escalation: If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) or the relevant regulatory body in your jurisdiction.

Confidentiality: All inquiries and complaints are handled confidentially and in accordance with our legal and regulatory obligations.

Updates

OBSERVE: AU and international standards require companies to update privacy policies to reflect regulatory or operational changes.
EXPAND: Users must be notified of material changes with a clear record of the last revision.
REFLECT: playzillaz.com will review and update this Privacy Policy as required by law or business practice. Material changes will be communicated to users via in-site notifications, email (if applicable), or other appropriate means before taking effect. The "Effective Date" at the top of this policy reflects the latest revision.

Last updated: 18 June 2025