Privacy Policy

This Privacy Policy explains how Joka Casino, as offered to Australian players via jokabet-au.com (the "Website", also referred to in this document as the Joka Casino project), collects, uses, stores and shares your personal information. It applies to all players, prospective players and other visitors who access or use the Website or communicate with us via any channel linked from jokabet-au.com.

This Privacy Policy is intended to meet internationally recognised privacy standards, including, where applicable, the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU General Data Protection Regulation (GDPR), and relevant Mexican data protection rules. It should be read together with our Terms and Conditions and Responsible Gambling information.

Effective date: 1 February 2026

Who We Are

For the purposes of this Privacy Policy, references to "Joka Casino", "we", "us" or "our" refer to the operator of the online casino made available at https://jokabet-au.com, which targets players located in Australia from an offshore jurisdiction.

Based on historical licensing and publicly available information:

Brand: Joka Casino (Joka Casino project for Australian players).
Primary domain for AU: https://jokabet-au.com.
Licensing context: the brand has historically referenced licence number 8048/JAZ under Antillephone N.V. in Curaçao. As of 2026, a live validator link is not consistently available, and players cannot verify licence status directly from the footer.

The Website is operated by an offshore online gambling company (the "Operator"). The specific legal entity name, incorporation number and registered address used for this brand may change and are not fully disclosed in the material supplied to us. For privacy and data protection purposes, you may request the current corporate details and registered address from our data protection contact described below, and we will provide them to the extent permitted by applicable law.

Data Protection Contact

Data Protection Officer (DPO) / Data Protection Team: appointed by the Operator to oversee privacy compliance for jokabet-au.com.
Primary contact channels:
- Live chat: available 24/7 on the Website - you can request that your query be escalated to the "privacy" or "data protection" team.
- Email: you may contact us via the customer support email address posted from time to time in the "Contact" or "Support" section of jokabet-au.com, clearly marking your message "Privacy request" or "For the attention of the DPO".
Telephone: we do not currently offer telephone-based privacy support. All privacy requests should be submitted in writing via live chat or email.

Because we operate offshore and target Australian players without an ACMA licence, some Australian consumer enforcement mechanisms may not be directly available against the Operator. However, your privacy rights under applicable law (for example, APPs, GDPR or Mexican law) are respected as far as they apply to our processing of your data.

What Personal Data We Collect

When you use jokabet-au.com, we collect different categories of personal and technical data. The exact data collected depends on how you interact with the Website (for example, browsing, registering, depositing, or contacting support).

Identification and Contact Data

Full name, date of birth and gender (where provided).
Residential address and country of residence.
Email address and other contact details you provide.
Copy of identity documents (passport, national ID card, driving licence) for KYC checks.
Proof of address (utility bill, bank statement) where required.

Account and Behavioural Data

Username, password (stored in hashed form) and security questions/answers where used.
Account preferences, language and communication settings.
Gameplay and betting history, including:
- Games played, session durations and outcomes.
- Bet sizes, win/loss records and bonus use.
- Responsible gambling settings (deposit limits, self-exclusion, time-outs).
Interactions with promotions, email campaigns and on-site banners (opens, clicks, redemptions).

Technical and Usage Data

IP address, approximate geolocation derived from IP (e.g., Australia), and timestamps.
Device information: device type, operating system, browser type and version, screen resolution, language settings.
Log data: access dates and times, pages viewed, URLs clicked, referral information, errors and crash diagnostics.
Security-related identifiers (for example, device fingerprints or tokens used to detect multiple accounts or fraudulent activity).

Payment and Financial Data

Deposit and withdrawal records, including amounts, currencies (e.g., AUD, BTC, USDT), timestamps and payment method used.
Bank account or payment account details where required for withdrawals (e.g., BSB and account number for AU bank transfers; crypto wallet address for crypto transactions).
Third-party payment processor identifiers and transaction IDs.
KYC/AML-related data generated during checks (for example, risk scores or red flag indicators from screening tools).

Cookies and Similar Technologies

Cookies: small text files stored on your device to recognise your browser and remember your settings.
Local storage and similar technologies: used to store certain preferences and session data in your browser or app.
Tracking pixels and tags: implemented on pages and in emails to measure impressions, opens and clicks.
Third-party analytics tools: tools that help us understand aggregated behaviour on jokabet-au.com.

Where required by law, certain information (for example, proof of age or identity) must be provided for you to use real-money gambling services. If you choose not to provide such data, we may not be able to open or maintain your account or process your transactions.

Legal Basis for Processing

Because we serve players from multiple jurisdictions (including Australia, the EU and Mexico), we rely on several legal bases for processing your data. We apply the strictest applicable standard where reasonably feasible.

Contractual Necessity

To create and manage your Joka Casino account.
To process deposits, bets, game outcomes, bonuses and withdrawals.
To provide customer support and handle your requests or complaints.
To maintain the technical availability and security of jokabet-au.com.

Without this processing, we cannot provide you with our real-money gambling services.

Legal Obligations

To comply with anti-money laundering (AML), counter-terrorism financing (CTF), fraud and sanctions screening obligations applicable to offshore gambling operators.
To conduct KYC checks, age verification and source-of-funds checks where required.
To maintain certain records for specified periods for audit, regulatory or tax purposes.

These obligations arise primarily from the laws of the licensing or operational jurisdiction(s) of the Operator (for example, Curaçao), and may also be influenced by laws in your country, including Australia or Mexico, where they apply extraterritorially.

Legitimate Interests

Operating a secure, fair and efficient online casino platform.
Preventing, detecting and investigating fraud, abuse of bonuses, chargebacks, multi-accounting and other prohibited conduct.
Performing analytics to improve our games, promotions, website performance and user experience.
Personalising content and offers, including responsible gambling messaging, to player segments.
Protecting our legal rights, defending against claims or disputes, and enforcing our Terms and Conditions.

When relying on legitimate interests, we balance our interests against your privacy expectations and implement safeguards (for example, pseudonymisation, access controls and retention limits).

Consent

Sending you electronic marketing communications (emails, SMS, push notifications) that are not strictly necessary for service provision.
Using certain non-essential cookies (particularly advertising and advanced analytics cookies) on your device.
Sharing certain marketing data with affiliates or advertising networks to measure campaign performance, where local law requires consent.

You may withdraw your consent at any time, for example by adjusting your communication preferences in your account, using the "unsubscribe" link in emails, or changing your cookie settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Vital Interests and Public Interest

In rare cases, we may process or disclose data when necessary to protect your vital interests or those of others (for example, where we reasonably believe there is a risk of serious harm), or to comply with requests from law enforcement or public authorities acting under applicable law.

Purpose of Processing

Provision and Management of Casino Services

Setting up, verifying and managing your Joka Casino account.
Facilitating deposits, gameplay, bonuses, tournaments and withdrawals.
Providing customer support via live chat and email, including resolving technical issues and responding to queries.

Compliance, Risk Management and Responsible Gambling

Performing age and identity checks to ensure you are legally allowed to gamble.
Carrying out AML/CTF and fraud checks, including monitoring unusual transactional patterns.
Administering responsible gambling tools, monitoring at-risk behaviour and supporting self-exclusion requests.

Analytics and Service Improvement

Analysing usage patterns to understand how Australian players and other visitors interact with jokabet-au.com.
Testing new games, payment methods (including crypto and PayID) and user interface improvements.
Measuring and improving system performance, stability and security.

Marketing and Personalisation

Sending promotional communications about bonuses, new games and special offers, subject to your marketing preferences and legal requirements.
Segmenting players and tailoring offers (for example, VIP rewards or crypto-specific bonuses) based on your activity and preferences.
Measuring the effectiveness of affiliate campaigns and advertising placements.

Legal, Regulatory and Business Purposes

Maintaining records necessary to comply with our legal and licensing obligations.
Handling disputes, chargebacks and legal claims, including sharing necessary information with payment providers or other intermediaries.
Conducting internal audits and preparing aggregated management reports and statistics.

Disclosure & Sharing

We do not sell your personal data as a standalone asset. However, we do share data with selected third parties where necessary for the purposes described above, subject to confidentiality and security obligations.

Payment and Financial Service Providers

Banks, card schemes (e.g., Visa, Mastercard), payment gateways, PayID providers and prepaid voucher issuers (e.g., Neosurf) involved in processing your deposits and withdrawals.
Crypto payment processors and wallet service providers for cryptocurrency deposits and withdrawals.

These providers receive only the information necessary to process the transaction and comply with their own legal obligations.

Technical, Security and Analytics Providers

Hosting providers, content delivery networks and security services (including SSL providers and DDoS protection).
Analytics and error-monitoring tools used to understand website usage and technical performance.
Fraud prevention and AML/CTF service providers who assist in screening transactions and accounts.

Group Companies, Related Brands and Affiliates

Other brands operating on the same backend platform (for example, related skins such as Wolf Winner or King Johnnie), where needed to manage migrations, VIP services or shared infrastructure.
Marketing affiliates and advertising networks that refer traffic to jokabet-au.com; we may share limited data (for example, anonymised campaign identifiers, country, deposit/registration status) to measure performance, in accordance with your consent and local law.

Regulators, Law Enforcement and Dispute Resolution Bodies

Regulators and licensing authorities in our operating jurisdictions (for example, authorities in Curaçao) to demonstrate compliance.
Government agencies and law enforcement bodies that lawfully request information, including (where applicable) Australian, EU or Mexican authorities.
Payment dispute and chargeback investigators, including card issuers and anti-fraud agencies.

Professional Advisers and Business Transfers

Lawyers, auditors, accountants and other professional advisers bound by confidentiality obligations.
Potential buyers, investors or merger partners, in the context of a corporate transaction involving the Operator or its assets; personal data will be disclosed only as necessary and subject to appropriate safeguards.

Whenever we share your data, we do so on a need-to-know basis and, where required by law, under written agreements that protect your privacy and limit the recipient's use of the data to specified purposes.

International Transfers

Joka Casino is an offshore online casino targeting players in Australia and other regions. As a result, your personal data may be transferred to, stored in and processed in countries that may not offer the same level of data protection as your home jurisdiction.

Typical Transfer Destinations

Operational and licensing jurisdictions: countries where the Operator, payment processors or key technical infrastructure are located (for example, Curaçao and other offshore jurisdictions).
European Economic Area (EEA) and United Kingdom: where certain analytics or payment services are based or where our service providers maintain data centres.
United States and other third countries: where certain cloud hosting, security and analytics providers operate.

Transfer Safeguards

Where we transfer personal data from regions with specific cross-border rules (for example, the EEA, UK or Mexico) to countries that have not been recognised as providing an adequate level of protection, we use one or more of the following safeguards, as appropriate:

Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent contractual mechanisms.
Contractual commitments requiring recipients to implement appropriate technical and organisational measures and to process data only for the specified purposes.
Pseudonymisation and minimisation of data before transfer where feasible.
Reliance on the recipient's participation in a recognised data protection framework, where applicable, or on other legal grounds permitted by local law.

By using jokabet-au.com, you acknowledge that your data may be processed in countries outside your own, including territories where enforcement of your local privacy rights may be more difficult. We nonetheless apply consistent internal standards intended to protect your information across all locations.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including meeting legal, regulatory, accounting or reporting requirements. Retention periods may vary depending on the type of data and the jurisdiction whose laws apply.

Indicative Retention Periods

Account and identification data: kept for the lifetime of your account and typically for up to 5 years after account closure, unless a longer period is required for AML/CTF, fraud prevention or legal obligations.
KYC documents and AML/CTF records: kept for a period generally between 5 and 7 years from the date of the last transaction or the completion of due diligence checks, in line with applicable regulatory expectations.
Transaction and betting history: kept for at least 5 years after the relevant transaction or account closure to manage disputes, audits and compliance obligations.
Marketing and communications data: retained while you maintain an active account or consent to marketing, and for up to 2 years after you unsubscribe or close your account, to document your preferences and prove compliance.
Technical logs and security data: retained typically for 6 to 24 months, depending on the log type and security needs.

Deletion and Anonymisation

Once the applicable retention period expires, we will either securely delete or irreversibly anonymise the data so that it can no longer be associated with you.
We may retain anonymised or aggregated data for statistical, research or business purposes without time limit, provided that it does not identify you.
Where you exercise your rights to deletion or cancellation, we will remove or anonymise personal data unless we are legally required or permitted to retain certain information (for example, AML/CTF records).

Your Rights

Depending on your location and on the laws that apply to our processing of your data, you may have some or all of the rights set out below. These rights are broadly aligned with the GDPR and relevant Mexican privacy rules (including the ARCO rights: Access, Rectification, Cancellation and Opposition), as well as principles similar to the Australian Privacy Principles.

Access and Portability

You may request confirmation whether we process your personal data and, if so, obtain a copy of such data, usually in a commonly used electronic format.
Where technically feasible and required by law (for example, under GDPR), you may ask us to transfer certain data to another controller.

Correction / Rectification

You may request that we correct inaccurate or incomplete personal data we hold about you (for example, outdated address details).
In some cases you can update information directly through your account settings.

Deletion / Cancellation

You may request deletion or cancellation of your personal data where:
- the data is no longer necessary for the purposes for which it was collected,
- you have withdrawn consent (where consent was the legal basis), or
- you consider the processing unlawful or excessive under applicable law.
We may retain certain data where required by AML/CTF, tax or other legal obligations, or for the establishment, exercise or defence of legal claims.

Restriction and Objection

You may request restriction of processing where you contest the accuracy of the data, where processing is unlawful but you oppose deletion, or where we no longer need the data but you require it for legal claims.
Where processing is based on our legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop the processing unless we demonstrate compelling legitimate grounds or need the data for legal claims.

Marketing and Cookie Preferences

You may opt out of marketing communications at any time by:
- using the "unsubscribe" link in marketing emails,
- changing your communication preferences in your account (if available), or
- contacting us via live chat or email.
You may manage cookie preferences through your browser settings or any on-site cookie management tools we provide.

Consent Withdrawal

Where we rely on your consent (for example, for certain marketing activities or cookies), you may withdraw that consent at any time.
Withdrawal of consent does not affect prior lawful processing, but may limit your access to certain optional features.

How to Exercise Your Rights

Submit request: contact us via live chat or the support email indicated on jokabet-au.com, clearly stating that your request concerns privacy or data protection and specifying the right you wish to exercise.
Verification: we may ask for additional information to verify your identity and ensure that we are dealing with the correct account holder, particularly for access, deletion and financial data requests.
Response time: we aim to respond to all valid requests within 30 days of receipt, as required by GDPR and similar standards. This period may be extended by a further 30 days in complex cases; if so, we will inform you of the extension and reasons.
Fees: requests are generally handled free of charge. We may charge a reasonable fee or decline to act on manifestly unfounded, repetitive or excessive requests, where permitted by law.

Your rights are subject to certain limitations and exceptions under applicable law. Where we cannot fully comply with your request, we will explain the reasons, unless we are legally prevented from doing so.

Cookies & Tracking Technologies

We use cookies and similar technologies to ensure the proper functioning of jokabet-au.com, improve performance, and personalise content and advertisements where permitted by law.

Types of Cookies

Session cookies: temporary cookies that are deleted when you close your browser. They help us maintain your session, keep you logged in and process your actions while navigating the site.
Persistent cookies: remain on your device for a defined period or until you delete them. They remember your preferences (for example, language, saved credentials where allowed) and help us recognise returning visitors.
First-party cookies: set directly by jokabet-au.com to support core site functionality and remember your choices.
Third-party cookies: set by external providers (for example, analytics services or advertising networks) to measure usage or deliver personalised content.

Cookie Purposes

Strictly necessary / functional: required for the Website to operate, including security, user authentication, payment flows and basic navigation. These cannot usually be disabled without affecting site functionality.
Analytics and performance: help us understand how visitors interact with jokabet-au.com, which pages are most popular, and where technical issues arise, so we can improve the site.
Advertising and personalisation: used, where permitted, to deliver more relevant promotions and to measure the effectiveness of marketing campaigns, including affiliate referrals.

Managing Cookies

You can manage or delete cookies through your browser settings. Most browsers allow you to:
- view which cookies are stored on your device,
- delete existing cookies,
- block cookies from specific sites, or
- block all cookies entirely.
Blocking certain cookies may affect your ability to use some features of jokabet-au.com, including login, gameplay and payments.
Where available, you may also use our internal cookie or privacy settings panel to opt in or out of specific categories of non-essential cookies.

Data Security

We take the security of your personal and financial data seriously, particularly given the offshore nature of the Joka Casino project and the risks associated with frequent domain changes in the Australian market.

Technical Measures

Encryption in transit: data transmitted between your browser and jokabet-au.com is protected using TLS 1.2+ (SSL) to reduce the risk of interception.
Encryption at rest: sensitive data, such as passwords and certain payment details, is stored in encrypted or tokenised form using industry-standard algorithms.
Access controls: access to personal data is restricted to authorised staff and service providers on a need-to-know basis, controlled by authentication and role-based permissions.
Network and infrastructure security: we use firewalls, intrusion detection/prevention systems and other measures to protect our infrastructure from unauthorised access and attacks.

Organisational Measures

Security policies: internal rules govern how staff handle player data, including confidentiality obligations and disciplinary measures for breaches.
Staff training: employees and contractors involved in handling personal data receive training on data protection, AML/CTF responsibilities and security good practices.
Vendor due diligence: we assess key third-party providers for security and privacy practices and include contractual security obligations where appropriate.

Monitoring, Audits and Incident Response

Regular testing: systems are monitored and tested to detect vulnerabilities and unusual activity, and patches are applied in line with risk priorities.
Security frameworks: our controls are designed with reference to recognised standards such as ISO 27001 and SOC 2, although Joka Casino is not currently certified under these frameworks.
Incident response: in the event of a data breach or security incident, we will investigate promptly, take steps to mitigate harm, and, where required by law, inform affected players and relevant authorities without undue delay.

No online system is completely secure. Phishing and fake "mirror" sites are particular risks for offshore casinos targeting Australia. Always access Joka Casino only via domains and links that you have verified as official (for example, directly typing jokabet-au.com into your browser or using links provided in account communications) and keep your login credentials confidential.

Complaints & Contacts

If you have questions about this Privacy Policy, concerns about how your data is handled, or wish to lodge a complaint, you have several options.

Contacting Us

Initial query: contact our support team via live chat on jokabet-au.com or via the support email address listed on the site. Indicate clearly that your message concerns privacy or data protection.
Escalation to DPO: ask that your query be escalated to the Data Protection Officer or data protection team. Your message will then be reviewed by staff responsible for privacy compliance.
Information to include: a clear description of your concern, your username and registered email address, and any relevant screenshots or correspondence, so we can investigate effectively.

We aim to acknowledge receipt of privacy complaints within a reasonable period (typically within a few business days) and to provide a substantive response within 30 days, or inform you of any delay and the reasons for it.

Escalation to Supervisory Authorities

If you are not satisfied with our response, or you believe we are processing your data in violation of applicable law, you may have the right to lodge a complaint with a supervisory authority. Applicable avenues can include:

Australia: while we operate offshore and are not licensed by the Australian Communications and Media Authority (ACMA), you may contact the Office of the Australian Information Commissioner (OAIC) regarding concerns under the Privacy Act 1988 (Cth).
Website: https://www.oaic.gov.au
European Union / EEA: if the GDPR applies to our processing of your data, you may lodge a complaint with the data protection authority in your country of residence or place of work. Contact details are available at:
https://edpb.europa.eu/about-edpb/board/members_en
Mexico: if Mexican privacy law applies, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)