Privacy Policy

This Privacy Policy explains how personal information is collected, used, stored, and protected when you access or use the Ufo9 Casino services available via the website https://ufo9-aussie.com (the "Website"). It applies to all visitors to the Website, registered players, and any person who otherwise interacts with our online casino services. By using the Website, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective from 1 January 2025 and is intended to remain in force unless and until replaced or updated, with key timeframes extended at least through 2026.

Who We Are

Observe: The Website is operated as an offshore online casino targeting Australian players, under a Curaçao remote gaming licence via Antillephone N.V. The exact corporate identity details of the underlying Curaçao entity are not fully specified in the public profile, but we must still identify the operator and provide contact points for privacy enquiries.

Expand: Based on the available information, Ufo9 Casino operates the Website ufo9-aussie.com under a sublicense referencing licence number 8048/JAZ2019-0XX issued by Antillephone N.V., Curaçao. Because a specific legal name and physical address are not provided in the source data, we must (a) transparently disclose that limitation, (b) reference the licensing framework, and (c) provide clear, practical contact details, including a designated privacy contact (DPO/data protection contact).

Reflect: The following information is therefore provided for accountability and contact:

• Operator: Curaçao-registered entity operating under Antillephone N.V. sublicense (licence ref. 8048/JAZ2019-0XX). The exact corporate name and registered address of the entity managing ufo9-aussie.com are not specified in publicly available materials and may be updated from time to time.
• Licensing jurisdiction: Curaçao eGaming / Antillephone N.V. (remote gaming licence via sublicense), treated as active and extended at least through 2026.
• Service/brand name: Ufo9 Casino, marketed to Australian players as "Ufo9 Casino" via the Website https://ufo9-aussie.com.
• Primary contact emails:
  • Support: [email protected] (account and player support, including privacy-related questions).
  • General information: [email protected] (general and legal enquiries).
• Additional non-critical contacts: [email protected] (commercial), [email protected] (media), [email protected] (careers).
• Data Protection Contact / DPO function: You can contact our data protection contact by email at [email protected] with "Privacy" in the subject line. This contact point is responsible for handling privacy and data protection matters.
• Postal address: A dedicated mailing address for privacy correspondence may be provided via email upon request, due to the offshore nature of operations.

Regional compliance note (AU): While the operator is licensed in Curaçao and operates offshore, we strive to align with principles of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) as a matter of best practice for handling personal information of Australian players.

What Personal Data We Collect

Observe: To provide remote gambling services, we must collect personal, technical, payment, and behavioural data, as well as cookies and similar tracking data. This includes information you give us directly and information collected automatically when you use Ufo9 Casino via ufo9-aussie.com.

Expand: Different categories of data are necessary for account creation, Know Your Customer (KYC) checks, anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, payment processing, dispute resolution, security, responsible gambling, and marketing/analytics. Some of this information is legally required for us to operate under our gaming licence and applicable laws.

Reflect: We may collect and process the following categories of personal data:

Identity and Contact Data

• Full name, date of birth, and gender (where provided).
• Residential address, billing address, and country of residence.
• Email address, telephone number, and other contact details.
• Copies or data from identity documents (passport, driver licence, national ID), proof of address (utility bill, bank statement), and, where applicable, source-of-funds/source-of-wealth documentation, as part of KYC/AML checks.
• Account identifiers such as username, player ID, and other internal reference numbers.

Technical and Usage Data

• IP address, approximate location derived from IP (e.g., city/region, country).
• Device and browser information (device type, operating system, browser type/version, language settings).
• Log data (access dates and times, pages viewed, clicks, referring/exit pages, session duration, error logs).
• Information generated by cookies, pixels, tags, SDKs, and similar technologies (see Cookies & Tracking section).

Payment and Financial Data

• Limited payment card data (such as masked card number, expiry date) or payment token where processed by payment gateways; we do not store full card details where this is not strictly necessary.
• Payment account identifiers (e.g., e-wallet ID, bank account nickname, PayID identifier handled via third-party processors).
• Deposit and withdrawal history, transaction timestamps, currencies, amounts, and related metadata.

Behavioural and Gaming Data

• Betting history (games played, stakes, wins/losses, game session durations).
• Bonus and promotion usage (opt-ins, bonus balance, wagering progress, bonus abuse checks).
• Interactions with responsible gambling tools (deposit limits, loss limits, self-exclusion or cool-off periods, session reminders).
• Clickstream and navigation patterns within ufo9-aussie.com for analytics and user experience optimisation.

Communication Data

• Records of communications with customer support (emails, chat transcripts, complaint tickets, call summaries where applicable).
• Preferences regarding marketing communications, notification settings, and language.

Cookies and Similar Technologies

• Session cookies, persistent cookies, and third-party cookies used for authentication, remembering preferences, analytics, and targeted advertising.
• Tracking pixels, tags, and scripts from analytics and advertising providers to measure performance and marketing effectiveness.

Legal Basis for Processing

Observe: As an offshore operator handling data of users in multiple jurisdictions, we must rely on clear legal grounds for our processing activities. While our primary legal obligations arise under Curaçao law, we also align with international data protection standards, including GDPR-style principles and, by extension, relevant Australian privacy concepts (consent, contractual necessity, legal obligations, and legitimate interests).

Expand: Each category of data described above is processed for specific purposes under at least one lawful basis. These include the performance of a contract with you, compliance with anti-fraud, AML/CTF, and responsible gambling requirements, protection of our legitimate business interests, and obtaining your consent where required (especially for non-essential cookies and direct marketing).

Reflect: We rely on the following legal bases for processing your personal data:

• Performance of a contract: We process data necessary to:
  • Create and manage your player account at Ufo9 Casino on ufo9-aussie.com.
  • Provide gaming services, process deposits and withdrawals, and credit winnings.
  • Verify your identity and eligibility, resolve technical issues, and respond to support requests.
• Compliance with legal and regulatory obligations: We process data to:
  • Meet KYC/AML/CTF requirements imposed by our Curaçao licence and relevant financial regulations.
  • Prevent, detect, and report suspicious transactions, fraud, or other prohibited conduct.
  • Comply with record-keeping, tax, auditing, and responsible gambling obligations, including limits and self-exclusion, where applicable.
• Legitimate interests: We process data where necessary for our legitimate business interests, provided they are not overridden by your rights and interests, for example to:
  • Maintain the security and integrity of the Website and gaming systems.
  • Prevent account misuse, bonus abuse, money laundering, and other fraudulent or abusive behaviour.
  • Improve and personalise our services, conduct analytics, and perform statistical reporting.
  • Defend, exercise, or establish legal claims, including handling disputes, chargebacks, and complaints.
• Consent: In certain situations, we rely on your consent, for example to:
  • Send you marketing communications (email, SMS, push notifications) where this is not otherwise permitted on a soft-opt-in basis.
  • Place and read certain non-essential cookies and tracking technologies for targeted advertising or advanced analytics.
  • Process certain optional information you choose to provide (e.g., marketing preferences, surveys, or feedback forms).
  You may withdraw your consent at any time, as described in the "Your Rights" and "Cookies & Tracking Technologies" sections.

Regional compliance note (AU): These legal bases align with key concepts recognised in the Australian Privacy Principles under the Privacy Act 1988 (Cth), including collection that is reasonably necessary for our functions and activities and use/disclosure consistent with the purposes of collection and your expectations.

Purpose of Processing

Observe: Each processing activity must serve one or more clearly defined purposes linked to the provision of online casino services and compliance requirements.

Expand: Without processing your personal data for these purposes, Ufo9 Casino cannot lawfully or effectively operate, offer gaming services, or meet its regulatory obligations. At the same time, we must not process data for purposes that are incompatible with those originally stated, unless required or permitted by law.

Reflect: We use your personal data for the following purposes:

• Providing and managing casino services:
  • Register and verify your account at ufo9-aussie.com.
  • Provide access to games, process bets, calculate outcomes, and credit winnings.
  • Manage deposits, withdrawals, and payment transactions, including via third-party payment processors (e.g., card processors, PayID or similar services).
  • Maintain your account settings, preferences, and responsible gambling tools.
• Customer support and communication:
  • Respond to your questions, complaints, and requests sent to [email protected] or other contact channels.
  • Send you transactional and service messages (e.g., security alerts, account changes, policy updates).
• Compliance, risk management, and fraud prevention:
  • Perform identity verification and KYC/AML checks.
  • Monitor transactions and gaming patterns to detect money laundering, terrorism financing, bonus abuse, or other fraudulent behaviour.
  • Enforce our Terms and Conditions, including investigating suspicious accounts or gameplay.
• Service improvement and analytics:
  • Analyse how players use ufo9-aussie.com to improve performance, stability, and usability.
  • Develop new features, games, and promotions based on aggregated and anonymised data where possible.
• Marketing and personalisation:
  • Send you offers, promotions, and news about Ufo9 Casino, where permitted by law and your preferences.
  • Display tailored content and bonuses based on your previous activity, subject to applicable consent requirements.
• Legal defence and record-keeping:
  • Maintain records necessary for audits, tax purposes, regulatory reporting, and defence or exercise of legal claims.
  • Handle disputes, chargebacks, and regulatory enquiries.

Disclosure & Sharing

Observe: To operate, Ufo9 Casino necessarily shares certain personal data with third parties, including payment providers, technical service providers, and regulators. We must specify who receives data and under what circumstances.

Expand: Data sharing must be limited to what is necessary and proportionate. We should use contracts and safeguards to ensure third parties process data only for authorised purposes and according to appropriate security measures.

Reflect: We may disclose your personal data to the following categories of recipients:

• Group and related entities:
  • Curaçao-registered operator company that holds and operates under the Antillephone N.V. sublicense.
  • Affiliated holding or payment processing entities, including any Cyprus-based holding/payment processor used to process fiat or PayID-like transactions, to the extent necessary to operate the Website and services.
• Payment service providers and financial institutions:
  • Banks, card schemes, e-wallet providers, PayID and similar services, and other payment intermediaries that process deposits, withdrawals, and refunds.
  • These providers receive only the information necessary to process payments, perform fraud checks, and meet their regulatory obligations.
• Technical and operational service providers:
  • IT infrastructure providers (hosting, cloud services, DDoS protection, CDN).
  • Game studios and platform providers that deliver and manage casino games.
  • Customer support tools, email delivery providers, CRM systems, analytics platforms, and security monitoring services.
• Marketing and affiliate partners:
  • Affiliate networks and partners that refer players to ufo9-aussie.com, for tracking and commission purposes.
  • Advertising networks, analytics, and remarketing partners, where you have consented or where applicable law permits the use of cookies/identifiers for such purposes.
• Regulators and authorities:
  • Curaçao eGaming / Antillephone N.V. and any other competent gaming or supervisory authority, upon lawful request.
  • Law enforcement agencies, courts, or other public authorities, when required by applicable law, court order, or regulation, or to protect our rights, players, or the public.
• Professional advisers:
  • Lawyers, auditors, accountants, and other professional advisers who require access for the provision of their services and are subject to confidentiality obligations.
• Business transfers:
  • In connection with any actual or prospective merger, acquisition, asset sale, restructuring, or financing, we may transfer data to the relevant counterparty subject to appropriate confidentiality protections.

We do not sell your personal data as a standalone product. All sharing is limited to what is necessary for the purposes described in this Privacy Policy or required by law.

International Transfers

Observe: Data processed in connection with Ufo9 Casino is likely to move across borders, including between Australia (players), Curaçao (licensing and operations), and other locations such as the European Union or Cyprus (payment processing, hosting, or support services).

Expand: Cross-border transfers require safeguards to ensure an adequate level of protection. While there is no single global standard, we seek to align with commonly recognised safeguards, such as contract-based protections and industry best practices, especially where GDPR-style protections are relevant.

Reflect: Your personal data may be transferred to and processed in the following locations:

• Curaçao (CW): For licensing, operational management, compliance, and core gaming platform functions.
• European Union / European Economic Area (EU/EEA): Where we use infrastructure, service providers, or consultants based in the EU/EEA.
• Cyprus (CY) and other processing hubs: For payment processing, risk management, or support services, where applicable.
• Other countries: Where our cloud hosting providers, analytics partners, or technical vendors maintain infrastructure (which may include data centres in the EU, UK, or other regions).

When we transfer personal data internationally, we implement appropriate safeguards, which may include:

• Contractual protections, such as data protection clauses requiring recipients to protect the data and process it only under our instructions.
• Where relevant and available, the use of standard contractual clauses or equivalent safeguards recognised under applicable data protection regimes.
• Technical measures such as encryption in transit and at rest, access controls, and pseudonymisation where feasible.

Regional compliance note (AU): By using ufo9-aussie.com, you acknowledge that your personal data may be transferred to jurisdictions that may not provide the same level of data protection as your home country. We nevertheless take reasonable steps to ensure that any overseas recipient does not breach privacy principles in a way that would be inconsistent with the protections described in this Privacy Policy.

Data Retention

Observe: We must not keep personal data longer than necessary for the purposes for which it was collected, subject to legal and regulatory requirements (e.g., AML/CTF and gaming regulations).

Expand: Retention periods differ depending on record type. Gaming and financial data typically must be retained for several years to meet legal, licensing, and tax obligations, even after account closure. At the same time, data used solely for marketing or analytics may be kept for shorter periods, subject to user choice.

Reflect: We apply the following retention principles:

• Active account data: Personal data associated with an active player account is retained for the duration of the contractual relationship and as long as necessary to provide services and comply with our obligations.
• Closed or inactive accounts:
  • Core identification, KYC, and transactional records are generally retained for a period of up to 5 - 7 years after account closure or last transaction, to comply with AML/CTF, tax, and regulatory record-keeping obligations, and to handle potential disputes or investigations.
  • Where local laws or regulations require longer retention for specific records, we may retain those records for the required period.
• Marketing data: Information used for direct marketing (e.g., email address and marketing preferences) is retained until you opt out or withdraw consent, or until we determine that it is no longer necessary for marketing purposes, after which it may be anonymised or deleted.
• Technical and analytics data: Log files and analytics data are typically retained for a period proportionate to their purpose (often 12 - 36 months), after which they may be aggregated or anonymised.
• Legal claims and disputes: Where necessary, we may retain certain data beyond the above periods if it is reasonably required for the establishment, exercise, or defence of legal claims, or for regulatory inquiries.

When personal data is no longer required, we will either delete it securely or irreversibly anonymise it so that it can no longer be associated with you.

Your Rights

Observe: Individuals whose data we process should have a set of rights regarding that data. Our profile refers to GDPR-style rights and, in the original brief, to Mexican regulations; for Ufo9 Casino, we adapt these to an international standard that is also consistent, where relevant, with Australian privacy principles.

Expand: Even though we are an offshore operator, we recognise a broad set of user rights: access, rectification, deletion, restriction, objection, portability, and withdrawal of consent. We must also describe how to exercise these rights, how quickly we respond, and that exercising rights is generally free of charge, subject to legitimate constraints (e.g., overriding AML/CTF obligations).

Reflect: Subject to applicable laws and regulatory requirements, you have the following rights regarding your personal data:

• Right of access: You may request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Certain details can also be updated directly via your account settings.
• Right to deletion (erasure): You may request deletion of your personal data in certain circumstances, for example where:
  • The data is no longer necessary for the purposes for which it was collected; or
  • You have withdrawn consent (where processing was based on consent) and there is no other legal ground.
  We may be unable to delete data that we are legally required to retain (e.g., AML/CTF records, transaction histories) for specific statutory periods.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances (e.g., while we verify its accuracy or consider an objection you have raised).
• Right to object: You may object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling related to such interests. You also have an absolute right to object at any time to the use of your data for direct marketing, after which we will stop such processing.
• Right to data portability: Where legally applicable and technically feasible, you may request that we provide certain personal data to you, or to another controller you designate, in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where we rely on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. This includes consent to receive marketing communications or to certain optional cookies.

How to Exercise Your Rights

• Submit a request by emailing our data protection contact at [email protected] or contacting customer support at [email protected].
• Clearly indicate which right you wish to exercise and provide sufficient information to verify your identity (e.g., registered email address, username, or other account identifiers). For security, we may request additional verification information.
• We aim to respond to your request within 30 calendar days. If we require more time due to complexity or volume, we will inform you of the extension and reasons.
• Your requests will generally be handled free of charge. However, we may charge a reasonable fee or refuse to act where requests are manifestly unfounded or excessive, in line with applicable standards.

Some rights may be limited by overriding legal, regulatory, or contractual obligations (e.g., retention required for AML/CTF purposes). If we cannot fully comply with your request, we will explain the reasons, to the extent legally permitted.

Cookies & Tracking Technologies

Observe: ufo9-aussie.com uses cookies and similar technologies for functionality, security, analytics, and marketing.

Expand: We should categorise cookies, explain why we use them, and show users how they can manage or disable them, both via browser settings and any internal tools we offer.

Reflect: Cookies and tracking technologies we may use include:

Types of Cookies

• Session cookies: Temporary cookies that exist only for the duration of your browsing session and are deleted when you close your browser. They are used for core site functionality, such as keeping you logged in.
• Persistent cookies: Cookies that remain on your device for a defined period or until you delete them. They help us remember your preferences and recognise you when you return.
• First-party cookies: Cookies set by ufo9-aussie.com directly.
• Third-party cookies: Cookies set by third-party service providers, such as analytics and advertising networks, to measure site usage or deliver targeted advertising (where permitted).

Purposes of Cookies

• Strictly necessary/functional: Required for the Website to function properly, including:
  • Authentication and session management.
  • Security features and fraud prevention.
  • Saving basic settings (language, region).
• Performance and analytics: Used to:
  • Understand how visitors interact with ufo9-aussie.com.
  • Monitor performance, detect technical issues, and improve user experience.
• Advertising and marketing: Used, where enabled, to:
  • Measure the effectiveness of our marketing campaigns.
  • Serve more relevant ads or promotions, including via affiliate or ad partners.

Managing Cookies

• You can manage or delete cookies via your browser settings. Methods differ by browser (e.g., Chrome, Firefox, Safari, Edge), but typically allow you to:
  • View which cookies are stored.
  • Delete some or all cookies.
  • Block cookies from specific sites or all sites.
  • Set preferences for how cookies are handled.
• Blocking or deleting cookies may affect the functionality of ufo9-aussie.com, and some features (especially login and gameplay) may not work properly without certain cookies.
• Where available, we may provide an internal cookie or privacy settings panel that allows you to accept or reject non-essential cookies (such as analytics or advertising cookies) while keeping essential cookies active.

Data Security

Observe: Handling sensitive financial and gaming data requires strong security controls to minimise risks of unauthorised access, misuse, or loss.

Expand: We must detail both technical and organisational measures, reflecting common best practices in the online gambling industry. References to widely recognised standards (e.g., ISO 27001, SOC 2) may be used as benchmarks, even where formal certification is not specified.

Reflect: We take appropriate technical and organisational measures to protect your personal data, including:

• Encryption:
  • Use of TLS 1.2+ (or higher where supported) to encrypt data transmitted between your device and ufo9-aussie.com.
  • Encryption or pseudonymisation of sensitive data at rest, where feasible and proportionate.
• Access controls and authentication:
  • Strict role-based access controls so that only authorised staff and service providers can access personal data necessary for their duties.
  • Multi-factor authentication and strong password policies for internal administrative systems.
• Network and system security:
  • Use of firewalls, intrusion detection/prevention systems, and anti-malware tools.
  • Segregation of critical systems and regular patching and maintenance of servers and software.
• Monitoring and audits:
  • Regular monitoring of systems for suspicious activity or security events.
  • Periodic security reviews and audits, sometimes following frameworks comparable to ISO/IEC 27001 or SOC 2 best practices.
• Staff training and policies:
  • Confidentiality obligations for staff with access to personal data.
  • Training on data protection, information security, and handling of customer information.
• Incident response:
  • Established procedures to detect, investigate, and respond to potential data breaches or security incidents.
  • Where required by applicable law, we will notify relevant authorities and affected individuals of certain data breaches within the applicable timeframes.

While we take reasonable measures to protect your data, no system can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials and for using secure networks and devices when accessing ufo9-aussie.com.

Complaints & Contacts

Observe: Users must be able to contact us about privacy concerns and lodge complaints, and we must provide a clear process and timelines.

Expand: Although our licensing jurisdiction is Curaçao and we are targeting Australian players, we should offer accessible communication channels and recognise that individuals may raise concerns with relevant oversight bodies where applicable.

Reflect: If you have any questions, concerns, or complaints about how we handle your personal data, you can use the following channels:

Contact Channels

• Email (primary for privacy): [email protected] (please include "Privacy" or "Data Protection" in the subject line).
• Customer support: [email protected] for account-specific issues that may involve your personal data.
• Other emails (non-primary): For media or business-related data enquiries, you may contact [email protected] or [email protected], who will coordinate with the privacy contact if needed.
• Postal address: A mailing address for privacy-related correspondence may be provided upon request by contacting [email protected].

Complaint Procedure

1. Submission: Send your complaint or request in writing via email, describing the issue in as much detail as possible and including your account identifier (if applicable).
2. Acknowledgment: We will acknowledge receipt of your complaint, typically within 5 business days.
3. Investigation: We will investigate your complaint, which may involve contacting you for further information and reviewing relevant systems, records, and staff actions.
4. Response: We aim to provide a substantive response within 30 calendar days of receiving your complaint or request. If we cannot respond within this timeframe, we will inform you of the delay and the expected new timeframe.
5. Follow-up: If you are unsatisfied with our response, you may request that the matter be escalated internally. We will then conduct a further review.

Escalation to Supervisory or Regulatory Authorities

Depending on your location and the applicable legal framework, you may have the right to lodge a complaint with a relevant data protection or privacy authority. As an offshore operator licensed in Curaçao:

• You may in some cases contact your local consumer or data protection authority (for example, in Australia, the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/) if you believe your privacy rights under local regulations have been infringed.
• You may also raise concerns directly with the relevant Curaçao gaming authority or our licensing body if your complaint relates to compliance with gaming regulations.

We encourage you to first contact us using the channels above so that we can attempt to resolve your complaint directly.

Updates

Observe: Our services and legal obligations may evolve, requiring us to update this Privacy Policy from time to time.

Expand: We must explain how users will be notified of changes, maintain a "last updated" timestamp, and in the case of material changes, provide advance notice and options to object or close accounts.

Reflect: We may modify this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the functionality of ufo9-aussie.com.

• Notification methods:
  • Updating the "Last updated" date at the top or bottom of the Privacy Policy.
  • Posting a notice or banner on ufo9-aussie.com, especially for significant changes.
  • Sending email notifications to registered players (to the email address associated with their account) and/or displaying alerts within the account dashboard.
• Advance notice for material changes: For significant changes that materially affect your rights or how we process your data (for example, new categories of data collected or new types of disclosures), we will provide, where feasible, at least 30 days' advance notice before the changes take effect. During this period, you may review the revised policy and decide whether to continue using our services.
• User options:
  • If you do not agree with the updated Privacy Policy, you may choose to stop using ufo9-aussie.com and request closure of your account, subject to our Terms and Conditions and any legal obligations (e.g., settlement of balances, retention of certain records).
  • Continued use of the Website after the effective date of the updated Privacy Policy will constitute your acceptance of the changes.

Last updated: January 2025 (applicable and intended to remain in effect, with the described retention and compliance timeframes extended at least through 2026, unless superseded by a later version).