Privacy Policy

This Privacy Policy explains how Paradise 8 Casino, operated via the website paradise8-aussie.com, collects, uses, discloses, and protects personal information of players and website visitors. It applies to all users who access or use our services from Australia or elsewhere. By creating an account, using our services, or visiting our websites, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions.

Who We Are

OBSERVE: Users must know the operator's identity, licensing, and contact points for privacy matters. EXPAND: We integrate Curaçao licensing data and AU-facing domain details. REFLECT: This section clarifies who controls your data and how to reach us.

The online casino service marketed as Paradise 8 Casino and accessible to Australian players via paradise8-aussie.com is operated by:

• Operator / Data Controller: SSC Entertainment N.V.
• Jurisdiction of incorporation: Curaçao
• Gambling licence: Antillephone N.V. licence no. 8048/JAZ, issued under the authority of the Government of Curaçao (online gambling - games of chance and wagering), currently valid and expected to remain in force through at least 2026.
• Registered / legal address: Registered in Curaçao (exact registered office address not specified in this notice). Where required for formal correspondence, we will provide the full address upon written request to our Data Protection contact.

For privacy and data protection matters, you can contact our dedicated privacy contact point (Data Protection Officer / data protection team):

• Email (primary - privacy & data protection): [email protected]
• Email (complaints & escalations): [email protected]
• Website: https://paradise8-aussie.com

When you contact us, please clearly indicate that your inquiry relates to "Privacy / Personal Data" so that it can be routed to the appropriate person or department.

What Personal Data We Collect

OBSERVE: We must list all main data categories collected through the casino and website. EXPAND: Data arises from registration, gameplay, payments, device usage, and analytics. REFLECT: We group data by type so you can understand what we process and why.

Account and Identification Data

• Basic identity data: full name, date of birth, gender (if provided), country of residence, and proof-of-age details.
• Contact details: email address, mobile phone number, postal address (where requested), and preferred language.
• Account credentials: username, encrypted password, security questions/answers, and authentication logs.
• KYC/verification data: copies or details of identity documents (passport, driver licence, national ID), proof of address (utility bill, bank statement), source-of-funds or source-of-wealth documentation and any notes required to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.

Technical and Device Data

• Connection data: IP address, approximate location derived from IP (e.g. country, city), connection timestamps, and session identifiers.
• Device data: device type, operating system, browser type and version, screen resolution, language settings, and other standard device attributes.
• Log data: login and logout times, page requests, error logs, security logs (including failed login attempts and suspected misuse), and activity timestamps.

Payment and Financial Data

• Transaction data: deposits, withdrawals, bonuses, wins and losses, account balances, currency and transaction history.
• Payment method data: partial card information (card brand, masked card number), e-wallet or payment account identifiers, cryptocurrency wallet identifiers where applicable, and payment status details.
• Fraud and risk data: chargeback history, payment risk flags, AML/CTF risk scoring records and related internal notes.

Gameplay and Behavioural Data

• Gameplay data: games played, time spent on games, bet sizes, frequencies, wins, losses, bonus usage, tournaments, jackpots and in-game events.
• Behavioural and interaction data: clicks, navigation paths, time on page, response to messages or offers, self-exclusion choices, limits set (deposit/loss/time limits), and responsible-gambling interactions.

Communication and Support Data

• Customer support records: emails, live chat logs, internal case notes, complaint files, dispute histories and related correspondence.
• Marketing preferences: opt-in/opt-out status for email, SMS, push notifications, and in-account messaging.

Cookies and Similar Technologies

• Cookie identifiers: unique IDs assigned to your browser or device.
• Usage analytics data: aggregated and pseudonymised statistics relating to visits, pages viewed, referrer URLs, and campaign performance.
• Tracking technologies: cookies, pixel tags, local storage and similar tools used for functional purposes, analytics, and (where permitted) advertising or re-targeting.

Legal Basis for Processing

OBSERVE: As an offshore operator serving Australian players, we must clearly justify processing under widely recognised data protection principles (e.g. contract, consent, legitimate interests, legal obligation). EXPAND: These bases differ depending on the purpose (gaming services, AML, marketing). REFLECT: This section links our processing to lawful grounds and explains what that means in practice.

Performance of a Contract

• We process your personal data because it is necessary to enter into and perform the contract between you and SSC Entertainment N.V., allowing you to use Paradise 8 Casino via paradise8-aussie.com.
• This includes:
  • creating, maintaining and securing your player account;
  • processing deposits, bets, wins, withdrawals and bonuses;
  • providing customer support and resolving operational issues; and
  • communicating essential information about your account and our services.

Compliance with Legal and Regulatory Obligations

• We must comply with obligations arising under Curaçao gambling and AML/CTF laws, our licence 8048/JAZ and, where applicable, other regulatory frameworks.
• On this basis, we process data to:
  • verify your identity and age (KYC checks);
  • monitor and report suspicious transactions, prevent money laundering and terrorism financing;
  • keep mandatory records for specified minimum periods; and
  • respond to lawful requests from regulators, law enforcement, courts or other authorities.

Legitimate Interests

• We may process personal data where this is necessary for our legitimate interests and where those interests are not overridden by your fundamental rights and freedoms.
• Our legitimate interests include:
  • securing our platforms and users against fraud, abuse, chargebacks and technical threats;
  • performing analytics to understand service performance and player behaviour so we can improve games, features and customer experience;
  • protecting the integrity of our games, monitoring for collusion, bots or prohibited behaviours; and
  • defending and exercising our legal rights in the event of disputes or claims.

Consent

• In some cases we rely on your consent, particularly for:
  • direct marketing communications (email, SMS, push notifications) where consent is required;
  • use of certain cookies or similar technologies for advertising and cross-site tracking; and
  • processing of optional data you choose to provide (e.g. participation in surveys, testimonials, or certain promotions).
• You may withdraw your consent at any time, as described in the "Your Rights" and "Cookies & Tracking Technologies" sections. Withdrawal will not affect processing that has already taken place.

Purpose of Processing

OBSERVE: Players must understand why their data is processed. EXPAND: Our purposes span core gambling services, compliance, security, marketing and analytics. REFLECT: We describe each purpose transparently and tie it to the relevant legal basis.

• Provision of casino services: to create and manage accounts, allow deposits and withdrawals, operate games, award bonuses and promotions, host tournaments and provide customer support.
• Regulatory compliance and risk management: to carry out KYC/AML checks, age verification, transaction monitoring, responsible gambling controls, sanctions screening, recordkeeping and reporting required by law or our licence.
• Service improvement and personalisation: to analyse gameplay and website usage, identify technical issues, refine our game library, personalise content and offers, and enhance the performance, reliability and usability of Paradise 8 Casino.
• Marketing and promotions: to send you news, offers, bonuses, loyalty or VIP information and surveys in accordance with your marketing preferences and applicable consent requirements.
• Fraud prevention and security: to detect and prevent identity theft, bonus abuse, collusion, money laundering, payment fraud, unauthorised access and other harmful or illegal activities.
• Analytics and statistics: to generate aggregated and pseudonymised statistics about traffic, conversions, game performance and business metrics to support decision-making and reporting.
• Dispute resolution and legal claims: to investigate complaints, handle chargebacks, manage regulatory or legal proceedings, and enforce our Terms and Conditions.

Disclosure & Sharing

OBSERVE: We must specify categories of recipients and conditions of disclosure. EXPAND: Sharing occurs for payments, hosting, analytics, marketing, compliance and dispute handling. REFLECT: We disclose data only as necessary, under contractual safeguards, and in line with applicable law.

Service Providers and Business Partners

• Payment processors and financial institutions: card processors, banks, e-wallet providers, cryptocurrency payment gateways and similar partners to process deposits, withdrawals and refunds, conduct fraud screening, and manage chargebacks.
• Game providers and technical platforms: software providers and platform hosts that supply games, random number generators (RNGs), and back-office tools, to the extent necessary to operate and monitor gameplay.
• IT, hosting and security providers: cloud hosting services, content delivery networks, cyber-security vendors, email delivery providers, and other IT suppliers who support our infrastructure.
• Analytics and performance tools: providers that offer aggregated analytics or performance-monitoring solutions for our website and applications.
• Marketing and affiliate partners: subject to applicable law and your preferences, we may share limited data with marketing or affiliate partners and advertising networks to measure campaigns, attribute traffic and avoid fraudulent referrals.

Regulators, Authorities and Dispute Bodies

• Regulatory authorities: Curaçao regulatory bodies supervising licence 8048/JAZ and, where applicable, other gaming or financial regulators, where disclosure is required by law, licence conditions or formal requests.
• Law enforcement and public authorities: police, courts, financial-intelligence units or other authorities where we are legally required to provide information or where disclosure is necessary to protect our rights or the rights of others.
• Dispute resolution bodies: external dispute resolution services or competent bodies handling player complaints, including the Curaçao eGaming complaints portal at https://curacao-egaming.com/public-and-players/complaints, when necessary to assess and resolve a dispute.

Corporate Transactions

• In the event of a proposed or actual merger, acquisition, reorganisation, sale of assets or similar corporate transaction involving SSC Entertainment N.V. or its brands (including Paradise 8 Casino, Cocoa Casino, This Is Vegas, and Da Vinci's Gold), we may transfer relevant personal data to potential or actual buyers and their advisers, subject to confidentiality obligations and applicable law.

Other Disclosures

• We may disclose data where you have explicitly requested or authorised us to do so.
• We do not sell your personal data as a standalone commercial product. Any sharing with third parties occurs strictly for the purposes described in this Privacy Policy and subject to appropriate safeguards.

International Transfers

OBSERVE: Paradise 8 Casino is operated from Curaçao and uses international infrastructure. EXPAND: Data of Australian players may be processed and stored outside Australia, including in the EU/EEA, the Caribbean and other regions. REFLECT: We explain where data may go and what protections we use, following international best practice (e.g. contract clauses, security controls).

• Primary processing location: Personal data is controlled by SSC Entertainment N.V. in Curaçao and may be stored or processed on servers located in Curaçao, the European Economic Area (EEA) or other jurisdictions where our hosting or service providers operate.
• Service provider locations: Some of our payment processors, game providers, IT suppliers and analytics partners may be based, or store data, in countries such as EU Member States, the United Kingdom, the United States or other regions.
• Safeguards: Where data is transferred internationally, we apply commercially reasonable safeguards, which may include:
  • contractual protections, such as data-protection clauses or equivalent contractual safeguards consistent with widely recognised international standards;
  • technical and organisational security measures, including strong encryption in transit and at rest, strict access controls, and data minimisation; and
  • partner due diligence, ensuring that our service providers maintain appropriate levels of security and confidentiality.
• Player acknowledgement: By using Paradise 8 Casino via paradise8-aussie.com, you understand and consent (where required by law) to your data being transferred, stored and processed outside your country of residence, including in jurisdictions that may provide a different level of data protection than your home country. We will, however, take reasonable steps to ensure that your personal information is treated securely and in accordance with this Privacy Policy.

Data Retention

OBSERVE: We must specify how long we keep different data and on what basis. EXPAND: Gaming, AML/CTF and dispute rules require minimum retention periods. REFLECT: We retain data only as long as necessary for our purposes and legal obligations, then anonymise or delete it.

• General principle: We retain personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including to satisfy legal, accounting, reporting and regulatory requirements, and then securely delete or irreversibly anonymise it.
• Player account data: Core account information (identity, contact details, KYC documents, transaction and gameplay history) is typically retained for the duration of your account and for a period of up to 5 - 7 years after account closure, depending on statutory requirements and limitation periods for legal claims.
• AML/CTF and KYC records: Documents and records collected to comply with AML/CTF laws, including identity and transaction data, may be retained for at least 5 years from the date of the last transaction or the end of the business relationship, or longer if required by applicable regulations or ongoing investigations.
• Marketing data: Information about your marketing preferences is generally kept until you withdraw consent or object to marketing, after which we will stop using it for marketing and retain only a limited record of your preference (e.g. to ensure we honour your opt-out).
• Technical logs and security data: Server logs, security logs and fraud-prevention data are typically retained for a period ranging from a few months up to 5 years, depending on the specific purpose, security needs and applicable legal considerations.
• Disputes and legal claims: Where personal data is relevant to an ongoing or potential dispute, investigation or legal claim, we may retain it until such matter has been resolved and all applicable appeal or limitation periods have expired.
• Deletion criteria: Once personal data is no longer required for the purposes for which it was collected, or to meet legal obligations, we will either securely delete it or de-identify it so it can no longer be linked to you.

Your Rights

OBSERVE: Even though we are an offshore operator, we seek to align with widely recognised privacy principles (including those reflected in frameworks such as the GDPR and certain Latin American privacy regimes) to provide robust rights for users. EXPAND: Players should be able to access, correct, erase and control use of their data, subject to legal limits. REFLECT: We describe each right, how to exercise it, timeframes and any constraints linked to gaming/AML duties.

Overview of Your Rights

• Right of access: You can request confirmation of whether we process your personal data and obtain a copy of such data, together with relevant information about the processing.
• Right to rectification: You can request that inaccurate or incomplete personal data be corrected or updated. We may require supporting documentation where appropriate (for example, to update your legal name or address).
• Right to deletion (erasure): You can request deletion of your personal data where:
  • it is no longer needed for the purposes for which it was collected;
  • you withdraw consent (where processing was based solely on consent) and there is no other legal basis for processing; or
  • you successfully object to processing.
  We may retain some data where necessary to comply with legal obligations (for example, AML/CTF recordkeeping) or to establish, exercise or defend legal claims.
• Right to restriction of processing: You can request that we temporarily restrict processing of your data, for example while we verify its accuracy or assess an objection.
• Right to object: You may object to our processing of your personal data where it is based on legitimate interests, including profiling related to such interests. We will assess your request and stop processing unless we have compelling legitimate grounds that override your interests or where processing is necessary for legal claims.
• Right to object to marketing: You can object at any time to the use of your data for direct marketing (including profiling for marketing) and we will honour your choice without undue delay.
• Right to data portability: Where technically feasible and legally required, you may request to receive certain personal data you have provided to us in a structured, commonly used and machine-readable format, and to have that data transmitted directly to another controller.
• Right to withdraw consent: Where we rely on your consent (for example for specific marketing activities or optional cookies), you may withdraw it at any time using the tools provided (such as account settings or unsubscribe links) or by contacting us. Withdrawal will not affect the lawfulness of processing that occurred before withdrawal.

How to Exercise Your Rights

• Submission of requests: You can exercise your rights by contacting us at [email protected] or [email protected]. Please indicate your full name, registered email, and describe your request clearly.
• Verification: To protect your privacy, we may need to verify your identity before acting on your request, which may require additional information or documents.
• Response timeframe: We aim to respond to all legitimate requests within 30 days of receipt. If your request is complex or we receive multiple requests, we may extend this period, in which case we will notify you of the delay and the reasons.
• Fees: We will not charge you for exercising your rights, unless requests are manifestly unfounded or excessive (for example, repetitive). In such cases, we may either charge a reasonable fee or refuse to act on the request, explaining our reasons.
• Legal limitations: Certain rights may be limited by applicable law, especially in relation to AML/CTF obligations, gambling regulation, recordkeeping duties and the need to protect the rights of other individuals. Where we cannot fully comply with your request, we will explain the reasons, unless prohibited by law.

Cookies & Tracking Technologies

OBSERVE: Cookies are essential for casino functionality and analytics. EXPAND: We use various cookie types with different lifespans and purposes. REFLECT: We explain these types and how you can control them through browser or account settings.

Types of Cookies We Use

• Session cookies: Temporary cookies that exist only for the duration of your browsing session. They enable core functions such as login sessions, bet placement, and navigation between pages. They are deleted when you close your browser.
• Persistent cookies: Cookies stored on your device for a defined period (for example, days or months) after your session ends. They allow us to remember your preferences (such as language, region, and login status where opted), and help us recognise you as a returning visitor.
• First-party cookies: Cookies set directly by paradise8-aussie.com and used primarily for functionality, security and internal analytics.
• Third-party cookies: Cookies placed by external providers (for example, analytics tools or advertising networks) to support performance measurement, aggregated statistics and, where allowed, targeted advertising or retargeting.

Purposes of Cookies

• Strictly necessary / functional cookies: Essential for the operation of the website and casino platform, including enabling you to log in, place bets, access secure areas, set language or region, and ensure security.
• Analytics and performance cookies: Used to collect aggregated information about how visitors use our site (pages visited, time spent, error messages, etc.) so that we can improve usability, content and technical performance.
• Advertising and marketing cookies: Where permitted, these cookies help us and our trusted partners deliver relevant advertisements, measure the effectiveness of campaigns, avoid showing the same ads repeatedly, and understand how users respond to promotions.

Managing and Disabling Cookies

• Browser settings: Most web browsers allow you to view, manage, delete or block cookies. Please refer to your browser's help section for details on how to do this. Blocking some cookies may affect the functionality of Paradise 8 Casino and may prevent you from using certain features.
• Internal tools: Where available, we may provide in-site controls (such as cookie banners or preference centres) that allow you to manage non-essential cookies and marketing preferences.
• Third-party opt-outs: Some third-party providers offer their own opt-out mechanisms. You can visit their websites or industry platforms (where available) for additional choices.

Data Security

OBSERVE: Online gambling involves sensitive financial and identity data, requiring robust protection. EXPAND: We use layered technical and organisational measures aligned with recognised security practices. REFLECT: While no system is perfectly secure, we describe our controls and commitment to ongoing improvement.

Technical Security Measures

• Encryption in transit: Data transmitted between your browser and our servers is protected using industry-standard TLS (Transport Layer Security) protocols, TLS 1.2 or higher, to reduce the risk of interception.
• Encryption at rest: Where feasible, sensitive data (such as password hashes and selected financial or identity data) is encrypted or otherwise protected at rest to mitigate risks in the event of unauthorised access.
• Access controls: Access to personal data is restricted to authorised personnel and service providers who require such access for legitimate business purposes, subject to role-based permissions and authentication measures.
• Multi-factor authentication (MFA): We may utilise MFA and other advanced authentication controls for administrative accounts and selected user-facing features to enhance security.
• Network and application security: We implement firewalls, intrusion-detection or intrusion-prevention measures, patch management, and secure development practices aimed at reducing vulnerabilities.

Organisational and Procedural Measures

• Staff training: Relevant staff receive training on data protection, confidentiality obligations, responsible gambling and security awareness to reduce the risk of human error or misuse.
• Policies and procedures: We maintain internal policies covering data handling, access control, incident response, retention and deletion, and acceptable use of systems.
• Vendor due diligence: We assess key service providers for their security posture and include appropriate data-protection and confidentiality obligations in our contracts.
• Security audits and monitoring: We perform periodic reviews of our systems and may engage independent experts to test or assess security controls, while also monitoring systems for suspicious activity.
• Incident response: We maintain procedures to identify, assess and respond to suspected personal data breaches. Where required by applicable laws, we will notify relevant authorities and affected individuals without undue delay.

Although we endeavour to implement appropriate security measures, no online service can guarantee absolute security. You also play an important role by keeping your login details confidential, choosing strong passwords and notifying us promptly if you suspect unauthorised access to your account.

Complaints & Contacts

OBSERVE: Users need clear channels to raise concerns or complaints about privacy or data handling. EXPAND: We describe internal escalation and, where relevant, external supervisory or dispute avenues. REFLECT: This section reinforces accountability and transparency.

Contacting Us

• Privacy & data protection queries: [email protected]
• Complaints & escalations: [email protected]
• Website: https://paradise8-aussie.com

When submitting a privacy-related complaint, please include:

• your full name and registered email address;
• a clear description of your concern or request; and
• copies of any relevant supporting documentation.

Internal Complaint Procedure

1. Initial review: We will acknowledge receipt of your complaint as soon as reasonably practicable, normally within a few business days.
2. Investigation: Your complaint will be reviewed by our privacy or compliance team, which may contact you for additional information or clarification.
3. Response: We aim to provide a substantive response within 30 days of receiving all necessary information. If more time is needed due to complexity, we will inform you of the delay and provide an estimated timeframe.
4. Outcome and follow-up: We will explain our findings and any relevant corrective measures. If you are not satisfied, you may request that your complaint be escalated internally for further review.

Regulatory and External Avenues

For disputes related specifically to gambling operations and licence 8048/JAZ, you may also contact the Curaçao eGaming complaints portal:

• Curaçao eGaming complaints portal: https://curacao-egaming.com/public-and-players/complaints

If you are located in a jurisdiction that provides for the right to lodge a complaint with a data-protection or consumer-protection authority, you may also have the option to contact such authority. We encourage you, however, to first contact us so that we can attempt to resolve your concerns directly.

Updates

OBSERVE: Privacy policies evolve due to legal, technical and business changes. EXPAND: We must inform players about how updates will be communicated and when they take effect. REFLECT: This section sets expectations on notice periods, objections and account closure options.

• Policy changes: We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors.
• Notification methods: Where changes are material, we will provide appropriate notice, which may include:
  • an email sent to the address linked to your player account;
  • prominent notices or banners on paradise8-aussie.com or within your account dashboard; and/or
  • an in-account message summarising key changes.
• Advance notice for significant changes: For material changes that significantly affect your rights or the way we process your personal data, we will, where practicable, provide at least 30 days' advance notice before the updated policy takes effect.
• Your options: If you do not agree with the updated Privacy Policy, you may close your account and cease using Paradise 8 Casino. Continued use of our services after the effective date of an updated policy will constitute your acknowledgment of the changes.
• Version control: Each version of this Privacy Policy will be identified by an effective date and, where appropriate, a brief summary of material changes.

Last updated: January 2026