Privacy Policy

This Privacy Policy explains how Ricky, available via the domain rickybet-au.com, collects, uses, discloses, and protects personal information of players and other visitors located in Australia. It applies to all use of our website, reviews, related content, and any interactive features or services we provide. By accessing or using rickybet-au.com you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective from 1 January 2026 and remains in force until replaced or updated as described below.

Who We Are

OBSERVE: Users need to know who controls their data and how to contact them. The site is a brand-specific review project targeting Australian users and connected with the Ricky brand.

EXPAND: We clarify the corporate operator of the Ricky brand, the registered office details in Curaçao, the payment-processing partner in Cyprus, and designate a contact point for privacy matters, even where a formal DPO is not mandated under Australian Privacy Act 1988 (Cth) (Privacy Act).

REFLECT: This section defines the "data controller" (or equivalent under AU law), provides a legal address, and sets out contact channels for privacy requests.

The website Ricky, operated via https://rickybet-au.com, (in this Privacy Policy, "we", "us", "our") is affiliated with the online gambling brand Ricky. For the purposes of privacy and data protection obligations relevant to this website, the primary operating company is:

Operator company: Dama N.V.
Legal form: Public limited company (N.V.) incorporated under the laws of Curaçao
Registration number: 152125
Registered office / legal address: Scharlooweg 39, Willemstad, Curaçao
Gambling licence: E-gaming sub-licence No. 8048/JAZ2020-013, issued by Antillephone N.V. under Curaçao master licence 8048/JAZ (valid until 31 December 2026)

For certain payment-related and technical services, the operator may engage a related company:

Payment processing partner: Friolion Limited, a company registered in Cyprus (registration number and address not specified in this document), which may process fiat payments and related data on behalf of Dama N.V.

For all questions, requests, or complaints in relation to this Privacy Policy or your personal information, you may contact our privacy contact point (data protection department):

Privacy / Data Protection Contact: Data Protection Department, Dama N.V.
E-mail: [email protected] (designated for privacy matters)
Postal contact (for written requests): Data Protection Department, Dama N.V., Scharlooweg 39, Willemstad, Curaçao

We may also be contacted via any contact or feedback facilities made available on https://rickybet-au.com.

What Personal Data We Collect

OBSERVE: Visitors and players need clarity about the types of data we collect, including direct identifiers, technical and behavioural data, payment-related information and tracking technologies.

EXPAND: Under the Australian Privacy Act and international good practice, collection must be reasonably necessary for our functions and clearly described, including collection from users, devices, cookies and third parties.

REFLECT: We categorise the data we collect and explain how each category arises and for what general purposes it is initially gathered.

Identification and Contact Data

Account and profile data: When you register or interact with services related to the Ricky brand via rickybet-au.com, we may collect your full name, date of birth, country of residence, username, and other registration details that you provide.
Contact details: E-mail address, telephone number, postal address and any other details you voluntarily provide in forms, surveys, or communications with our support or review team.
Verification and KYC data: Copies or details of identity documents (e.g., passport, driver licence), proof of address, and any information required to perform "know your customer" (KYC) checks and age verification as part of gambling-related compliance obligations.

Technical and Device Data

Device information: IP address, device identifiers, operating system, browser type and version, language settings, time zone, screen resolution and similar technical attributes.
Usage and log data: Dates and times of access, pages viewed, referring URLs, clickstream data, error logs, and other diagnostic data automatically generated when you visit or interact with rickybet-au.com.

Payment and Financial Data

Transaction data: Records of deposits, withdrawals, bets, wins or losses and other gambling-related transactions made with or through Ricky services when accessed via rickybet-au.com.
Payment instrument details: Limited payment card or account information, such as masked card numbers, card type, issuing bank, digital wallet identifiers, and transaction authentication data, which may be processed by us or by Friolion Limited or other authorised payment providers on our behalf.
Anti-fraud and risk data: Information about chargebacks, suspicious transaction patterns, sanctions or politically exposed person (PEP) screening results, and similar risk indicators generated or obtained for compliance purposes.

Behavioural and Interaction Data

Gambling behaviour data: Betting history, game preferences, session duration, wagering amounts and frequency, bonus usage, and responsible gambling tools you may use (e.g., limits, time-outs, self-exclusion).
Website interaction data: Clicks on links, scroll depth, navigation paths, interaction with reviews, comparison tools and promotional banners on rickybet-au.com.
Communications: Copies of messages, support enquiries, complaint records, feedback forms, and other communications you send to us (including metadata such as date, time and channel used).

Cookies and Similar Technologies

Cookies: Small text files stored on your device to recognise you, maintain sessions, remember preferences, and analyse traffic and performance.
Tracking technologies: Web beacons, pixels, tags, SDKs, and similar tools used to measure the effectiveness of marketing campaigns, referrals and affiliate links connected with rickybet-au.com.
Third-party tools: Analytics and advertising cookies set by third-party service providers (e.g., analytics platforms, advertising networks, affiliate tracking systems) when you visit or interact with rickybet-au.com.

Where we collect information that is not reasonably identifiable to you (for example, properly aggregated or anonymised data), such information is not personal information and may be used for any lawful purpose, subject to applicable law.

Legal Basis for Processing

OBSERVE: Australian law requires collection to be reasonably necessary for our functions and, where applicable, done with consent. Many of our activities also align with international standards similar to the EU GDPR.

EXPAND: We identify several compatible legal bases or justification grounds that explain why we collect and process personal information, including performance of services, consent, compliance with law and our legitimate business interests (anti-fraud, analytics, security).

REFLECT: By linking categories of processing to their respective legal bases, we provide transparency and help users understand when they may withdraw consent or object to certain processing.

Consent

Marketing and promotions: We rely on your explicit consent to send direct marketing communications (e.g., newsletters, promotional offers related to Ricky) via e-mail, SMS or other electronic means, where required by Australian law.
Non-essential cookies and tracking: We obtain your consent, where required, for the use of analytics, advertising and other non-essential cookies and similar technologies.
Special categories of data: Where we collect any sensitive information (for example, health-related information linked to responsible gambling tools), we will do so with your consent where required or otherwise as allowed by law.

Performance of a Contract or Provision of Services

Account creation and management: Processing personal data to set up, maintain and manage your user account in relation to Ricky services accessible via rickybet-au.com.
Transactions and gameplay: Processing payment, wagering and game-related data in order to provide gambling services, handle bonuses, process withdrawals and resolve gameplay issues or queries.
Customer support: Using your contact and account data to respond to your enquiries, assist with technical problems and manage complaints or disputes.

Compliance with Legal and Regulatory Obligations

Gambling regulation: Processing data to comply with obligations arising under the Curaçao licence 8048/JAZ2020-013 and any other applicable gambling regulatory rules, including reporting, audit and conduct requirements.
KYC and AML requirements: Conducting identity verification, source-of-funds checks, anti-money laundering (AML) and counter-terrorism financing (CTF) monitoring, and sanctions screening as required by law and licensing conditions.
Record-keeping and reporting: Maintaining transaction, account and verification records for minimum periods specified by applicable law and producing them to regulators, tax authorities or law enforcement agencies when lawfully requested.

Legitimate Interests

Security and fraud prevention: Detecting and preventing unauthorised access, abuse of bonuses, fraudulent transactions, collusion, money laundering and other unlawful or harmful activities.
Service improvement and analytics: Analysing aggregated gaming and website usage data to improve our games selection, website navigation, content relevance, and user experience on rickybet-au.com.
Business operations: Managing internal administration, reporting, risk management, auditing and ensuring the continuity of our services.

Where we rely on our legitimate interests, we do so only after assessing that such interests are not overridden by your rights, freedoms or reasonable expectations, and you may object to such processing as described under "Your Rights".

Purpose of Processing

OBSERVE: Users must understand why their data is processed in practical, service-oriented terms.

EXPAND: We link each broad category of processing to concrete operational goals: service provision, regulation, marketing, analytics, and risk control.

REFLECT: This section summarises the purposes in a user-friendly way while maintaining legal precision.

Provision and operation of services: To operate the Ricky gambling services accessible via rickybet-au.com, including account registration, identity verification, processing deposits and withdrawals, granting bonuses, managing sessions and wagers, and providing game access.
Regulatory compliance and responsible gambling: To comply with applicable laws and licence conditions, verify age and identity, prevent underage gambling, implement AML/CTF measures, offer and administer responsible gambling tools, monitor risky behaviour and meet record-keeping obligations.
Customer support and communication: To respond to your enquiries, requests and complaints, notify you about account activities, security alerts and changes to our terms or policies, and otherwise communicate necessary information about our services.
Improvement of our website and services: To analyse how users interact with rickybet-au.com and with Ricky games, understand trends, test new features, algorithms and interfaces, and enhance usability, performance, safety and reliability.
Marketing, promotions and personalisation: To send you promotional information and offers, subject to your consent where required, and to personalise marketing content, recommendations and banners based on your profile and behaviour, including the effectiveness of affiliate campaigns.
Fraud detection and risk management: To monitor for suspicious transactions or activity, prevent fraud and abuse, enforce our terms and conditions, protect our rights and the rights of other players, and manage business and operational risk.

Disclosure & Sharing

OBSERVE: Players and visitors must know with whom their data may be shared and in what circumstances.

EXPAND: We identify categories of recipients (operators, processors, regulators, payment providers, affiliates, advertising networks) and emphasise contractual safeguards and legal obligations.

REFLECT: This section limits disclosure to defined purposes and clarifies that we do not sell personal information as a stand-alone product.

Group entities and operational partners: We may share your personal information with Dama N.V., its affiliates, and Friolion Limited (Cyprus) or other entities engaged for payment processing, account administration, IT services and similar operational functions, strictly for the purposes described in this Privacy Policy.
Payment service providers: Your payment and transaction data may be shared with banks, card schemes, payment gateways, e-wallet providers and other financial institutions to process deposits, withdrawals and refunds, perform security checks, and comply with payment industry rules.
Technical and analytical service providers: We may use third-party hosting providers, analytics tools, customer support platforms and security services that process personal information on our behalf under written data processing agreements.
Regulators, authorities and law enforcement: We may disclose personal information to gambling regulators, financial intelligence units, tax authorities, courts, police or other public authorities when required by law, licence conditions, court orders or official requests made in accordance with legal procedures.
Affiliates and advertising networks: Where you access Ricky services through an affiliate link or marketing campaign, we may share limited information (such as registration and conversion data, and high-level activity metrics) with the relevant affiliate or advertising network for attribution, analytics and commission calculation, subject to your consent where required for marketing-related cookies or tracking.
Professional advisers and acquirers: We may disclose personal information to auditors, lawyers, accountants, or potential purchasers or investors as part of due diligence or corporate transactions, provided appropriate confidentiality and data protection safeguards are in place.

We do not rent or sell your personal information as an independent commercial product. Any third party that processes your personal information on our behalf is required to implement appropriate security measures and process the data only in accordance with our instructions and applicable law.

International Transfers

OBSERVE: Data may be stored or accessed in multiple jurisdictions, including Curaçao and Cyprus, while the user base is primarily in Australia.

EXPAND: We explain that such transfers are necessary for global operations, and we apply contractual and organisational safeguards consistent with international standards.

REFLECT: Users are informed about cross-border data flows and reassured that we will protect their information regardless of location.

Locations of processing: Your personal information may be stored and processed in Curaçao (where Dama N.V. is registered), Cyprus (where Friolion Limited is based), Australia and other countries where we or our service providers maintain facilities.
Nature of transfers: International transfers may occur when we:
- Host or back-up data on servers located outside Australia;
- Use technical, support or payment services provided from other countries;
- Provide information to regulators or authorities in relevant jurisdictions.
Safeguards: Where we transfer personal information across borders, we take reasonable steps to ensure that:
- The recipient provides a level of protection substantially similar to that under the Australian Privacy Act and relevant international standards; and/or
- We enter into contractual arrangements, including data protection clauses modelled on recognised international standards (such as standard contractual clauses), obliging the recipient to protect the data and use it only for authorised purposes.
Continuous protection: Regardless of where your personal information is processed, we will handle it in accordance with this Privacy Policy and take reasonable steps to ensure its security.

Data Retention

OBSERVE: Users need to know for how long their data is retained and the criteria used to determine retention periods.

EXPAND: Retention must comply with legal obligations (e.g., AML record-keeping), operational needs, and principles of data minimisation.

REFLECT: We describe standard retention durations, link them to regulatory requirements and explain when data is deleted or anonymised.

General principle: We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required or permitted by law, whichever is longer.
Account and identification data:
- Core identification, KYC and account information is typically kept for up to 5 years after your account is closed or your last transaction, in line with common AML/CTF and gambling regulatory record-keeping requirements.
Transaction and gambling activity data:
- Records of deposits, withdrawals, wagers and game activity are generally retained for 7 years from the date of the relevant transaction to meet legal, tax and audit obligations and to manage possible disputes.
Marketing data:
- Contact details used for marketing are kept until you withdraw your consent or opt out. Evidence of your opt-out is retained to ensure we respect your preference.
Technical logs and analytics data:
- Technical logs and analytics data are typically retained for up to 24 months from the date of collection, after which they may be aggregated or anonymised.
Complaints and dispute records:
- Records relating to complaints, disputes and investigations are usually retained for up to 7 years after resolution, depending on applicable limitation periods and regulatory requirements.

When personal information is no longer required, we will take reasonable steps to securely delete or de-identify it. In some cases, we may retain de-identified or aggregated data for statistical, research or business analysis purposes, which will no longer be associated with an identifiable individual.

Your Rights

OBSERVE: Although Ricky is aimed at Australian users, the project aligns with international privacy best practice similar to the EU GDPR and, where comparator frameworks are referenced, other international standards.

EXPAND: We summarise a broad set of user rights: access, correction, deletion, restriction, objection, portability and withdrawal of consent, and explain procedural aspects (how to exercise rights, timeframes, and cost-free access).

REFLECT: This provides a comprehensive and user-friendly description of rights, consistent with Australian Privacy Principles and international norms.

Overview of Your Rights

Right of access: You may request confirmation of whether we hold personal information about you and, if so, obtain a copy of that information together with an explanation of how it is used.
Right to correction (rectification): You may request that we correct or update personal information that is inaccurate, incomplete or out of date.
Right to deletion (erasure): You may request that we delete your personal information where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (if consent was the sole basis), or where we have unlawfully processed the information. We may need to retain certain data where required by law or where retention is otherwise lawful.
Right to restriction of processing: In certain circumstances, you may ask us to limit the processing of your personal information (for example, while we verify its accuracy or assess an objection you have raised).
Right to object: You may object to processing of your personal information that is based on our legitimate interests, including profiling for such purposes, and we will cease that processing unless we have compelling legitimate grounds or the processing is required for legal claims.
Right to data portability (where technically feasible): Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request to receive the personal information you provided to us in a structured, commonly used and machine-readable format, and, where technically feasible, request that we transmit it to another service provider.
Right to withdraw consent: Where we rely on your consent (e.g., for marketing or non-essential cookies), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before withdrawal.
Right to opt out of direct marketing: You may opt out of receiving marketing communications at any time by following the unsubscribe instructions in the communication or contacting us directly.

Exercising Your Rights

Submission of request: You may exercise your rights by:
- Sending an e-mail to [email protected], clearly stating your name, contact details and the nature of your request; or
- Using any dedicated privacy or contact form available on https://rickybet-au.com; or
- Submitting a written request by post to the Data Protection Department, Dama N.V., Scharlooweg 39, Willemstad, Curaçao.
Verification: For your security, we may need to verify your identity (for example, by requesting additional information or confirmation through your registered e-mail address) before processing your request.
Response timeframe: We aim to respond to all valid requests within 30 days from receipt. If your request is complex or we receive multiple requests from you, we may extend this period, in which case we will inform you of the extension and the reasons for it.
Cost: Requests are generally handled free of charge. However, where requests are manifestly unfounded or excessive (for example, repeated requests), we may charge a reasonable fee or refuse to act on the request, as permitted by law.
Limitations: Certain rights may be restricted where necessary to protect the rights, privacy and safety of others, preserve legal privilege, meet regulatory or law-enforcement requirements, or where your request would be incompatible with our legal obligations (such as mandatory retention under AML/CTF laws).

Cookies & Tracking Technologies

OBSERVE: Cookies and similar tools are widely used for functionality, analytics and advertising, and users must be informed about their use.

EXPAND: We distinguish between categories of cookies, explain their purposes and provide instructions on managing preferences.

REFLECT: This enables users to make informed decisions about tracking technologies and supports compliance with consent and transparency obligations.

Types of Cookies We Use

Strictly necessary (functional) cookies: These cookies are essential for the operation of rickybet-au.com and enable features such as page navigation, secure login, and access to protected areas. Without these cookies, some services cannot be provided.
Preference cookies: These remember your choices (such as language, region, layout preferences) to provide a more personalised experience when you return to our site.
Analytics (performance) cookies: These collect information about how visitors use rickybet-au.com, such as which pages are visited most often and whether users receive error messages. Data is typically aggregated and helps us improve performance and usability.
Advertising and affiliate cookies: These cookies and tracking pixels may be set by us or by third-party advertising networks and affiliate partners to measure the performance of promotional campaigns, track referrals, and present ads or offers that are more relevant to your interests.

Managing Cookies and Tracking

Browser controls: Most web browsers allow you to control cookies through their settings. You can usually configure your browser to block or delete cookies, or to alert you when a cookie is being placed on your device. Please note that disabling certain cookies may affect the functionality of rickybet-au.com.
On-site preferences: Where available, you may use cookie banners or preference panels on rickybet-au.com to accept or reject different categories of cookies (other than strictly necessary cookies).
Third-party opt-outs: Some analytics and advertising providers offer their own opt-out mechanisms. Information about these may be provided in our cookie notices or within the privacy documentation of the respective third parties.

Data Security

OBSERVE: Users expect robust technical and organisational measures to protect their data in an online gambling context, which is particularly sensitive to fraud and cyber-attacks.

EXPAND: We describe encryption methods, access controls, audits, staff training and incident response measures, referencing recognised standards where applicable.

REFLECT: This demonstrates our commitment to safeguarding personal information and to taking reasonable steps to prevent unauthorised access, alteration, disclosure or loss.

Encryption in transit and at rest: Data transmitted between your device and rickybet-au.com is protected using industry-standard transport layer security (TLS 1.2 or higher). Where feasible, we also apply encryption or pseudonymisation to stored data, particularly for sensitive fields such as passwords and payment information (e.g., hashing, tokenisation).
Access controls and authentication: Access to personal information is restricted to authorised personnel and service providers who need it for legitimate business purposes and are bound by confidentiality and data protection obligations. We implement role-based access controls and, where appropriate, multi-factor authentication (MFA) for privileged accounts.
Secure development and infrastructure: Our systems and applications are developed following secure coding practices and are regularly updated and patched. We use firewalls, intrusion detection and prevention systems and other security technologies to help protect our infrastructure.
Monitoring, audits and testing: We conduct regular security reviews, vulnerability assessments and, where appropriate, penetration tests or third-party audits to evaluate the effectiveness of our controls. Where feasible, we align our practices with recognised security frameworks such as ISO 27001 or comparable standards, even if formal certification is not always obtained.
Staff awareness and training: Employees and contractors who handle personal information receive appropriate training on data protection, information security and responsible gambling obligations, and are subject to internal policies governing the use and disclosure of personal information.
Incident response: We maintain procedures for responding to data security incidents, including prompt investigation, containment, mitigation and remediation. Where a data breach creates a real risk of serious harm to individuals, we will take reasonable steps to notify affected individuals and, where required, relevant authorities, in accordance with applicable law (including the Notifiable Data Breaches scheme under the Australian Privacy Act, where applicable).

While we take reasonable steps to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. You are responsible for maintaining the confidentiality of your login details and for any activities conducted under your account.

Complaints & Contacts

OBSERVE: Users must have clear channels for raising privacy concerns or complaints and for escalating matters if they are not satisfied.

EXPAND: We outline internal and external complaint routes, reasonable timeframes and contact information for relevant supervisory authorities.

REFLECT: This promotes transparency, accountability and user trust, consistent with the Australian Privacy Act and international expectations.

How to Contact Us

E-mail: For privacy-related queries or complaints, contact our data protection department at [email protected].
Postal address: Data Protection Department, Dama N.V., Scharlooweg 39, Willemstad, Curaçao.
Website: You may also use any contact or feedback forms made available on https://rickybet-au.com.

Internal Complaint Procedure

Submission: Send us a written description of your concern, including relevant details (such as dates, account details, and copies of any previous correspondence).
Acknowledgement: We will acknowledge receipt of your complaint as soon as reasonably practicable, typically within 5 business days.
Investigation: Your complaint will be reviewed by our data protection department or another appropriate internal team, which may contact you for additional information if necessary.
Outcome: We aim to provide a substantive response within 30 days of receiving your complaint. If we cannot respond within this period, we will inform you of the delay, the reasons and the expected timeframe for resolution.

Escalation to Supervisory Authorities

If you are not satisfied with our response or believe that we have not handled your personal information in accordance with applicable law, you may have the right to lodge a complaint with the relevant data protection or privacy authority in your jurisdiction. For users in Australia, this is usually:

Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au
Phone (from within Australia): 1300 363 992
Address: GPO Box 5288, Sydney NSW 2001, Australia

If you are located in another country, you may also contact your local data protection authority, where such an authority exists, for guidance or to lodge a complaint, in addition to or instead of contacting the OAIC.

Updates

OBSERVE: Privacy policies must adapt over time to legal, technical and business changes.

EXPAND: We describe how changes will be communicated, how users can track versions, and how significant changes will be notified in advance.

REFLECT: This supports ongoing transparency and allows users to make informed choices when the policy is updated.

Policy changes: We may amend or update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors. The updated version will be posted on https://rickybet-au.com.
Version control: Each version of the Privacy Policy will be identified by the "Last updated" date stated below. Where appropriate, we may also maintain a brief changelog summarising material amendments.
Notification of material changes: If we make changes that materially affect your rights or the way we process your personal information, we will use reasonable efforts to notify you in advance by:
- Sending an e-mail notification to the address associated with your account, where available;
- Displaying a prominent notice or banner on rickybet-au.com; and/or
- Providing an alert in your account dashboard (if applicable).
Advance notice period: For material changes, we will generally provide at least 30 days' notice before the updated Privacy Policy takes effect, unless a shorter period is required to comply with legal or regulatory obligations or to address urgent security or compliance issues.
Your options: If you do not agree with the updated Privacy Policy, you may choose to discontinue using rickybet-au.com and, where applicable, request closure of your account and deletion of your data in accordance with this Privacy Policy. Continued use of our services after the effective date of an updated policy will constitute your acceptance of the changes.

Last updated: January 2026