Wombat Casino Privacy Policy

The Data Controller for Your Account

Wombat Casino is operated by ProgressPlay Limited, registered in Malta with its address at Level 4, Spinola Park, Triq Mikiel Ang Borg, Ta’ Xbiex XBX 1424, Malta. ProgressPlay Limited is the data controller for the personal information you provide when you register, deposit, play, or contact support, and it is responsible for deciding how that information is used and secured.

Why We Process Your Data and Where You Can Complain

We process your registration details, payment information, and KYC documents because doing so is necessary to operate your account, to verify your identity before releasing a withdrawal, and to meet our obligations under the Malta Gaming Authority licence. Technical logs and cookie data are processed on the basis of our legitimate interest in keeping the platform secure and functioning correctly, and in some cases on the basis of your consent, which you can withdraw through the cookie settings described below. If you consider that your data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority in Malta, the Information and Data Protection Commissioner, in addition to raising the matter with us directly at [email protected].

How We Use Cookies and Analytics

The site uses strictly necessary cookies to keep you logged in and to remember your session settings, and analytics cookies to measure how the site is used so that pages and game loading times can be improved. Analytics cookies are not strictly necessary for the site to function, and you can opt out of them through the cookie banner shown on your first visit or by adjusting your browser’s cookie settings at any time afterward, which does not affect your ability to log in and play.

International Data Transfers

Because ProgressPlay Limited is registered in Malta and its servers and payment processors are located outside Australia, your data is transferred and stored outside the jurisdiction you are playing from. Transfers to service providers outside Malta and the European Economic Area are made under contractual safeguards intended to keep the same standard of protection that applies to data processed within Malta itself.

Your data is shared only with the parties needed to run your account and process your transactions. Payment providers, including Skrill, Neteller, PayPal, Trustly, and EcoPayz, receive the transaction data needed to process a deposit or withdrawal you initiate through them. KYC verification providers receive copies of the identity and address documents you submit, solely to confirm their authenticity. Game providers such as NetEnt, Evolution Gaming, and Games Global receive the gameplay data needed to run a session and to record the outcome, but they do not receive your payment details. eCOGRA, as the independent auditor of our random number generators, receives aggregated game outcome data rather than individual player records. We do not sell personal data to third parties for marketing purposes.

Your Data Protection Rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, and to request deletion of data we no longer need for a legal or regulatory purpose. You may also request that we restrict processing in specific circumstances, object to processing based on legitimate interest, and request a portable copy of the data you provided directly to us. Requests are handled through [email protected], and we may need to verify your identity before actioning a request that involves account or financial data.

What Happens to Your Data After You Close Your Account

Closing your account does not delete your data immediately. Financial and KYC records are retained for the period required by anti-money-laundering and gaming licence obligations under Maltese law, which extends beyond the date your account is closed. Once that retention period ends and no legal or regulatory reason remains to keep the data, it is deleted or anonymised so that it can no longer be linked back to you.

Information We Collect

At registration, we collect your name, date of birth, email address, and residential address. When you make a deposit or request a withdrawal, we collect the payment method details and transaction records needed to process it. Before your first withdrawal, we collect KYC documents, an Australian driver’s licence, a passport, a Medicare card, or a proof-of-address document such as a utility bill or bank statement. While you use the site, we collect technical data such as your IP address and device type, gameplay logs, and cookie data as described above.

How to Contact Us About Your Data

Questions about this policy, or a request to exercise any of the rights listed above, should go to [email protected]. Include enough detail in your message for us to locate your account, such as your registered email address, so the request can be actioned without a delay caused by a back-and-forth to confirm who is making it.