burger icon

Privacy Policy

This Privacy Policy explains how personal information is collected and handled when you use or visit the website thisisvegas-au.com in connection with This Is Vegas. It applies to website visitors, registered players, and any person who interacts with our online services, regardless of device. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and replaces any prior versions applicable to thisisvegas-au.com.

Who We Are

OBSERVE: Users need to know who controls their data and how to contact them. EXPAND: We identify the offshore operator, its jurisdiction, and designate a contact for privacy matters. REFLECT: This allows Australian users to understand that their data is handled under non-Australian law and how to reach us.

The online casino brand "This Is Vegas", as made available and reviewed via thisisvegas-au.com for the This Is Vegas project, is operated offshore by:

  • Operator: SSC Entertainment N.V., a public limited liability company (N.V.) incorporated under the laws of Curaçao.
  • Registered jurisdiction: Curaçao.
  • Gaming licence: Sublicence number 8048/JAZ issued under the Curacao eGaming framework by Antillephone N.V. (assumed active and valid until at least 31 December 2026).
  • Parent / operator group: SSC Entertainment N.V., which also operates sister brands including Da Vinci's Gold, Cocoa Casino, and Paradise 8.

Specific corporate address, company registration number, tax identification number, and dedicated mailing address are not publicly specified in the data available to This Is Vegas. For all privacy-related queries and to exercise your data rights, you may contact our designated data protection contact point:

  • Data Protection Contact / DPO-equivalent: Data Protection Officer, SSC Entertainment N.V.
  • Email: [email protected] (or, if unavailable, use the general support email published on the website).
  • Website: https://thisisvegas-au.com

Because SSC Entertainment N.V. operates offshore, it is not subject to Australian consumer laws or Australia's Interactive Gambling Act 2001. Your data will primarily be processed under the laws of Curaçao and, where applicable, international privacy standards referred to in this Policy.

What Personal Data We Collect

OBSERVE: We collect different categories of data from players and visitors. EXPAND: These categories must be clear so users understand what is mandatory, what is optional, and what is automatically collected. REFLECT: This enables transparent consent and informed use of thisisvegas-au.com in the context of This Is Vegas.

Identity and Contact Data

  • Registration data: Full name, username, password, email address, country of residence, date of birth, and contact phone number (where provided).
  • Verification and KYC data: Copies or details of identification documents (e.g. passport, ID card, driver's licence), proof of address (utility bills, bank statements), and any other information needed to confirm your identity and eligibility to use the service.

Technical and Usage Data

  • Device and connection data: IP address, browser type and version, device identifiers, operating system, language and time zone, screen resolution, and basic hardware information.
  • Log and activity data: Dates and times of access, login attempts, pages visited, referral URLs, session length, clickstream data, and in-site navigation patterns.

Payment and Financial Data

  • Transaction data: Deposits, wagers, wins, losses, bonuses claimed and used, withdrawal requests, payment methods used, and related timestamps.
  • Payment instrument data: Limited card, wallet, or banking details as processed by payment providers (for example, masked card numbers, card type, and expiry date), to the extent necessary to process payments. Full sensitive payment data is generally handled by specialised payment processors and not stored by thisisvegas-au.com.

Behavioural and Profile Data

  • Gaming and betting history: Games played, stakes placed, game outcomes, bet size, frequency of play, session duration, and gameplay patterns.
  • Preference and profile data: Language preference, marketing preferences, favourite games, bonus usage patterns, device preferences, and feedback or survey responses.

Cookies and Similar Technologies

  • Cookies: Small text files stored on your device to recognise you, maintain your session, remember your preferences, and analyse traffic.
  • Tracking technologies: Web beacons, pixels, tags, local storage, and similar tools used to measure performance, deliver content, and support advertising or affiliation (where permitted and subject to consent).

Special Categories and Sensitive Data

  • We do not intentionally collect sensitive categories of data (such as health, political opinions, or religious beliefs), except where such information may incidentally arise in the context of responsible gambling interactions, self-exclusion requests, or customer support communications that you choose to provide. Such data is handled with heightened care and only where strictly necessary.

Legal Basis for Processing

OBSERVE: Data processing requires clear legal grounds, especially where EU-style standards are adopted. EXPAND: Even though the operator is in Curaçao and targets Australian players, it relies on internationally recognised bases (consent, contract, legitimate interests, legal obligation). REFLECT: Stating these bases clarifies when we need your consent and when processing is necessary to provide the service or meet regulatory duties.

Performance of a Contract

  • Purpose: To register and maintain your player account, verify your eligibility, process deposits and withdrawals, credit bonuses, and provide access to games.
  • Scope: Identity data, contact data, payment and transaction data, and gameplay history processed to fulfil our contractual obligations to you as a registered user.

Compliance with Legal and Regulatory Obligations

  • Purpose: To meet obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), fraud prevention, sanctions, and responsible gambling regulations applicable in Curaçao and, where relevant, other supervising jurisdictions.
  • Scope: KYC documents, transaction and behavioural data, and records of communications used to monitor, investigate, and report suspicious activity and maintain legally required records.

Legitimate Interests

  • Fraud and security: Protecting thisisvegas-au.com, players, and SSC Entertainment N.V. from fraud, unauthorised access, chargebacks, and other abuse.
  • Service quality and analytics: Analysing usage patterns and performance data to troubleshoot issues, improve games and services, and optimise website performance.
  • Internal governance: Conducting audits, risk management, and internal reporting to maintain the integrity and continuity of our operations.
  • Where we rely on legitimate interests, we balance those interests against your rights and expectations, and we limit processing to what is strictly necessary.

Consent

  • Marketing and promotions: Sending you email newsletters, promotional offers, and special campaigns related to This Is Vegas or its sister brands only where you have opted in or where otherwise permitted by applicable law.
  • Advertising and cookies: Using non-essential cookies, pixels, or similar technologies for personalised advertising, retargeting, or affiliation tracking, where required by law, based on your consent.
  • You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

Purpose of Processing

OBSERVE: Users must know how their data is used in practice. EXPAND: We link each main purpose to specific operations like account management, marketing, analytics, and fraud control. REFLECT: This increases transparency and helps players from Australia and elsewhere understand implications of using thisisvegas-au.com.

  • Provision of casino services: To create and manage your account, verify your identity, process deposits and withdrawals, enable you to play games, and provide customer support.
  • Service improvement and personalisation: To analyse gameplay and usage information to improve site usability, game selection, performance, and to tailor content, bonuses, and recommendations to your preferences.
  • Marketing and communications: To send transactional messages (such as account notifications, changes to terms, security alerts) and, where permitted, promotional communications, newsletters, and offers. You can opt out of marketing at any time.
  • Analytics and statistics: To generate anonymised or aggregated reports on traffic, conversion, and performance, used internally to optimise business operations and partnerships, including those with affiliates connected to This Is Vegas.
  • Fraud prevention, security, and compliance: To authenticate users, detect and prevent fraud or bonus abuse, monitor for AML/CTF risks, enforce the terms and conditions, and cooperate with regulators or competent authorities where legally required.
  • Legal claims and risk management: To establish, exercise, or defend legal claims, handle complaints and disputes, conduct internal audits, and ensure continuity of operations.

Disclosure & Sharing

OBSERVE: Data often needs to be shared with third parties to deliver services. EXPAND: We specify who receives data (e.g., payment providers, software suppliers, regulators) and under which safeguards. REFLECT: This supports accountability and lets users assess risks of offshore operation in relation to This Is Vegas.

Group Companies and Operators

  • Group entities: SSC Entertainment N.V. and its affiliated brands (including Da Vinci's Gold, Cocoa Casino, Paradise 8) may access your data where needed for operational, technical, compliance, or customer support purposes, subject to strict confidentiality and access control.

Payment Partners and Financial Institutions

  • Payment processors: Banks, card schemes, e-wallet providers, voucher and crypto services (where available) that process deposits, withdrawals, and chargebacks. These entities receive only the data necessary to execute transactions, verify payment instruments, and comply with their own legal obligations.

Service Providers and Technical Partners

  • IT and hosting providers: Companies providing hosting, storage, content delivery networks, cloud infrastructure, and technical support for thisisvegas-au.com.
  • Game providers and RNG certification partners: Software suppliers such as Betsoft and related testing laboratories (e.g. Gaming Laboratories International (GLI) for RNG certification) may receive gameplay and technical data necessary to provide and certify games.
  • Analytics and security vendors: Providers of tools for analytics, anti-fraud systems, KYC/AML screening, email delivery, and security monitoring.

Regulators, Law Enforcement, and Authorities

  • Regulatory bodies: Antillephone N.V. and other regulatory or supervisory authorities in Curaçao or other jurisdictions, where required to demonstrate compliance with licence conditions or to respond to investigations.
  • Law enforcement and authorities: Police, courts, tax authorities, and other competent bodies if required by law, regulation, court order, or when necessary to protect our rights, your safety, or the rights of others.

Affiliates and Advertising Networks

  • Affiliates: Selected affiliates and marketing partners, including sites that review or promote This Is Vegas such as This Is Vegas, may receive limited data such as aggregated performance statistics or tracking identifiers, primarily for attribution and optimisation of marketing campaigns.
  • Advertising networks: With your consent, we may work with third-party ad networks that use cookies or similar technologies to deliver targeted advertisements and track campaign performance.

Corporate Transactions

  • In the event of a merger, acquisition, restructuring, sale of assets, or insolvency involving SSC Entertainment N.V. or the This Is Vegas brand, your data may be transferred to a successor entity or third party as part of that transaction, subject to applicable privacy obligations and this Policy or an equivalent level of protection.

International Transfers

OBSERVE: Data from Australian players can be stored and processed in multiple countries. EXPAND: We identify key regions and explain the protections used. REFLECT: This allows users to understand that data will not be held in Australia and may be subject to different legal standards.

  • Primary processing location: Your personal data is primarily processed in Curaçao, where SSC Entertainment N.V. is established and licensed.
  • Other locations: Depending on the specific services used, data may be transferred to:
    • Data centres and hosting providers in the European Union, the European Economic Area (EEA), the United Kingdom, or other jurisdictions used for cloud services.
    • Payment processors, verification providers, and technical partners located in the EEA, the United Kingdom, North America, or other regions.
  • Transfer safeguards: Where we transfer data from the EEA or other regions with comparable requirements to countries that are not deemed to provide an adequate level of protection, we aim to implement:
    • Standard Contractual Clauses (SCCs) or equivalent contractual safeguards approved by relevant supervisory authorities.
    • Technical and organisational security measures (encryption, access control) to protect data during and after transfer.
    • Strict internal policies and confidentiality undertakings with recipients.
  • By using thisisvegas-au.com and providing your data, you acknowledge that your data may be transferred to and processed in countries whose data protection laws may be different from those in your country of residence, including Australia.

Data Retention

OBSERVE: Data cannot be kept indefinitely without justification. EXPAND: We define specific retention periods and criteria for different data types, reflecting gambling and AML obligations. REFLECT: This clarifies how long information related to This Is Vegas may remain in our systems.

  • General principle: We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, to comply with legal and regulatory requirements, and to resolve disputes or enforce our rights.

Retention Periods by Category

  • Account and identification data: Typically kept for the duration of your active account and, after closure, for a period of up to five (5) years, or longer where required by applicable AML, CTF, or gambling regulations in Curaçao or other relevant jurisdictions.
  • Transaction and gameplay data: Retained for at least five (5) years after the relevant transaction or account closure, in line with standard regulatory and audit requirements in the online gambling industry.
  • Marketing data: Kept for as long as you remain subscribed to marketing communications. If you opt out, your contact details may be retained on a suppression list to ensure no further marketing is sent.
  • Customer support communications: Stored for up to five (5) years after the last communication, or longer where needed to manage disputes, complaints, or legal claims.
  • Cookies and tracking data: Retained according to their specific lifetime (session or persistent), typically between the duration of your session and up to two (2) years, unless you delete them earlier using your browser or device settings.

Deletion and Anonymisation

  • When the relevant retention period expires, or when data is no longer required for the purposes for which it was collected, we will:
    • Securely delete or irreversibly anonymise personal data so that it can no longer be linked to any individual; or
    • Archive the data in a way that it is accessible only for legal, regulatory, or dispute-resolution purposes, with restricted access.
  • Your right to request deletion may be limited by our legal obligations (for example, AML record-keeping rules). Where we cannot delete your data due to such obligations, we will explain this to you when responding to your request.

Your Rights

OBSERVE: Modern privacy frameworks, including GDPR and comparable regimes, grant individuals specific rights. EXPAND: Even though the operator is based in Curaçao and targets Australian users, we align our approach with these principles where feasible. REFLECT: This section explains how you can exercise control over data linked to your use of thisisvegas-au.com in the context of This Is Vegas.

Core Data Subject Rights

  • Right of access: You may request confirmation of whether we process your personal data and obtain a copy of such data, together with information on how it is used and shared.
  • Right to rectification: You may ask us to correct inaccurate or incomplete personal data, including updating contact details or KYC information.
  • Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or if you withdraw consent and there is no other legal basis for processing. Legal or regulatory obligations (e.g. AML) may require us to retain some data.
  • Right to restriction of processing: You may ask us to limit processing of your data where:
    • you contest its accuracy;
    • processing is unlawful and you oppose deletion;
    • we no longer need the data but you require it for legal claims; or
    • you have objected to processing and verification of our legitimate interests is pending.
  • Right to object: You may object to processing based on our legitimate interests, including profiling related to such interests. Unless we demonstrate compelling legitimate grounds, we will stop the processing. You have an unconditional right to object to direct marketing at any time.
  • Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format, and ask us to transmit it to another controller where technically feasible.
  • Right to withdraw consent: Where processing is based on your consent (e.g. marketing, non-essential cookies), you may withdraw consent at any time via account settings, unsubscribe links, or by contacting us. This does not affect prior lawful processing.

Procedures, Timeframes, and Cost

  • How to submit a request: You may exercise your rights by:
    • Contacting our Data Protection contact at [email protected]; or
    • Using any dedicated privacy or support form available on thisisvegas-au.com.
  • Verification: To protect your account and privacy, we may ask you to provide additional information to verify your identity before acting on your request.
  • Response time: We aim to respond to all legitimate requests without undue delay and in any event within thirty (30) days of receipt. If your request is complex or we receive multiple requests, we may extend this period by up to a further thirty (30) days, in which case we will inform you of the extension and reasons.
  • Fees: Requests are generally handled free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, or repetitive, in line with applicable standards.

Reference to International Standards

  • While SSC Entertainment N.V. is primarily subject to the laws of Curaçao, our privacy practices are designed to be broadly consistent with key principles found in the EU General Data Protection Regulation (GDPR) and comparable international data protection frameworks. Where references are made to GDPR-style rights, they are applied on a voluntary and good-faith basis, without prejudice to the governing law specified in our terms and conditions.

Cookies & Tracking Technologies

OBSERVE: Cookies support functionality, analytics, and marketing. EXPAND: We classify cookie types, their purposes, and how to manage them. REFLECT: This helps users control tracking while understanding impacts on the use of thisisvegas-au.com and associated review activity by This Is Vegas.

Types of Cookies

  • Session cookies: Temporary cookies that exist only while your browser is open. They enable essential functions such as keeping you logged in, processing bets during a session, and maintaining your selections. They are deleted when you close your browser.
  • Persistent cookies: Cookies that remain on your device for a defined period (for example, from a few days up to two years), helping us remember your preferences (language, region), analyse site usage over time, and measure the effectiveness of our marketing.
  • First-party cookies: Set directly by thisisvegas-au.com to support core site operations and analytics.
  • Third-party cookies: Set by third-party providers, such as analytics services, advertising networks, or affiliate tracking systems used in collaboration with partners including review sites like This Is Vegas.

Purposes of Cookies

  • Strictly necessary / functional cookies: Required for the website to function properly, including security features, account login, gaming sessions, and payment processing. Disabling these cookies may prevent you from using key features.
  • Analytics and performance cookies: Used to collect aggregated information on how visitors use the site, such as pages visited and error messages encountered, to improve functionality, performance, and user experience.
  • Advertising and targeting cookies: Used, with your consent where required, to deliver more relevant ads, measure campaign performance, and track conversions coming from affiliate partners, including clicks originating from This Is Vegas and similar websites.

Managing Cookies

  • Browser settings: Most web browsers allow you to:
    • View which cookies are stored on your device;
    • Delete existing cookies;
    • Block some or all cookies from being placed; and
    • Set preferences for certain websites.
  • In-site controls: Where available, thisisvegas-au.com may provide a cookie banner or preference centre that allows you to accept or reject non-essential cookies (e.g. analytics, advertising) while still enabling strictly necessary cookies.
  • Impact of disabling cookies: If you block or delete cookies, some features of the site may not function properly, and your experience (including remembering your settings and login details) may be affected.

Data Security

OBSERVE: Online gambling involves financial and identity data that must be safeguarded. EXPAND: We describe the layered security controls applied at technical, organisational, and operational levels. REFLECT: This demonstrates how SSC Entertainment N.V. seeks to protect players on thisisvegas-au.com, even when operating offshore from Australia.

Technical Measures

  • Encryption in transit: Data transmitted between your browser and thisisvegas-au.com is protected using industry-standard Transport Layer Security (TLS) protocol (version 1.2 or higher), helping to prevent interception and tampering.
  • Encryption at rest: Where appropriate, sensitive data such as password hashes and certain financial or identification details are stored using robust encryption and hashing algorithms on secure servers.
  • Access controls: Access to production systems and databases is restricted to authorised personnel on a need-to-know basis, protected by strong authentication mechanisms and role-based permissions.

Organisational and Operational Measures

  • Security policies and training: Staff involved in handling personal data receive training on privacy and security best practices, including handling of payment and KYC information.
  • Regular assessments: We conduct periodic internal reviews, technical assessments, and, where appropriate, third-party audits or certifications (for example, using certified RNG systems like those tested by Gaming Laboratories International (GLI) for Betsoft games) to maintain a secure environment.
  • Incident response: We maintain incident response procedures to detect, investigate, and mitigate potential data breaches or security events. Where required by applicable law, we will notify affected users and relevant authorities without undue delay.
  • Data minimisation and pseudonymisation: Where possible, we limit the amount of data collected and use techniques such as pseudonymisation or aggregation to reduce risk.

Security Standards

  • While SSC Entertainment N.V. is not publicly certified under specific frameworks such as ISO/IEC 27001 or SOC 2 based on the information available to This Is Vegas, our technical and organisational measures are designed to align with recognised industry standards for online gaming operators and financial transaction security.

Complaints & Contacts

OBSERVE: Users need clear avenues to raise privacy concerns or complaints. EXPAND: We provide contact details, explain the internal process, and indicate possible escalation to supervisory authorities where applicable. REFLECT: This fosters accountability, even where local Australian oversight (such as ACMA) is limited in relation to offshore operators.

Contacting Us

  • Primary privacy contact: Data Protection Officer, SSC Entertainment N.V.
  • Email: [email protected] (or the main support email address published on the website if a specific DPO email is not available).
  • Website: https://thisisvegas-au.com

Internal Complaint Procedure

  1. Submission: Send your complaint or query by email to the address above, providing:
    • Your full name and registered username (if applicable);
    • Contact information for our reply; and
    • A clear description of your concern, including relevant dates and any supporting documents.
  2. Acknowledgement: We aim to acknowledge receipt of your complaint within five (5) business days.
  3. Investigation: Your complaint will be reviewed by the relevant team, which may request additional information if necessary to properly assess the matter.
  4. Response: We will provide a substantive response as soon as reasonably possible, and in any case within thirty (30) days of receiving your complete complaint, unless applicable law permits an extension. If additional time is required, we will inform you of the reason and expected timeframe.

Escalation to Supervisory Authorities

  • Curaçao supervisory framework: As SSC Entertainment N.V. is registered and licensed in Curaçao, issues relating to licence conditions or regulatory compliance may, in some cases, be raised with the relevant Curaçao licensing entity (such as Antillephone N.V.), subject to their procedures.
  • Other data protection authorities: If you believe that your data protection rights have been infringed, you may also have the right, under certain international frameworks, to lodge a complaint with a data protection authority in your country of residence, place of work, or place of the alleged infringement (for example, an EU data protection authority if you are located in the European Economic Area).
  • Australian regulators: Please note that SSC Entertainment N.V. operates offshore and is not subject to the jurisdiction of Australian regulators such as the Office of the Australian Information Commissioner (OAIC) or the Australian Communications and Media Authority (ACMA) in the same way as Australian-based entities. Nevertheless, you may seek independent legal advice about any options that may be available under Australian law.

Updates

OBSERVE: Privacy policies must evolve with services, law, and technology. EXPAND: We explain how changes are communicated and how users can react. REFLECT: This ensures that visitors coming via This Is Vegas or directly to thisisvegas-au.com remain informed of material changes through 2026.

Changes to This Privacy Policy

  • We may update or revise this Privacy Policy from time to time to reflect changes in our services, technologies, legal requirements, or business practices.
  • Each version of the Policy will be identified by the "Last updated" date indicated below, and earlier versions may be archived for reference.

Notification Procedures

  • Email notifications: Where you have an active account and we hold a valid email address, we may notify you of material changes by sending an email summarising the key updates.
  • Website notifications: We may display banners, pop-ups, or notices on thisisvegas-au.com and, where appropriate, on associated account dashboards, summarising material changes and linking to the updated Policy.
  • Advance notice: For significant changes that materially affect your rights or the way we process your data, we will, where reasonably practicable, provide at least thirty (30) days' advance notice before the changes take effect.

Your Options in Case of Changes

  • If you do not agree with the updated Privacy Policy, you may:
    • Adjust your privacy, cookie, or marketing preferences as described in this Policy; and/or
    • Request closure of your account and, where applicable, request the exercise of your data rights (including deletion, subject to legal retention obligations).
  • Your continued use of thisisvegas-au.com after the effective date of an updated Privacy Policy will constitute your acceptance of the revised terms.

Last updated: January 2026