Pop Molly Casino Privacy Policy
Navigation
At Pop Molly Casino, protecting the personal data and privacy of every player is a fundamental obligation, not an afterthought. This page sets out the complete Pop Molly Casino privacy policy, explaining exactly how personal information is collected, stored, processed, and secured whenever you visit popmolly.app or use any of our services. We operate in compliance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and, where relevant, the General Data Protection Regulation (GDPR). Whether you are a registered member or a first-time visitor, you deserve full transparency about our data collection practices and your privacy rights. Please read this document carefully; by continuing to use Pop Molly Casino, you acknowledge and agree to the practices described below.
1. Identity of the Data Controller
Pop Molly Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the entity that determines the purposes and means of processing your personal data, this company acts as the data controller for all user data collected through popmolly.app. Any questions, requests, or concerns regarding data protection or information security should be directed to our dedicated Data Protection Officer (DPO) at [email protected]. We are committed to responding to all privacy-related enquiries within a reasonable timeframe and in compliance with applicable law.
2. Personal Information We Collect
Pop Molly Casino collects several categories of personal information to provide a safe, legal, and enjoyable gaming experience. The categories of user data we process are outlined below.
2.1 Identification Data
- Full legal name and date of birth
- Government-issued identification documents (passport, driver's licence, national ID)
- Residential address and postcode
- Nationality and country of residence
2.2 Contact Data
- Email address
- Phone number
- Preferred language and communication settings
2.3 Financial Data
- Payment method details (card numbers masked, e-wallet identifiers, bank account references)
- Transaction history, including deposits and withdrawals
- Source-of-funds documentation where required by AML regulations
2.4 Gaming Activity Data
- Game sessions, bets placed, wins and losses
- Bonus usage, wagering history, and VIP programme status
- Responsible gambling settings (deposit limits, loss limits, session limits, self-exclusion periods)
2.5 Technical Data
- IP address and geolocation data
- Device type, operating system, browser type and version
- Cookies, session tokens, and similar tracking technologies
- Log files and access records
2.6 Communication Data
- Records of live chat conversations with our support team
- Emails sent to and received from [email protected]
- Survey responses and feedback submissions
2.7 Sensitive Data
In certain circumstances — for instance, when processing self-exclusion requests or assessing problem gambling risk — Pop Molly Casino may handle data that is considered sensitive under the Australian Privacy Act 1988. Such data is processed only when strictly necessary and with appropriate safeguards in place.
2.8 Data Received from Third Parties
We may receive personal information about you from payment providers, identity verification services, fraud detection partners, and marketing affiliates. This data is handled with the same level of data security as information you provide directly.
3. How We Collect Your Personal Data
Pop Molly Casino collects personal data through the following methods:
- Registration forms: when you create an account on popmolly.app.
- KYC verification: when you submit identity documents before your first withdrawal.
- Transactions: when you deposit or withdraw funds using PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, or bank transfer.
- Cookies and tracking technologies: automatically when you visit our website (see Section 5 for our full cookie policy).
- Customer support interactions: when you contact us via live chat or email.
- Third-party sources: from identity verification agencies, payment processors, and fraud prevention services.
4. Purposes and Legal Basis for Data Processing
All data processing at Pop Molly Casino is carried out for specific, legitimate purposes. The table below summarises the main processing activities, their purposes, and the applicable legal basis under the Australian Privacy Act 1988 and GDPR.
| Processing Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and administering your player account on popmolly.app. | Contract performance |
| Service Provision | Enabling access to 4,000+ casino games, processing deposits and withdrawals, managing bonuses and VIP rewards. | Contract performance |
| KYC & AML Compliance | Verifying your identity and source of funds to comply with anti-money laundering and Know Your Customer obligations. | Legal obligation |
| Fraud Prevention & Security | Monitoring for suspicious activity, preventing unauthorised account access, and maintaining information security. | Legitimate interest / Legal obligation |
| Responsible Gambling | Administering self-exclusion, cooling-off periods, and limit settings to protect players. | Legal obligation / Legitimate interest |
| Marketing & Communications | Sending promotional offers, newsletters, and personalised recommendations where you have opted in. | Consent |
| Service Improvement | Analysing platform usage, game performance, and player behaviour to improve the casino experience. | Legitimate interest |
| Legal Compliance | Complying with regulatory requirements, court orders, and other legal obligations. | Legal obligation |
5. Cookie Policy
The Pop Molly Casino cookie policy describes how we use cookies and similar technologies on popmolly.app. Cookies are small text files stored on your device that help us deliver a better, more personalised experience. Our cookie policy categorises cookies into four types:
5.1 Essential Cookies
These cookies are strictly necessary for the website to function. They enable core features such as user authentication, session management, and security. You cannot opt out of essential cookies without affecting your ability to use the platform.
5.2 Analytical Cookies
Analytical cookies help us understand how visitors interact with popmolly.app. We use anonymised data from these cookies to measure traffic, identify popular pages, and improve site performance. Tools such as Google Analytics may be used for this purpose.
5.3 Functional Cookies
Functional cookies remember your preferences — such as language selection, currency settings, and game lobby filters — to provide a more tailored experience on Pop Molly Casino.
5.4 Marketing Cookies
Marketing cookies track your browsing behaviour across websites to deliver targeted advertisements. These cookies are only placed with your explicit consent. You may withdraw your consent at any time through our cookie preference centre or your browser settings.
By continuing to use popmolly.app, you consent to our use of non-essential cookies as described in this cookie policy. You can manage your cookie preferences at any time via the cookie banner or your browser's privacy settings.
6. Sharing Your Personal Data with Third Parties
Pop Molly Casino does not sell your personal data to any third party. However, we do share certain user data with trusted partners and authorities where necessary. The categories of recipients are as follows:
6.1 Payment Providers
To process deposits and withdrawals, we share relevant financial and identification data with payment providers including PayID processors, card networks (Visa, Mastercard), e-wallet services (Skrill, Neteller), prepaid card providers (Paysafecard, Neosurf), cryptocurrency networks (Bitcoin, Ethereum, Litecoin), and banking partners. These providers are contractually obligated to maintain confidentiality and apply appropriate data security measures.
6.2 Regulatory Authorities
We are legally required to disclose certain personal information to government agencies, licensing authorities in Curaçao, financial intelligence units, and law enforcement bodies when requested or when required by law, including for AML and KYC obligations.
6.3 Identity Verification Partners
To comply with KYC requirements, we share identity documents and relevant data with accredited identity verification service providers. These partners process your data solely for verification purposes and under strict confidentiality agreements.
6.4 Game Software Providers
Certain game providers — including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming — may receive technical and gaming activity data necessary to deliver their games and ensure RNG certification compliance.
6.5 Marketing and Analytics Partners
Where you have given consent, we may share anonymised or pseudonymised data with advertising and analytics partners to improve marketing effectiveness. No directly identifiable personal data is shared with marketing partners without your explicit consent.
7. International Data Transfers
As a globally operating online casino, Pop Molly Casino may transfer your personal data to countries outside Australia and the European Economic Area (EEA). When such transfers occur, we ensure they are protected by appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements that meet Australian Privacy Principle 8 requirements
- Transfers only to countries with adequate levels of data protection as recognised by relevant authorities
If you require further information about international data transfers or the specific safeguards in place, please contact our DPO at [email protected].
8. Data Security
Pop Molly Casino data security is a top priority. We implement a comprehensive suite of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our information security framework includes:
- 256-bit SSL/TLS encryption: all data transmitted between your device and popmolly.app is protected by industry-standard 256-bit SSL/TLS encryption, the same standard used by major banks.
- Data encryption at rest: sensitive personal data stored on our servers is encrypted at rest using robust cryptographic algorithms.
- Firewalls and intrusion detection: our network is protected by enterprise-grade firewalls and real-time intrusion detection systems.
- Access controls: access to user data is restricted to authorised personnel on a strict need-to-know basis, with multi-factor authentication required for administrative access.
- RNG certification: our random number generator (RNG) is certified by independent testing laboratories, ensuring fair gameplay alongside robust data security.
- Regular security audits: we conduct periodic vulnerability assessments and penetration testing to identify and remediate potential weaknesses.
- Staff training: all employees who handle personal data receive regular training on data protection and information security best practices.
Despite these robust measures, no system can guarantee absolute security. In the unlikely event of a data breach affecting your personal information, Pop Molly Casino will notify affected individuals and relevant supervisory authorities in accordance with applicable law.
9. Data Storage and Retention Periods
Our approach to data storage is guided by the principle of data minimisation: we retain personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law. The table below outlines our key data storage retention periods.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identification data | 5 years after account closure | AML/KYC legal obligations |
| Financial transaction records | 7 years after the transaction | Tax and financial regulatory compliance |
| Gaming activity logs | 5 years after account closure | Regulatory and dispute resolution requirements |
| Customer support communications | 3 years after the interaction | Quality assurance and dispute evidence |
| Marketing consent records | Until consent is withdrawn | Demonstrating lawful basis for marketing |
| Technical log data (IP, device) | 12 months | Security monitoring and fraud prevention |
| Cookie consent records | 12 months | Demonstrating lawful basis for cookie use |
Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Our data storage practices comply with the Australian Privacy Act 1988 and any sector-specific regulatory requirements applicable to our Curaçao licence.
10. Your Privacy Rights
Pop Molly Casino is committed to upholding your privacy rights under the Australian Privacy Act 1988, the Australian Privacy Principles, and the GDPR where applicable. The following privacy rights are available to you as a player:
10.1 Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used, machine-readable format within a reasonable timeframe — typically within 30 days of receiving your request.
10.2 Right to Correction
If any personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. You can update basic profile information directly in your Pop Molly Casino account settings, or contact our DPO for assistance.
10.3 Right to Deletion
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that we may be required to retain certain data to comply with our legal obligations (for example, AML and KYC records).
10.4 Right to Restriction of Processing
In certain circumstances — for example, where you contest the accuracy of your data or object to its processing — you have the right to request that we restrict data processing while the matter is resolved.
10.5 Right to Data Portability
Where data processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
10.6 Right to Object
You have the right to object to data processing that is based on our legitimate interests, including profiling. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
10.7 Right to Withdraw Consent
Where data processing is based on your consent — for example, for marketing emails or non-essential cookies — you may withdraw your consent at any time without affecting the lawfulness of processing that took place before withdrawal. You can manage your marketing preferences in your account settings or by contacting [email protected].
To exercise any of these privacy rights, please submit a written request to our Data Protection Officer at [email protected]. We may need to verify your identity before processing your request to ensure the security of your personal data.
11. Responsible Gambling and Data Protection
Pop Molly Casino integrates data protection principles into its responsible gambling programme. When you set deposit limits, bet limits, loss limits, session limits, or activate a cooling-off period (available for 24 hours, 48 hours, 7 days, or 30 days), we process the relevant personal data to enforce those restrictions effectively. Self-exclusion options are available for 6 months, 1 year, 5 years, or permanently. Data relating to responsible gambling measures is retained for as long as necessary to honour your choices and comply with our licence conditions. We treat this data with the highest level of confidentiality.
12. Children's Privacy
Pop Molly Casino does not knowingly collect personal data from individuals under the age of 18. Our services are strictly for adults. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that data. If you believe a minor has registered on our platform, please contact us immediately at [email protected].
13. Links to Third-Party Websites
Our platform may contain links to third-party websites, including those of game providers and payment processors. This privacy policy applies only to popmolly.app and the services operated by Pop Molly Casino. We are not responsible for the data collection, data protection practices, or content of external sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Supervisory Authority — OAIC
If you are an Australian resident and believe that Pop Molly Casino has not handled your personal information in compliance with the Australian Privacy Act 1988 or the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Postal address: GPO Box 5218, Sydney NSW 2001
We strongly encourage you to contact us first at [email protected] so that we have the opportunity to address your concerns directly. GDPR-protected individuals in the EEA may also lodge a complaint with their local data protection authority.
15. Data Protection Officer
Pop Molly Casino has appointed a dedicated Data Protection Officer responsible for overseeing compliance with this privacy policy, the Australian Privacy Act 1988, and the GDPR. The DPO serves as the primary point of contact for all data protection and privacy rights enquiries.
- Contact email: [email protected]
- General support: [email protected]
- Response time: within 30 days for privacy requests; within 12 hours for general support emails
Our DPO is committed to ensuring that all user data is handled with care, confidentiality, and full compliance with applicable laws.
16. Updates to This Privacy Policy
Pop Molly Casino reserves the right to update this privacy policy at any time to reflect changes in our practices, new legal requirements, or improvements to our services. When we make material changes, we will notify you by posting the updated policy on popmolly.app and, where appropriate, by sending an email notification to your registered address. The date of the most recent revision will always be clearly indicated at the top of this page. We encourage you to review the Pop Molly Casino privacy policy periodically to stay informed about how we protect your personal data.
Frequently Asked Questions
What personal data does Pop Molly Casino collect?
Pop Molly Casino collects personal information including your name, date of birth, address, email, phone number, payment details, gaming activity, device information, and IP address. Full details of our data collection practices are outlined in Section 2 of this privacy policy.
How does Pop Molly Casino use cookies?
Our cookie policy (Section 5) explains that we use essential, analytical, functional, and marketing cookies. Essential cookies are necessary for the site to operate; other cookies require your consent. You can manage your cookie preferences via the banner on popmolly.app.
Is my personal information secure at Pop Molly Casino?
Yes. Pop Molly Casino data security uses 256-bit SSL/TLS encryption, firewalls, intrusion detection systems, encrypted data storage, and strict access controls. Our commitment to information security ensures your personal data is protected at all times.
How can I exercise my privacy rights?
To exercise your privacy rights — including access, correction, deletion, restriction, portability, and objection — please contact our Data Protection Officer at [email protected]. We will verify your identity and respond within 30 days.
Does Pop Molly Casino share my data with third parties?
Pop Molly Casino does not sell your personal data. We share it only with payment providers, identity verification partners, game software providers, regulatory authorities, and analytics partners where necessary and lawful. All third parties are subject to strict confidentiality and data protection obligations.
How long does Pop Molly Casino retain my data?
Retention periods vary by data category. Account and KYC data is retained for 5 years after account closure; financial records for 7 years. See our data storage table in Section 9 for a full breakdown. After retention periods expire, data is securely deleted or anonymised.
What should I do if I think my privacy rights have been violated?
First, contact Pop Molly Casino at [email protected] so we can resolve the matter directly. If you remain unsatisfied, Australian players can lodge a complaint with the OAIC (Office of the Australian Information Commissioner). EEA players may contact their local data protection authority.
Does Pop Molly Casino collect data about my responsible gambling settings?
Yes. To enforce deposit limits, cooling-off periods, and self-exclusion measures effectively, Pop Molly Casino processes relevant personal data. This data is treated with the strictest confidentiality and is retained only as long as necessary to honour your responsible gambling choices and satisfy regulatory obligations.
If you have any remaining questions about Pop Molly Casino privacy policy, our approach to data protection, or how your personal information is handled, do not hesitate to reach out to our team at [email protected] or via live chat available 24/7 on popmolly.app. Your privacy and trust are at the heart of everything we do at Pop Molly Casino.