1. What this policy covers
This policy applies to personal information handled in connection with cashcage.com, account registration and access, wagering-related activity, customer support, complaints, security, website analytics and responsible-gambling functions. It should be read together with the Terms and Conditions and Cookie Policy.
CASHCAGE PTY. LTD. is the operator of cashcage.com and is responsible for personal information handled in connection with the service. Privacy enquiries can be directed to [email protected].
2. Types of data we may obtain
The information handled by CashCage can differ depending on how you use the service. It may include identification and contact details, account information, verification records, transaction information, support communications, security information, website activity and responsible-gambling records.
CashCage should only collect information that is reasonably necessary for operating the service, complying with legal obligations, managing security and risk, supporting customers and administering responsible-gambling measures.
2.1 Data supplied directly by you
Information supplied directly may include your name, date of birth, email address, telephone number, residential address, state or territory, postcode, account credentials, identity documents, payment-related evidence and information included in messages to support or complaints teams.
If additional information is requested for identity, eligibility, source-of-funds, payment ownership or account-security checks, the request should explain why the information is needed and the appropriate channel for providing it.
2.2 Data recorded automatically
When you use the website, technical information may be recorded automatically. This can include IP address, browser and device characteristics, operating system, approximate location derived from network information, language, page views, timestamps, referral information, interaction events and security signals.
Browser storage may also retain information such as age-confirmation status, cookie choices and bet-slip selections. The Cookie Policy describes these technologies and the controls available to you.
2.3 Data received from other organisations
Where permitted, CashCage may receive information from identity-verification providers, payment providers, banks, fraud-prevention services, analytics providers, regulatory bodies, exclusion registers, public sources or other organisations involved in operating and protecting the service.
Information obtained from another organisation should be limited to what is reasonably required for the relevant purpose and handled in accordance with applicable privacy and wagering requirements.
3. Purposes for processing personal data
Personal information may be used to operate the website and account functions, verify identity and age, assess eligibility, process and reconcile transactions, provide customer support, investigate complaints, detect fraud, maintain security and comply with legal or regulatory duties.
- administer registration and account access;
- provide wagering and account features;
- confirm identity, age, location and payment ownership;
- prevent fraud, misuse, money laundering and prohibited conduct;
- apply deposit limits, breaks, exclusions and other safer-gambling controls;
- maintain accounting, audit, complaint and compliance records;
- measure website performance and improve usability;
- send service, security and policy notices;
- send marketing only where permitted and consistent with your preferences.
4. Legal grounds for handling information
The legal basis for handling information depends on the purpose and the Australian laws and regulatory obligations that apply to CASHCAGE PTY. LTD. Processing may be necessary to perform a contract, comply with a legal obligation, protect legitimate interests, establish or defend legal rights, protect customers and the service, or act on your consent.
Where sensitive information is handled, additional requirements may apply. Such information should not be used for unrelated advertising or other purposes that are incompatible with the reason it was collected.
5. Verifying identity and age
Wagering services may require confirmation that a person is over 18, is using their own identity and satisfies account eligibility requirements. Verification can involve trusted databases, specialist verification providers or review of documents supplied by the customer.
CashCage may retain the outcome of verification checks and associated audit information where this is required for legal, security, fraud-prevention or account-management purposes. Access may be restricted until verification is complete.
6. Payment and transaction data
Payment providers may process card, bank, PayID, wallet or other transaction details. CashCage may receive transaction identifiers, payment status, account ownership information, limited payment metadata and records needed to reconcile or investigate a payment.
You should not send full card numbers, passwords, one-time security codes or other highly sensitive payment credentials through ordinary email or free-text support forms. Where evidence is required, use only the secure method specified by the service.
7. Safer-gambling data
Account activity, communications and preference information may be used to administer deposit limits, time-outs, self-exclusion, marketing restrictions and other responsible-gambling measures. Where permitted or required, information may also be shared with authorised exclusion registers, regulators or service providers involved in enforcing a restriction.
Responsible-gambling records may need to be retained after an account is closed so that restrictions cannot be avoided and legal obligations can continue to be met.
8. Security and fraud detection
CashCage may analyse account, device, transaction and behavioural signals to detect unusual activity, account takeover, identity misuse, payment fraud or other prohibited conduct. Automated systems may flag activity for additional review.
Appropriate safeguards can include encryption in transit, role-based access controls, audit logging, monitoring, backups, secure development practices and confidentiality requirements for staff and suppliers. No internet service can guarantee absolute security, so customers should also protect their devices and credentials.
9. Circumstances in which data may be disclosed
Personal information may be disclosed where reasonably necessary to organisations that support CashCage or where disclosure is required or permitted by law. Recipients can include:
- hosting, cloud, communications and technology suppliers;
- payment processors, banks and payment networks;
- identity-verification and fraud-prevention providers;
- analytics, security and customer-support providers;
- legal advisers, auditors, insurers and dispute-resolution bodies;
- regulators, courts, law-enforcement agencies and public authorities;
- responsible-gambling programs and exclusion registers;
- a lawful purchaser or successor in a corporate transaction.
Service providers should be contractually or legally required to use information only for authorised purposes and to apply appropriate safeguards.
10. Transfers of information outside Australia
Some suppliers may process or store information outside Australia. Privacy protections differ between countries, and the location of a provider may change over time.
Where cross-border disclosure or storage occurs, CashCage should use the safeguards required by applicable law, which may include contractual protections, due-diligence reviews, access restrictions and technical security measures.
11. How long information is retained
Information should be kept only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, accounting, dispute, fraud-prevention and responsible-gambling obligations.
Different records may have different retention periods. Verification, transaction, exclusion, security and complaint records may need to be retained after an account is closed. When information is no longer required, it should be deleted, anonymised or securely isolated in accordance with the operator’s retention procedures.
12. Promotional communications
Where permitted, CashCage may send information about products, events or promotions. Marketing preferences should be respected, and promotional messages should provide an appropriate way to opt out.
Service, security, legal and responsible-gambling communications may still be sent when they are necessary even if promotional marketing has been disabled. Changes to marketing preferences may take a reasonable period to apply across connected systems.
14. Your data-protection rights
Depending on applicable law, you may have rights to request access to personal information, ask for inaccurate information to be corrected, object to certain processing, withdraw consent, request deletion or restriction, or make a privacy complaint.
Some requests may be limited by legal record-keeping duties, fraud-prevention requirements, litigation holds, responsible-gambling obligations or other lawful exceptions. CashCage may ask for identity verification before releasing or changing personal information.
15. Keeping information accurate
You should keep your contact and account information current. If information is incorrect or incomplete, contact CashCage or use any available account controls to request a correction.
Historical transaction or compliance records may need to remain unchanged for audit purposes. Where appropriate, a correction or explanatory note can be linked to the original record rather than altering the historical record itself.
16. Information relating to minors
CashCage is not intended for people under 18 and should not knowingly provide wagering services to minors. Age checks and account restrictions may be used to prevent underage access.
If information appears to have been submitted by a person under 18, CashCage may restrict access, investigate the circumstances and delete or retain information as required by law and responsible-gambling obligations.
17. Automated checks and processing
Automated tools may assist with fraud detection, security, identity checks, account eligibility, responsible-gambling controls and website personalisation. These systems can identify patterns or signals that warrant additional review.
Where applicable law provides rights concerning decisions based solely on automated processing, you may contact the privacy team to request information or human review, subject to lawful exceptions.
18. Security incidents and data breaches
If an incident affects personal information, CashCage should assess the nature and likely impact of the event, contain the issue, investigate the cause and take proportionate remediation steps.
Affected individuals and relevant authorities should be notified where required by law. Security incidents may also lead to password resets, additional verification or temporary account restrictions where those steps are appropriate.
19. Links to external websites
CashCage may link to external services such as BetStop, Gambling Help Online, payment providers or regulatory resources. Those websites are responsible for their own privacy practices and security.
Before submitting information to an external website, review the privacy notice and terms published by that organisation.
20. Revisions to this policy
This policy may be updated when laws, service providers, technology, account features or business processes change. The current version will be published on cashcage.com with a revised update date.
Material changes may also be communicated through a website notice, account message or other appropriate channel where required.
21. Privacy enquiries and complaints
Privacy enquiries, access or correction requests and privacy complaints should be sent through the contact details below. Please provide enough information for the request to be understood, but do not include passwords or unnecessary sensitive information.