Privacy Policy

This Privacy Policy explains how Wild Fortune, operated via the website https://wildfortunebet-au.com (the "Website"), collects, uses, stores, shares and protects your personal data when you visit the Website, create an account or use our casino and related services. It applies to all Website visitors and registered players accessing our services from Australia and other locations. By using the Website, you acknowledge that your data will be processed as described in this Policy. This Privacy Policy is effective from 1 January 2026 and remains in force until replaced or updated.

Who We Are

The Website wildfortunebet-au.com ("Wild Fortune", "Wild Fortune", "we", "us", "our") is operated on an offshore basis for Australian players using a Curaçao online gambling licence.

Operator and licensing

• Data controller / operator: Hollycorn N.V., a company incorporated under the laws of Curaçao.
• Registered seat (jurisdictional information): Curaçao (exact registered office and company number are determined by the operator's corporate records and may be updated from time to time on the Website footer and terms pages).
• Gaming licence: Antillephone N.V. sub-licence number 8048/JAZ2019-015, issued in Curaçao. This licence regulates our online casino operations but does not constitute an Australian gambling licence.

Data protection responsibility

• Data controller: For the purposes of this Privacy Policy, Hollycorn N.V. acts as the main data controller for personal data collected through wildfortunebet-au.com.
• Platform providers and processors: We use third-party providers, including the SoftSwiss casino platform and Cloudflare security/SSL services, as data processors to host and secure the Website and process data on our behalf.

How to contact us about privacy

• Primary contact channel: 24/7 live chat available on the Website (initial bot response, then human agent after you type "Agent"). You may request that your query is forwarded to the data protection contact person.
• Online forms: Where available on the Website (e.g. contact or feedback forms), you may submit privacy-related requests, clearly marked "Privacy / Data Protection".
• Email or postal address: If a dedicated privacy or compliance email address and/or postal address is provided in the Website footer or terms and conditions, you may use those details to exercise your rights or raise concerns. Such contact details, when published by the operator, form part of this Policy by reference.

What Personal Data We Collect

We collect different categories of personal data to provide you with our services, comply with legal obligations (including anti-money laundering rules), and protect the integrity of our operations.

Identification and contact data

• Basic account data: full name, date of birth, country of residence, chosen username, password, preferred language, time zone.
• Contact details: email address, telephone number (where provided), and any messaging handles you voluntarily share (e.g. WhatsApp for VIP communication).
• KYC (Know Your Customer) documents: copies or photos of passports, driver's licences or other government-issued IDs (front and back), selfies with ID, proof of address (utility bill, bank statement or similar), and additional documents requested for verification (including handwritten notes used for enhanced verification on larger withdrawals).

Technical and device data

• Technical identifiers: IP address, device identifiers, browser type and version, operating system, language settings, and access times.
• Log data: login/logout timestamps, failed login attempts, session duration, and error logs.
• Security and fraud data: device fingerprints, cookie IDs, and related identifiers used by our platform (including shared device fingerprinting across related SoftSwiss-powered brands) to detect abuse, multi-accounting, bonus misuse and fraud.

Payment and financial data

• Payment-related information: limited card details (such as masked card number and cardholder name) where card payments are supported; details of e-wallets or payment intermediaries (e.g. PayID via third parties, Neosurf voucher codes, MiFinity account identifiers); bank account details for withdrawals by bank transfer, where applicable.
• Crypto transaction data: cryptocurrency wallet addresses, transaction hashes, and amounts for deposits and withdrawals (e.g. USDT-TRC20, BTC).
• Transaction history: records of deposits, withdrawals, bonuses credited, chargebacks, and fees applied.

Behavioral and usage data

• Gaming activity: betting history, games played (including specific titles and providers), bet sizes, stakes, wins and losses, jackpots, and bonus usage.
• Website interactions: clicks, page views, navigational paths, time spent on pages, and in-site search queries.
• Marketing interactions: records of email campaigns sent to you, whether you opened or clicked them, preferences you set for marketing communications, and responses to surveys or promotions.

Cookies and similar technologies

• Cookies: small text files stored in your browser (session and persistent) used for essential functionality, remembering settings, analytics, and advertising where applicable.
• Similar technologies: web beacons, pixels, SDKs in our PWA, and device fingerprinting mechanisms provided by our platform and security partners.
• Third-party cookies: cookies placed by analytics providers, security services (such as Cloudflare) and, where enabled, marketing/affiliate tracking networks.

Where you provide information about other individuals (for example if you forward promotional material or refer a friend), you must ensure that you are authorised to do so and that those individuals are aware of this Privacy Policy.

Legal Basis for Processing

Because our operations and users may be located in multiple jurisdictions, we rely on various legal bases for processing personal data, including principles similar to those under the EU General Data Protection Regulation (GDPR), Mexican data protection law, and applicable Australian requirements.

• Contract performance: We process your data where it is necessary to enter into and perform our contract with you, including:
  • creating and maintaining your player account;
  • processing deposits and withdrawals, and crediting bonuses;
  • providing access to games, promotions and loyalty programs;
  • providing customer support and resolving account-related queries.
• Legal obligations: We process certain data to comply with legal and regulatory requirements applicable to licensed gambling operators, such as:
  • KYC and age verification checks to prevent underage gambling;
  • anti-money laundering (AML) and counter-terrorist financing monitoring, including turnover rules (e.g. 1x wagering of deposits);
  • record-keeping and reporting obligations under Curaçao licensing and any other applicable financial regulations.
• Legitimate interests: We process data where it is necessary for our legitimate interests or those of a third party, and where such interests are not overridden by your rights and freedoms. These include:
  • ensuring network and information security, including protection against fraud, bonus abuse, chargebacks and account takeovers;
  • enhancing and optimising our services, Website performance and game offering;
  • enforcing our terms and conditions, investigating suspicious activities, and protecting our legal rights.
• Consent: In some cases we rely on your consent, for example:
  • sending you electronic marketing communications (emails, push notifications, SMS, where available);
  • using non-essential cookies or similar technologies for analytics and advertising (subject to your choices);
  • processing optional information you provide in surveys or feedback forms.
  You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Vital and public interests (exceptional cases): In rare circumstances, we may process or disclose data where necessary to protect vital interests (e.g. to prevent serious harm) or in response to lawful requests by public authorities, including law enforcement, regulators or courts.

Purpose of Processing

We use your personal data only for specific, explicit and legitimate purposes and do not further process it in a manner incompatible with those purposes.

• Providing and operating casino services:
  • creating and managing your player account and profile;
  • facilitating deposits, withdrawals and currency conversions (including AUD display accounts operating internally in EUR/USD);
  • allowing you to play games, participate in tournaments, VIP programs and promotions;
  • providing customer support via live chat and other channels.
• Compliance, security and risk management:
  • conducting KYC and AML checks, applying turnover rules and other compliance controls;
  • detecting and preventing fraud, abuse, collusion, money laundering and bonus exploitation;
  • protecting the security and integrity of our systems, accounts and game sessions.
• Improvement and analytics:
  • analysing aggregated and pseudonymised data to understand how the Website and games are used;
  • testing and improving features, load performance (including PWA behaviour on different devices) and user experience;
  • conducting statistical analysis (for example, monitoring payment method performance in the Australian market).
• Marketing and personalisation:
  • sending service and promotional communications where permitted by law and your preferences;
  • offering tailored promotions, loyalty rewards and VIP benefits based on your profile and activity;
  • working with affiliates and marketing partners to track campaigns and measure effectiveness.
• Legal, regulatory and dispute-related purposes:
  • maintaining records required by law and our licence conditions;
  • responding to lawful requests from regulators, law enforcement, courts or dispute resolution bodies;
  • establishing, exercising or defending legal claims, including in case of disputes over payments or alleged breaches of our terms.

Disclosure & Sharing

We do not sell your personal data. We share data only where necessary for the purposes described in this Policy, under appropriate confidentiality and security safeguards.

Service providers and partners

• Platform and hosting providers: SoftSwiss and related infrastructure providers that host our games and platform, maintain the Website, and provide device fingerprinting and security tools.
• Payment processors: providers that process deposits and withdrawals, including card acquirers, PayID or voucher intermediaries (such as Neosurf-related networks), crypto payment gateways and banks.
• Security and anti-fraud services: providers that assist in identity verification, document authenticity checks, fraud scoring, and detection of multi-accounting or bonus abuse across related brands.
• Analytics and performance tools: third parties that provide aggregated usage statistics and Website performance metrics, subject to applicable cookie and tracking rules.
• Marketing and affiliate partners: networks and partners that help track affiliate referrals, marketing campaign performance and, where consent is given, targeted offers and advertising.

Regulators, authorities and dispute bodies

• Licensing and regulatory authorities: Antillephone N.V. and other relevant authorities in Curaçao, as required by our licence.
• Law enforcement and courts: competent courts, law enforcement agencies and public authorities when required by law, court order or legal process.
• Data protection authorities: where applicable, we may cooperate with or respond to requests from data protection regulators (for example, EU supervisory authorities, the Office of the Australian Information Commissioner for Australian privacy complaints, or the Mexican data protection authority for users in Mexico).

Corporate transactions and group context

• Corporate restructuring: In the event of a merger, acquisition, reorganisation, sale of assets or similar transaction involving the brand or underlying operating company, your data may be transferred to the relevant successor entity under appropriate safeguards.
• Related brands: Due to shared SoftSwiss infrastructure, certain security and fraud-related information (such as device fingerprinting) may be shared across related brands operated by the same corporate group to prevent abuse and manage risk.

Whenever we share personal data with third parties, we require them to process it only according to our instructions and applicable law, and to implement appropriate technical and organisational measures to protect it.

International Transfers

Because we operate online and rely on international infrastructure and service providers, your personal data may be transferred to and processed in countries outside your country of residence, including outside Australia, the European Economic Area (EEA) and Mexico.

• Curaçao: Your core account, gaming and KYC data will be controlled and processed by the operator in Curaçao in connection with licence number 8048/JAZ2019-015.
• European Union / EEA: Some platform, hosting, analytics and payment services may be located in or process data from the EU/EEA.
• Other locations: Some of our service providers (for example, security, cloud infrastructure, email delivery, marketing or crypto payment gateways) may process data in other jurisdictions, such as the United States or other non-EEA countries.

Where personal data is transferred from the EEA, the UK or other regions with data transfer restrictions to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards, such as:

• standard contractual clauses (SCCs) or their successors, as approved or recognised by relevant data protection authorities;
• contractual obligations requiring recipients to protect personal data in line with high international standards;
• technical measures such as encryption in transit and at rest, strict access controls and data minimisation.

By using the Website, you understand that your data may be processed in these locations. Where required by law, we will ask for your explicit consent to such transfers.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, and to comply with legal, regulatory, accounting and reporting obligations. Retention periods may vary depending on the type of data and applicable laws.

• Player account and transactional data: Generally retained for the duration of your account and for at least five (5) years after account closure, or longer where required by AML, gaming or tax regulations.
• KYC and identity documents: Copies of identity documents, proof of address and verification files are typically retained for a minimum of five (5) years after the end of the business relationship or the date of the last transaction, in line with AML requirements and licence conditions.
• Gaming history and logs: Game play data, betting history and related logs are generally kept for the life of the account and for at least five (5) years after closure to manage disputes, comply with regulatory inquiries and prevent fraud.
• Technical logs and security data: Security logs, device fingerprints and similar data are usually kept for shorter periods, typically between 12 and 36 months, unless longer retention is needed for investigations or legal claims.
• Marketing data: Information used for marketing purposes is retained until you withdraw your consent or object to marketing, after which we will stop using it and either delete or anonymise it within a reasonable period.
• Cookies: Cookie lifetimes vary by type; session cookies expire when you close your browser, while persistent cookies may last from a few days to several months, depending on their purpose and configuration.

When data is no longer required for the purposes for which it was collected and no longer needed for legal or regulatory reasons, we will securely delete, anonymise or aggregate it. If you request deletion of your data, we will also consider our legal obligations and legitimate interests before proceeding, as described in the "Your Rights" section.

Your Rights

We respect your privacy rights and aim to align our practices with internationally recognised standards, including principles found in the EU GDPR and the Mexican Federal Law on Protection of Personal Data Held by Private Parties

• Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of such data, along with information about how we use it.
• Right to rectification: You can request correction of inaccurate or incomplete personal data. You can also update certain details directly in your account profile.
• Right to erasure ("right to be forgotten" / cancellation): You can request deletion of your personal data where:
  • the data is no longer necessary for the purposes for which it was collected;
  • you withdraw consent and there is no other legal basis for processing;
  • you validly object to the processing; or
  • we are required by law to delete it.
  We may retain certain data where necessary to comply with legal obligations (for example, AML record-keeping, tax rules or licence conditions).
• Right to restriction of processing: In certain circumstances (for example, where you contest accuracy of data or object to processing), you may request that we restrict processing of your data, except for storage and a few limited purposes.
• Right to object: You may object at any time to:
  • processing of your data for direct marketing, after which we will stop such processing; and
  • processing based on our legitimate interests, where you believe your fundamental rights and freedoms outweigh those interests.
• Right to data portability: Where technically feasible and required by law (typically for data processed by automated means on the basis of your consent or contract), you may request a copy of certain personal data in a structured, commonly used and machine-readable format, and ask us to transmit it to another controller where possible.
• Rights related to consent: Where we rely on your consent, you may withdraw it at any time (for example, opting out of marketing communications). This does not affect prior lawful processing.
• Mexican "ARCO" rights: If you are located in Mexico, you may have specific rights of Access, Rectification, Cancellation and Opposition (ARCO). We will endeavour to accommodate ARCO requests in line with Mexican law, taking into account our legal obligations under other jurisdictions.

How to exercise your rights

1. Submit a request: Contact us via the Website's live chat, clearly indicating that your request concerns "data protection" or "privacy rights". Where available, you may use any dedicated privacy form or contact method indicated on the Website.
2. Verify your identity: For security, we may ask you to confirm certain account details or provide identification to ensure that we are dealing with the account holder.
3. Processing your request: We aim to respond to your request within 30 days of receipt. For complex or multiple requests, this period may be extended by a further 30 days, in which case we will inform you of the extension and reasons.
4. Fees: We generally handle requests free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive or repetitive, within the limits allowed by applicable law.

Please note that we may be unable to fully comply with a request where doing so would conflict with our legal obligations (for example, AML record retention) or our need to establish, exercise or defend legal claims. In such cases, we will explain the basis for our decision to the extent permitted by law.

Cookies & Tracking Technologies

We use cookies and similar technologies to ensure the proper functioning of the Website, enhance your user experience, conduct analytics and, where applicable, deliver personalised content and promotions.

Types of cookies we use

• Strictly necessary (functional) cookies: These cookies are essential for the operation of the Website and to enable core features such as logging in, maintaining sessions, securing the platform, and processing payments. They cannot be switched off in our systems.
• Preference cookies: These remember choices you make (e.g. language, region, display currency such as AUD) and provide enhanced, more personalised features.
• Analytics and performance cookies: These collect information about how visitors use the Website (e.g. pages visited, time spent, errors encountered) and help us improve the performance, stability and design of the Website and games.
• Advertising and affiliate cookies: Where enabled, these cookies track your interaction with marketing campaigns and affiliate links, helping us understand the effectiveness of our promotions and, in some cases, tailor bonus offers to your profile.
• Security and fraud cookies: Certain cookies and similar identifiers are used to detect unusual behaviour, prevent multi-accounting and protect against fraud, in combination with device fingerprinting.

Managing cookies and tracking

• Browser settings: Most browsers allow you to block or delete cookies through their settings. However, blocking strictly necessary cookies may affect core Website features and could prevent you from logging in or playing games.
• Internal controls: Where available, we may provide in-site settings or banners to help you manage non-essential cookies (e.g. analytics or advertising). These preferences will typically be stored using cookies themselves.
• Third-party tools: Some third-party analytics or advertising providers may offer their own opt-out mechanisms. We will provide links or information where feasible.

By continuing to use the Website without adjusting your browser or in-site settings, you consent to our use of cookies and similar technologies as described in this Policy, to the extent required by applicable law.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or disclosure.

• Encryption: Data transmitted between your browser and our servers is protected using modern transport-layer security, typically TLS 1.2 or higher. SSL certificates (for example, Cloudflare SSL) are used to encrypt traffic. Where feasible, sensitive data is encrypted at rest.
• Access controls: Access to personal data is limited to authorised personnel and service providers who need it to perform their duties and are bound by confidentiality obligations.
• Authentication and account security: We encourage the use of strong, unique passwords and may deploy additional security features (such as multi-factor authentication) within the platform. We monitor logins and suspicious activities to reduce the risk of account compromise.
• Infrastructure and monitoring: Our platform providers (including SoftSwiss) operate under industry-standard security practices, using firewalls, intrusion detection and prevention systems, and regular monitoring to protect the infrastructure hosting the Website and games.
• Organisational measures: Staff with access to personal data receive appropriate training on data protection and confidentiality. Access to production environments is strictly controlled and logged.
• Vendor management: Where we engage third-party processors, we require them to implement suitable security measures. Some providers may hold recognised certifications or align with standards such as ISO 27001 or SOC 2. We rely on contractual and due diligence processes to ensure a high security baseline.
• Incident response: We maintain procedures for responding to suspected data breaches or security incidents. Where a breach is likely to result in a high risk to your rights and freedoms, and where required by law, we will notify you and the relevant data protection authority without undue delay.

While we strive to protect your personal data, no system is completely secure. You are responsible for keeping your login details confidential and for securing your devices and internet connection.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue directly.

How to contact us

1. Initial contact: Use the Website's 24/7 live chat and clearly state that your query relates to "privacy" or "data protection". Ask for your request to be escalated to the privacy contact person or compliance team.
2. Written follow-up: Where the Website provides an online contact form or dedicated email address for privacy matters, you may submit a written complaint or request, providing relevant details (such as your username, country of residence and a clear description of your concern).
3. Response time: We aim to acknowledge receipt of your complaint within a reasonable period and to respond in substance within 30 days. For complex matters, we may extend this period by a further 30 days, informing you of the delay and reasons.

Escalation to supervisory authorities

If you are not satisfied with our response or you believe that we are processing your personal data in breach of applicable law, you may have the right to lodge a complaint with a data protection authority or other relevant body, depending on your location:

• Australia: You may contact the Office of the Australian Information Commissioner (OAIC) regarding concerns under the Australian Privacy Act and the Australian Privacy Principles (APPs). See https://www.oaic.gov.au for contact details.
• European Union / EEA: If you are in the EU/EEA, you may lodge a complaint with your local data protection authority, particularly in the member state of your habitual residence, place of work or place of the alleged infringement.
• Mexico: If you are located in Mexico and believe your ARCO rights under the Mexican Federal Law on Protection of Personal Data Held by Private Parties have been infringed, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). See https://home.inai.org.mx for details.

Please note that, although the Website targets players in Australia, the operator is not licensed in Australia and is regulated offshore. Australian gambling regulators such as the Australian Communications and Media Authority (ACMA) may act in relation to prohibited offshore gambling services, but are not generally responsible for resolving individual privacy disputes involving offshore operators.

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal or regulatory requirements, or other operational needs.

• Notification of changes:
  • We will publish the updated Policy on the Website, indicating the "Last updated" date.
  • For material changes (for example, new categories of data, new purposes, or significant changes in sharing practices), we will use additional measures such as email notifications (where feasible), in-account alerts, or Website banners.
• Advance notice: Where reasonably possible and required by law, we will provide at least 30 days' advance notice of material changes before they take effect, so you can review them.
• Your options: If you do not agree with the updated Policy, you may stop using the Website and, where applicable, request account closure and exercise your data protection rights. Continued use of the Website after the effective date of an updated Policy will constitute your acceptance of the changes.
• Version control: We keep records of previous material versions of this Policy and can make them available upon reasonable request, subject to our internal policies.

Last updated: January 2026.