Privacy Policy

This Privacy Policy explains how Pokie Surf, operated via the domain pokiesurf-aussie.com, collects, uses, discloses, and protects personal information of website visitors and individuals who interact with our content and services. It applies to all users who access or use our review and information services relating to Pokie Surf and associated gambling products. This policy is effective from 1 January 2026 and supersedes any earlier versions published on this website.

Who We Are

Observe: The available corporate data about the operator behind Pokie Surf is incomplete, unverified and presents transparency issues. Pokie Surf is an informational review site focused on Australian users and is not itself a licensed gambling operator. We therefore clarify our role and the limitations of our knowledge about the underlying gambling brand.

Expand: Based on the research data, "Pokie Surf Ltd" is mentioned as an operator or trade name associated with the brand "Pokie Surf", but it is not found in the Curaçao Chamber of Commerce registry and its licensing status is claimed but unverified. Our site, pokiesurf-aussie.com, is a separate review and comparison service that does not provide real-money gambling and does not process player bets or payouts.

Reflect: For the purposes of privacy and data protection, Pokie Surf should be understood as the controller for personal data collected through https://pokiesurf-aussie.com only.

Legal Entity and Contact Details

• Controller: For all data collected through https://pokiesurf-aussie.com (the "Site"), the data controller is referred to in this Privacy Policy as "we", "us", or "Pokie Surf". Due to incomplete public records, the underlying corporate name and registered office of the review service operator are not specified in the supplied data. Where required by local law, the operator will provide its full legal details upon written request.
• Operator of gambling services: The gambling brand "Pokie Surf" is operated by an offshore entity using the trade name "Pokie Surf Ltd" with a claimed Curaçao license under Antillephone N.V. This license claim is unverified and unrelated to the control of data on this review Site.
• Registered office / legal address: Not specified in the supplied profile; we therefore cannot reliably publish a street address. Users may contact us via email to request additional identification details, which will be provided where legally required and technically feasible.

Data Protection Contact (DPO / Privacy Contact)

• Primary email (support): [email protected]
• General information email: [email protected]
• Designated privacy contact: Data Protection Team, reachable via either of the above addresses; please include "Privacy request - Pokie Surf" in the subject line.

We currently do not publish a dedicated phone number or postal address in the provided data. All privacy and data protection matters can be initiated by email. Where local law requires a local representative or additional details, these will be provided upon request.

What Personal Data We Collect

Observe: As a review website focused on Australian users, we primarily collect standard website-usage data, limited contact information where users actively provide it, and technical information for security and analytics.

Expand: We do not operate player accounts or handle real-money wagers; however, we may direct you via outbound links to third-party gambling operators. Those third parties collect and process their own data under their own policies, which are separate from this one.

Reflect: The following categories may be collected through pokiesurf-aussie.com:

Identity and Contact Data

• Basic contact details: Name, alias, or display name, and email address you provide when:
  • Subscribing to newsletters or marketing communications;
  • Using any contact forms (if enabled in future) or emailing us directly;
  • Submitting feedback, reviews, or complaints.
• Optional information: Any other personal data you voluntarily include in free-text fields (e.g., experiences with Pokie Surf, questions about blocked sites in Australia).

Technical and Usage Data

• Device and connection data: IP address (which may indicate approximate location), browser type and version, operating system, device type, language settings, referrer URLs, time zone, and similar technical identifiers.
• Log data: Pages visited, time and date of access, time spent on each page, clicks on internal links and outbound links (e.g., to pokiesurf.com or regulator sources like ACMA), and error logs.

Behavioral and Analytics Data

• Engagement data: Click-throughs on banners and external offers, interaction with review content, scroll depth, and other aggregated analytics used to understand how users interact with the Site.
• Profiling in limited form: We may segment users into groups (for example, by inferred interest in particular game types or information about ACMA blocking orders) for analytics and marketing optimisation. We do not make automated decisions that produce legal or similarly significant effects on you.

Payment and Financial Data

• We do not process deposits, withdrawals, or any payment-card information on pokiesurf-aussie.com. Any financial or KYC/AML information you provide to third-party gambling operators is handled under their separate privacy policies and not covered by this document.

Cookies and Similar Technologies

• Cookies: Small files stored on your device to enable the Site to function, remember your preferences, and understand how you use our pages.
• Tracking technologies: Web beacons, pixels, tags, SDKs, and similar tools may be used for analytics and, where permitted, advertising and affiliate tracking (e.g., to understand when a click from pokiesurf-aussie.com results in a sign-up with an external operator).

Legal Basis for Processing

Observe: Pokie Surf targets Australian users but also acknowledges broader international privacy standards such as the GDPR and influential best practice principles. Australia's Privacy Act 1988 and the Australian Privacy Principles (APPs) guide our processing for Australian residents.

Expand: Because our service is informational and we do not operate gambling accounts, the core legal bases are consent, performance of informational services you request, legitimate interests, and compliance with law (including cooperation with regulators such as ACMA where required).

Reflect: We rely on the following grounds:

Consent

• We may process your personal data on the basis of your explicit or implied consent, for example:
  • When you opt-in to receive newsletters, promotional emails, or alerts about regulatory developments in Australia (e.g., ACMA blocking orders);
  • When you consent to the use of non-essential cookies (analytics, advertising) through a cookie banner or browser settings where applicable;
  • When you voluntarily provide information in contact or feedback forms.
• You may withdraw your consent at any time as described in the "Your Rights" section, without affecting the lawfulness of processing before withdrawal.

Performance of a Contract or Pre-Contractual Steps

• We may process data to:
  • Provide the Site and content you request, including delivering emails or responses to enquiries;
  • Administer any user accounts or subscriptions we may introduce in future (e.g., preference centres, comment profiles);
  • Communicate with you regarding changes to our services or this Privacy Policy.

Legitimate Interests

• We process certain data because it is necessary for our legitimate interests, provided that these interests are not overridden by your privacy rights. These include:
  • Ensuring network and information security, preventing fraud, abuse and misuse of our Site, including suspicious traffic or automated scraping;
  • Analysing Site usage to improve navigation, content relevance, and user experience;
  • Operating and improving our affiliate and commercial arrangements with third-party operators (e.g., measuring conversions from our reviews to external sites).

Compliance with Legal Obligations

• We may process your data to:
  • Comply with applicable laws and regulations in Australia and other relevant jurisdictions (for example, responding to information requests from regulators such as the Australian Communications and Media Authority where legally binding);
  • Establish, exercise or defend legal claims related to the Site, including evidence of consent or communications with you.

Purpose of Processing

Observe: Our primary role is to provide reviews and information about Pokie Surf and related topics, including regulatory context (such as ACMA blocking orders and the Interactive Gambling Act 2001 review).

Expand: We collect and use personal data only to the extent necessary for these aims, while observing privacy principles and minimisation obligations.

Reflect: We process personal data for the following purposes:

Providing and Operating the Site

• Delivering pages, content, and tools you request (including information about licensing, risks, and responsible gambling);
• Maintaining the technical availability, performance, and security of pokiesurf-aussie.com;
• Customising content to your device and connection characteristics.

Improving and Developing Our Services

• Monitoring how users interact with the Site to:
  • Identify which reviews, games, or regulatory guides are most useful;
  • Test new features, layouts, and content types;
  • Improve localisation and relevance for Australian users.

Marketing, Communications, and Affiliates

• Sending you newsletters, alerts or promotional messages where you have opted in or where permitted by law;
• Managing our commercial relationships with affiliate partners and advertisers, including attribution of traffic and conversions (e.g., clicks to pokiesurf.com or other operators);
• Presenting tailored content or offers based on aggregated or pseudonymised information.

Fraud Prevention, Security, and Legal Protection

• Detecting and preventing malicious or fraudulent activity, including bots, scraping, denial-of-service, or misuse of our content;
• Safeguarding our legal rights, responding to disputes, and cooperating with regulatory or law-enforcement requests where we are legally obliged to do so.

Disclosure & Sharing

Observe: Pokie Surf relies on third-party services for hosting, analytics, and possibly affiliate tracking, and it operates in a sector subject to regulatory scrutiny in Australia.

Expand: Personal data is not sold as a standalone asset; however, it may be shared with specific categories of recipients under strict conditions.

Reflect: We may share your data as follows:

Service Providers and Technical Partners

• Hosting and infrastructure providers: To store the Site, logs, and backups in secure data centres;
• Analytics providers: To help us understand Site usage and improve services;
• IT security and maintenance providers: For monitoring, troubleshooting, and protecting the Site against attacks or abuse.

Affiliate and Advertising Partners

• We may work with affiliate networks and advertising partners who:
  • Provide tracking links or pixels to measure when a click from pokiesurf-aussie.com leads to an action on an external gambling site;
  • Deliver or optimise banners or offers displayed on our Site.
• Such partners may process pseudonymised or aggregated data about your interaction with the Site. Where required, we will seek your consent for such tracking technologies.

Regulators and Public Authorities

• Where legally required, we may disclose limited personal data to:
  • Australian regulators, including the Australian Communications and Media Authority (ACMA), in relation to online gambling blocking orders or unlawful gambling service investigations;
  • Other competent public authorities or law-enforcement agencies in accordance with applicable law.

Corporate Transactions

• In the event of a merger, acquisition, restructuring, or sale of assets involving the Site, personal data may be transferred to the relevant third parties, subject to confidentiality and data protection commitments.

Other Disclosures

• We may disclose personal data:
  • To legal advisers, auditors, or insurers for the purposes of obtaining professional advice or managing legal risks;
  • Where you have expressly requested or authorised the disclosure.

International Transfers

Observe: The Site's infrastructure and partners may be located in multiple jurisdictions outside Australia, including but not limited to the European Union/European Economic Area (EU/EEA), North America, and other regions with varying data protection standards.

Expand: Some affiliate partners and analytics providers may process data in jurisdictions that do not have privacy laws equivalent to those in Australia or the EU. We therefore adopt appropriate safeguards where feasible.

Reflect: By using the Site, you acknowledge that your data may be transferred internationally as follows:

Locations of Processing

• Australia: Primary target market; some infrastructure or caching may be local or regionally optimised.
• EU/EEA: Certain technical or analytics services may operate from or store data within the EU/EEA.
• Other countries: Hosting, content delivery networks, affiliate networks, and IT security providers may be based in or process data from the United States or other countries.

Safeguards

• Where we transfer personal data from the EU/EEA or other regions with data export restrictions to third countries, we aim to:
  • Use Standard Contractual Clauses (SCCs) or equivalent contractual safeguards approved by relevant authorities where applicable; and/or
  • Implement additional technical and organisational security measures (encryption, access controls, minimisation).
• For Australian users, we will take reasonable steps to ensure overseas recipients handle personal information in a way consistent with the Australian Privacy Principles, where required by the Privacy Act 1988 (Cth).

Data Retention

Observe: Data must not be kept longer than necessary for the purposes described above, taking into account limitation periods and regulatory expectations.

Expand: Retention periods may vary depending on the type of data and the context in which it was collected (e.g., routine logs vs. complaint correspondence).

Reflect: We apply the following general retention rules:

• Contact and communication data: Emails, inquiries, and support correspondence are generally retained for up to 5 years from the date of our last active interaction with you, to allow for follow-up and to defend against legal claims.
• Newsletter or marketing subscription data: Retained until you unsubscribe or your email address is persistently undeliverable, plus a short period (up to 2 years) to maintain suppression lists ensuring we do not contact you again without consent.
• Technical logs and security data: Server logs and security-related logs are typically kept for up to 12 - 24 months, unless needed longer for active incident investigation, legal proceedings or regulatory obligations.
• Analytics and aggregated data: Aggregated or anonymised data that no longer identifies you may be retained indefinitely for statistical and research purposes.
• Complaint and dispute files: Retained for the duration of the dispute plus up to 7 years from final resolution, subject to applicable limitation periods.

We periodically review the data we hold and delete or de-identify personal data when it is no longer required for the purposes described in this Privacy Policy.

Your Rights

Observe: Our primary audience is in Australia, but visitors may also come from jurisdictions influenced by GDPR and Mexican privacy frameworks. The instructions require alignment with GDPR and Mexican privacy concepts while clearly setting user expectations.

Expand: While Pokie Surf is not formally established in the EU or Mexico, we voluntarily strive to respect key rights commonly recognised internationally, subject to applicable law, technical feasibility, and our role as a review site (not a gambling operator).

Reflect: Depending on your location and applicable law, you may have the following rights:

Right of Access

• You may request confirmation as to whether we process personal data about you and, if so, receive a copy of such data together with certain information about how we process it.

Right to Rectification

• You may request correction of inaccurate personal data or completion of incomplete information we hold about you (for example, contact details you previously provided).

Right to Erasure ("Right to be Forgotten")

• You may request deletion of your personal data where:
  • The data is no longer necessary for the purposes for which it was collected;
  • You withdraw consent where consent was the sole basis of processing;
  • You object to processing and there are no overriding legitimate grounds;
  • We have unlawfully processed your data.
• We may retain certain information where required by law or where necessary to establish, exercise, or defend legal claims.

Right to Restriction of Processing

• You may request that we restrict processing of your personal data (for example, while its accuracy is being verified or you have objected to our legitimate-interest processing).

Right to Object

• You may object, on grounds relating to your particular situation, to the processing of your personal data that is based on our legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms, or the processing is required for legal claims.
• You may object at any time to the processing of your personal data for direct marketing, including profiling to the extent related to such marketing. We will honour this request without undue delay.

Right to Data Portability

• Where processing is based on your consent or on a contract and is carried out by automated means, you may request to receive personal data that you provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Withdraw Consent

• Where we rely on your consent (for example, for newsletters or non-essential cookies), you may withdraw that consent at any time by:
  • Clicking the unsubscribe link in our emails;
  • Changing your cookie preferences or browser settings;
  • Contacting us via the email addresses listed in the "Complaints & Contacts" section.

Procedures, Timeframes, and Fees

• How to exercise your rights: Please contact us at [email protected] or [email protected] and clearly state:
  • Which right you wish to exercise; and
  • Any relevant details to help us identify you and locate your data (e.g., email address used, approximate dates of interaction).
• Response timeframe: We aim to respond to all valid requests within 30 days of receipt. If your request is particularly complex or we have received multiple requests, we may extend this period by a further 30 days, in which case we will notify you.
• Charges: We will not charge a fee for handling your request unless it is manifestly unfounded or excessive (e.g., repetitive), in which case we may charge a reasonable fee or refuse to act.

Note on Mexican and EU Regulations

• For users located in Mexico or the EU/EEA, your local privacy legislation (such as GDPR or Mexican data protection statutes) may grant additional or more specific rights. To the extent these laws apply to our processing of your data, we will seek to respect and facilitate those rights in line with our technical and organisational capabilities as an informational site.

Cookies & Tracking Technologies

Observe: Cookies are necessary for the basic functioning and optimisation of pokiesurf-aussie.com. Some may also be used by third parties.

Expand: We distinguish between strictly necessary cookies and optional cookies used for analytics, performance, and advertising/affiliate tracking.

Reflect: By using the Site, you may receive the following categories of cookies:

Types of Cookies

• Session cookies: Temporary cookies that remain on your device only for the duration of your browsing session and are deleted when you close your browser. Used mainly for navigation and security.
• Persistent cookies: Remain on your device for a defined period or until you delete them. Used to remember your preferences (e.g., language, cookie consent choices) and to perform longer-term analytics.
• First-party cookies: Set by pokiesurf-aussie.com to support core functionality and analytics directly controlled by us.
• Third-party cookies: Set by external service providers, such as analytics platforms, affiliate networks, or advertising providers. These parties may recognise your device across different websites.

Purposes of Cookies

• Strictly necessary / functional: Required for the Site to operate, including page navigation, secure areas, and remembering choices that are essential to service delivery.
• Analytics and performance: Help us understand how visitors use the Site, which content is most viewed, and how we can improve usability. Data is generally aggregated and used for statistical purposes.
• Advertising and affiliate: May track clicks and conversions relating to banners or outbound links to gambling operators, helping us manage affiliate relationships and, where applicable, present relevant offers.

Managing Cookies

• You may control cookies through:
  • Your browser settings, where you can block or delete cookies, or configure notifications before cookies are stored;
  • Any cookie management tool or banner provided on the Site, where you can accept or reject non-essential cookies (if implemented).
• Blocking or deleting cookies may impact some features or the overall user experience but should not prevent access to core informational content.

Data Security

Observe: As an online service operating in a high-risk sector, protecting data from unauthorised access and misuse is crucial.

Expand: While no system is absolutely secure, we implement reasonable technical and organisational safeguards consistent with industry standards for similar informational services.

Reflect: Our security measures include:

Technical Measures

• Encryption in transit: We use TLS 1.2 or higher to encrypt data transmitted between your browser and our servers, helping prevent interception of information.
• Encryption at rest (where applicable): Certain categories of stored data, such as backups and configuration data, may be encrypted or pseudonymised to reduce risk in case of unauthorised access.
• Access controls: Access to systems and databases is restricted to authorised personnel and service providers who need the information for legitimate purposes, using unique credentials and, where feasible, multi-factor authentication.
• Regular updates: We strive to keep our server software, frameworks, and components reasonably up to date and patched against known vulnerabilities.

Organisational Measures

• Confidentiality obligations: Personnel and providers with access to personal data are subject to contractual confidentiality duties.
• Security awareness: Staff with administrative access receive guidance on secure handling of personal data and recognition of common cyber-security risks.
• Incident response: We maintain processes to detect, investigate, and respond to potential personal data breaches. Where required by law, we will notify affected users and/or relevant authorities without undue delay.

Standards and Benchmarking

• While we are not formally certified under ISO/IEC 27001 or SOC 2, we use these and similar frameworks as reference points when designing and reviewing our security controls, adapted appropriately to the scale and nature of our Site.

Complaints & Contacts

Observe: Effective complaint handling and clear contact points are essential in a regulated and sensitive area such as online gambling information services.

Expand: Users must have an accessible way to raise concerns, exercise rights, and escalate unresolved issues to supervisory authorities.

Reflect: You can contact us and, where applicable, external authorities as follows:

How to Contact Us

• Email for privacy and general support: [email protected]
• Email for information and media: [email protected]
• Online forms: At the time of this policy, no dedicated online contact forms are specified in the data. If introduced, links will be made available on the Site.

Internal Complaint Procedure

1. Submission: Send us an email describing your concern or complaint related to privacy or data protection. Please include:
   • Your contact details;
   • A clear description of your concern;
   • Any supporting evidence (e.g., screenshots, URLs, dates).
2. Acknowledgement: We aim to acknowledge receipt of your complaint within 7 business days.
3. Investigation: We will review your complaint, consult relevant internal stakeholders, and, if needed, request additional information from you.
4. Response: We will provide a substantive response within 30 days from receipt of a complete complaint, explaining our findings and any actions taken or proposed.

Escalation to Supervisory Authorities

• Australia: If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) regarding privacy complaints:
  • Website: https://www.oaic.gov.au
• European Union / EEA: If the GDPR applies to our processing of your data, you may lodge a complaint with your local data protection authority in the EU/EEA.
• Mexico: If Mexican privacy law applies, you may have the right to lodge a complaint with the competent Mexican data protection authority (for example, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales, INAI) concerning the handling of your personal data.

Updates

Observe: Laws, industry practices, and our own services may change over time, requiring updates to this Privacy Policy.

Expand: To maintain transparency, we use versioning, clear "last updated" dates, and reasonable notice periods for material changes.

Reflect: Our update practices are as follows:

How We Update This Policy

• We may revise this Privacy Policy from time to time to reflect:
  • Changes in our services, technology, or business model;
  • Updates in applicable legal or regulatory requirements in Australia or other relevant jurisdictions;
  • Feedback from users or supervisory authorities.

Notifications of Changes

• Minor changes: For non-material updates (e.g., clarifications, corrections), we will post the updated policy on this page with an updated "Last updated" date.
• Material changes: For significant modifications, especially those affecting how we process your personal data or your rights, we will:
  • Provide a prominent notice on the Site (e.g., banner or pop-up) and/or
  • Send an email notification to users who have provided their email address, where appropriate.
• Advance notice: Where reasonably possible and legally required, we will provide at least 30 days' notice before material changes take effect.

User Options on Changes

• If you do not agree with the updated Privacy Policy, you may:
  • Stop using the Site; and
  • Request deletion or other action regarding your personal data as described in the "Your Rights" section.

Last updated: January 2026