Privacy Notice

Azure Fortune Palace Casino is run by Azure Fortune Palace Casino Entertainment Ltd., which holds a licence from the Malta Gaming Authority and has operated the palace since 2019. For privacy law, that company is the data controller: we decide why and how your information is used, and we answer for it.

This notice covers the website, the iOS and Android apps, our emails and the help desk. If a game studio or payment provider asks you for information directly, their own privacy notice applies to that part.

We keep this list as short as a licensed casino can. Everything below falls into one of five groups.

We never ask for your banking passwords and staff will never request a full card number over email.

Privacy law asks us to name a legal reason for every use. Ours are:

• Running your account — logging you in, paying out in AUD, USD, GBP, CAD, USDT or BTC, applying bonuses such as the 200% welcome offer and the monthly cashback challenge. Reason: our contract with you.
• Meeting licence and anti-money-laundering rules — age and identity checks, source-of-funds questions, reporting to the Malta Gaming Authority when required. Reason: legal obligation.
• Protecting players — spotting patterns that suggest play is getting out of hand, honouring limits and self-exclusion. Reason: legal obligation and your vital interests.
• Keeping the palace safe — fraud checks, bonus-abuse detection, security logs. Reason: legitimate interests.
• Telling you about offers — only if you said yes, and never while you are self-excluded. Reason: consent, which you can withdraw in one tap.

Before your first withdrawal we confirm you are who you say you are and that you are over 18. It usually runs like this:

1. Upload a photo ID — passport, driver licence or national ID card.
2. Confirm your address — a recent utility bill or bank statement with your name on it.
3. Prove the payment method is yours — for example a card photo with the middle digits covered.
4. Wait for the check — documents go through an encrypted channel to our verification team and provider, then the result appears in your account.

Checks are also why the 1-3 business day payout window can stretch on a first withdrawal. Once you are verified, later withdrawals skip this step.

Only people who need a specific piece of your data to do a specific job:

• Payment providers such as Visa, Trustly, MiFinity, Paysafecard and our crypto processors, to move your money.
• Verification and fraud services, to confirm identity and age.
• Game studios among our 41 partners, who receive a player ID and game data — not your name or address.
• Hosting, email and analytics suppliers, bound by contracts that forbid any other use.
• Regulators, police and courts, when the law requires it.

We do not sell, rent or trade player lists. Partner sites that send players to us learn only that an account was opened, never who opened it.

You play from Australia, our licence sits in Malta and some suppliers run servers elsewhere. When data leaves the European Economic Area we use approved safeguards — standard contractual clauses or a destination the European Commission recognises as adequate — and encrypt it in transit.

When a period ends the data is deleted or anonymised so it can no longer be linked to you.

1. Email [email protected] from the address on your account, with “Privacy request” in the subject.
2. Say which right you are using. We may ask one question to confirm it is really you.
3. We reply within one month, and tell you if a complex request needs longer.

If you are unhappy with our answer you can complain to the Information and Data Protection Commissioner in Malta, or to the Office of the Australian Information Commissioner.

• Every page, app screen and payment runs over encrypted connections.
• Documents and card details sit in separate, access-controlled systems.
• Staff see only what their role needs, and every look at a player file is logged.
• The Malta Gaming Authority audits our systems as a condition of the licence.

We will never email you asking for your password. If a message like that arrives, do not reply — forward it to the help desk.

The palace is for adults only. If we find an account belongs to someone under 18, we close it, return deposits where the law allows and delete the data we are not required to keep. Parents who spot a problem can reach us through the help desk.

Promotional emails, SMS and app notifications only go out if you switched them on. Every message has an unsubscribe link, and you can change all channels in your account settings. Service messages — a withdrawal update, a security alert — still arrive, because you need them.

When something important changes we show a notice in your account before it takes effect. The date at the top of this page always shows the latest version. Cookies have their own page: Cookie Choices.