Privacy Policy

This Privacy Policy explains how Points Bet, operated via the review website located at pointsbet-aussie.com, collects, uses, discloses, and protects personal information relating to visitors and users of our review and informational services. It applies to all individuals who access or use our website, including prospective and existing players who use our content to evaluate the official operator at pointsbet.com.au. By using this website, you consent to the practices described in this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and remains in force until amended or replaced in accordance with the "Updates" section below.

Who We Are

OBSERVE: Users must understand that this site is a review and informational service distinct from the licensed wagering operator and need clear contact and corporate identity information.

EXPAND: We clarify the relationship between Points Bet, the review domain pointsbet-aussie.com, and the licensed operator PointsBet Australia Pty Ltd, and provide contact routes for privacy matters.

REFLECT: This ensures transparency under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The website pointsbet-aussie.com (referred to as "we", "us", "our" or "Points Bet") operates as an independent review and informational portal focused on the Australian online betting brand known as "Points Bet". We are not the wagering service provider and do not operate betting accounts or handle bets. The licensed operator of the betting services described in our content is:

• Operator name: PointsBet Australia Pty Ltd (licensed sports bookmaker)
• Operator corporate address: Level 2, 165 Cremorne Street, Cremorne, VIC 3121, Australia, 3121
• Operator licence: Sports Bookmaker Licence issued by the Northern Territory Racing Commission (NTRC), Northern Territory, Australia (current as at least through 2026)

Where this Privacy Policy refers to our handling of your data, it relates to your use of the review website at pointsbet-aussie.com. For privacy matters relating to betting accounts at the official operator domain pointsbet.com.au, you must refer to that operator's own privacy policy.

Contact for Privacy Matters

• Data Protection Contact / Privacy Officer (review site):
• Email (general/privacy): [email protected]
• Email (support): [email protected]
• Postal contact (care of corporate address used for operator): Level 2, 165 Cremorne Street, Cremorne, VIC 3121, Australia (attention: Privacy Officer, Points Bet)
• Website: https://pointsbet-aussie.com

If you are unsure whether your request concerns the review website or the licensed operator, we will assist in directing your request to the appropriate entity where possible.

What Personal Data We Collect

OBSERVE: Users interact with our site primarily as readers of reviews, but may also subscribe, contact us, or follow outbound links to the licensed operator. We therefore collect limited but diverse categories of data.

EXPAND: We distinguish between identification data, technical and behavioural data, marketing-related data, and data generated by cookies and similar technologies. We do not directly process betting transactions of the operator, but we may analyse anonymised or aggregated betting-related information when provided to us or derived from user behaviour on our site.

REFLECT: Clear categorisation of data types enables compliance with the APPs and international standards such as GDPR-style transparency, even though our primary jurisdiction is Australia.

Personal Identification and Contact Data

• Basic identifiers: full name, username or display name you choose to provide when contacting us or commenting (if commenting features are enabled).
• Contact details: email address (for example when you write to [email protected] or [email protected]), and any phone number you voluntarily provide.
• Professional details: if you contact us via [email protected] or [email protected], we may collect your job title, organisation, or CV/resume details that you choose to submit.

Technical and Usage Data

• Device and connection data: IP address, approximate geolocation (at country/region level), browser type and version, operating system, device type, language settings, and referring URLs.
• Log data: dates and times of visits, pages viewed, time spent on pages, clickstream data (internal link clicks, outbound link clicks, including clicks redirecting to pointsbet.com.au), and error logs.

Payment and Financial Data

• Review site: Points Bet does not process deposits, withdrawals, or betting transactions, and we do not request or store your payment card numbers or bank account details.
• Affiliate and business relationships: for business partners, affiliates, or advertisers, we may collect limited billing details (such as company name, ABN/ACN, payment reference information) strictly for invoicing and reconciliation. These are not used for consumer betting activities.

Behavioural and Profile Data

• Content interaction: which reviews, guides, and pages you view; how you navigate between them; and which outbound links (for example to the official operator or regulators) you click.
• Engagement metrics: open rates for our newsletters (if you subscribe), click rates on recommended articles or offers, and responses to surveys or feedback forms.
• Inferred interests: segments based on your observed behaviour on pointsbet-aussie.com (for example interest in live betting guides, mobile betting reviews, or responsible gambling resources).

Cookies and Similar Technologies

• Cookies: small text files stored on your device to remember your preferences, facilitate navigation, and analyse website performance.
• Tracking pixels and tags: code snippets used to measure traffic sources, conversions (for example when clicking through to pointsbet.com.au), and campaign effectiveness.
• Analytics identifiers: pseudonymous identifiers (such as those used by analytics services) that help us understand aggregated user behaviour without directly identifying you.

Specific details of our cookie usage are provided in the "Cookies & Tracking Technologies" section.

Legal Basis for Processing

OBSERVE: Our primary legal framework is the Australian Privacy Act 1988 and the Australian Privacy Principles, but our practices are broadly aligned with international standards such as the EU General Data Protection Regulation (GDPR) for transparency and fairness. The brief also requests alignment references to Mexican privacy concepts; we therefore structure our justification using familiar GDPR-style legal bases while noting that our core operations are in Australia.

EXPAND: We identify the main grounds on which we handle personal information: consent, contractual necessity (where we provide services such as newsletters or B2B collaborations), legitimate interests (such as analytics and site security), and compliance with legal obligations (such as record-keeping or cooperation with regulators).

REFLECT: Presenting these bases allows users to understand how and why their data is processed and to exercise their rights accordingly.

Consent

• We rely on your explicit consent where required by law, including:
  • subscribing to newsletters, marketing emails or promotional communications;
  • accepting non-essential cookies (such as advertising or certain analytics cookies, if and where we use them);
  • participating in surveys, competitions, or feedback programs that request optional personal information.
• You may withdraw your consent at any time (see "Your Rights"). Withdrawal does not affect processing already carried out lawfully based on consent.

Contractual Necessity

• When you request specific services from us, we process information as necessary to perform a contract with you, for example:
  • managing your subscription to newsletters or alerts;
  • responding to your support requests and maintaining communication records;
  • administering B2B or affiliate agreements with advertising or media partners.

Legitimate Interests

• We process certain data where it is reasonably necessary for our legitimate interests, and where these are not overridden by your privacy interests or rights. These interests include:
  • improving the content, usability, and performance of pointsbet-aussie.com;
  • maintaining IT and network security, including fraud detection and prevention of abuse;
  • measuring and optimising the performance of our affiliate relationships with the licensed operator and other partners;
  • compiling aggregated statistics about usage of our reviews and guides.

Compliance with Legal Obligations

• We may process and retain personal information where required by applicable law, such as:
  • obligations under the Australian Privacy Act 1988 and related regulations;
  • responding to lawful requests from Australian regulators, law enforcement bodies, or courts (including the Northern Territory Racing Commission and other relevant authorities);
  • record-keeping and documentation of consent, complaints, and dispute resolutions.

Purpose of Processing

OBSERVE: Data is used to provide and improve our review services, manage relationships, and support compliance.

EXPAND: We link specific purposes to the categories of data and legal bases set out above.

REFLECT: This helps users understand which uses are essential and which are optional.

Provision of Services and Website Functionality

• Operating and maintaining the pointsbet-aussie.com website and its content.
• Delivering review articles, guides, and evaluations of the licensed operator and related services.
• Responding to your enquiries, complaints, and feedback via email or other contact channels.

Improvement, Analytics, and Personalisation

• Analysing how visitors use our site to improve navigation, layout, and clarity of information.
• Testing new features, content formats, or user experience improvements.
• Personalising recommended content (for example suggesting related articles or responsible gambling resources).

Marketing and Communications

• Sending newsletters, updates, and promotional materials about betting-related content and offers featured on pointsbet-aussie.com, where you have opted in or a relevant relationship exists.
• Measuring the effectiveness of our marketing campaigns, including open and click rates.
• Managing mailing lists, subscription preferences, and opt-outs.

Fraud Prevention, Security, and Compliance

• Monitoring for suspicious activity, misuse of our site, or attempts to compromise security.
• Protecting our legal rights, investigating possible violations of our terms, and cooperating with relevant authorities.
• Complying with applicable laws and regulatory obligations, including obligations under gambling-related legislation such as the Interactive Gambling Act 2001 (Cth) where relevant to our operations as an informational site.

Disclosure & Sharing

OBSERVE: To operate a modern review platform, we may rely on third-party service providers and have relationships with the licensed operator and advertising partners.

EXPAND: We categorise disclosures and describe safeguards to avoid any misunderstanding that we sell personal data in an unrestricted manner.

REFLECT: Transparency over sharing supports compliance with the APPs and international best practices.

Service Providers and Technical Partners

• Hosting and infrastructure providers: to host the website, store data, provide security, and ensure reliable operation.
• Analytics providers: to help us understand aggregated traffic patterns and site performance.
• Email and communications services: to manage newsletters, transactional messages, and support correspondence.
• Professional advisers: lawyers, auditors, or consultants engaged under confidentiality obligations.

These providers may only process your personal information on our instructions and for the purposes described in this Policy, subject to appropriate confidentiality and security measures.

Licensed Operator and Affiliate Partners

• We may share aggregated or pseudonymised statistics (for example total number of clicks or conversions) with the licensed operator (PointsBet Australia Pty Ltd) and our advertising partners to measure the performance of our content and referral links.
• We do not share your identifiable personal information with the licensed operator for the purpose of operating your betting account, unless:
  • you explicitly request or consent to such sharing in a specific context; or
  • we are legally required to do so.

Regulators and Public Authorities

• We may disclose information when required to do so by law or in response to lawful requests from:
  • Australian law enforcement agencies;
  • the Northern Territory Racing Commission or other gambling regulators, where relevant;
  • courts, tribunals, or other governmental bodies.

Advertising Networks and Third-Party Marketing

• Where we use third-party advertising networks or tracking technologies, we may allow those partners to set cookies or similar technologies on your device, subject to your consent where required.
• Any sharing of data with advertising partners is limited to the purposes of displaying or measuring relevant advertising and is governed by contractual restrictions and, where applicable, your opt-in/opt-out choices.

Business Transfers

• If we undergo a corporate transaction (such as a merger, acquisition, reorganisation, or sale of assets), personal information may be transferred as part of that transaction, subject to confidentiality obligations and continuity of this Privacy Policy or an equivalent level of protection.

International Transfers

OBSERVE: Our primary operations are in Australia, but our service providers may be located in multiple jurisdictions.

EXPAND: We identify potential regions to which data may be transferred and describe safeguards in line with international standards, even where not strictly required by Australian law.

REFLECT: This reassures users that data receives adequate protection irrespective of geographic location.

Regions of Transfer

• Personal data collected via pointsbet-aussie.com may be processed in:
  • Australia;
  • other countries in the Asia-Pacific region;
  • the European Economic Area (EEA) and the United Kingdom;
  • the United States or other jurisdictions where our service providers or backup systems may be located.

Protection Measures

• We take reasonable steps to ensure that any overseas recipient:
  • is subject to a law or binding scheme that provides substantially similar protection to the Australian Privacy Principles; or
  • enters into a written agreement with us containing contractual safeguards consistent with recognised international standards (for example, clauses modelled on EU Standard Contractual Clauses, where appropriate).
• Where feasible, data is stored and processed in a way that minimises cross-border transfers and applies encryption in transit and at rest.

Data Retention

OBSERVE: Different categories of data require different retention periods based on legal obligations and operational needs.

EXPAND: We specify indicative retention durations and deletion/anonymisation criteria.

REFLECT: Clear retention rules support compliance with storage limitation principles under the APPs and GDPR-style frameworks.

General Retention Principles

• We retain personal information only for as long as reasonably necessary to fulfil the purposes set out in this Privacy Policy or to comply with legal, accounting, or reporting obligations.
• When information is no longer required, we will either securely delete it or irreversibly anonymise it.

Indicative Retention Periods

• Contact and support data: emails and related records are generally kept for up to 5 years from the date of last interaction, unless a longer period is required for dispute resolution or legal obligations.
• Newsletter and marketing data: subscription data is retained for as long as you remain subscribed and for up to 2 years after you unsubscribe, solely to document your opt-out and manage suppression lists.
• Technical logs and analytics data: raw logs are typically retained for 12 - 24 months, after which they may be aggregated or anonymised for long-term statistical analysis.
• Business partner and affiliate data: retained for the duration of the business relationship and for at least 7 years afterwards where necessary for tax, regulatory, or contractual reasons.

Deletion and Anonymisation Criteria

• Expiration of the relevant retention period.
• Successful completion of a verified deletion or objection request, where applicable and not overridden by legal requirements.
• Achievement or cessation of the purpose for which the data was collected.

Your Rights

OBSERVE: As an Australian-based review site, we are primarily subject to the Australian Privacy Act 1988 and the APPs, but we structure rights in a manner aligned with GDPR-style terminology. The brief also references Mexican privacy law alignment; although we do not target Mexico specifically, we recognise broadly analogous rights (such as access, rectification, cancellation, and objection) in our global approach.

EXPAND: We set out accessible, free-of-charge procedures, typical response times, and any legitimate grounds to refuse or limit a request.

REFLECT: Providing a clear rights framework enhances trust and complies with both Australian law and international best practices.

Summary of Your Rights

• Right of access: to request confirmation as to whether we hold personal information about you and to obtain a copy of that information, subject to lawful exceptions.
• Right to correction (rectification): to request that inaccurate, incomplete, or outdated information be corrected.
• Right to deletion (erasure/cancellation): to request deletion of your personal information where it is no longer needed, where you withdraw consent (where applicable), or where processing is unlawful, subject to legal retention obligations.
• Right to restriction of processing: to request that we limit the use of your information in certain circumstances (for example while we verify accuracy or handle an objection).
• Right to object: to object to certain processing activities, particularly direct marketing or processing based on our legitimate interests.
• Right to data portability: where technically feasible and applicable, to receive certain information in a structured, commonly used, and machine-readable format and to request its transmission to another controller.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of prior processing.

How to Exercise Your Rights

1. Submit your request: Contact us at [email protected] or [email protected] with:
   • your full name;
   • a clear description of your request (for example "access request", "correction request", "unsubscribe from marketing");
   • any information that may help us identify you in our systems (for example email address used for correspondence).
2. Verification: We may take reasonable steps to verify your identity (for example by confirming control of the email address used or asking limited additional questions) before acting on your request.
3. Response timeframe: We aim to respond within 30 days of receiving a valid and complete request, in line with international best practice and, where relevant, obligations under the Australian Privacy Act.
4. Fees: We do not charge a fee to handle your request, unless it is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline the request consistent with applicable law.
5. Limitations: In certain circumstances, we may refuse or limit your request where we are permitted or required to do so by law (for example, where providing access would unreasonably impact the privacy of others or would reveal confidential commercial information). In such cases, we will explain the reasons for our decision.

Cookies & Tracking Technologies

OBSERVE: We use cookies and related technologies to operate and improve the site, and, where applicable, for analytics and advertising.

EXPAND: We distinguish cookie types by duration and purpose and outline control options.

REFLECT: This satisfies transparency requirements and supports informed consent.

Types of Cookies We Use

• Session cookies: temporary cookies that remain on your device only while your browser is open and are automatically deleted when you close it. They support basic navigation and security.
• Persistent cookies: remain on your device for a longer period or until you delete them. They may store your preferences (for example language settings) and help us recognise returning visitors.
• First-party cookies: set directly by pointsbet-aussie.com to support core functionality, preferences, and analytics.
• Third-party cookies: set by third-party service providers such as analytics platforms or advertising networks. These may be used to provide aggregated statistics or, where applicable, to display more relevant advertising.

Purposes of Cookies

• Strictly necessary / functional: enabling basic site features, secure navigation, and remembering choices you make (for example cookie consent preferences).
• Analytics and performance: collecting information about how visitors use our site (such as page views, time on site, and link clicks) to help us improve our content and user experience.
• Advertising and affiliate tracking: measuring the performance of our referral links and, where applicable, supporting the delivery of more relevant offers. These may involve assigning a pseudonymous identifier when you click a link to the official operator or other partners.

Managing Cookies

• You can manage or disable cookies at any time by adjusting your browser settings. Most browsers allow you to:
  • block all cookies;
  • block cookies from specific sites;
  • delete existing cookies.
• Some features of the site may not function correctly if you disable certain cookies.
• Where we implement a cookie banner or internal preference panel, you can use it to accept or reject non-essential cookies such as advertising or advanced analytics cookies.

Data Security

OBSERVE: Protecting personal information is critical given the sensitivity of online gambling-related data and the broader data protection expectations under Australian law and international standards.

EXPAND: We outline technical, organisational, and procedural safeguards, including encryption, access control, and incident response.

REFLECT: Robust security measures reduce risk and demonstrate our commitment to privacy.

Technical Measures

• Encryption in transit: We use industry-standard transport layer security (TLS 1.2 or higher) to encrypt data transmitted between your browser and our servers.
• Encryption at rest: Where feasible, we store personal information using encryption or other techniques designed to prevent unauthorised access.
• Access controls: Personal data is accessible only to authorised personnel or service providers on a need-to-know basis, protected by authentication mechanisms (including, where appropriate, multi-factor authentication).
• Secure development practices: We aim to follow secure coding and configuration practices and to apply timely security patches to underlying systems.

Organisational and Procedural Measures

• Staff training: Personnel with access to personal information receive training on data protection responsibilities, confidentiality, and incident reporting procedures.
• Policies and governance: Internal policies define how data is collected, used, retained, and deleted, consistent with this Privacy Policy.
• Vendor due diligence: Where we engage third-party service providers, we assess their security and privacy practices and include appropriate contractual safeguards.
• Security monitoring and audits: We periodically review the effectiveness of our security controls and may conduct internal or external assessments to identify and address vulnerabilities.

Incident Response

• We maintain processes for detecting, reporting, and responding to potential data breaches or security incidents.
• In the event of a data breach that is likely to cause serious harm, we will take appropriate steps in accordance with applicable law, which may include notifying:
  • affected individuals; and
  • the Office of the Australian Information Commissioner (OAIC) or other relevant authorities.

Complaints & Contacts

OBSERVE: Users must be able to raise privacy concerns easily and know how to escalate them to regulators if necessary.

EXPAND: We provide multiple contact methods, a clear procedure, and references to supervisory authorities.

REFLECT: Effective complaint handling strengthens accountability and trust.

How to Contact Us

• Email (privacy and general): [email protected]
• Email (support): [email protected]
• Website: https://pointsbet-aussie.com
• Postal address: Privacy Officer, Points Bet, Level 2, 165 Cremorne Street, Cremorne, VIC 3121, Australia

Complaint Procedure

1. Initial contact: Send us a detailed description of your concern, including any relevant dates, communications, and how you believe your privacy rights may have been impacted.
2. Acknowledgement: We will acknowledge receipt of your complaint, typically within 5 business days.
3. Investigation: We will investigate your complaint, which may involve requesting additional information to clarify the facts.
4. Response: We aim to provide a substantive response within 30 days of receiving all necessary information. If we cannot respond within this period, we will let you know and provide an updated timeframe.
5. Outcome: Our response will set out the outcome of our investigation and any remedial actions we propose or have taken.

Escalation to Supervisory Authorities

If you are not satisfied with our response, or you prefer to contact a supervisory authority directly, you may be able to lodge a complaint with:

• Office of the Australian Information Commissioner (OAIC):
  • Website: https://www.oaic.gov.au
  • Privacy complaints: https://www.oaic.gov.au/privacy/privacy-complaints
• Northern Territory Racing Commission (for matters connected with licensed operator conduct):
  • Website: https://nt.gov.au/industry/gambling/licensing/bookmakers-and-betting-exchange-operators

Where you are located in another jurisdiction (for example within the European Union), you may also have the right to lodge a complaint with your local data protection authority. While our services are primarily aimed at Australian users, we will cooperate in good faith with competent authorities in other jurisdictions where applicable.

Updates

OBSERVE: Laws, technology, and our services evolve, requiring us to update this Privacy Policy.

EXPAND: We describe how we notify users of changes, manage version control, and provide options if users do not agree with material changes.

REFLECT: A clear update process helps maintain ongoing transparency and compliance.

Changes to This Policy

• We may update this Privacy Policy from time to time to reflect:
  • changes to our website, services, or business practices;
  • changes in applicable laws or regulatory guidance; or
  • improvements in how we explain our practices.
• Each version will be identified by the "Last updated" date below.

Notification of Material Changes

• For changes that materially affect how we collect or use personal information, we will provide advance notice of at least 30 days where reasonably practicable, by one or more of the following methods:
  • prominent notice on the pointsbet-aussie.com website (for example a banner or pop-up);
  • email notification to subscribed users (where we hold valid contact details);
  • alerts or notices in any user account or preference dashboard we may provide.
• Where required by law, we will seek your consent to material changes that affect how we use your personal information.

User Options Following Updates

• If you do not agree with the updated Privacy Policy, you should discontinue using pointsbet-aussie.com and may request deletion or restriction of your personal information in accordance with the "Your Rights" section.
• Continued use of the website after the effective date of an updated Privacy Policy will constitute your acknowledgement and acceptance of the changes, to the extent permitted by law.

Last updated: January 2026