Privacy Policy

This Privacy Policy is provided to explain how Neosurf Casino (operating via neosurf-au.com) collects, uses, discloses, stores, and protects personal information in connection with our online casino-related services and our website. It applies to website visitors and registered players who access or use neosurf-au.com, including any associated pages, features, and communications linked to the service. Effective date: 6 November 2026.

Who We Are

OBSERVE: The information currently available for Neosurf Casino identifies the brand (Neosurf Casino) and the operational website (neosurf-au.com), but does not provide a verified full legal entity name, legal address, or corporate registration/tax identifiers. The available licensing references in the provided data relate to common Curaçao master-license numbers (e.g., 8048/JAZ, 365/JAZ) used in the industry; however, the specific licensee/operator entity for Neosurf Casino is not identified in the supplied profile.

EXPAND: Under Australian privacy expectations (including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable), transparency about the entity handling personal information and an accessible privacy contact channel are core requirements. Where an operator relies on third parties (e.g., payment processing entities that may be located offshore, commonly Cyprus in this niche), it remains responsible for explaining who receives data and how users can contact the business about privacy. Because the operator's formal corporate identifiers are not provided, this policy discloses the gap and provides the best-available privacy contact route while committing to update the section when verified corporate particulars are available.

REFLECT: Until verified legal-entity information is published for Neosurf Casino on neosurf-au.com or provided through authoritative corporate documentation, the "controller/operator details" are stated as follows, with a defined privacy contact and update commitment:

Brand / Service name: Neosurf Casino (Neosurf Casino), accessible via neosurf-au.com.
Operator legal name: Not specified in the provided profile data.
Registered/legal address: Not specified in the provided profile data.
Company/registration number and tax identifiers: Not specified in the provided profile data.
Licensing references (industry context): Curaçao master-license numbers 8048/JAZ (Antillephone N.V.) and 365/JAZ (Gaming Curacao) are referenced in the data as common in this niche; the specific operator/licensee for Neosurf Casino is not confirmed.

Privacy Contact (Data Protection)

OBSERVE: The provided data includes one email used for complaints/dispute resolution associated with a master license holder: [email protected]. No dedicated DPO name, privacy email, or contact form is specified for Neosurf Casino.

EXPAND: A functional privacy-contact route is required so individuals can exercise rights and raise concerns. Where a dedicated DPO is not listed, a "Data Protection Department" contact should be provided. Using a third-party complaints mailbox may not be ideal for privacy requests; therefore, we (i) provide that mailbox as an interim channel, (ii) describe what to include so requests can be routed, and (iii) commit to publish a dedicated privacy address on neosurf-au.com.

REFLECT: For privacy inquiries and rights requests relating to Neosurf Casino on neosurf-au.com, contact:

Email (interim privacy/complaints routing): [email protected] (noted in supplied data as a master license holder contact; used here as an interim routing channel).
Phone: 1800 858 858 (listed in supplied data as "Gambling Help Online" support; not a company phone number; provided for support services rather than privacy administration).
Website: https://neosurf-au.com

Regional Compliance Note (AU): Where the Australian Privacy Principles apply, we aim to respond to privacy queries promptly and in a manner consistent with OAIC guidance. If you believe any contact details above are incorrect or insufficient, please notify us through neosurf-au.com so we can update this policy.

What Personal Data We Collect

OBSERVE: Neosurf Casino provides online casino-related services through neosurf-au.com, which typically requires account creation, identity verification (KYC), payments, fraud monitoring, and responsible gaming controls. The section requirements specify collection categories: identity/contact data, technical data, payment data, behavioural data, and cookies.

EXPAND: For AU-facing services operating online, privacy expectations include data minimisation, clear notice of sensitive information handling, and transparency about third-party analytics/advertising cookies. Even where AU gambling-service offering is legally restricted for operators (Interactive Gambling Act 2001 context noted in supplied data), privacy obligations about handling personal information remain relevant to the website and any related services. We therefore describe categories broadly, with examples, and distinguish "you provide" vs "we generate/observe" data.

REFLECT: We may collect the following categories of personal information when you interact with Neosurf Casino on neosurf-au.com:

Identity & contact data: Full name, date of birth, email address, telephone number, residential address, nationality/country of residence, and account identifiers (username, player ID).
Verification (KYC) data: Government ID details (e.g., document number, issuing country), copies/images of identity documents, selfie/liveness checks where used, proof of address, and verification outcomes/flags.
Financial & payment data: Deposit/withdrawal records, payment method type, transaction references, fraud-screening outcomes, chargeback/dispute records; card/bank details are typically processed by payment partners and may be tokenised (we do not intentionally store full payment card numbers where avoidable).
Gameplay & behavioural data: Betting history, game sessions, wins/losses, bonus and promotion participation, responsible gaming settings, clicks and on-site interactions, preferences, and support interactions.
Technical & device data: IP address, device identifiers, browser type and version, operating system, time zone, language, referral URL, access times, error logs, and security/audit logs.
Communications data: Emails, chat transcripts, support tickets, complaint submissions, call notes (where applicable), and records of consent/opt-in/opt-out choices.
Cookies & similar technologies: Cookie identifiers and related metadata used for essential site functions, analytics, and (where enabled) advertising/retargeting.

Important: If you provide information about third parties (for example, a payment instrument holder or joint account details), you confirm you have authority to do so and have provided them with appropriate notice.

Legal Basis for Processing

OBSERVE: The required legal grounds include consent, contract performance, legitimate interests, and legal obligations (KYC/AML, reporting). The service is AU-targeted but may involve offshore licensing and service providers; therefore, the policy should align with GDPR-style articulation while remaining coherent for AU users under the Privacy Act framework.

EXPAND: Australian privacy law does not use "legal bases" exactly like GDPR, but explaining why processing occurs improves transparency and supports cross-jurisdictional compliance. We must also be careful not to imply that consent is the only basis when contractual necessity or legal obligations apply. We should explicitly separate marketing consent from essential processing. We should also mention age/identity checks and AML/CTF-style controls as "legal obligations" where relevant to the operator's compliance posture and risk controls.

REFLECT: Neosurf Casino processes personal information on neosurf-au.com under the following grounds (as applicable to the specific processing activity):

Contract performance (account and services): To register and administer your player account, provide access to games, process deposits/withdrawals, apply bonuses, provide customer support, and otherwise deliver the services you request.
Consent: To place non-essential cookies (e.g., analytics/advertising where required), to send direct marketing communications where an opt-in is used, and for other optional features where consent is requested and can be withdrawn.
Legitimate interests: To secure neosurf-au.com and our systems, prevent fraud and abuse, perform aggregated analytics to improve service reliability, manage business risk, and enforce our terms (balanced against your privacy rights).
Legal obligations and regulatory expectations: To meet identity verification, anti-fraud, anti-money laundering/counter-terrorism financing expectations (where applicable), responsible gambling controls, record-keeping, and responding to lawful requests by competent authorities.

Regional Compliance Note (AU): Where the Australian Privacy Principles apply, we handle personal information in a manner consistent with notice, purpose limitation, data quality, security safeguards, and access/correction requirements. Where offshore recipients are used, we apply contractual and organisational safeguards described under "International Transfers".

Purpose of Processing

OBSERVE: The required purposes: providing services, improving service, marketing mailings, analytics, and fraud prevention.

EXPAND: Purposes should map cleanly to the data categories and sharing disclosures. We should include responsible gaming and compliance record-keeping as integral purposes for gambling-related services, while keeping the list concise and readable.

REFLECT: Neosurf Casino uses personal information on neosurf-au.com for the following purposes:

Service delivery: Account creation and management, gameplay access, deposits/withdrawals, bonus administration, customer support, and communicating service-related notices.
Verification and compliance: Age and identity verification, KYC reviews, transaction monitoring, risk controls, and maintaining records required for compliance and auditing.
Security and fraud prevention: Detecting and preventing fraudulent activity, account takeover, collusion, chargebacks, and other prohibited conduct.
Analytics and improvement: Measuring site performance, diagnosing technical issues, improving usability, and developing new features (preferably using aggregated or pseudonymised data where feasible).
Marketing (where permitted): Sending promotional emails/SMS/push notifications and presenting personalised offers, subject to your preferences and applicable consent/opt-out requirements.

Disclosure & Sharing

OBSERVE: The policy must describe who receives data: payment partners, service providers, regulators, affiliates, and advertising networks (with consent). The provided data references Curaçao master license holders and indicates a common payment-processing footprint (e.g., Cyprus) without naming entities.

EXPAND: Disclosure wording must cover processors/sub-processors, group companies (if any), and legal disclosures. It must also clearly limit advertising sharing to consent-based contexts (especially for tracking technologies). We must avoid inventing named affiliates or addresses; instead, describe categories and conditions and commit to provide vendor lists where required.

REFLECT: Neosurf Casino may disclose personal information collected via neosurf-au.com to the following categories of recipients, only as necessary for the purposes described in this policy:

Payment and financial partners: Payment service providers, banking partners, fraud/chargeback management providers, and payout processors to process deposits/withdrawals and manage payment risk.
Identity, verification, and risk providers: KYC/AML screening vendors, identity verification services, device-fingerprinting and anti-fraud providers, and security monitoring platforms.
Technology and hosting providers: Cloud hosting, content delivery networks (CDNs), customer support tools, email/SMS delivery services, analytics providers, and log-management vendors.
Regulators and authorities: Competent authorities, regulators, law enforcement, courts, or other bodies where disclosure is required or permitted by law, or necessary to protect rights, safety, and security.
Affiliates and marketing partners: Affiliate partners and advertising networks only where (i) you have provided the required consent for marketing/tracking, or (ii) the sharing is otherwise lawful and consistent with your preferences.
Corporate transactions: Buyers, sellers, or advisers in connection with a merger, acquisition, restructuring, or sale of assets, subject to confidentiality and lawful transfer conditions.

Regional Compliance Note (AU): If we disclose personal information to overseas recipients, we take reasonable steps to ensure they handle it consistently with this policy and applicable privacy requirements, including contractual controls and due diligence.

International Transfers

OBSERVE: The section requires countries/regions and protections (SCCs, Privacy Shield, etc.). The provided data indicates Curaçao (licensing context) and that payment processing subsidiaries are commonly in Cyprus; it does not confirm a specific entity. The website domain is neosurf-au.com, and users are in AU.

EXPAND: Since we cannot name exact countries beyond what is reasonably inferable, we should (i) list likely regions in category form (EEA/UK, Curaçao, Cyprus, US, other vendor locations) while clarifying "may", (ii) describe safeguards: contractual clauses, vendor security standards, transfer risk assessments. "Privacy Shield" is obsolete; instead, reference EU-US Data Privacy Framework (where relevant) and contractual measures. For AU, APP 8 (Cross-border disclosure) requires steps for overseas recipients.

REFLECT: Your personal information may be transferred to, stored in, or accessed from locations outside Australia in order to operate neosurf-au.com and provide services for Neosurf Casino. These locations may include (depending on vendors and infrastructure):

Curaçao: Where licensing/administrative functions may be supported in this operator niche (as referenced in the supplied data).
European Union/EEA and/or the United Kingdom (including Cyprus): Where certain payment processing and technology service providers may be located (Cyprus is referenced as a common payment-processing footprint in the supplied data).
United States and other countries: Where cloud hosting, analytics, communications, security, or support tooling providers may operate.

Transfer Safeguards

OBSERVE: Cross-border transfers require protection guarantees.

EXPAND: We should describe layered safeguards rather than relying on a single mechanism, and keep it accurate across jurisdictions. For EU/UK-style transfers: Standard Contractual Clauses/UK IDTA and supplementary measures. For AU: reasonable steps under APP 8 and contractual requirements.

REFLECT: When we transfer personal information internationally, we apply safeguards appropriate to the transfer context, such as:

Contractual protections: Data-processing agreements and, where relevant, standard contractual clauses (or equivalent contractual transfer tools) requiring confidentiality, security, and restrictions on onward transfers.
Risk and vendor due diligence: Assessing vendor security posture and privacy practices before onboarding and periodically thereafter.
Security controls: Encryption in transit, access controls, logging, and segmentation to reduce transfer and access risks.
Transparency: Maintaining records of key vendor categories and updating this policy when material changes occur.

Data Retention

OBSERVE: The section requires retention periods per category and deletion criteria. It also instructs timeframes to be extended to 2026 where applicable. The prompt example suggests "no more than 5 years after account closure" for personal data; however, KYC/AML records often require longer retention depending on legal obligations. Since specific statutory retention mandates for this operator are not provided, we should provide a defensible schedule that distinguishes categories and allows longer where required by law.

EXPAND: Provide clear, category-based retention windows, tied to: (i) active account, (ii) closure, (iii) dispute limitation periods, (iv) legal obligations. Include deletion/anonymisation approach and exceptions (fraud investigations, legal holds). Ensure the language is not overly absolute.

REFLECT: Neosurf Casino retains personal information collected via neosurf-au.com only for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law (including compliance, dispute resolution, and enforcement). Typical retention periods are:

Account profile and contact data: While your account is active, and typically up to 5 years after account closure, unless extended for legal compliance, dispute resolution, or fraud prevention.
KYC/verification records: Typically up to 5 - 10 years after account closure or completion of verification (depending on applicable legal and audit expectations), or longer where a legal hold applies.
Transaction, deposit/withdrawal, and payment records: Typically up to 7 years to support accounting, audit, and dispute/chargeback handling, unless longer retention is required by law.
Gameplay and behavioural logs: Typically up to 5 years after account closure (or shorter where feasible), subject to security, integrity, and dispute needs.
Technical logs and security monitoring data: Typically 6 - 24 months, unless extended for incident investigation, fraud analysis, or legal claims.
Marketing preferences and consent records: For as long as marketing continues, and typically up to 5 years after your last interaction or until you withdraw consent/opt out, to evidence compliance.

Deletion and anonymisation criteria: We delete, de-identify, or anonymise personal information when (i) the retention period expires, (ii) the processing purpose is complete, and (iii) no legal or legitimate business reason requires continued retention. Some information may be retained in a restricted-access archive where required for compliance, audits, or legal claims.

Your Rights

OBSERVE: The prompt requires detailed GDPR and Mexican privacy law alignment, including access, correction, deletion, restriction, objection, portability, withdrawal of marketing consent; procedures; 30-day response; free-of-charge; and references to Mexican regulations. The site is AU-focused, but the instruction explicitly mandates GDPR + Mexico alignment, so we present rights in a globally aligned way while noting AU context (Privacy Act access/correction) and how requests are handled.

EXPAND: We must be careful: claiming full GDPR/Mexico applicability may be inaccurate, but "alignment" can be framed as "we aim to provide comparable rights" and "where applicable". For Mexico, reference the Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares (LFPDPPP) and ARCO rights, plus its Regulations. For GDPR, reference Articles conceptually without over-citing. Provide a clear request workflow and identity verification for security. Guarantee "no fee" with exceptions (manifestly unfounded/excessive).

REFLECT: Neosurf Casino supports privacy rights requests for personal information processed via neosurf-au.com. Depending on your location and the nature of processing, these rights may arise under Australian privacy law (including access and correction under the Privacy Act 1988 (Cth) where applicable) and/or comparable international standards. We aim to provide rights handling that is aligned with GDPR-style principles and, where relevant, Mexican privacy law standards.

Rights You May Request

Access: Request confirmation of whether we process your personal information and obtain a copy of relevant data.
Correction (rectification): Request correction of inaccurate, incomplete, or out-of-date personal information.
Deletion (erasure): Request deletion of personal information where it is no longer needed, where consent is withdrawn (for consent-based processing), or where processing is unlawful, subject to legal retention obligations.
Restriction: Request that we temporarily or permanently limit processing in certain circumstances (for example, while a correction request is being assessed).
Objection: Object to processing based on legitimate interests, including certain profiling, unless we have compelling legitimate grounds or the processing is required for legal claims.
Data portability: Request a copy of certain information you provided to us in a structured, commonly used, machine-readable format, where technically feasible and where the right applies.
Withdraw consent: Withdraw consent at any time for consent-based processing (such as certain cookies and direct marketing). Withdrawal does not affect processing that occurred before withdrawal.
Marketing opt-out: Opt out of direct marketing at any time using unsubscribe links or by contacting us; we will action the request within a reasonable period.

Mexico (ARCO) Alignment

OBSERVE: Mexican law alignment is explicitly required.

EXPAND: Mexican private-sector privacy framework centers ARCO rights (Access, Rectification, Cancellation, Opposition) under LFPDPPP and its Regulations. We should state that individuals may submit ARCO-style requests and that we will handle them in an equivalent manner, subject to identity verification and legal exceptions.

REFLECT: In alignment with Mexico's private-sector data protection framework (including the Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares (LFPDPPP) and its Regulations), you may also submit ARCO-style requests (Access, Rectification, Cancellation, Opposition). Where those standards are relevant to your situation, we will process the request following ARCO principles, including verifying identity and applying lawful exceptions (for example, where retention is required for compliance, dispute resolution, or fraud prevention).

How to Exercise Your Rights

Submit a request: Email [email protected] with the subject line "Privacy Request - Neosurf Casino (neosurf-au.com)".
Provide required details: Include your full name, registered email, username/player ID (if available), the right you wish to exercise, and a clear description of your request.
Identity verification: For security, we may request additional information to verify your identity before disclosing, correcting, or deleting data.
Response timeframe: We aim to respond within 30 days of receiving a complete request (and may extend where legally permitted due to complexity, while informing you of the reason and expected timeline).
Fees: Requests are generally handled free of charge. We may charge a reasonable fee or refuse a request only where permitted by law (e.g., manifestly unfounded, repetitive, or excessive requests), and we will explain any such decision.

Limitations: Your rights may be limited where fulfilling a request would (i) conflict with legal obligations (e.g., mandatory retention), (ii) compromise the privacy of others, (iii) prejudice fraud prevention or security controls, or (iv) be otherwise restricted by law.

Cookies & Tracking Technologies

OBSERVE: The section requires types (session, persistent, third-party), purposes (functional, analytics, advertising), and how to manage/disable (browser settings, internal panel). No internal cookie panel is specified in the data, so we should describe options including browser controls and "where available" a cookie preference tool on neosurf-au.com.

EXPAND: For AU users, cookie consent requirements vary, but transparency is expected; for cross-jurisdictional alignment, provide opt-in for non-essential cookies where required. Mention that disabling cookies may affect functionality.

REFLECT: Neosurf Casino uses cookies and similar technologies on neosurf-au.com to operate the site, improve performance, and (where enabled) support marketing.

Types of Cookies

Session cookies: Temporary cookies that expire when you close your browser; used for login continuity and secure navigation.
Persistent cookies: Stored for a defined period; used to remember preferences and support analytics over time.
Third-party cookies: Set by service providers (e.g., analytics, security, advertising partners) to support their functions.

Cookie Purposes

Strictly necessary / functional: Enable core website functions such as account login, security controls, load balancing, and fraud prevention.
Preferences: Remember language, region, and UI choices.
Analytics: Help us understand how visitors use neosurf-au.com, measure performance, and improve features (preferably using aggregated data).
Advertising (where used): Help measure campaign effectiveness and show more relevant offers; these are used only where lawful and consistent with your consent/preferences.

How to Manage Cookies

Browser controls: You can block or delete cookies through your browser settings. Most browsers allow you to manage cookies by site and to clear stored data.
On-site preferences (where available): If neosurf-au.com provides a cookie banner or preference centre, you can adjust non-essential cookie settings there at any time.
Impact of disabling cookies: Blocking some cookies may prevent parts of neosurf-au.com from functioning correctly (including login, payments, or security features).

Data Security

OBSERVE: The section requires comprehensive measures: TLS 1.2+, encryption at rest/in transit, MFA, access controls, audits, staff training, incident response, and mention ISO 27001/SOC 2 where applicable. We should avoid falsely claiming certification; instead say "aligned with" or "where applicable / where vendor-certified".

EXPAND: Security descriptions should be specific but not so detailed that they create attack surface. Include breach response and notification principles, and note that no system is 100% secure. Tie security to vendor management and least privilege. Mention MFA for admin and player accounts (where supported).

REFLECT: Neosurf Casino implements technical and organisational measures designed to protect personal information processed via neosurf-au.com against unauthorised access, loss, misuse, alteration, or disclosure. Key measures include:

Encryption in transit (TLS 1.2+): We use modern transport encryption (TLS 1.2 or higher) to protect data exchanged between your device and neosurf-au.com.
Encryption at rest (where appropriate): Sensitive data is encrypted at rest where feasible and proportionate, with key management controls designed to prevent unauthorised access.
Access controls and least privilege: Role-based access controls, restricted administrative permissions, strong authentication requirements, and monitoring of privileged access.
Multi-factor authentication (MFA): MFA is used for administrative access and may be made available for player account protection depending on feature availability.
Security monitoring and auditing: Logging, intrusion detection/alerting where appropriate, vulnerability management, and periodic reviews of security controls.
Staff training and confidentiality: Security awareness training and confidentiality obligations for personnel and contractors who may handle personal information.
Incident response: Documented procedures to detect, investigate, contain, and remediate security incidents, including escalation and post-incident review.
Standards alignment (where applicable): We may use service providers that maintain recognised security attestations (such as ISO 27001 and/or SOC 2) and we consider such controls as part of our vendor due diligence; we do not represent that every system component is certified.

Security limitation: No method of transmission or storage is completely secure. You are responsible for keeping your login credentials confidential and for using up-to-date devices and secure networks when accessing neosurf-au.com.

Complaints & Contacts

OBSERVE: The section requires complaint channels (email, phone, form, postal), step-by-step procedure with response times, and escalation to supervisory authorities including Mexican authority and EU authorities, with direct contact information. Provided data: email [email protected], phone 1800 858 858 (help service, not company), no form, no postal address.

EXPAND: We must not invent a postal address. For escalation authorities: Mexico's INAI; EU authorities via EDPB list; Australia's OAIC is also relevant for AU privacy complaints (even though not requested, it supports AU compliance - however we must avoid adding a new section; we can mention within this section). Provide clear steps and timelines (acknowledge within e.g., 7 days; resolve within 30 days). Provide links and basic contact where reliably generic.

REFLECT: If you have a privacy question, concern, or complaint about how Neosurf Casino handles personal information on neosurf-au.com, you may contact us and request a review.

Contact Channels

Email (privacy/complaints routing): [email protected] (provided in supplied data as a master license holder contact; used here to route privacy complaints concerning Neosurf Casino on neosurf-au.com).
Phone (support service reference): 1800 858 858 (Gambling Help Online; not a company line; provided for support services).
Online form: Not specified in the provided profile data. Where an online feedback form becomes available on neosurf-au.com, we will publish it here.
Postal address: Not specified in the provided profile data. We will update this policy once a verified legal mailing address is available.

Complaint Procedure

Step 1 - Submit: Send your complaint by email and include your account identifiers (if applicable), a description of the issue, relevant dates, and what outcome you seek.
Step 2 - Acknowledgement: We aim to acknowledge receipt within 7 days.
Step 3 - Investigation: We review relevant records (e.g., account logs, consents, disclosures) and may request additional information to verify identity and clarify the complaint.
Step 4 - Outcome: We aim to provide a substantive response within 30 days (or explain any lawful need for more time and provide an updated target date).

Escalation to Supervisory Authorities

OBSERVE: The prompt requires Mexican and EU escalation details; AU escalation is also contextually relevant.

EXPAND: Provide direct links and names. For EU, provide the EDPB authority list link (users select their country authority). For Mexico, INAI site. For Australia, OAIC site and complaint page.

REFLECT: If you are not satisfied with our response, you may be able to escalate your complaint to a relevant privacy authority, depending on your location and the applicable framework:

Mexico: Instituto Nacional de Transparencia, Acceso a la Informacion y Proteccion de Datos Personales (INAI) - Website: https://home.inai.org.mx/
European Union (EU/EEA): You may contact your local data protection authority; a list is available via the European Data Protection Board - https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Australia: Office of the Australian Information Commissioner (OAIC) - Website: https://www.oaic.gov.au/ (privacy complaints information is available on the OAIC website).

Updates

OBSERVE: The section requires notification procedures (email, banners, dashboard alerts), version control with "Last updated: " and a changelog of material changes, advance notice of significant changes (minimum 30 days), and user options to object or close accounts. Dates must be extended to 2026; effective date already set to Nov 2026.

EXPAND: Provide clear "last updated" (month year) and a brief changelog. Do not add extra sections; include changelog as list inside this section. Mention that continued use indicates acceptance, but offer account closure if disagree.

REFLECT: We may update this Privacy Policy to reflect changes to Neosurf Casino practices on neosurf-au.com, legal requirements, or operational needs. We will provide notice in a manner proportionate to the change.

Notification methods: We may notify you by email (to the address linked to your account), by a prominent website banner on neosurf-au.com, and/or by an alert within your account dashboard (where available).
Advance notice for significant changes: For material changes that affect how we collect, use, or share personal information, we will aim to provide at least 30 days' notice before the changes take effect, unless a shorter period is required to address security or legal compliance issues.
Your options: If you object to a material update, you may stop using neosurf-au.com and request account closure (subject to lawful retention obligations described in "Data Retention"). Where processing is based on consent (e.g., marketing), you may withdraw consent without closing your account.

Last updated: November 2026.

Changelog of Material Changes

November 2026: Initial publication for Neosurf Casino on neosurf-au.com; added cross-border transfer safeguards, detailed rights handling aligned with GDPR-style standards and Mexico ARCO principles, and expanded security and complaint escalation information.