Privacy Policy
Last updated: 1 June 2025
1. Introduction
("we", "us", "our") operates the website at .com (the "Website"), which supports our physical casino restaurant venue located in Melbourne, Australia. We are committed to protecting the personal information of every person who visits or interacts with the Website. This Privacy Policy explains how we collect, use, disclose, retain and protect your personal information, and describes the rights available to you under applicable Australian privacy law.
This Policy applies solely to personal information collected through the Website. It does not govern information collected in person at our venue, except where that in-person information originates from a Website interaction such as a reservation request submitted online.
Please read this Policy carefully. By continuing to use the Website you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, please do not use the Website.
2. Data Controller and Contact Details
The entity responsible for processing your personal information is:
| Legal entity | |
|---|---|
| Registered address | |
| ACN | 456 789 123 |
| ABN | 45 972 816 304 |
| Privacy enquiries email | @hotmail.com |
For all privacy-related enquiries, access requests, correction requests or complaints, please contact us at the email address above, marking your message with the subject line "Privacy Enquiry".
3. Personal Information We Collect
We collect personal information only to the extent necessary to operate the Website and to provide the services and information you request from us. The categories of personal information we collect are set out below.
3.1 Contact and Reservation-Request Data
When you submit a reservation request, an enquiry form or any other contact form on the Website, we collect the information you voluntarily provide. This may include:
- Full name
- Email address
- Telephone number
- Preferred date and time of visit
- Number of guests in your party
- Dietary or seating preferences you choose to share
- Any other details included in the free-text message field
Submission of a reservation request or enquiry form is entirely voluntary. However, if you choose not to provide the information marked as required on such a form, we may be unable to process your request.
3.2 Device and Technical Data
When you visit the Website, our servers and any analytics tools we employ automatically record certain technical information from your device and browser. This may include:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Referring URL (the page you visited before arriving at our Website)
- Pages viewed, date and time of access, and duration of visit
- Device type and screen resolution
Where this technical data can be linked to an identifiable individual, it constitutes personal information and is handled accordingly under this Policy.
3.3 Consent and Preference Data
Where we seek your consent before placing non-essential cookies or sending you marketing communications, we record the fact and timing of that consent, along with the version of the notice you were shown and any preferences you selected. This record is maintained to demonstrate compliance with our legal obligations.
3.4 Special-Category Personal Data
We do not intentionally collect special-category personal data through the Website. If you voluntarily include special-category personal data in a free-text field (for example, within a reservation request message), we will treat that information with the heightened care required by law and will use it solely to fulfil your request. We encourage you to share only the information that is necessary for us to assist you.
3.5 Age Verification Information
Our venue operates a casino facility. Access to casino areas is restricted to persons aged 18 years or older in accordance with applicable Victorian law. The Website itself does not process age verification. Age verification is conducted in person at the venue. If any Website feature were to require age confirmation, we would collect only the minimum information necessary for that purpose and would handle it in accordance with this Policy.
5. Purposes of Processing and Legal Bases
We collect and process your personal information only for specified, explicit and legitimate purposes. The table below sets out each purpose, the categories of personal information used and the legal basis on which we rely under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
| Purpose | Categories of personal information | Legal basis |
|---|---|---|
| To process and respond to reservation requests and general enquiries | Contact and reservation-request data | Processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract with you. |
| To operate, maintain and improve the Website | Device and technical data | Our legitimate interests in ensuring the Website functions correctly, remains secure and is continuously improved. |
| To conduct analytics on Website usage | Device and technical data, consent and preference data | Consent (where non-essential cookies are used) or legitimate interests (for aggregated, anonymised data). |
| To send marketing communications about our venue, dining experiences and events | Contact data, consent and preference data | Consent, which you may withdraw at any time. We will only send you marketing communications if you have opted in to receive them. |
| To comply with legal and regulatory obligations | All relevant categories | Compliance with a legal obligation to which we are subject. |
| To detect, investigate and prevent fraudulent or unlawful activity | Device and technical data, contact data | Our legitimate interests in protecting the Website, our business and our guests from harm and unlawful conduct. |
| To maintain records of consent | Consent and preference data | Compliance with a legal obligation and our legitimate interests in demonstrating compliance. |
Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your interests, rights or freedoms, having regard to the reasonable expectations of individuals in a hospitality context.
6. Disclosure of Personal Information
We do not sell, rent or trade your personal information. We may disclose your personal information to the following categories of recipients, but only to the extent necessary for the purposes described in this Policy.
6.1 Internal Recipients
Personal information collected through the Website is accessible only to authorised members of our team who require access to perform their duties, including front-of-house staff responsible for confirming reservations, and management responsible for responding to enquiries.
6.2 Service Providers and Technology Partners
We engage third-party service providers who process personal information on our behalf. These providers are contractually required to handle personal information securely, to use it only on our instructions and for no other purpose, and to comply with applicable privacy law. Categories of service providers include:
- Website hosting and content delivery providers
- Email and communication platform providers
- Analytics and website performance monitoring providers
- IT security and maintenance providers
6.3 Regulatory and Law Enforcement Bodies
We may disclose personal information to government authorities, regulators or law enforcement agencies where we are required or permitted to do so by law, or where disclosure is necessary to protect the safety of any person or to prevent or investigate suspected fraud or unlawful activity.
6.4 Business Transfers
In the event that undergoes a merger, acquisition, restructure or sale of all or part of its assets, personal information held by us may be transferred to the successor entity. We will take reasonable steps to ensure that your personal information continues to be protected in accordance with this Policy following any such transfer.
7. Overseas Disclosure
Some of our third-party service providers may be located outside Australia, including in countries that may not have privacy laws affording the same level of protection as Australian law. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the recipient is bound by obligations that are at least as protective as the Australian Privacy Principles, or we obtain your consent to the transfer.
By submitting personal information through the Website, you acknowledge that your information may be transferred to and stored in countries outside Australia for the purposes described in this Policy. We will not make such transfers unless we are satisfied that appropriate safeguards are in place.
8. Retention of Personal Information
We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by law. The general retention periods we apply are set out below.
| Category of personal information | Retention period |
|---|---|
| Reservation requests and enquiry data (fulfilled or declined) | Up to 2 years from the date of the request, to allow us to handle any follow-up enquiries or complaints. |
| Marketing contact records (opted-in individuals) | Until you withdraw consent, plus a short administrative period of up to 90 days to process the withdrawal. |
| Consent records | Up to 3 years from the date consent was given or withdrawn, to demonstrate compliance with our legal obligations. |
| Device and technical data (server logs) | Up to 12 months from the date of collection, unless required to be retained longer for security investigation purposes. |
| Records required for legal or regulatory compliance | As required by the applicable law or regulation, which may be longer than the periods stated above. |
At the end of the applicable retention period, personal information is securely deleted or de-identified so that it can no longer be associated with you.
9. Security of Personal Information
We take the security of your personal information seriously and implement reasonable administrative, technical and physical safeguards designed to protect it against unauthorised access, disclosure, alteration, loss or misuse. Our security measures include:
- Secure server environments and encrypted data transmission using industry-standard protocols (TLS/SSL) where applicable
- Access controls that restrict access to personal information to authorised personnel only
- Regular review of our information security practices and procedures
- Contractual obligations requiring our service providers to maintain appropriate security standards
No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you become aware of any actual or suspected security breach involving your personal information, please contact us promptly at @hotmail.com.
If we are required by law to notify affected individuals of a data breach, we will do so in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
10. Your Privacy Rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have a number of rights in relation to the personal information we hold about you. These rights are described below.
10.1 Right of Access
You have the right to request access to the personal information we hold about you. We will provide you with access to that information within a reasonable time, and in most cases within 30 days of receiving your request. We may need to verify your identity before granting access.
In limited circumstances, we may be unable to provide access to certain information (for example, where doing so would reveal personal information about another individual, or where an exception under the Privacy Act 1988 (Cth) applies). If we decline to provide access, we will give you written reasons for that decision and information about how you may complain about the refusal.
10.2 Right to Correction
If you believe that personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may ask us to correct it. We will take reasonable steps to correct the information, or if we do not agree that a correction is warranted, we will add a note to the record indicating that you have requested the correction.
10.3 Right to Withdraw Consent
Where we process your personal information on the basis of your consent (for example, to send you marketing communications or to place non-essential cookies), you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, please use the unsubscribe link in any marketing email we send you, or contact us at @hotmail.com.
10.4 Right to Complain
You have the right to complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your personal information. Before lodging a complaint with the OAIC, we encourage you to contact us directly so that we have an opportunity to resolve your concern. Details of how to contact us are set out in Section 12 of this Policy.
10.5 Anonymity and Pseudonymity
Where lawful and practicable, we will give you the option of interacting with us anonymously or using a pseudonym. Please note that if you choose to do so in connection with a reservation request or enquiry, we may not be able to process your request or respond to you.
11. Links to Third-Party Websites
The Website may contain links to third-party websites, platforms or services that are operated independently of . We are not responsible for the privacy practices of those third parties and this Privacy Policy does not apply to their websites or services. We encourage you to review the privacy policy of any third-party website you visit.
12. Persons Under the Minimum Age
Our Website is not directed at persons under the age of 18. We do not knowingly collect personal information from persons under the age of 18. If you believe that a person under 18 has provided us with personal information, please contact us at @hotmail.com and we will take steps to delete that information as soon as practicable.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Website following the posting of an updated Policy constitutes your acknowledgement of the changes.
14. How to Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or to the personal information we hold about you, please contact our privacy team using the details below.
| Entity | |
|---|---|
| Postal address | |
| @hotmail.com |
We aim to acknowledge all privacy enquiries within 5 business days and to resolve them within 30 days. Where a matter is complex or requires additional time, we will advise you of this and keep you informed of progress.
If you are not satisfied with our response to your enquiry or complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.