Bizzo Casino Privacy Policy — Australian Players

This Privacy Policy explains how Bizzo Casino ("Bizzo", "we", "us", "our"), operated by TechSolutions Group N.V. (registered in Curaçao, registration number 145353, registered office Abraham de Veerstraat 9, Willemstad, Curaçao), collects, uses, stores, shares and protects the personal information of players who access our services from Australia.

This page is written in plain English and is intended to be read by players, not lawyers. The full legal version is available on the website footer under "Privacy Policy". Where this summary differs from the full legal document, the full legal document prevails.

Last updated: 4 May 2026.

1. Who we are and how to reach us

• Operator: TechSolutions Group N.V.
• Licence: Curaçao eGaming Master Licence No. 8048/JAZ, sub-licensed.
• Data Protection Contact: [email protected]
• General Support: [email protected]

For Australian players, while the Privacy Act 1988 (Cth) does not directly bind an offshore Curaçao operator, Bizzo voluntarily applies the Australian Privacy Principles (APPs) as a baseline standard of care for AU customers, and applies the EU GDPR standard globally.

2. What information we collect

Information you give us directly

• Account registration: name, date of birth, email, mobile number, residential address, country, state/territory, postcode, gender (optional), chosen username and password (the password is stored only as a salted hash — Bizzo cannot read your plaintext password).
• KYC verification: scan or photo of government-issued ID, proof of address, proof of payment method.
• Payment information: card number (last 4 digits stored, full number tokenised by the payment processor), e-wallet account ID, crypto wallet address.
• Communications: the content of support chats, emails to support, bug reports.
• Self-exclusion / responsible gambling: any deposit/loss/session limits you set, self-exclusion requests.

Information we collect automatically

• Technical: IP address, device type, operating system, browser, screen resolution, timezone, language.
• Behavioural: pages viewed, games played, bet history, deposit/withdrawal history, login times, session length.
• Cookies & similar technologies: session cookies (required), analytics cookies (Google Analytics 4, anonymised), and bonus-attribution cookies if you arrived via an affiliate link.

Information from third parties

• KYC service providers: identity-verification matches (e.g. Sumsub, Jumio) returning a pass/fail and any flagged risk indicators.
• Payment providers: transaction success/failure, fraud-risk score, chargeback history.
• Affiliate networks: which affiliate referred you and the campaign code, used to attribute commission.

We do not purchase data from data brokers, scrape social media, or build advertising profiles outside our own systems.

3. Why we collect it (lawful basis)

You can withdraw marketing consent at any time from My Account → Settings → Communications, or by clicking "unsubscribe" in any marketing email. Withdrawing consent does not affect transactional emails — those are required for operating your account.

4. Who we share it with

Bizzo does not sell your personal information. We share it only with the following categories of recipient, and only as needed:

• Game providers (Pragmatic Play, Evolution, NetEnt, etc.) — receive your username/session token to render games. They do not receive name, address, or payment information.
• Payment processors — receive name, transaction amount, and method-specific details (card token, wallet ID).
• KYC providers — receive ID documents and personal details for verification.
• Cloud hosting — Bizzo's infrastructure runs on AWS in the EU (Frankfurt). All data is encrypted at rest and in transit.
• Affiliate networks — receive only an anonymised player ID and aggregated stats for commission calculation.
• Regulators and law enforcement — where legally compelled (Curaçao Gaming Control Board, AUSTRAC where applicable, court orders).
• Independent dispute resolution — if you escalate a complaint to AskGamblers, CasinoMeister or similar, the relevant case data may be shared with them with your consent.

5. International transfers

As an offshore operator, your data leaves Australia. The primary processing locations are:

• Curaçao (operator headquarters, manual review by compliance staff)
• European Union (cloud hosting, KYC processing)
• United Kingdom (some support staff)

All transfers are covered by Standard Contractual Clauses (or equivalent) and the receiving processors are contractually bound to the same protection standards as Bizzo itself.

6. How long we keep your data

After the retention period, data is permanently deleted or anonymised.

7. Your rights

Regardless of jurisdiction, Bizzo offers all players the following rights, exercisable by emailing [email protected] from your registered email address:

1. Access — receive a copy of all personal data we hold about you (free of charge, within 30 days).
2. Rectification — correct inaccurate or incomplete data.
3. Erasure ("right to be forgotten") — delete data, subject to overriding AML retention obligations.
4. Restriction — pause processing while a dispute is investigated.
5. Portability — receive your data in a machine-readable JSON file.
6. Objection — object to specific processing (most commonly, marketing).
7. Withdraw consent — at any time, with no effect on the lawfulness of processing before withdrawal.
8. Complain — to your local data protection authority. In Australia, that is the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Security

• All traffic to and from Bizzo is encrypted with TLS 1.3 (HSTS preloaded, HTTP/2).
• Passwords are stored as bcrypt salted hashes.
• KYC documents are stored encrypted at rest with AES-256, and access is logged and audited.
• The platform is subjected to regular penetration testing by a third-party security firm.
• Optional two-factor authentication (TOTP) is available and strongly recommended.
• Players are notified by email of any new device login or password change.

In the event of a confirmed breach of personal data, Bizzo will notify affected players within 72 hours of becoming aware of the breach, in line with GDPR standards, even where Australian law would not strictly require it.

9. Cookies

Bizzo uses three categories of cookies:

• Strictly necessary — session, authentication, CSRF protection. Cannot be disabled.
• Analytics — Google Analytics 4 with IP anonymisation. Can be disabled at first visit (cookie banner) or in My Account → Privacy.
• Marketing / attribution — affiliate tracking. Can be disabled at first visit.

You can clear cookies at any time from your browser. Doing so will log you out and reset your bonus-attribution.

10. Children

Bizzo's services are strictly for adults aged 18 or older. We do not knowingly collect data from anyone under 18. If we discover an underage account, it is closed immediately and the data is purged in line with our obligations. Parents and guardians who believe a minor in their household has registered should contact [email protected] immediately.

11. Changes to this policy

Material changes are notified at least 30 days in advance by email and a banner at the top of the site. Continued use of Bizzo after the effective date constitutes acceptance. Historical versions are available on request from [email protected].