Conditions for storing and processing player data
In New South Wales (NSW), the storage and handling of gambler data in the gambling industry is governed by a combination of local and federal regulations, including the Privacy Act 1988 (Cth), Casino Control Act 1992, Gaming Machines Act 2001 and Liquor & Gaming NSW requirements. The purpose of these rules is to protect customer privacy, prevent abuse and ensure compliance with cybersecurity standards.
1. Personal data to be protected
Full name, date of birth, address and contact information.
Identity documents (passport, driver's license).
Payment details and transaction history.
History of bets, winnings and bonus transactions.
Data related to self-exclusion and responsible gambling.
2. Data storage conditions
Data shall be stored on servers complying with ISO/IEC 27001 or equivalent requirements.
Access to information is limited to authorized employees.
Mandatory use of encryption for payment information and documents.
The minimum retention period is 7 years for financial and identification data in accordance with the requirements of AML/CTF and tax legislation.
3. Data processing conditions
Processing must be done only with the player's consent, except as required by law (AML, investigations).
Operators are required to provide the player with access to his personal data and the ability to adjust them.
Transfer of data to third parties is allowed only if there is a legal basis or by order of the court.
4. Cybersecurity measures
Regular software updates and protection against unauthorized access.
Conduct security audits and penetration tests.
Data breach response plan, including mandatory notification of victims and the regulator within 72 hours.
5. Sanctions for violations
Fines under the Privacy Act 1988 - up to 2.5 million AUD for organizations.
Possible suspension or revocation of a gambling license.
Lawsuits from affected players.
6. Role of regulators
Liquor & Gaming NSW monitors compliance with industry requirements and the Office of the Australian Information Commissioner (OAIC) monitors general data protection standards.
Conclusion:
1. Personal data to be protected
Full name, date of birth, address and contact information.
Identity documents (passport, driver's license).
Payment details and transaction history.
History of bets, winnings and bonus transactions.
Data related to self-exclusion and responsible gambling.
2. Data storage conditions
Data shall be stored on servers complying with ISO/IEC 27001 or equivalent requirements.
Access to information is limited to authorized employees.
Mandatory use of encryption for payment information and documents.
The minimum retention period is 7 years for financial and identification data in accordance with the requirements of AML/CTF and tax legislation.
3. Data processing conditions
Processing must be done only with the player's consent, except as required by law (AML, investigations).
Operators are required to provide the player with access to his personal data and the ability to adjust them.
Transfer of data to third parties is allowed only if there is a legal basis or by order of the court.
4. Cybersecurity measures
Regular software updates and protection against unauthorized access.
Conduct security audits and penetration tests.
Data breach response plan, including mandatory notification of victims and the regulator within 72 hours.
5. Sanctions for violations
Fines under the Privacy Act 1988 - up to 2.5 million AUD for organizations.
Possible suspension or revocation of a gambling license.
Lawsuits from affected players.
6. Role of regulators
Liquor & Gaming NSW monitors compliance with industry requirements and the Office of the Australian Information Commissioner (OAIC) monitors general data protection standards.
Conclusion:
- In NSW, gambling operators are required to comply with strict rules for storing and processing player data. Failure to comply with these requirements carries serious financial and reputational risks, therefore, reliable protection of personal information is a key element of legitimate work in the market.
