Privacy Policy

This Privacy Policy explains how truefortune.games collects, processes, uses, and protects the personal information of players and visitors using our services. It is essential to outline our practices in accordance with legal and regulatory obligations, particularly under Australian law and relevant industry standards. This Privacy Policy applies to all users who access, register with, or otherwise interact with the truefortune.games website and associated services. Effective date: 1 June 2025.

Who We Are

OBSERVE: Identification of the operator is crucial for regulatory clarity and lawful data accountability under AU privacy law.
EXPAND: While current records indicate operational licensing under Curacao (#8048/JAZ), truefortune.games is operated by SSC Entertainment N.V. and related group entities, as clarified by available corporate data. Contact and DPO (Data Protection Officer) details are provided for transparency and compliance.

Legal Operator: truefortune.games is operated by SSC Entertainment N.V. and its affiliated entities, including Blue Media N.V., HD Trading, and True Dynasty Group. Additional parent company structure and regulatory specifics may be clarified upon user request.
Registered Address: Legal address and postal address are currently under review for disclosure; inquiries are processed via our official website contact page.
Registration & Licensing: Operating under eGaming License #8048/JAZ, issued by the Government of Curacao (license validated through 2025), covering online gambling services. Regulatory status is subject to ongoing clarification in line with best practice for cross-jurisdictional data protection.
DPO Contact: All privacy and data protection inquiries should be directed to our Data Protection Department:
Name: Jackson Smith
Contact Method: Please use the official contact form at truefortune.games.

REFLECT: This section fulfills AU and industry transparency obligations by disclosing operational, legal, and contact credentials, with a clear process for further information access.

What Personal Data We Collect

OBSERVE: Detailed explanation of data types is required under AU Privacy Act and relevant gambling regulations to ensure informed consent.
EXPAND: Data collection encompasses multiple categories relevant to gaming operation, security, and user experience. Implicit requirements include both direct and indirect identifiers as well as technical tracking.
REFLECT: Comprehensive data transparency is foundational to user trust and regulatory compliance.

Personal Identification Data: Includes full name, date of birth, email address, phone number, physical address (collected during registration, verification, or support queries).
Technical Data: IP addresses, device characteristics, browser type, log files, login timestamp, session records, and other network metadata.
Payment and Financial Data: Banking information, card details (where applicable), e-wallet identifiers, transaction records, deposit/withdrawal history.
Behavioral & Gameplay Data: Betting history, wager amounts, gameplay analytics, win/loss records, interaction logs, page clicks, navigation patterns.
Cookie & Similar Tracking Technologies: Session cookies, persistent cookies, third-party cookies, web beacons, and other tracking technologies for site functionality, analytics, and marketing.

Regional Compliance Note: Data collection strictly aligns with AU legal obligations, ensuring no excessive or unneeded personal data is processed.

Legal Basis for Processing

OBSERVE: AU law (notably Australian Privacy Principles) demands explicit grounds for processing, including express and implied consent.
EXPAND: Multi-layered grounds address user contract, statutory mandates, operational necessity, and legitimate interests critical for anti-fraud and regulatory purposes.
REFLECT: Legal basis ensures all processing is rigorous, justified, and auditable.

User Consent: Personal data is processed upon actively provided, informed consent, including acceptance of this policy and related terms of service. Consent can be managed and withdrawn at any time, subject to regulatory exceptions.
Contract Fulfillment: Processing is essential to administer user accounts, execute game transactions, provide payouts, and deliver customer service in accordance with our terms and conditions.
Legitimate Interests: Includes maintaining network security, safeguarding against fraud, optimising services, and generating internal analytics, balanced carefully against individual privacy rights.
Legal Obligations: Fulfillment of statutory and regulatory requirements such as Know Your Customer (KYC), Anti-Money Laundering (AML), and reporting obligations under AU gambling law.

REFLECT: This structure ensures that every instance of data processing by truefortune.games is either consented, contractually necessary, legally required, or justified by overriding operational security needs.

Purpose of Processing

OBSERVE: Clear definition of data usage is mandated to avoid ambiguity and ensure users understand how their information is employed.
EXPAND: Purposes must cover the range from operational activities to marketing and compliance, with explicit mention of analytics and fraud prevention.
REFLECT: Transparency regarding data use enhances both user autonomy and regulatory trust.

Provision of Casino Services: To operate user accounts, enable access to the gaming platform, process payments, and deliver customer support.
Improvement of Services: To enhance website performance, streamline user interfaces, develop new features, and resolve technical issues.
Fraud Detection and Prevention: To detect, investigate, and prevent fraudulent activities, security breaches, and violations of gambling laws or terms of service.
Marketing and Communications: To deliver promotional communications, special offers, and newsletters (subject to user consent and opt-out options).
Analytics and Research: To perform statistical and analytical reviews of site usage, improve risk management, and satisfy regulatory reporting requirements.

Disclosure & Sharing

OBSERVE: Users must be informed about all third-party disclosures in compliance with AU privacy regulation.
EXPAND: Disclosure encompasses operational partners (e.g., payment processors), third-party service providers, regulatory authorities, and advertising networks (where user consent is secured). Implied need for mentioning affiliate relationships due to cross-brand presence.
REFLECT: Legally precise limitations and justifications are crucial to governing data flows.

Payment Service Providers: Data may be shared with regulated financial partners to facilitate deposits, withdrawals, and payment processing, solely as necessary for secure transactions.
Technical and Support Service Vendors: Managed IT providers, customer support solutions, technical infrastructure partners (subject to confidentiality agreements).
Regulatory and Legal Authorities: Disclosures as legally mandated to regulators, courts, or law enforcement, including AU governmental agencies and, where applicable, Curacao licensing authorities.
Affiliates and Group Companies: Data may be accessed by company affiliates and group entities (including subsidiaries like Cocoa Casino, This Is Vegas, and others) strictly for service provision, compliance, or user benefit, never for unrelated purposes.
Advertising and Analytics Networks: Personal data is only shared with third-party advertising or analytics partners with user consent, primarily for marketing or audience analysis.

Legal Obligation: All third parties are bound by data protection agreements requiring compliance with Australian privacy law and equivalent safeguards.

International Transfers

OBSERVE: Australian law requires explicit disclosure of any overseas disclosures and the associated protective measures.
EXPAND: truefortune.games may transfer data to partners, group companies, or technical service providers located outside Australia, including in the EU, USA, or Curacao.
REFLECT: Transfers are always underpinned by documented contractual protections.

Destination Territories: Data may be processed in or transferred to service providers in Curacao, the European Union, the United States, or other relevant jurisdictions in line with operational needs.
Protective Guarantees: International transfers are governed by robust data protection agreements incorporating the latest standard contractual clauses (SCCs), ensuring privacy standards equivalent to those required in Australia.
User Notification: Users are notified in advance before any significant changes to the scope of international transfers or the protective measures applied.

Legal Note: By using the truefortune.games platform, users acknowledge that some data may be subject to overseas transfer, always protected by enforceable safeguards.

Data Retention

OBSERVE: The Privacy Act (Cth) and AU industry practice specify that personal data must not be kept longer than necessary.
EXPAND: Retention periods vary by data category, with legal and operational exceptions for financial, regulatory, or dispute purposes.
REFLECT: Deletion rights and triggers are clearly stated.

Personal Identification Data: Retained for up to five (5) years after account closure or latest user transaction, in compliance with AML and recordkeeping obligations through 2025.
Technical and Behavioral Data: Stored for up to three (3) years to support security investigations and system audits, unless earlier deletion is requested by the user and not restricted by law.
Payment & Financial Records: Maintained for a minimum of five (5) years after the last transaction, as required for anti-fraud and legal audit purposes.
Cookie & Tracking Data: Retention as per the cookie type (see "Cookies & Tracking Technologies" below), generally for up to two (2) years or user settings, whichever is shorter.
Deletion Criteria: Data is deleted or anonymised upon expiry of the retention period, upon user request (where legally permitted), or once processing is no longer required for the original purpose.

Regional Compliance Note: Retention timeframes are subject to ongoing legal review and may extend to fulfil legitimate legal or regulatory requirements.

Your Rights

OBSERVE: AU law confers a range of rights upon data subjects; truefortune.games must provide effective means for exercise.
EXPAND: These rights span access, correction, erasure, restriction, objection, portability, and marketing preferences.
REFLECT: Procedures are transparent, with clear escalation where needed.

Access: Users can request a copy of their personal data held by truefortune.games at any time, typically processed within 30 days of request.
Correction: Users are entitled to update or rectify inaccurate or incomplete information.
Deletion ("Right to be Forgotten"): Users may request erasure of their data, subject to retention exceptions required by law or regulatory policy.
Restriction of Processing: Processing of data may be limited on certain grounds (e.g., contesting its accuracy or lawfulness), as permitted by AU regulations.
Objection: Users can object to specific uses of their data, such as for direct marketing.
Data Portability: Individuals have the right to obtain their personal data in a commonly used, machine-readable format.
Withdrawal of Consent: Marketing and promotional communications may be ceased at any time via user preference controls or by contacting our Data Protection Department.

Procedural Step: All requests or complaints regarding these rights should be directed through our official contact form; proof of identity will be required to process such requests in compliance with AU law.

Cookies & Tracking Technologies

OBSERVE: Cookies policy must fully inform users about types, purposes, and control mechanisms.
EXPAND: Industry standards and AU ePrivacy requirements entail explicit explanation and clear opt-out mechanisms.
REFLECT: User control mechanisms and cookie management tools are highlighted for transparency.

Session Cookies: Temporary files that enable core functionality during a browsing session (e.g., login, bet placement); deleted when your session ends.
Persistent Cookies: Stored on your device for longer durations (up to 2 years), used for remembering preferences and improving the user experience.
Third-Party Cookies: Set by advertising, analytics, or affiliate partners (including advertising networks) with explicit user consent.
Functional/Purpose-Based Use: Some cookies are critical for security or navigation; others enhance analytics, marketing, or usability.
User Control: Cookie preferences can be managed via browser settings, and extensive controls are provided through user account panels on truefortune.games. Detailed instructions are outlined in our Cookies Policy.

Legal Disclaimer: Disabling certain cookies may limit access to full service functionality.

Data Security

OBSERVE: AU requirements and industry standards dictate that organisational and technical measures must be demonstrably robust.
EXPAND: Security is multi-layered: from encryption to internal risk controls and periodic audits.
REFLECT: This section ensures users are protected by design and by default.

Encryption & Secure Transmission: All user data is delivered via SSL/TLS encrypted connections; sensitive information is stored on secure, access-controlled servers.
Access Controls: Only authorised personnel with a defined operational need can access personal data.
Continuous Monitoring: Security systems monitor for unauthorised access, intrusion, and abuse on a 24/7 basis.
Periodic Security Audits: Regular technical reviews and vulnerability assessments ensure ongoing compliance with both AU and industry security standards.
Staff Training & Awareness: Employees receive mandatory privacy and security training annually, compliant with AU regulations through 2025.

Legal Clause: While truefortune.games deploys advanced safeguards, no system is entirely immune to risk; users are encouraged to maintain their own security vigilance.

Complaints & Contacts

OBSERVE: Effective redress mechanisms are a legal requirement under AU privacy law.
EXPAND: Clear point of contact and complaint escalation pathway must be provided; transparency is essential.
REFLECT: User complaints are handled in accordance with fair and prompt dispute resolution principles.

Data Protection Contact: All requests, queries, or complaints about privacy or personal data handling should be sent through the official contact form at truefortune.games, to the attention of Jackson Smith (Data Protection Department).
Complaint Procedure: Complaints must include a clear description and supporting information. Upon receipt, the Data Protection Department will acknowledge and investigate within 30 days. If unresolved, users may escalate complaints to the Office of the Australian Information Commissioner (OAIC).

Regional Note: The complaints process reflects best-practice standards under Australian privacy law, ensuring both fairness and regulatory oversight.

Updates

OBSERVE: Australian law and standard industry practices require that users are promptly informed about material policy changes.
EXPAND: Notification methods and policy dates must be fully transparent to demonstrate up-to-date compliance.
REFLECT: Version control and user engagement are optimised for ongoing trust.

Notification of Changes: truefortune.games will notify users of material changes to this Privacy Policy via website banners, email, or account messaging at least 14 days prior to taking effect, as mandated by AU law.
Policy Review: This Privacy Policy is reviewed regularly and updated as needed to reflect legal, operational, or technological changes.
Last Revision Date: 1 June 2025.

Legal Disclaimer: Continued use of truefortune.games services after changes take effect constitutes acceptance of the revised Privacy Policy.