Privacy Policy

This Privacy Policy explains how Kudos Casino, operated via the website kudos-aussie.com, collects, uses, discloses and protects personal information of players and website visitors. It applies to all users who access or use our services, including real-money and demo play, marketing communications, and support channels. By using our website and services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective from 1 January 2026 and replaces any prior versions published on our websites.

Who We Are

Observe: The project information indicates that Kudos Casino targets Australian players via kudos-aussie.com, relies on RTG/SpinLogic software, and claims a Curaçao eGaming licence, but the specific operating entity and address are not specified. To remain accurate and transparent, we must avoid inventing company details while still providing clear contact points.

Expand: For privacy compliance in Australia and in line with international standards, we identify ourselves by brand and domain, and designate a responsible contact for privacy matters (DPO-equivalent) even if not formally titled as such. We reference the Curaçao regulatory context in a generic way without fabricating licence numbers or corporate names.

Reflect: We therefore provide verifiable contact details and clarify that some corporate particulars are pending formal disclosure, so that users know how to reach us and can assess our status.

Kudos Casino provides online casino gambling services to Australian players on an offshore basis through the website https://kudos-aussie.com ("Website").

For the purposes of this Privacy Policy:

Brand name: Kudos Casino (referred to as "Kudos Casino", "we", "us" or "our").
Primary service domain: kudos-aussie.com, including all subdomains and related pages.
Legacy reference domain: kudoscasino.com may still host certain legacy terms and informational pages, but the operation targeting Australian players is associated exclusively with kudos-aussie.com.

Our online gambling services are offered under a Curaçao eGaming licence as claimed on our site and related materials. The master licence reference (for example 365/JAZ or 1668/JAZ) and precise company registration details are in the process of clarification and may be updated in this Privacy Policy once confirmed.

Data Protection Contact (DPO-equivalent)

E-mail: [email protected] (primary contact for privacy and data protection queries)
Website: https://kudos-aussie.com
Postal address: A dedicated postal contact address for privacy matters will be published on the Website and in this Policy once formalised. Until then, the above email address is the primary contact channel for all privacy-related issues.

Please indicate "Privacy request" or "Data protection" in the subject line of your email to ensure that your request is handled promptly and by appropriately authorised personnel.

What Personal Data We Collect

Observe: Operating an online casino such as Kudos Casino via kudos-aussie.com requires us to collect both identification and behavioural data (for KYC, AML, gameplay and support), as well as technical and payment data. Cookies and other tracking technologies are also used.

Expand: We must transparently classify the categories of personal data we process: identification, contact, account, technical, financial/payment, behavioural, communications, marketing preferences and cookies/tracking data. We also need to clarify that some data (e.g. KYC documents) is sensitive in nature and handled with heightened safeguards.

Reflect: The following categories are tailored to typical RTG/SpinLogic casino operations and Australian players, while avoiding assumptions about specific third-party providers beyond what is functionally necessary.

1. Identification and Contact Data

Full name, date of birth and gender (where provided).
Residential address and country of residence.
E-mail address (including the one you use to contact us or register).
Phone number(s) if supplied for verification, support or marketing preferences.
Copies of identification documents (e.g. passport, driver's licence, national ID) and proof of address (e.g. utility bills, bank statements) provided for KYC/AML checks and account verification.

2. Account and Transaction Data

Username and password (stored in hashed form).
Account registration date, status, verification status and account settings.
Deposit and withdrawal history, including dates, amounts and payment methods (e.g. PayID-to-crypto funnels, Neosurf vouchers, crypto addresses where applicable).
Bonus claims, wagering progress and bonus-related restrictions.

3. Payment and Financial Data

Limited payment instrument data as required to process deposits and withdrawals (e.g. masked card details, payment reference numbers, Neosurf voucher identifiers, crypto wallet addresses).
Records of payment approvals, rejections, chargebacks and refunds.
Information derived from our payment partners for fraud prevention and AML monitoring (e.g. risk scores, bank jurisdiction, transaction flags).

4. Technical and Device Data

IP address and approximate geolocation derived from it.
Device identifiers and characteristics (device type, operating system, browser type and version, language settings, screen resolution).
Log data such as access dates and times, session duration, pages viewed, clickstream data, and error logs.
Information related to device integrity and suspected automated access (e.g. bot detection signals).

5. Gameplay and Behavioural Data

Game preferences, game sessions, and in-game actions (e.g. stakes, wins/losses, time spent on particular games such as Book of Dead and other RTG/SpinLogic titles).
Betting patterns, frequency of play, session duration and responsible gambling indicators (e.g. rapid play, chasing losses).
Bonus usage behaviour, including qualifying bets and compliance with bonus terms.

6. Communications and Support Data

Contents of your communications with us via email, live chat or other support channels.
Support tickets, complaint files, dispute correspondence (including with Central Dispute System (CDS) or other mediators where applicable).
Records of your interactions with our customer support, including call logs if phone support is implemented.

7. Marketing and Preference Data

Your preferences regarding marketing communications (opt-in/opt-out status, channels such as email or SMS).
Data on whether marketing emails have been opened and which links have been clicked (for measuring campaign effectiveness).

8. Cookies and Similar Technologies

Cookies, web beacons, pixels, local storage and similar technologies that store and access information on your device for the purposes described in the "Cookies & Tracking Technologies" section below.
Online identifiers and analytics IDs assigned by us or third-party analytics providers.

Where we collect data that is not directly linked to an identifiable individual, we may aggregate or de-identify such data so that it no longer constitutes "personal information" under applicable laws. We may use such aggregated or anonymised information without further notice.

Legal Basis for Processing

Observe: Although Kudos Casino primarily targets Australian players, best practice is to align with internationally recognised standards such as GDPR, while also taking into account Curaçao requirements and responsible gambling obligations. The site also interacts with other jurisdictions, so multiple legal bases may be relevant.

Expand: We must clearly explain that we process personal data on several legal grounds: consent (especially for marketing and some cookies), contract (to provide the gambling service), legitimate interests (e.g. fraud prevention, analytics) and compliance with legal obligations (KYC/AML, record keeping, tax or regulatory reporting). We also need to clarify that some processing is mandatory for service provision.

Reflect: The following framework is drafted to be compatible with Australian privacy principles and broadly consistent with GDPR-style terminology, while not presenting Kudos Casino as formally subject to GDPR unless and until that applies.

1. Performance of a Contract

We process your personal data where it is necessary to:

Register and manage your player account;
Provide access to our games and related services;
Process deposits, wagers, bonuses and withdrawals;
Provide customer support, including handling complaints and disputes;
Administer loyalty, VIP and promotional programs you participate in.

Without this information, we would not be able to enter into or perform our contract with you, and you would not be able to use our real-money services.

2. Compliance with Legal and Regulatory Obligations

We process personal data to comply with obligations under applicable laws and regulations, including those of our licensing and supervisory authorities. This includes:

Know Your Customer (KYC) identity checks and ongoing verification;
Anti-Money Laundering (AML) and counter-terrorism financing obligations;
Responsible gambling regulations and age verification;
Record-keeping requirements regarding financial transactions and gaming activity;
Cooperation with lawful requests from regulators, law enforcement bodies and courts.

3. Legitimate Interests

We may process your personal data where necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your rights and interests. These legitimate interests include:

Ensuring the security and integrity of our Website, systems and games;
Detecting and preventing fraud, collusion, money laundering, abuse of bonuses or other prohibited conduct;
Conducting internal analysis and statistical reporting to improve our services and user experience;
Protecting our legal rights and defending against claims or disputes;
Personalising content and offers on the Website, subject to your preferences.

Where we rely on legitimate interests, we conduct an appropriate balancing test taking into account your privacy expectations and the nature of the data being processed.

4. Consent

In certain cases we rely on your consent to process personal data, for example:

Sending you direct marketing communications by email, SMS or other electronic channels, where required by law;
Using certain non-essential cookies and similar technologies for advertising or advanced analytics;
Publishing testimonials or promotional content that includes your personal information, where applicable.

You may withdraw your consent at any time, as described in the "Your Rights" and "Cookies & Tracking Technologies" sections, without affecting the lawfulness of processing based on consent before its withdrawal.

Purpose of Processing

Observe: The functions of Kudos Casino via kudos-aussie.com involve core gaming operations, payments, marketing, risk management and compliance. Industry standards require us to clearly specify each purpose.

Expand: We should distinguish operational purposes from marketing, analytics and compliance, so that players can understand why each type of data is needed and how it is used.

Reflect: The following list captures the main purposes relevant to an offshore RTG/SpinLogic casino serving Australian players, including responsible gambling features and dispute resolution.

Provision of Services: To create and manage your account, verify your identity and age, operate casino games, process deposits and withdrawals, apply bonuses and promotions, and provide customer support.
Service Improvement and Personalisation: To monitor and analyse usage patterns, troubleshoot technical issues, improve the functionality and performance of our Website, and tailor content and offers to your interests within the boundaries of applicable law.
Marketing and Promotions: To send you information about bonuses, promotions, tournaments, new games and other offers from Kudos Casino, in accordance with your marketing preferences and applicable opt-in/opt-out rules.
Analytics and Statistics: To compile aggregated statistics on Website usage, game performance, player behaviour and campaign effectiveness, helping us optimise our operations and offerings.
Fraud Prevention and Security: To detect and prevent fraudulent transactions, multiple-account abuse, bonus exploitation, collusion, unauthorised access and other violations of our Terms and Conditions or applicable law.
Responsible Gambling: To monitor play for indicators of problematic behaviour, to apply self-exclusion, deposit limits or cooling-off periods upon your request, and to comply with responsible gambling obligations imposed by our regulators or best-practice standards.
Regulatory Compliance and Dispute Handling: To comply with KYC/AML, tax, reporting and other legal obligations, and to manage complaints, mediation (including through Central Dispute System (CDS) where applicable) and legal disputes.
Business Operations: To manage business planning, audits, risk management, mergers, acquisitions or restructuring, subject to appropriate confidentiality and security measures.

Disclosure & Sharing

Observe: An offshore online casino such as Kudos Casino must rely on various service providers and is subject to potential regulatory and dispute-resolution disclosures. We must specify categories of recipients rather than listing every individual provider, while acknowledging RTG/SpinLogic software and CDS mediation where relevant.

Expand: The disclosure framework should cover payment processors, IT and hosting, game providers, analytics, marketing partners, group entities and authorities, while emphasising that we do not sell personal data as a standalone asset.

Reflect: The following list is structured to meet international privacy expectations and to support compliance with AU-oriented best practice, Curaçao requirements and, where relevant, EU-style transparency principles.

1. Payment and Financial Partners

Banks, payment processors, crypto exchanges and payment gateways that facilitate deposits and withdrawals (including PayID-to-crypto intermediaries, Neosurf-related processors and similar services used for Australian players).
These partners receive only the data that is necessary to process your transactions, perform KYC/AML checks and prevent fraud.

2. Technology, Hosting and Game Providers

Real Time Gaming (RTG)/SpinLogic or other software providers that supply the gaming platform and related tools.
Website hosting providers, content delivery networks, DDoS protection and IT security providers.
Customer support platforms, ticketing systems and communication tools.

3. Analytics, Advertising and Affiliate Partners

Analytics providers (for example, web analytics tools) that help us understand Website traffic, usage and performance.
Marketing service providers, email delivery platforms and SMS providers used to send our communications.
Affiliate partners and advertising networks who promote Kudos Casino to prospective players. Where required, such sharing is based on your consent or legitimate interests, with appropriate opt-out mechanisms.

4. Regulators, Authorities and Dispute Resolvers

Regulatory bodies and licensing authorities (including Curaçao eGaming) when we are required to provide information for licensing, compliance audits or investigations.
Law enforcement agencies, courts and other public authorities where disclosure is necessary to comply with legal obligations, enforce our rights or protect the rights, property or safety of us, our players or others.
Alternative dispute resolution (ADR) bodies such as Central Dispute System (CDS) when you raise a dispute through those channels and we must share relevant account and transaction information to facilitate resolution.

5. Group Companies and Business Transfers

Current or future group companies, parent companies or subsidiaries, where sharing is necessary for intra-group administration, risk management, auditing or consolidated reporting.
Prospective buyers and their professional advisers in connection with any proposed merger, acquisition, asset sale, reorganisation or similar corporate transaction, provided that such parties are bound by confidentiality obligations and use your data only for evaluating the transaction and, if completed, operating the business in line with this Policy.

6. Service Providers under Contract

Professional advisers (e.g. lawyers, auditors, accountants, consultants) who require access to relevant data for the provision of their services.
Other outsourced providers performing functions on our behalf, such as identity verification, sanctions and PEP screening, and responsible gambling tools.

We do not sell your personal information as a commercial product. All third parties that process personal data on our behalf are bound by contractual obligations to keep the information confidential, to implement appropriate security measures, and to process the information only as instructed by us and in compliance with applicable data protection laws.

International Transfers

Observe: Kudos Casino is operated from an offshore environment, with claimed Curaçao eGaming licensing and players primarily in Australia and the United States. This necessarily involves cross-border data transfers.

Expand: We must identify typical transfer flows (Australian players to offshore infrastructure, to payment partners and to dispute mediators) and describe protective mechanisms, while acknowledging that some destinations may not have laws equivalent to the EU or Australia.

Reflect: The safeguards described below are aligned with internationally recognised standards (such as contractual protections and technical security measures) without asserting participation in frameworks we may not formally be party to.

1. Locations of Processing

Your personal data may be stored and processed in, or transferred to, the following locations:

Servers and infrastructure located in data centres outside Australia, including but not limited to the European Union, the United Kingdom, Curaçao and other jurisdictions where our hosting providers or key vendors operate.
Countries where our payment processors, identity verification providers, game providers, customer support and analytics partners are located or have their data centres.

2. Protection Measures for International Transfers

We use technical safeguards such as strong encryption in transit and at rest, access controls and pseudonymisation where appropriate.
We enter into written agreements with our service providers that require them to protect your personal data in accordance with applicable data protection standards and to use it only for specified purposes.
Where required by data protection laws that apply to specific users, we seek to incorporate contractual safeguards (such as clauses modelled on standard contractual clauses issued by recognised authorities) to provide a level of protection comparable to that in the originating jurisdiction.

By using our Website and services, you understand that your personal information may be transferred to and processed in countries that may have different data protection laws than your country of residence. However, we take steps designed to ensure that your information is treated securely and in accordance with this Privacy Policy.

Data Retention

Observe: As an online casino subject to KYC/AML and financial regulations, Kudos Casino must retain certain data for fixed minimum periods, even after account closure. At the same time, we must not keep data longer than necessary for the purposes for which it was collected.

Expand: To align with common regulatory practice (including Curaçao and international AML standards), retention periods of 5 - 7 years for transactional and KYC data are typical, while marketing data can be retained shorter and deleted upon opt-out.

Reflect: The schedule below balances these requirements with data minimisation principles and provides clear criteria for deletion or anonymisation.

1. General Principles

We retain personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.
When determining appropriate retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and legal obligations.

2. Typical Retention Periods

Account and Identification Data: Normally retained for up to 5 years after your account is closed, or longer where required by AML, gambling, tax or other applicable regulations, or where necessary in connection with ongoing disputes or investigations.
Transaction and Gameplay Data: Retained for at least 5 years after the relevant transaction or game session, and potentially up to 7 years to meet financial record-keeping and regulatory requirements.
Marketing and Preference Data: Retained until you withdraw consent or opt out of marketing communications, plus a short period to document and respect your opt-out decision.
Technical Logs and Security Data: Retained for a period typically ranging from several months to 2 years, depending on security and operational needs.
Communications and Support Records: Retained for up to 5 years from the date of the last interaction, or longer where they form part of a complaint or dispute file.

3. Deletion and Anonymisation

When personal data is no longer required, we will securely delete it or irreversibly anonymise it, so that it can no longer be associated with an identified or identifiable individual.
Where we are unable to fully delete data due to legal or technical constraints, we will restrict processing to storage only and apply appropriate safeguards.

Your Rights

Observe: The instructions ask for detailed alignment with GDPR and Mexican privacy law, including ARCO-style rights, even though Kudos Casino targets Australian players. We therefore explain a comprehensive set of rights while clarifying that the practical exercise of these rights will be honoured as far as allowed by applicable law and regulatory obligations.

Expand: Users should be able to access, rectify, delete, restrict, object, port their data and withdraw consent, subject to exceptions (e.g. legal retention duties, AML requirements). We also need to describe procedures, timeframes (30 days), and the fact that exercising core rights is free of charge.

Reflect: The framework below is drafted to be compatible with GDPR and Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) principles, without claiming that all such laws apply in every case, but committing to treat user requests in line with those standards wherever reasonably possible.

1. Overview of Your Rights

Subject to applicable law and certain limitations, you may have the following rights in relation to your personal data:

Right of Access: To obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data and additional information about the processing.
Right to Rectification (Correction): To request that inaccurate or incomplete personal data be corrected or completed.
Right to Erasure (Deletion): To request the deletion of your personal data, particularly where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. We may not be able to fully delete data that we must retain under AML, financial or gambling regulations.
Right to Restrict Processing: To request that we limit the processing of your personal data in certain circumstances, for example while the accuracy of the data is being verified or when you have objected to processing based on legitimate interests.
Right to Object: To object to the processing of your personal data based on our legitimate interests, including profiling, on grounds relating to your particular situation. You have an unconditional right to object to the processing of your personal data for direct marketing.
Right to Data Portability: To receive certain personal data you have provided to us in a structured, commonly used and machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal, but may affect our ability to provide some services.

2. Alignment with Mexican ARCO Rights (Where Relevant)

Where Mexican data protection regulations (such as the LFPDPPP) apply, you may exercise ARCO rights (Access, Rectification, Cancellation and Opposition) in a similar manner. We will evaluate such requests in accordance with those principles, balanced against our legal obligations (including AML and gambling regulations) and our need to maintain records for defence of legal claims.

3. How to Exercise Your Rights

Submit a Request: Please send your request to [email protected] with the subject line "Privacy request" or "Data protection request". Clearly describe the right you wish to exercise and provide sufficient information to verify your identity (such as your username, registered email address and, if necessary, additional identifying information).
Verification: For your security, we may need to request additional information to verify your identity before acting on your request. If you are acting on behalf of another person, we may ask for proof of authority.
Response Timeframe: We aim to respond to all valid requests within 30 days of receipt and verification. In cases of complex or numerous requests, this period may be extended by a further 30 days, in which case we will inform you of the extension and the reasons for it.
Fees: We will not charge a fee for processing your request unless it is manifestly unfounded or excessive (for example, repeated requests). If a fee is applicable, we will inform you before proceeding.
Limitations: Your rights may be limited where the exercise of the right would adversely affect the rights and freedoms of others, conflict with legal obligations (e.g. AML record retention), or prevent us from establishing, exercising or defending legal claims.

Cookies & Tracking Technologies

Observe: Kudos Casino, via kudos-aussie.com, uses cookies and similar technologies for core functionality, security, analytics and marketing. Players must be informed about the types of cookies and how to control them.

Expand: We distinguish between session and persistent cookies, first-party and third-party cookies, and categorise them as strictly necessary, functional, analytics and advertising.

Reflect: The structure below is designed to provide clarity and to align with evolving consent standards, including cookie banners and browser-based controls, while recognising that some cookies are essential for the casino to function.

1. Types of Cookies We Use

Session Cookies: Temporary cookies that are stored on your device only while your browser is open and are automatically deleted when you close your browser. They enable core site functions such as maintaining your session while you navigate the games lobby.
Persistent Cookies: Cookies that remain on your device for a set period or until you delete them. They allow us to remember your preferences (such as language or login details) and measure the effectiveness of our services and marketing campaigns.
First-Party Cookies: Cookies set directly by kudos-aussie.com for the purposes of providing and improving our services.
Third-Party Cookies: Cookies set by third parties such as analytics providers, affiliate trackers or advertising networks.

2. Categories of Cookies

Strictly Necessary Cookies: Required for the Website to function properly and for you to move around the site and use its features (e.g. to log into secure areas, place bets, process payments). These cookies cannot be switched off in our systems.
Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your region or language and maintaining preferences across sessions.
Analytics/Performance Cookies: Help us understand how visitors use our Website, which pages are most frequently visited, and how our marketing campaigns perform. The information collected is usually aggregated.
Advertising/Targeting Cookies: Used by us and our advertising partners to deliver relevant ads and measure the effectiveness of our marketing, including via affiliate partners. They may track your browsing across different sites.

3. Managing Cookies

Browser Settings: Most web browsers allow you to control cookies through their settings. You can usually configure your browser to block or delete cookies, including those from kudos-aussie.com. Please note that blocking certain cookies may impact the functionality of the Website and your ability to log in or play games.
On-Site Controls: Where available, we may offer an internal cookie management panel or banner that allows you to accept or reject certain categories of non-essential cookies.
Third-Party Opt-Outs: Some third-party providers offer their own opt-out mechanisms for analytics or advertising cookies. More information can be found on their respective websites.

Data Security

Observe: Online gambling platforms handle sensitive financial and identity information, requiring robust security practices. Kudos Casino via kudos-aussie.com must demonstrate adherence to industry-standard security measures.

Expand: We need to address encryption, access control, MFA, monitoring, staff training, incident response and alignment with recognised standards (e.g. ISO 27001, SOC 2) where applicable, without misrepresenting certifications we may not hold.

Reflect: The following measures describe the security posture we aim to maintain and continually improve, while acknowledging that no system is absolutely secure.

1. Technical Safeguards

Encryption in Transit: Data transmitted between your browser and our servers is protected by Transport Layer Security (TLS) 1.2 or higher, helping prevent interception or tampering.
Encryption at Rest: Sensitive data is stored using strong encryption and other protective mechanisms to reduce the risk of unauthorised access.
Access Controls: Access to personal data is restricted on a need-to-know basis to authorised staff and service providers, and is subject to authentication and authorisation controls.
System Hardening and Monitoring: We implement firewalls, intrusion detection/prevention systems and regular monitoring to detect unusual or suspicious activity.

2. Organisational and Procedural Measures

Security Policies: We maintain internal policies and procedures governing information security, acceptable use and incident response.
Staff Training: Personnel with access to personal data receive training on data protection, confidentiality and security best practices.
Vendor Management: We select service providers that commit to appropriate security standards and data protection obligations, and we monitor their performance as reasonably practicable.
Security Reviews: We periodically review our systems and processes and may engage independent experts to conduct security assessments.

3. Incident Response

We maintain procedures to detect, investigate and respond to suspected data breaches or security incidents.
In the event of a data breach affecting your personal data, we will take appropriate measures to mitigate the impact and, where required by law, notify affected individuals and relevant authorities.

Although we strive to protect your personal data, no online system can be guaranteed to be 100% secure. You are also responsible for keeping your login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

Complaints & Contacts

Observe: Users must have clear channels to raise privacy concerns, including internal contact details and escalation options to relevant supervisory authorities. The instructions mention Mexican and EU authorities as examples, even though the service targets Australian players and is licensed offshore.

Expand: We will provide a step-by-step complaint procedure, including response times, and indicate that users may seek recourse from appropriate data protection authorities in their jurisdiction or where they believe their rights have been infringed.

Reflect: While we cannot definitively identify each user's supervisory authority, we can indicate that those located in Mexico, the EU or other regions may contact their local data protection authority, and we will cooperate with legitimate investigations.

1. Contacting Us

If you have any questions, concerns or complaints regarding this Privacy Policy or our handling of your personal data, please contact us first so that we can attempt to resolve the issue directly:

E-mail: [email protected]
Website: https://kudos-aussie.com

Please describe your concern in as much detail as possible and include relevant account information (such as your username and registered email address) so that we can identify you and address the issue.

2. Internal Complaint Procedure

Submission: Send your complaint to [email protected] with the subject line "Privacy complaint".
Acknowledgement: We will acknowledge receipt of your complaint within a reasonable time, generally within 5 business days.
Investigation: Your complaint will be reviewed by appropriately authorised personnel, who may contact you for additional information or clarification.
Response: We aim to provide a substantive response within 30 days of receiving all necessary information. If we cannot meet this timeframe due to complexity or volume, we will inform you of the delay and provide an updated estimate.
Further Steps: If you are dissatisfied with our response, you may have the right to escalate your complaint to a relevant data protection authority or other supervisory body.

3. Escalation to Supervisory Authorities

Depending on your place of residence and the laws that apply to your situation, you may be entitled to lodge a complaint with a data protection authority or similar supervisory body in your country or region.

Mexico: Individuals located in Mexico may have the right to lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) regarding alleged violations of Mexican data protection laws.
European Union/EEA: Individuals located in the EU/EEA may have the right to lodge a complaint with the data protection authority in their country of residence, place of work or place of the alleged infringement, in accordance with GDPR principles.
Other Jurisdictions (including Australia): You may also have rights to complain to or seek guidance from consumer protection, gambling or privacy regulators in your jurisdiction. We will cooperate with any competent regulatory or supervisory authority that contacts us regarding our data processing practices.

Updates

Observe: Privacy policies must evolve in response to regulatory changes, new technologies and operational adjustments. Kudos Casino must notify users of material changes via kudos-aussie.com and provide a clear "last updated" date.

Expand: We specify how users will be informed (email, banners, dashboard notifications), the use of version control and the provision of advance notice (minimum 30 days) for significant changes where feasible.

Reflect: This approach promotes transparency and gives users meaningful time to review changes and decide whether to continue using our services.

1. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, legal requirements or other factors. When we make changes, we will revise the "Last updated" date at the end of this document. In the case of material changes that significantly affect your rights or our processing of your personal data, we will take additional steps to inform you.

2. Notification Methods

E-mail: We may send an email notification to the address associated with your account summarising the key changes.
Website Notices: We may display banners, pop-up notices or highlighted links on kudos-aussie.com to draw your attention to the updated Policy.
Account Dashboard: Where applicable, we may notify you via messages within your player account area.

3. Advance Notice and Your Choices

For material changes that significantly affect your rights or the way we process your data, we will, where reasonably practicable, provide at least 30 days' notice before the changes take effect.
By continuing to use our Website and services after the effective date of the updated Privacy Policy, you acknowledge that you have read and understood the changes.
If you do not agree with the updated Policy, you may choose to stop using our services and, where applicable, request that we close your account and exercise any of your data protection rights as described above.

Last updated: January 2026