Privacy Policy
1. Who we are
BAGGYBET PTY LTD (ABN 61 673 015 275, ACN 673 015 275) of 3 Tilba Street, Narooma NSW 2546, Australia operates baqgybet.com under NSW bookmaker licence 6421/2022/WB. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our Privacy Officer can be reached at privacy@baqgybet.com or by post to the address above.
2. What personal information we collect
- Identity data — name, date of birth, residential address, and identity document details used for verification.
- Contact data — email address and mobile number.
- Financial data — payment method details (debit card tokens, bank account and PayID identifiers), deposits, withdrawals and account balance.
- Wagering data — bets placed, markets viewed, settlement outcomes, and responsible gambling settings such as limits and exclusions.
- Technical data — IP address, device identifiers, browser type and usage logs (cookies and similar technologies are personal information under the Privacy Act — see section 7).
- Communications — messages you send us and our replies.
A collection notice consistent with APP 5 is shown at the point of collection — most prominently on the registration form. If you do not provide the information we ask for at registration, we cannot open an account, because verification is a legal precondition.
3. Purposes of collection, use and disclosure
- To open, verify and operate your betting account and settle bets (performance of our agreement with you).
- To meet legal obligations — identity verification, AML/CTF monitoring and reporting to AUSTRAC, licence obligations to Liquor & Gaming NSW, responsible gambling obligations including BetStop checks, and record-keeping.
- To prevent fraud, collusion and sports-integrity breaches, and to keep the service secure.
- To provide support and handle complaints.
- To operate and improve the site, using analytics only with your consent.
- To measure our own advertising, only with your consent.
We do not sell personal information, and we do not send marketing to self-excluded customers or to anyone registered with BetStop.
4. Sensitive information and identity documents
Identity documents (such as driver licence or passport details) are collected solely for verification required by law. They are transmitted encrypted, handled by approved identity verification providers, and are not used for any other purpose. We do not collect sensitive information such as health or biometric data unless you volunteer it in a support context (for example, when discussing gambling harm), in which case it is used only to help you and protected accordingly.
5. Who we disclose personal information to
We disclose personal information only as needed, to these eight categories of recipients:
- Identity verification providers — to verify age and identity against Australian records.
- Payment providers and banks — to process deposits and withdrawals.
- Fraud prevention and security services — to detect fraud and protect accounts.
- Regulators and government agencies — Liquor & Gaming NSW, AUSTRAC, the ATO and law enforcement, where required by law.
- Racing and sporting integrity bodies — racing controlling bodies, league integrity units and Sport Integrity Australia, under our licence and race fields obligations.
- Professional advisers — lawyers, auditors and accountants, under confidentiality.
- IT and hosting providers — who store and process data on our behalf under contract.
- Analytics and advertising services — only where you have consented via our cookie banner.
6. Overseas disclosure
Some IT and verification providers process data in secure facilities outside Australia (principally in the United States and the European Union). Before disclosing personal information overseas we take reasonable steps, including contractual safeguards, to ensure recipients handle it consistently with the APPs.
7. Cookies and similar technologies
Cookies, local storage keys and similar identifiers can be personal information. Our Cookie Policy lists every cookie and storage key we use — name, provider, purpose, category and expiry — and explains the consent mechanism. Strictly necessary items (the age gate, your consent choice, session security) operate without consent; everything else waits for yours.
| Name | Provider | Purpose | Type | Expiry |
|---|---|---|---|---|
| PHPSESSID | baqgybet.com | Session security | Cookie | Session |
| bqb_age_v1 | baqgybet.com | Records your age-gate confirmation | Local storage | Until cleared |
| bqb_consent_v1 | baqgybet.com | Stores your cookie choices | Local storage | Until cleared |
| bqb_slip_v1 | baqgybet.com | Keeps your bet slip between pages | Local storage | Until cleared |
| _ga / _ga_* | Google Analytics | Anonymous usage statistics | Cookie | Up to 2 years |
| _gcl_au | Google Ads | Measures our own campaigns | Cookie | 90 days |
8. Data security
Personal information is protected by encryption in transit and at rest, access controls on a need-to-know basis, logging and monitoring, and segregation of identity-document storage. Staff receive privacy and AML training. No system is perfectly secure, which is why we also minimise what we collect and how long we keep it.
9. Retention and deletion
We keep account, transaction and verification records for 7 years after account closure, as AML/CTF law requires. Support communications are kept for 2 years. Technical logs are kept for up to 13 months. When retention periods end, records are securely deleted or de-identified. You may request earlier deletion of information we are not legally required to keep.
10. Access and correction
You may request access to the personal information we hold about you, and correction of anything inaccurate, by writing to privacy@baqgybet.com. We respond within 30 days, and access is free except where an unusually complex request involves a reasonable retrieval charge, which we will quote first. Most account data is visible directly in the account area.
11. Data breaches (Notifiable Data Breaches scheme)
If a data breach occurs that is likely to result in serious harm, we will notify affected customers and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires, and tell you what happened, what information was involved, and what steps to take.
12. Privacy complaints
Complaints about our handling of your personal information go to the Privacy Officer at privacy@baqgybet.com. We acknowledge within 2 business days and respond within 30 days. If you are not satisfied with our response, you may complain to the OAIC — oaic.gov.au or 1300 363 992. Our general complaints process explains all escalation routes.
13. Updates to this policy
We review this policy at least annually and whenever our practices or the law change. The effective date and version number at the top of the page always identify the current edition; material changes are notified to account holders by email before they take effect.