Privacy Policy
This Privacy Policy explains how W33 Casino, operated via the website https://w33-au.com, collects, uses, discloses and protects personal information of players and website visitors. It is intended for all individuals who access or use our services, including browsing the website, registering an account, depositing or withdrawing funds, or participating in games and promotions. By using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 01 January 2026 and replaces any prior versions published on w33-au.com.
Who We Are
Observe: The available corporate information for W33 Casino and the W33 Casino brand is limited and not transparently disclosed on public sources. There is no verified licence, registered office or corporate entity information that can be independently confirmed for Australia or any other jurisdiction.
Expand: Because of these data gaps, and to avoid misleading statements, we cannot fabricate a legal name, registration number or address. However, we can still clearly identify the brand, the service domain and the primary contact channels, and clarify that the operator appears to be an offshore, self-regulated entity targeting Australian users without an Australian licence.
Reflect: The section below therefore focuses on transparent disclosure of what is known, what is not known, and how you can contact the operator for privacy-related issues.
Service and brand identification
- Brand name: W33 Casino (referred to in this Privacy Policy as "W33 Casino", "W33 Casino", "we", "us" or "our").
- Primary Australian-facing domain: https://w33-au.com.
- Related brand variants / mirrors (unverified): https://w33.com, https://w33.vip.
Corporate and registration details
- Legal entity name: not publicly specified by the operator.
- Registered / legal address: not publicly specified by the operator.
- Company registration / tax numbers: not publicly specified by the operator.
- Gambling licence status: logos for PAGCOR (Philippines) and Curaçao eGaming are displayed on certain brand variants but no verifiable licence number or official registry link is provided; independent checks up to 2024 found no confirmed active licence. For privacy purposes, the platform should be considered self-regulated and offshore.
Data protection contact
- Data protection contact / department: Data Protection Officer (DPO) / Privacy Team, W33 Casino.
- Primary email (support): [email protected].
- General enquiries email: [email protected].
- Telephone: not specified.
- Postal / physical address for correspondence: not specified; you should use email channels for all privacy-related communications.
Regional compliance note: W33 Casino is not licensed under Australian law and is classified by Australian authorities as an offshore operator. This Privacy Policy is provided for transparency towards users and does not imply compliance with, or approval by, any Australian regulator.
What Personal Data We Collect
Observe: Online gambling operations inherently process identification, payment, technical and behavioural data in order to offer games, handle payments, comply with KYC/AML norms and manage risk. W33 Casino operates as an offshore platform targeting Australia and similar markets, which increases the importance of explicit disclosure of the categories of data processed.
Expand: The data we collect can be grouped into: identification and contact data, technical and device data, payment and financial data, behavioural and usage data, marketing and communication data, and cookies / tracking technologies. Some of this information is provided directly by you, while other data is generated automatically during your interactions with the site.
Reflect: The following breakdown clarifies the types of data we handle so you can understand how they relate to account operation, risk management and marketing.
Identification and contact data
- Full name, date of birth and gender (where requested).
- Residential address, country of residence and postcode (where requested).
- Contact details: email address, mobile / phone number (if provided), preferred language.
- Identity verification data (KYC), such as copies or details of identity documents, proof of address, or other documentation you choose to upload.
Account and transactional data
- Username, password (stored in hashed form) and other authentication credentials.
- Account status, verification status, bonus balance, loyalty level and account settings.
- Deposit and withdrawal history, including amounts, timestamps, methods used and internal transaction identifiers.
- Bonus redemptions, wagering progress and account ledger information.
Payment and financial data
- Payment method type (e.g. bank transfer, PayID, card, e-wallet, cryptocurrency, local cash-matching methods).
- Partial payment instrument details (such as masked card numbers or wallet identifiers) as made available through payment partners.
- Account names or references used for banking or PayID payments, which may differ from the brand name and may involve third-party processors.
Technical and device data
- IP address, approximate location derived from IP (country, city level where available).
- Device information (device type, operating system, browser type and version, screen resolution).
- Log data: dates and times of access, pages viewed, referring URLs, clickstream data, session identifiers, login attempts and error logs.
Behavioural and usage data
- Game activity: bets placed, wins and losses, game rounds played, game preferences and session durations.
- Promotional participation: opt-ins, tournament participation, loyalty or VIP activity and bonus usage patterns.
- Interactions with interfaces: button clicks, navigation paths, time spent on pages and response to offers or banners.
Marketing and communications data
- Newsletter subscriptions and marketing consent preferences (email, SMS, push notifications where supported).
- Records of communications with customer support (email correspondence and in-site chat logs where applicable).
Cookies and similar technologies
- Session cookies that maintain your login state and selections.
- Persistent cookies that remember preferences such as language and display settings.
- Analytics cookies that help us understand usage patterns.
- Advertising and affiliate tracking cookies or pixels that attribute traffic and measure campaign performance.
- Other similar technologies (such as local storage or device identifiers) used to provide functionalities and security.
Legal Basis for Processing
Observe: Although W33 Casino is an offshore operator and not licensed in Australia, the platform processes personal data in ways that broadly correspond to recognised legal grounds under international data protection principles (e.g. consent, contract, legitimate interests, legal obligations such as KYC/AML where relevant in its operational jurisdiction).
Expand: The actual legal basis may depend on the relationship between you and the operator, the nature of the processing activity and the requirements that apply in the jurisdiction(s) in which the operator and its processors are located. Even though there is no confirmed alignment with GDPR or Australian Privacy Principles, we adopt these categories for transparency.
Reflect: The following description explains, in a structured manner, how our main processing activities map to commonly recognised legal grounds.
Consent
- We rely on your explicit consent for:
- Sending direct marketing communications (e.g. promotional emails, SMS, push notifications) where such consent is requested.
- Setting non-essential cookies (analytics, advertising) when consent tools are available in your region.
- Processing any optional data you choose to provide in your profile or communications that are not required for account operation.
- You may withdraw your consent for marketing and non-essential cookies at any time using the mechanisms described in this Privacy Policy.
Performance of a contract
- Processing is necessary to:
- Create, manage and operate your gaming account on w33-au.com.
- Provide access to games, process bets, calculate results and credit winnings.
- Process deposits and withdrawals through third-party payment providers.
- Provide customer support and respond to your account-related requests.
- Without this processing, we would not be able to deliver the services you request.
Legitimate interests
- We may process data where we (or our partners) have a legitimate interest that is not overridden by your interests or fundamental rights, including:
- Fraud detection and prevention, including monitoring unusual patterns of play or transactions.
- Security and integrity of our systems, including access controls and incident detection.
- Analytics and service improvement, such as understanding how users interact with the site and optimising navigation.
- Protecting our legal rights, enforcing our Terms and Conditions and managing disputes.
Compliance with legal obligations
- Although not licensed in Australia, the operator may be subject to KYC/AML or reporting obligations in the jurisdiction from which it operates (for example, in parts of Asia or other offshore locations).
- To the extent applicable, we may process and retain your information for:
- Identity verification, age verification and prevention of underage gambling.
- Anti-money laundering and counter-terrorism financing checks, including transaction monitoring.
- Responding to lawful requests from competent authorities in the jurisdictions in which we or our processors operate.
Regional compliance note: This description of legal bases is for transparency and does not imply that W33 Casino is subject to or compliant with GDPR, the Australian Privacy Act or any specific national privacy regime.
Purpose of Processing
Observe: Each type of personal data collected is tied to specific operational, security, compliance and marketing needs in the context of online gambling.
Expand: Clarity about purposes helps you understand why data is requested and how it may impact your privacy and risk position when using an offshore gambling service.
Reflect: The purposes below are grouped for readability and correspond to the categories of data described earlier.
- Provision and operation of services: To create and manage your account; enable deposits, withdrawals and gameplay; calculate bets and winnings; operate bonuses, tournaments and loyalty programmes; and provide customer support.
- Verification, compliance and risk management: To verify your identity and age where required; conduct KYC/AML screening in relevant jurisdictions; monitor for suspicious activities or patterns; and manage operational risks, chargebacks and potential fraud.
- Service improvement and analytics: To analyse aggregated usage, game preferences and website performance; troubleshoot technical issues; test new features; and optimise user experience, including for mobile-first users in our target regions.
- Marketing and personalisation: To send you promotional offers, newsletters and account-related communications (where permitted); personalise offers and recommendations based on your activity; and measure the performance of campaigns and affiliate traffic.
- Security and integrity of the platform: To authenticate users, manage sessions, prevent unauthorised access, operate access controls, maintain logs and investigate security incidents.
- Legal, regulatory and dispute purposes: To respond to requests from competent authorities in applicable jurisdictions; enforce our Terms and Conditions; manage and resolve complaints or disputes; and defend legal claims where necessary.
Disclosure & Sharing
Observe: Offshore gambling platforms typically rely on third-party payment processors, IT providers, game studios and marketing affiliates, and may be subject to information requests by non-Australian regulators or enforcement bodies. Because W33 Casino's corporate structure is opaque, there is heightened importance in explaining typical categories of recipients.
Expand: Personal data may be shared with third parties that perform services on our behalf or that operate as independent controllers (for example, certain payment providers). Data may also be shared with authorities, courts or similar bodies where lawfully requested in relevant jurisdictions.
Reflect: The list below captures the main categories of recipients and the circumstances under which disclosure occurs.
Service providers and partners
- Payment partners: Banks, PayID intermediaries, card processors, e-wallet providers, cryptocurrency gateways and other financial intermediaries, including third-party shell or agent accounts used to facilitate deposits and withdrawals. These parties receive information such as transaction details, partial payment identifiers and sometimes your name or reference number.
- Game providers: Third-party studios that supply casino games and betting content. Limited identifiers and game-session data may be shared to enable gameplay and ensure fairness.
- IT and infrastructure providers: Hosting companies, cloud service providers, content delivery networks, analytics providers, email delivery services and security vendors that process data to operate and secure the platform.
Affiliates and marketing partners
- Affiliate networks and referrers: Partners who refer players to w33-au.com may receive aggregated or pseudonymised data for attribution and commission calculation.
- Advertising networks and tracking providers: Where allowed and with your consent where required, cookies and other identifiers may be shared for measuring campaign performance, retargeting and segmentation.
Corporate and transactional purposes
- In the event of a reorganisation, restructuring, merger, sale or transfer of assets related to the W33 Casino brand, personal data may be disclosed to prospective or actual purchasers and their professional advisers, subject to confidentiality arrangements where feasible.
Authorities and dispute resolution
- Regulators and enforcement bodies: Although we are not licensed in Australia and not subject to Australian gambling regulation, competent authorities in the jurisdictions where we or our processors operate may lawfully request access to certain data for AML, fraud or other enforcement purposes.
- Civil, criminal or administrative proceedings: We may disclose data where reasonably necessary to establish, exercise or defend legal claims or respond to court orders, subpoenas or similar processes issued by competent authorities.
We do not sell your personal data in the sense of transferring it to third parties for their independent marketing purposes without a legal basis or your consent where required. However, as an offshore, self-regulated operator, we cannot guarantee that all third parties will be subject to the same privacy standards as in Australia or the EU.
International Transfers
Observe: W33 Casino targets Australian and Asia-Pacific users while being operated from offshore locations with unverified licensing ties to the Philippines, Curaçao or other jurisdictions. Third-party providers may also be located in multiple countries.
Expand: This means personal data may be stored and processed in countries that do not provide the same level of data protection as Australia or the EU. In typical regulated settings, this would be mitigated by formal transfer mechanisms (such as standard contractual clauses). As a self-regulated operator, our ability to provide documented safeguards is limited.
Reflect: We aim to be transparent about likely transfer destinations and the practical implications for your privacy.
- Possible locations of processing:
- Data centres or operational teams located in Southeast Asia (including, but not limited to, the Philippines or Cambodia), as indicated by operational patterns.
- Third-party hosting or cloud providers located in the EU, the United States or other regions.
- Game providers and payment processors situated in the EU, Asia or other international locations.
- Safeguards:
- Where we engage reputable third-party service providers, we seek to select providers that apply reasonable security practices and industry standards.
- Because of the opaque corporate structure and offshore nature of operations, we cannot guarantee that all transfers are governed by formal mechanisms such as EU Standard Contractual Clauses or equivalent instruments.
Regional compliance note: By using w33-au.com, you acknowledge that your data may be transferred to and processed in countries with different data protection standards and that recourse to local regulators may be limited or unavailable.
Data Retention
Observe: Gambling services typically retain data for extended periods to manage accounts, comply with KYC/AML requirements and handle disputes. However, over-retention increases privacy risks, particularly in offshore environments.
Expand: Retention periods on W33 Casino are based on operational needs, potential legal requirements in the operator's jurisdictions and risk management considerations. When data is no longer required, it is deleted or anonymised where feasible.
Reflect: The retention standards below are indicative and may vary depending on specific legal or operational circumstances.
- Account and identification data: Typically retained for the life of your account and for up to five (5) years after account closure, to:
- Resolve any outstanding transactions, disputes or investigations; and
- Meet possible KYC/AML or record-keeping obligations in applicable jurisdictions.
- Payment and transaction data: Generally retained for at least five (5) years from the date of the transaction or the closure of the account, whichever is later, to support financial reconciliation, fraud prevention and potential reporting obligations.
- Technical logs and security data: Retained for periods ranging from several months up to two (2) years, depending on the type of log, to assist with security incident investigation and platform integrity monitoring.
- Marketing and communication data: Retained while you remain subscribed and for a reasonable period (usually up to two (2) years) after you unsubscribe or your account is closed, to maintain records of consent and communication history.
- Anonymised and aggregated data: Information that has been irreversibly anonymised may be retained for longer periods for statistical, analytical or business planning purposes.
When the relevant retention period expires, and there is no ongoing legal or operational need to keep your data, we aim to delete or effectively anonymise it within a reasonable time. Because of the offshore nature of the service and the use of multiple third parties, actual deletion timelines may vary between systems and providers.
Your Rights
Observe: Users increasingly expect rights similar to those provided under the EU General Data Protection Regulation (GDPR) and comparable frameworks. The section description also references Mexican privacy law, indicating a need for rights articulation in a broadly recognised format, even though W33 Casino is an offshore operator without confirmed subjection to GDPR, Mexican law or Australian Privacy Principles.
Expand: While we cannot guarantee enforceability of specific statutory rights under any particular regime, we describe below the rights we aim to honour as a matter of policy where technically and operationally feasible.
Reflect: This approach provides you with a clear understanding of how you may interact with us regarding your data, including procedures, timeframes and limitations.
Overview of rights
- Right of access: You may request confirmation of whether we process your personal data and obtain a copy of such data, together with basic information about the processing.
- Right to rectification: You may request correction of inaccurate personal data and completion of incomplete data relating to you.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other basis applies) or where you believe it has been processed unlawfully. Certain records may be retained where we have a continuing need (for example, to comply with AML obligations or defend legal claims).
- Right to restriction of processing: You may request that we limit processing of your data in particular circumstances (for instance, while we verify its accuracy or assess an objection you have raised).
- Right to object: You may object to processing based on our legitimate interests, including profiling, and to direct marketing at any time. We will cease such processing unless we have compelling legitimate grounds to continue (other than in the case of direct marketing, where your objection will always be honoured).
- Right to data portability: Where technically feasible and applicable, you may request that we provide you with certain personal data in a structured, commonly used and machine-readable format, or transmit it to another controller.
- Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications or non-essential cookies), you may withdraw this consent at any time. Withdrawal does not affect processing already carried out.
How to exercise your rights
- Submit your request: Contact us via email at [email protected] or [email protected]. Clearly state the right you wish to exercise and provide sufficient information to identify your account.
- Identity verification: For your protection, we may request additional information to verify your identity before acting on your request, particularly for access, erasure and portability.
- Assessment and response: We aim to respond to your request within thirty (30) days of receipt of a complete and verifiable request. If your request is complex or we receive multiple requests from you, this period may be extended by a further thirty (30) days; if so, we will inform you of the extension.
- Charges: We generally handle rights requests free of charge. However, we may charge a reasonable fee or decline to act on requests that are manifestly unfounded, repetitive or excessive, consistent with widely recognised data protection principles.
Important limitation notice: Because W33 Casino is an offshore, self-regulated platform with unverified licensing and opaque corporate structure, your practical ability to enforce rights through national authorities or courts (including those in the EU, Mexico or Australia) may be limited. We nonetheless commit, as a matter of policy, to handle rights requests in line with the standards described above where feasible.
Cookies & Tracking Technologies
Observe: Cookies and similar technologies are essential for maintaining session integrity in online casinos and for analytics and marketing attribution, particularly where affiliate networks and advertising play a role.
Expand: The absence of clear cookie governance could expose users to excessive tracking. We therefore explain the categories of cookies used and how you can manage them.
Reflect: This information enables you to make informed decisions about your browser and device settings when accessing w33-au.com.
Types of cookies we use
- Session cookies: Temporary cookies that are stored on your device only for the duration of your browsing session. They maintain your login state, security tokens and game sessions and are typically deleted when you close your browser.
- Persistent cookies: Cookies that remain on your device for a longer period or until you delete them. They are used to remember language preferences, display settings and certain login options.
- Third-party cookies: Cookies placed by third parties such as analytics providers, advertising networks and affiliate platforms. These may track your interactions with our site across sessions and, in some cases, across different websites.
Purposes of cookies
- Strictly necessary / functional: Required for the operation of the website and the casino platform, including authentication, session management, security features and loading core content.
- Analytics: Used to collect information about how visitors use the site, which pages are most frequently visited, how long users stay and where they come from. This helps us improve functionality and user experience.
- Advertising and affiliate tracking: Used to measure the effectiveness of campaigns, attribute new registrations to affiliates or marketing channels and, where applicable, tailor promotional content.
Managing cookies
- Browser settings: Most browsers allow you to:
- Block all cookies or certain types of cookies.
- Delete existing cookies from your device.
- Set alerts before a cookie is stored.
- In-site controls: Where available, we may provide internal settings or banners enabling you to manage certain categories of cookies (e.g. analytics or advertising) without affecting strictly necessary cookies.
- Consequences of disabling cookies: If you block or delete strictly necessary cookies, some features of w33-au.com may not function properly, and you may be unable to log in or play games.
Data Security
Observe: Online casinos process sensitive financial and behavioural data, making them attractive targets for cyberattacks. The offshore and self-regulated character of W33 Casino further heightens the need for clear security communication.
Expand: While we cannot disclose all technical details for security reasons, we can outline key controls that are typically implemented to protect data in transit and at rest, manage access and respond to incidents.
Reflect: The measures described below are intended to demonstrate a commitment to reasonable security, but they do not guarantee absolute protection.
Technical and organisational measures
- Encryption in transit: We aim to use Transport Layer Security (TLS) version 1.2 or higher to encrypt data transmitted between your browser and our servers, helping to protect login credentials and other sensitive information from interception.
- Encryption at rest: Where feasible, we implement encryption or other safeguards (such as tokenisation or hashing) for particularly sensitive data elements, such as passwords and certain transaction identifiers.
- Access controls: Access to personal data is restricted to personnel and service providers who require it for their role. Role-based access and authentication controls (including, where implemented, multi-factor authentication) help reduce the risk of unauthorised access.
- Network and system security: Firewalls, intrusion detection or prevention systems and other controls are used to monitor and protect our infrastructure against common attack vectors.
- Regular security activities: We may perform internal security reviews, vulnerability assessments or penetration tests, and apply security patches to critical systems where reasonably practicable.
- Staff awareness: Personnel with access to personal data are expected to follow internal policies on data protection and security, and may receive training on handling personal information and recognising security incidents.
- Incident response: We maintain internal processes to detect, assess and respond to suspected data breaches or security incidents, including steps to contain the issue, investigate root causes and, where necessary, implement remediation measures.
International standards note: While we strive to align with recognised best practices (such as principles found in ISO/IEC 27001 or SOC 2), W33 Casino does not currently claim formal certification against these standards, and no external audits or attestations are publicly available.
Complaints & Contacts
Observe: Users of offshore gambling sites often have limited recourse through national regulators. Still, providing internal complaint channels and explaining the practical limitations on escalation is essential for transparency.
Expand: This section sets out how you can contact us with questions or complaints about privacy and what options may (or may not) exist for external escalation.
Reflect: The process below is designed to be clear and time-bound, within the constraints of a self-regulated environment.
Contact channels
- Data Protection Officer / Privacy Team:
- Email (primary for privacy matters): [email protected]
- Email (general enquiries): [email protected]
- Online forms: If an online support or feedback form is available on w33-au.com, you may use it to submit privacy-related questions or complaints, clearly marking them as "Privacy" or "Data Protection".
- Postal address: Not specified by the operator; correspondence should be directed via email.
Internal complaint procedure
- Submission: Send your complaint to [email protected] or [email protected], including:
- Your account username or registered email address.
- A clear description of your concern or alleged privacy violation.
- The outcome you are seeking, if applicable.
- Acknowledgement: We aim to acknowledge receipt of your complaint within seven (7) business days.
- Investigation and response: We will review your complaint, request any additional information if needed and aim to provide a substantive response within thirty (30) days of receiving all necessary details.
- Escalation within the operator: If you are not satisfied with the initial response, you may request that the matter be escalated to a more senior member of our privacy or compliance function, where such a function exists within the organisation.
External escalation and supervisory authorities
Because W33 Casino operates offshore and is not licensed in Australia or clearly subject to any specific national data protection authority, options for external escalation are limited and may depend on:
- Your place of residence (e.g. EU Member State, Mexico, Australia or another country); and
- The location of the data processing activities.
If you reside in a jurisdiction with established data protection authorities (for example, an EU Member State under GDPR or Mexico under its federal data protection framework), you may have the right to lodge a complaint with your local authority. However, such authorities may have limited capacity to enforce actions against offshore entities that lack a local establishment.
Australian users: The Office of the Australian Information Commissioner (OAIC) primarily oversees entities subject to the Privacy Act 1988 (Cth). As W33 Casino is an offshore operator without an Australian licence or clear local establishment, OAIC may not have direct jurisdiction, although you may still consult their resources for privacy guidance.
Updates
Observe: Operational practices, technology, legal requirements and enforcement trends change over time, especially in the offshore gambling sector. Regular updates to privacy documentation are therefore necessary.
Expand: We maintain a versioning and notification approach that aims to keep you informed of material changes before they take effect, where practicable.
Reflect: The mechanisms below explain how you can stay informed and what options you have if you do not agree with changes.
How we will notify you
- Website publication: The current version of this Privacy Policy will always be available on https://w33-au.com.
- Email notifications: For material changes (for example, changes to categories of data processed, main purposes, or disclosure practices), we may send an email notification to the address associated with your account, where such address is available and verified.
- On-site notices: We may display banners, pop-ups or dashboard alerts after you log in, summarising key updates.
Advance notice and effective date
- For significant changes that materially affect your rights or the way we process your data, we aim to provide at least thirty (30) days' advance notice before the changes become effective, where operationally feasible.
- Minor updates that clarify wording or reflect new technical features without materially altering processing practices may take effect immediately upon publication.
Your options
- If you continue to use w33-au.com after the effective date of an updated Privacy Policy, you will be deemed to have accepted the revised terms.
- If you do not agree with material changes, you may:
- Stop using the website and services; and
- Request account closure and, where applicable, request deletion or restriction of your personal data, subject to any retention obligations or operational needs described above.
Version control: Last updated: January 2026. Future versions of this Privacy Policy will include a "Last updated" date and, where appropriate, a brief summary of material changes.