Oshi Privacy Policy

Personal information collected:

• Identification data: name, date of birth, residential address, contact details, and verification documents (e.g., government ID, proof of address) for KYC/AML checks.
• Account and usage data: username, preferences, responsible gambling settings, in-account communications, and device identifiers.
• Transaction data: deposits, withdrawals, payment method tokens, and anti-fraud signals. Full card numbers are processed by payment providers, not stored by Oshi casino.
• Technical data: IP address, browser type, operating system, session logs, cookies, and analytics events to operate and secure the services.
• Purposes for collection: to create and manage accounts, verify identity, process payments, provide customer support, uphold responsible gambling measures, prevent fraud, meet legal obligations, and improve services.

Security measures:

• Encryption in transit (TLS 1.2+) and at rest for sensitive data, access controls, multi-factor access for staff, network segregation, and continuous monitoring.
• Payment processing aligned to PCI DSS through authorised providers; personal data minimisation and role-based access.
• Vendor due diligence and contractual safeguards for processing.
• Data retention: stored only for as long as required for the purposes stated, including statutory retention under the Anti‑Money Laundering and Counter‑Terrorism Financing Act 2006 (Cth), then securely deleted or de‑identified.

User rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs):

• Access a copy of personal information.
• Request correction of inaccurate, incomplete, or outdated information.
• Request deletion where information is no longer required by law or for the stated purposes.
• Manage consent for marketing and cookies, and opt out at any time.

Compliance: Oshi casino manages personal information in line with the APPs, the Notifiable Data Breaches scheme, applicable gambling and financial crime laws, and AUSTRAC guidance for customer due diligence.

• Account services: create, verify, and maintain user accounts; enable login, preferences, and responsible gambling tools.
• Transactions: process deposits and withdrawals, account funding checks, fraud monitoring, and chargeback management.
• Service improvement: troubleshoot, test, and enhance site performance and user experience across online services and websites.
• Marketing: send service notices and marketing communications where user consent exists; manage preferences and unsubscribe options.
• Analytics: measure site usage, detect errors, and inform product decisions using aggregated and pseudonymous data where possible.
• Compliance: conduct identity verification (KYC), AML/CTF screening, sanctions checks, and respond to lawful requests.

Processing is lawful, fair, and transparent, limited to the purposes described in this policy and the user’s choices.

Access and update:

• Users can review and edit personal information through account settings or by submitting a verified request via the support channel on the website.
• Responses are provided within a reasonable period, usually within 30 days.

Correction and deletion:

• The operator will correct inaccurate information upon request and, where appropriate, delete information that is no longer needed or required to be retained by law.
• Identity verification is required before actioning requests to protect the user and prevent unauthorised access.

Security checks and payments:

• By using Oshi casino, users consent to security checks (including identity verification and fraud screening) and to payment data being processed by authorised payment providers for transaction processing and compliance purposes.

• The services are intended for persons aged 18 years and over. Registration and real‑money play are prohibited for minors.
• The operator cannot verify age in all cases without supporting documents. Identity evidence may be requested to confirm eligibility.
• If personal information about a minor is discovered, it will be deleted. A parent or guardian may contact the support channel to request removal of the minor’s data.

• Personal information may be processed in other countries where Oshi casino or its partners, processors, or data centres operate.
• Using the site constitutes consent to the international transfer and processing of personal data for the purposes described in this policy.
• Oshi casino takes reasonable steps under APP 8 to ensure overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles, including contractual safeguards, access controls, and confidentiality obligations.

• This disclaimer may modify the scope or effects of certain rules in this policy to the extent permitted by law and the terms governing the services.
• The disclaimer applies once the user accepts this policy by signature, affirmative acceptance online, or accession through continued use of the services.
• If a provision is unenforceable under local law, the remainder of the policy continues to operate, and the affected provision applies to the maximum extent allowed.

Definition: cookies are small text files stored on a device to remember preferences and improve the online experience. Similar technologies include local storage and pixels.

Purposes:

• Statistics and analytics to understand site usage and performance.
• Behaviour analysis to detect errors and improve navigation.
• Personalisation of content and settings, including language and responsible gambling tools.
• Security and fraud prevention.

Retention: cookies are kept for up to 1 year unless deleted earlier by the user. Browser settings allow control or blocking of cookies; some features may be limited if disabled.

• Using Oshi casino indicates full acceptance of this Privacy Policy and any updates published on the websites.
• The current version posted on the site prevails over prior versions.
• Continued use after changes are posted constitutes acceptance of the revised document.

Personal information may be shared in the following circumstances:

• To comply with law, court orders, regulatory requests, or to enforce legal rights and resolve disputes.
• To payment processors, identity verification providers, anti‑fraud vendors, analytics providers, and professional advisers under binding agreements.
• To partners providing services necessary to operate the platform under confidentiality and data protection obligations.

A list or category overview of key third parties and processors is made available on the website. If a list is not available, Oshi casino will inform users of the purpose and scope of sharing before disclosure where feasible.

Providing personal information and using the services constitutes consent to such sharing for the purposes outlined.

• The site may include links to third‑party websites and services that operate under their own privacy policies.
• Oshi is not responsible for how external sites collect, use, or process personal information.
• Users should review the privacy statements of external websites before providing any data.