Privacy Policy

This Privacy Policy explains how personal information is collected, used, and protected when you visit or use twoupcasino via twoupz.com. The policy applies to all players and website visitors located in Australia (AU). Effective date: 1 January 2025.

Who We Are

twoupcasino operates through its official website, twoupz.com, and is owned by Blue Media N.V., founded in 2018. Subsidiaries include Bo Vegas, Supernova, Cherry Gold, and Eclipse. For privacy matters, direct inquiries to our data protection team at [email protected] or through our live chat available on the website.

Legal Entity: Blue Media N.V. (registration details and legal address not specified; available upon request or as required by applicable law).
Contact Details: Email: [email protected]; Live Chat: twoupz.com.
Data Protection Officer (DPO): Contactable via the above support channels for privacy-specific inquiries.

What Personal Data We Collect

twoupcasino collects various types of personal, technical, and behavioural data necessary for the operation of gambling services in compliance with AU privacy and gambling regulations.

Personal Data: Full name, email address, phone number, date of birth, and identifying details submitted during registration or verification.
Technical Data: IP address, device information, browser type, session logs, and activity timestamps collected for security and service enhancement.
Payment Data: Transaction history, payment method details (excluding full credit card numbers), withdrawal and deposit records.
Behavioural Data: Betting history, gaming activity, in-site navigation, clicks, and interaction patterns for analytics and risk management.
Cookies & Tracking Technologies: Session and persistent cookies, device identifiers, and third-party analytic beacons (see Cookies section for details).

Legal Basis for Processing

twoupcasino processes your personal data in accordance with the Australian Privacy Act 1988 (Cth), the Interactive Gambling Act 2001 (Cth), and relevant industry standards governing the lawful handling of customer information within Australia.

User Consent: Collected when you accept the Privacy Policy or provide explicit consent for marketing and promotional activities.
Contract Performance: Data is needed to create, maintain, and operate your casino account, process deposits/withdrawals, and fulfil customer support requests.
Legitimate Interests: For fraud detection, prevention, analytics, service improvement, and IT security, provided such interests are not overridden by your data protection rights.
Legal Compliance: To comply with regulatory/legal duties, such as Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, as required by law or authority.

Regional Compliance Note: All processing bases are selected in line with AU legal and gambling regulatory requirements, ensuring your statutory data rights are fully respected for 2025 and beyond.

Purpose of Processing

Your data may be processed for the following lawful and transparent purposes in order to operate and improve twoupcasino services via twoupz.com:

Service Provision: To register and maintain your account, facilitate gameplay, process transactions, and provide customer support.
Service Improvement: Internal analytics and research aimed at optimising website performance, usability, and user experience.
Marketing Communication: Sending news, promotions, or offers where consent is provided (with opt-out options available at any time).
Analytics: Investigating patterns to detect fraud, improve responsible gambling controls, and inform business decisions.
Fraud Prevention: Identifying prohibited activities, verifying user legitimacy, and fulfilling regulatory reporting obligations.

Protective Clause: Data is never used for automated decision making without meaningful human intervention, except where required for AML or anti-fraud measures consistent with AU law.

Disclosure & Sharing

twoupcasino will only disclose your personal data to trusted third parties where expressly allowed or required by law, and always with suitable safeguards:

Payment Partners: Banking institutions and electronic payment providers to process deposits and withdrawals.
Service Providers: Companies offering IT support, cloud hosting, analytics, and website security, strictly bound by confidentiality agreements.
Regulators & Law Enforcement: Disclosure to relevant AU regulatory bodies or law enforcement for compliance with statutory duties (e.g., KYC/AML).
Affiliates: Marketing affiliates for acquisition or retention activities, subject to prior consent and clear opt-out options.
Advertising Networks: Only where you have specifically consented (see Cookies section).

twoupcasino does not sell or rent your personal information to any third parties. Any cross-border sharing is in accordance with the International Transfers section below and always safeguarded appropriately.

International Transfers

Personal data may be transferred to data processors or service providers outside Australia, including but not limited to countries where twoupcasino's parent or subsidiaries operate (e.g., Curaçao - Blue Media N.V.). All international transfers comply with Australian data export regulations.

Standard Contractual Clauses: We deploy legally binding data protection agreements to ensure adequate safeguards in line with Privacy Act 1988 and, where applicable, enforceable overseas data transfer mechanisms.
Data Security Standards: Recipients must meet industry-standard information security controls, including encryption and data minimisation.
User Protection: You may request additional information about cross-border arrangements by contacting [email protected].

Regional Compliance Note: As of 2025, no international transfer will occur unless required safeguards are in place, ensuring your data is protected to Australian legal standards.

Data Retention

twoupcasino retains your personal data only for as long as legally necessary for operational, statutory, and archiving purposes, in accordance with AU gambling and privacy legislation.

Personal Data: Retained for no longer than 5 years following account closure or last user activity (aligned with AML/KYC obligations), unless regulatory extensions apply.
Payment & Transaction Data: Retained up to 5 years for audit, anti-fraud, and statutory reporting compliance.
Behavioural Data & Analytics: Retained for up to 2 years, anonymised or pseudonymised where not strictly required.
Deletion Criteria: Personal data is deleted or anonymised upon expiry of retention periods, receipt of verifiable data subject request, or when processing is no longer necessary.

Deletion Requests: Users may request earlier data deletion, subject to legal or regulatory obligations that may require retention for a longer period.

Your Rights

twoupcasino upholds your legal rights under the Australian Privacy Act 1988 and ensures you can exercise meaningful control over your personal data.

Access: Request a copy of personal data held on your account at any time.
Correction: Request updates to ensure your information is accurate and complete.
Deletion: Request erasure of data where it is no longer required, subject to legal retention obligations.
Restriction: Request limited processing of your data (for example, if its accuracy is challenged).
Objection: Object to direct marketing or certain types of processing based on legitimate interest grounds.
Data Portability: Request receipt of your data in a machine-readable format or transfer to another operator, subject to technical feasibility.
Withdrawal of Consent: Withdraw consent for marketing at any time using the provided opt-out mechanisms without affecting prior lawful processing.

To exercise your rights: Contact [email protected] or use the live chat at twoupz.com.

Cookies & Tracking Technologies

twoupcasino uses cookies and similar tracking technologies to ensure proper website functionality, enhance user experience, and support marketing efforts.

Session Cookies: Temporary cookies essential for navigation and secure login, deleted after your browser session ends.
Persistent Cookies: Remain on your device for a defined period (up to 12 months) to remember preferences and facilitate account access.
Third-Party Cookies: Provided by analytics and advertising partners, subject to user consent in compliance with AU industry standards.
Purposes: Functional (site operation), analytics (user behaviour, service improvement), and advertising (personalised promotions where permitted).
Control: You may manage or disable cookies via your browser settings or opt out of non-essential cookies through internal preference panels (available on twoupz.com).

Legal Clause: Disabling essential cookies may affect certain website functionalities. For full details, see our Cookies Notice or contact support.

Data Security

twoupcasino employs a comprehensive suite of technical and organisational controls in line with Australian industry best practices to secure your information.

SSL Encryption: All data transmissions are protected by industry-standard Secure Socket Layer encryption.
Access Restrictions: Staff access to personal data is strictly limited, role-based, and monitored via authentication protocols.
Data Minimisation & Pseudonymisation: Only data strictly necessary for operation is processed; sensitive information is pseudonymised where feasible.
Security Audits: Regular internal and third-party IT security audits are conducted to evaluate vulnerabilities and maintain best-in-class protections.
Staff Training: Employees receive ongoing privacy and cybersecurity training to uphold data security obligations.

Incident Management: Any breach or suspected breach is promptly addressed per AU data breach notification requirements, and affected users are notified without undue delay.

Complaints & Contacts

If you have questions, concerns, or complaints about how your data is handled by twoupcasino on twoupz.com, you may contact our data protection team at [email protected] or via the live chat on our website.

Initial Response: Our data protection team will acknowledge your complaint or inquiry within 5 business days and endeavour to resolve most issues within 30 days.
Escalation: If dissatisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au.
Additional Contacts: All privacy communications may reference our data officer (Ashleigh Martin, via support channels) for escalation and independent review.

Updates

twoupcasino reserves the right to update this Privacy Policy in line with changes to legal, regulatory, or operational requirements. Users will be notified of material changes via email (if registered), a website banner, or message upon login.

Notification: Advance notice of all significant changes will be given at least 7 days before implementation, with clear instructions on ongoing rights.
Review: The latest version of the Privacy Policy is always available on twoupz.com.
Last Revised: 1 January 2025.