Privacy Policy of Boho Casino
Who Decides What Happens to Your Data
The controller of personal data collected through bohocasinoaussie.com is Hollycorn N.V., the operator of Boho Casino, registered in Curacao. Hollycorn N.V. decides why and how your data is processed and is the entity you can hold to account under this policy. Requests and questions go to [email protected].
How Cookies and Analytics Work on the Site
The site uses cookies in three groups. Essential cookies keep you logged in, carry your session between the lobby and the cashier and support TLS/SSL-protected connections. Preference cookies remember settings such as your language and the cookie choice you made in the banner. Analytics cookies measure which pages and games are used so we can fix slow or broken pages.
Essential cookies cannot be switched off without breaking the site. To decline the others, use the choice offered in the cookie banner or delete cookies in your browser settings, and the site will continue to work with the essential group only.
What Happens to Your Data and Why
We process data for four reasons. Running your account and paying out winnings is performance of our contract with you. Identity checks and anti-money-laundering records are a legal obligation under the licence framework. Fraud prevention, multi-account detection and platform security rest on our legitimate interest in keeping the site safe. Marketing emails and non-essential cookies rest on your consent, which you can withdraw at any time.
When Your Data Leaves Australia
Boho Casino runs on the SoftSwiss platform, and the operator is based in Curacao, so data you provide is processed outside Australia. Live dealer studios such as Evolution Gaming, Pragmatic Play Live and Ezugi stream from their own facilities and receive only the identifiers needed to seat you at a table. By using the site you accept that your data may be handled in these places, and we restrict what each recipient receives to what its service needs.
What Data We Collect
| Category | What it includes | Source |
|---|---|---|
| Registration | Email address, password, AUD currency, name, date of birth, address | You, at sign-up |
| Payments | Method used, amounts, timestamps, wallet or account references | You and the payment provider |
| Verification | Australian driver’s licence or passport, utility bill or bank statement | You, on request |
| Technical | IP address, device and browser type, session logs, error reports | Your device |
| Cookies | Session, preference and analytics identifiers | Your browser |
Card and banking credentials are tokenised and are not stored on our servers after a transaction is processed.
How Long We Keep Records and How to Complain
While the account is open we keep the data needed to run it. After closure, records that anti-money-laundering rules require us to retain are kept for the period those rules set, and everything else is deleted or anonymised. Deleting the account does not remove data we are legally obliged to hold.
If you think we have mishandled your data, write to [email protected] first and we will respond in writing. You also have the right to complain to the privacy supervisory authority in your home jurisdiction, which for Australian residents is the Office of the Australian Information Commissioner. It is not our licensing regulator.
Rights You Can Exercise Over Your Data
You may ask for a copy of the data we hold about you, correction of anything inaccurate, deletion, restriction of processing, objection to processing based on our legitimate interest, and transfer of your data in a portable format. Email us from your registered address and we will confirm your identity before acting, which may involve asking for one of the verification documents already on file.
Deletion has limits. Data we must keep for licensing and anti-money-laundering reasons stays until the retention period ends, and we will tell you which data that covers when we answer.
Who Receives Your Data
Payment providers receive the data needed to move money: Visa, Mastercard, Skrill, Neteller, MuchBetter, MiFinity, Neosurf, Flexepin, Jeton, Paysafecard, eZeeWallet, Payz, Apple Pay and Google Pay, plus the bank for PayID and wire transfers. Game studios and live dealer providers, among them BGaming, Pragmatic Play, Evolution Gaming, Hacksaw Gaming, Ezugi, LuckyStreak, Authentic Gaming and VIVO Gaming, receive a player identifier and session data to run rounds. Identity documents are reviewed by our own compliance staff and are not passed to game studios.
We do not sell personal data. We may disclose it to a court, regulator or law enforcement body where the law requires.
Where to Send Personal Data Requests
Send access, correction, deletion and other data requests to [email protected] with the subject line Data request. Name the right you want to use, write from your registered email address and describe the data concerned. We answer in writing, and live chat agents can point you to this policy but cannot process data requests, which are handled by email so there is a record.