Boho casino Privacy Policy

This Privacy Policy explains how this online casino and sportsbook handles the collection, processing, protection, disclosure, retention, and destruction of personal information. It applies to information collected through the website, mobile versions, and related services for users in Australia. The document is based on consent given when a user registers, accesses, or uses the services. It also describes how information is shared, the safeguards in place, and how long information is kept.

Privacy and Data Protection

This platform collects and processes personal information that is necessary to provide online gambling services in a lawful and responsible way in Australia.

Types of personal information collected

The following categories of personal data may be collected:

  • Identification details, such as name, date of birth, residential address, nationality, and proof of identity documents
  • Contact details, such as email address, phone number, and preferred contact language
  • Account data, such as username, password, security questions, and communication preferences
  • Verification data for anti-money laundering and counter-terrorism financing checks, such as identity verification reports, sanctions screening results, and address verification
  • Payment and transaction information, such as partial card details (never full card number in plain text), bank account details, payment method identifiers, deposits, withdrawals, and betting history
  • Technical and usage information, such as IP address, device type, browser type, operating system, referral URLs, pages visited, session times, and clickstream data
  • Responsible gambling information, such as self-exclusion status, limits, and interactions related to safer gambling tools

Personal information is collected directly from the user, from devices through cookies and similar technologies, and in some cases from trusted third parties such as identity verification and payment providers, subject to applicable law.

Purposes for collection and processing

Personal information is collected and handled for these purposes:

  • Creating and managing a user account and profile
  • Verifying identity and age, and performing due diligence under Australian anti-money laundering and counter-terrorism financing laws
  • Providing access to online casino and sportsbook services
  • Processing deposits, withdrawals, and other financial transactions
  • Fulfilling legal and regulatory obligations, including record-keeping and reporting
  • Managing responsible gambling measures and harm-minimisation tools
  • Detecting and preventing fraud, unauthorised use, and security incidents
  • Responding to user enquiries, complaints, and support requests
  • Complying with court orders, law enforcement requests, and regulatory directions
  • Conducting anonymised or aggregated analytics to improve services and security

Information is processed on the basis of user consent, performance of a contract, compliance with legal obligations, and legitimate interests that do not override the rights and freedoms of users.

Technical and organisational protection measures

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, misuse, alteration, and loss. These measures include:

  • Encryption of data in transit using industry-standard protocols
  • Segregation of payment data from general account data
  • Role-based access controls and least-privilege principles for staff
  • Strong password and credential policies
  • Regular security monitoring, logging, and risk assessments
  • Secure data centres and backup procedures
  • Vendor due diligence and contractual data protection safeguards

No method of transmission or storage can provide absolute security, but reasonable and proportionate steps are taken to reduce risks in line with industry standards.

User rights under Australian privacy law

To the extent permitted by law, users in Australia have the following rights in relation to their personal information:

  • Right of access: to request confirmation that personal data is held and to obtain a copy of that information in a reasonable format
  • Right to correction: to request that inaccurate, incomplete, or outdated information be updated or corrected
  • Right to deletion: to request deletion of personal information when it is no longer needed, subject to legal record-keeping obligations and legitimate interests
  • Right to restrict processing: to request limits on how certain information is used in specific circumstances
  • Right to object to direct marketing: to opt out of receiving direct marketing communications at any time
  • Right to complain: to lodge a complaint with the operator and, if unsatisfied, with the Office of the Australian Information Commissioner or other relevant regulator

Requests to exercise these rights can be made through the contact details provided in this document. The operator may need to verify identity before actioning a request.

Compliance with Australian laws

Management of personal information aims to comply with:

  • The Privacy Act 1988 (Cth) and the Australian Privacy Principles
  • Applicable state and territory gambling laws
  • The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and associated rules

Where international standards such as the EU General Data Protection Regulation influence best practice, reasonable alignment is sought, in particular regarding transparency, user rights, and data security.

Use of Collected Information

Personal data is used in a lawful, fair, and transparent manner, limited to purposes that a reasonable user would expect when using an online casino and sportsbook.

Core account and service functions

Personal information is used to:

  • Register, authenticate, and administer user accounts
  • Provide access to games, betting markets, and related services
  • Process deposits, withdrawals, bonuses, and promotional credits where applicable
  • Apply account settings, language preferences, and communication choices

Risk management, security, and compliance

Information is processed to:

  • Verify identity and age under Australian law
  • Conduct know-your-customer checks and ongoing customer due diligence
  • Monitor transactions for suspicious activity and comply with anti-money laundering and counter-terrorism financing duties
  • Manage chargebacks, disputes, and potential abuse of services
  • Prevent, detect, and investigate fraud, account takeover, and security incidents

Service quality, analytics, and improvement

Usage data and technical information may be used in identifiable or aggregated form to:

  • Analyse how users interact with the website and mobile versions
  • Test features, improve stability, and enhance usability
  • Develop new functions that support safer gambling and user control
  • Perform statistical reporting for internal business management

Where possible, analysis is carried out on de-identified or aggregated data to limit any privacy impact.

Marketing and communication

Subject to consent and applicable legal requirements, contact details and preferences may be processed to:

  • Send service messages such as account notifications, policy updates, and security alerts
  • Provide information about features, changes to services, or maintenance notices
  • Deliver marketing communications and offers that are relevant to user profiles and interests, where such marketing is permitted and not prohibited by local rules

Users can opt out of direct marketing at any time using the unsubscribe links in messages or by updating account settings.

Legal, regulatory, and business purposes

Personal information may also be used:

  • To comply with laws, regulations, licence conditions, and regulatory guidance relevant to gambling and financial services
  • To respond to lawful requests from regulators, law enforcement, and courts
  • To manage complaints, enforce terms and conditions, and handle debt recovery where lawful
  • To support audits, risk assessments, and corporate governance

Information will not be sold for unrelated commercial purposes. Use of data is limited to the purposes described in this document, or purposes consistent with those described, in line with user expectations and legal obligations.

Access to Information

Users have the ability to access, update, and request deletion of their personal information, subject to certain legal and operational limits.

How users can access and update personal data

Where possible, users can review and correct core account information directly through the account settings area, including:

  • Contact details, such as email address and phone number
  • Certain profile fields, such as preferred language and communication preferences

If information cannot be updated through the account interface, a request can be submitted to customer support. The operator may require proof of identity before making changes to protect against unauthorised access.

Requesting copies, corrections, and deletion

Users can:

  1. Request a copy of the personal information held, in a reasonably accessible format.
  2. Request correction of inaccurate, incomplete, or outdated personal data.
  3. Request deletion of personal information that is no longer needed for the purposes described, subject to:
  • Mandatory retention periods under gambling, tax, and anti-money laundering laws
  • Requirements to keep records for dispute resolution and fraud prevention
  • Legitimate interests in defending legal claims.

All reasonable efforts will be made to respond to verified requests within a time frame required by law. If a request cannot be met in full, the user will receive an explanation of the reason, where permitted.

Consent to security checks and payment processing

By registering an account or using the services, the user acknowledges and consents to:

  • Identity, age, and verification checks that may include document verification and checks against external databases, carried out by the operator or by appointed verification providers
  • Ongoing monitoring of transactions and account activity to comply with risk-based obligations under Australian anti-money laundering and counter-terrorism financing laws
  • Processing and storage of payment information by payment service providers, card schemes, and banks that support deposits, withdrawals, and other account funding methods

These checks and processes are intended to protect the user, comply with legal and regulatory obligations, and maintain the integrity of the gambling services.

Protection of Children’s Privacy

This website and its gambling services are intended for persons aged 18 years and over only.

Age restrictions

  • Registration and participation in gambling activities are not permitted for persons under 18 years of age or the legal gambling age in their jurisdiction, if higher.
  • During registration and account use, users must confirm that they are at least 18 years old and legally allowed to use online gambling services.

Age verification limitations

Reasonable steps are taken to verify the age and identity of users, including through document checks and third-party verification providers. However, it is not possible to independently verify age in every case without supporting documents or cooperation from the user.

Users and parents or guardians are encouraged to:

  • Prevent minors from accessing gambling websites and apps
  • Use parental control tools and device-level restrictions
  • Keep login credentials and payment information secure

Handling information relating to minors

If it is discovered that personal data relates to a person under 18 years of age who has used the services in breach of this policy:

  • The account will be suspended or closed as soon as reasonably practicable
  • Any identifiable personal information will be deleted or anonymised, subject to legal and regulatory retention requirements
  • Any remaining balance will be handled in accordance with applicable laws and regulatory guidance

A parent or legal guardian who believes that a minor has provided personal information through this website should contact customer support. Reasonable steps will be taken to verify the request and, where appropriate, remove or anonymise the minor’s information.

International Data Transfers

Personal information may be stored and processed in locations outside the user’s state or country, including outside Australia, where technology, payment, or support partners are based.

Locations and reasons for data transfers

Information may be transferred to and processed in other countries for purposes such as:

  • Hosting and maintaining servers and databases
  • Providing customer support and back-office services
  • Operating payment processing and fraud prevention tools
  • Conducting technical maintenance, analytics, and security monitoring

These locations may have different data protection laws from those in Australia, which may not always provide the same level of protection.

Safeguards for international transfers

When personal data is transferred to service providers or partners overseas, reasonable steps are taken to:

  • Select recipients that provide appropriate data protection and security standards
  • Use contractual clauses and data protection agreements imposing confidentiality, security, and limited-purpose obligations
  • Restrict access to information to personnel with a need to know for the purposes described in this document

Third-party partners are required to protect personal data and to use it only as instructed and as necessary to provide their contracted services.

Consent to cross-border processing

By creating an account, using this website, or providing personal information, the user consents to:

  • The transfer of their personal data to jurisdictions outside Australia
  • The processing, storage, and access to that data in those jurisdictions for the purposes described in this document

This consent is in addition to any safeguards the operator implements to protect data across borders.

Use of Cookies

Cookies and similar technologies are used to operate this website, understand how users interact with services, and improve performance and security.

What cookies are

Cookies are small text files placed on a device by websites that are visited. They store information that helps recognise the browser, remember preferences, and understand how the site is used.

In addition to cookies, technologies such as local storage, pixels, and software development kits may be used for similar purposes on mobile and web platforms.

Purposes of cookies

Cookies may be used for the following purposes:

  • Essential operation: to enable navigation, login, account management, and secure features of the website
  • Preferences: to remember language settings, display options, and other user choices
  • Statistics: to collect aggregated information on visits, traffic sources, and general usage trends
  • Behaviour analysis: to understand how users move through the site, which pages they visit, and where they encounter issues
  • Personalisation: to tailor content, such as displaying relevant games or sports markets based on previous activity
  • Site improvement: to test new features, measure performance, and enhance security protections

Where required by law, consent is sought for the use of non-essential cookies.

Cookie retention

  • Cookies used for analytics, behaviour analysis, and personalisation are generally stored for up to 1 year, after which they expire automatically or are removed.
  • Some essential cookies may have shorter lifespans based on the active session or technical requirements.

Users can delete cookies at any time through their browser or device settings, but doing so may affect the ability to use certain features or remain logged in.

Managing cookie choices

Most browsers allow users to:

  • View the cookies that have been set
  • Block all cookies or specific categories of cookies
  • Delete cookies when closing the browser

Settings vary by browser and device. Users who choose to block cookies should be aware that some functions of the gambling services may not operate as intended.

Acceptance of Privacy Policy

Use of this website and associated gambling services is subject to acceptance of this Privacy Policy.

How acceptance is given

A user is considered to have accepted this Privacy Policy when they:

  • Register an account or submit personal information through the website
  • Tick a box or click a button indicating acceptance of the Privacy Policy or terms and conditions
  • Continue to access or use the services after being presented with this Privacy Policy or any updated version

If a user does not agree to the handling of personal information described in this document, they should not create an account or use the services.

Current version and changes

  • The version of this Privacy Policy published on the website at the time of use is the version that applies.
  • Changes may be made from time to time to reflect legal updates, operational needs, or improvements in data protection practices.
  • Where required by law, material changes will be notified using appropriate methods, such as email or in-account messages.

Continued use of the services after changes take effect will be treated as acceptance of the updated Privacy Policy.

Third-Party Privacy Practices

Personal information may be shared with third parties for lawful purposes connected to providing gambling and related services, and to meet legal obligations.

Categories of third parties

Depending on the services used and legal requirements, information may be disclosed to:

  • Payment providers, banks, and financial institutions that process deposits and withdrawals
  • Identity verification and anti-fraud service providers
  • Technology suppliers that host the platform, provide games, or support customer service tools
  • Analytics and security partners that assist in maintaining and improving services
  • Professional advisers, such as lawyers, auditors, and compliance consultants
  • Law enforcement agencies, regulators, and courts, where disclosure is required or permitted by law

Details about key third-party partners may be listed on the website or provided on request, subject to confidentiality obligations.

Purpose and scope of information sharing

Information is shared with third parties only to the extent necessary to:

  • Provide the services requested by the user
  • Process payments and protect against fraud or unauthorised transactions
  • Comply with gambling, financial, and privacy regulation
  • Assist in dispute resolution, chargebacks, or legal claims
  • Operate, maintain, and secure the website and underlying systems

Third parties are required, through contract and applicable law, to protect the confidentiality and security of personal information and to use it only for the purposes for which it was provided.

User consent to third-party processing

By providing personal data and using this website, the user consents to:

  • The sharing of personal and transactional information with the third parties described above, for the purposes set out in this document
  • The processing of that information by such third parties under their own privacy and security arrangements, which may differ from but should be consistent with the protections outlined here

Users are encouraged to review the privacy notices of significant third-party providers they interact with, such as chosen payment services, to understand how those providers handle personal data.

Updated: