Privacy Policy
What we collect, why we collect it, who sees it and what you can do about it. Written to be read, not to be skipped.
1. Who is responsible
GRSBET PTY LTD (ABN 91 635 187 227, ACN 635 187 227), trading as GRSBET, is the entity responsible for personal information collected through grsbet.co. Our registered office is 52 McCrae Street, Queanbeyan West NSW 2620, Australia.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where you are covered by the EU or UK GDPR, the additional rights in section 9 apply.
2. What we collect
2.1 Information you give us
- Identity: full name, date of birth, residential address.
- Contact: email address, mobile number.
- Verification: details from identity documents where we need them to satisfy our verification obligations.
- Financial: the payment method used to deposit and the account nominated for withdrawals. We do not store full card numbers — those are handled by our payment provider.
- Account settings: your deposit limit, break or exclusion status, and communication preferences.
- Correspondence: the content of messages you send us and our replies.
2.2 Information collected automatically
- Betting activity: bets placed, stakes, prices, settlement outcomes, deposits and withdrawals.
- Technical: IP address, approximate location derived from it, device type, browser, operating system.
- Usage: pages viewed, links followed, session times — in aggregate, and only where you have consented to analytics cookies.
2.3 Information from third parties
We receive verification results from identity-verification providers, payment confirmations from financial institutions, and exclusion status from BetStop, the National Self-Exclusion Register.
2.4 Sensitive information
We do not seek sensitive information as defined in the Privacy Act. If you tell us about a health or personal circumstance in the context of a responsible gambling request, we use it only to action that request.
3. Why we use it
We use personal information to:
- open, verify and administer your account;
- confirm that you are at least 18 and located in Australia;
- check the BetStop register at registration and at every login;
- accept, price, settle and pay out bets;
- process deposits and withdrawals, and detect fraud;
- apply your deposit limits, breaks and exclusions;
- respond to your enquiries and complaints;
- meet our obligations under wagering, anti-money-laundering, taxation and consumer law;
- monitor for signs of gambling harm and offer support where appropriate;
- improve the site, where you have consented to analytics.
We do not sell personal information, and we do not disclose it to third parties for their own marketing.
4. On what basis
Most of what we collect we are legally required to collect: a licensed wagering operator cannot lawfully open an account without verifying identity and age. The rest is necessary to perform our agreement with you, to meet a legal obligation, or is done with your consent — analytics and any optional communications being the clearest examples of the last.
If you decline to provide the information we need to verify you, we cannot open or maintain your account. That is a legal constraint, not a commercial one.
5. Who we share it with
We disclose personal information to:
- Identity verification providers, to confirm your name, date of birth and address against Australian records.
- Payment providers and financial institutions, to process deposits and withdrawals.
- BetStop, for the purpose of checking the National Self-Exclusion Register.
- Regulators and law enforcement, including Liquor & Gaming NSW and AUSTRAC, where we are required or authorised by law.
- Sporting and racing bodies, where an integrity investigation requires it.
- Professional advisers — auditors and lawyers — under confidentiality obligations.
- Technology suppliers who host and maintain our systems, under contracts requiring them to protect the information and use it only for us.
6. Overseas disclosure
Our systems and data are hosted in Australia. Some technology suppliers may access data from overseas for support purposes. Where that happens we take reasonable steps to ensure the recipient handles the information consistently with the Australian Privacy Principles, and we remain accountable for it.
7. How long we keep it
Australian wagering and anti-money-laundering law requires records of identity, transactions and betting activity to be retained for seven years after an account is closed or a transaction occurs, whichever is later. We keep them for that period and then destroy or de-identify them.
Records of a self-exclusion are kept for as long as necessary to honour it, which may be longer than seven years where the exclusion is permanent. Marketing preferences, including opt-outs, are kept indefinitely so an opt-out is never accidentally undone.
8. How we protect it
- Traffic between your browser and our servers is encrypted in transit (TLS).
- Personal and financial data is encrypted at rest.
- Access is limited to staff who need it for their role, and is logged.
- Payment card details are handled by PCI-DSS compliant providers; we do not store full card numbers.
- Systems are patched, monitored and independently tested.
No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
9. Your rights
- Access
- Ask for a copy of the personal information we hold about you. We respond within 30 days and do not charge for a straightforward request.
- Correction
- Ask us to correct anything inaccurate or out of date. Some details, such as your name and date of birth, can only be changed with supporting documents.
- Deletion
- Ask us to delete your information. We will do so unless we are required to retain it — which, for verification and transaction records, we usually are for seven years.
- Withdraw consent
- Turn off analytics cookies at any time from Cookie settings, and opt out of optional communications from your account settings.
- Complain
- Email privacy@grsbet.co. We acknowledge within two business days and respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Where the EU or UK GDPR applies to you, you additionally have rights to data portability, to restrict processing and to object to processing. Use the same privacy contact to exercise them.
10. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Analytics cookies are off unless you switch them on, and we do not use advertising or cross-site tracking cookies.
11. Children
This site is not directed at anyone under 18 and we do not knowingly collect information from minors. If we discover that we hold information about a person under 18, we delete it other than what we must retain to record that the account was closed.
12. Changes
We may update this policy. The effective date at the top shows when it last changed, and where a change materially affects your rights we will notify account holders by email before it takes effect.
13. Contact
Privacy Officer
GRSBET PTY LTD
52 McCrae Street<br>Queanbeyan West NSW 2620<br>Australia
privacy@grsbet.co