Apple Pay deposits work on a tokenised model: the merchant never sees a full card PAN, only a device-specific token plus a cryptogram for the single transaction. Visitors arriving here often value that architecture for the same reason — minimal exposure of identifying details. This notice describes how this website itself handles information, in keeping with that expectation.
Why we collect this information (purposes)
Personal information is collected for four narrowly defined purposes:
- Service delivery — to render pages, secure the site against abuse, and maintain reasonable uptime.
- Editorial improvement — to understand which guides are read in full, which are abandoned, and which produce questions in our inbox, so the writing can be revised.
- Communication — to reply to a message you have sent or to deliver an email update you have opted into.
- Commercial reconciliation — to confirm with affiliate networks that a referred signup originated from this site, so the agreed referral fee is paid.
No purpose beyond those four currently applies. If a new processing purpose becomes necessary, this notice is updated before the processing begins.
Information you provide directly
Two streams of information come from you knowingly. The first is the contact form or direct email: whatever you choose to write, plus the reply address you write from. The second is the optional newsletter sign-up, which captures only the email address and the consent timestamp. We do not ask for full name, postal address, phone number, date of birth, or any financial detail at any point on this site. If you volunteer such details in an email, we do not transcribe them into a contact database — the message stays in the mail server and is deleted on the schedule below.
Information we collect when you visit
Each page request produces standard web-server log data: source IP address, user agent string, the URL requested, the HTTP referrer, the response status code, and the timestamp. That log data is generated automatically by the hosting infrastructure and is retained for a short operational window before rotation. It is used for diagnostics — investigating a 500-error spike or filtering a denial-of-service pattern — and not for visitor identification. Wallet-side data such as Apple Pay device account numbers, Face ID confirmations, cryptograms, or merchant tokens never reach this website; that exchange happens between your device, the operator's payment service provider, and the card scheme network.
Cookies and similar tracking technologies
The site uses a deliberately small cookie set:
- Strictly necessary cookies — record your cookie consent choice and any accessibility or theme preference you have set. These cannot be switched off because without them the site cannot remember the choice itself.
- Analytics cookies — feed aggregate page-view, scroll-depth, and exit-rate counts to a privacy-conscious analytics service. Individual readers are not profiled.
- Affiliate attribution cookies — set by the destination operator's tracking partner after you click an outbound link, used to attribute a later registration to the referring page.
Browser controls allow blocking or clearing each category. The site remains functional without analytics or affiliate cookies; only the consent and preference cookies are needed for basic operation.
How long we keep information (retention)
Retention periods are set short and reviewed annually. Server logs rotate within a defined window appropriate to security investigation needs. Inbound email is retained while a thread is active and for a short period afterwards in case of follow-up, then archived or deleted. Newsletter subscriber records are kept until the address is unsubscribed, after which the record is removed within a routine clean-up cycle. Aggregate analytics counters — which contain no individual identifier — may be kept indefinitely as historical metrics. If a specific shorter window applies to a particular dataset, it is described in the response to a direct privacy request.
Your rights under the Privacy Act 1988
Australian readers are afforded the rights set out in the Australian Privacy Principles: the right to know whether personal information is held, the right of access to that information, the right to request correction, and the right to seek deletion where retention is no longer required by law or legitimate business need. To exercise any of these rights, contact us using the address below and describe the request in sufficient detail to allow identification of the relevant record. Most requests are completed within twenty business days. Where a request cannot be fully met, the reasons are explained in writing, along with information about lodging a complaint with the Office of the Australian Information Commissioner (OAIC).
Updates to this privacy notice
This notice is reviewed at least annually and whenever a material change is made to our hosting stack, analytics provider, cookie set, or affiliate arrangements. Material changes are flagged by an updated revision date at the top of the underlying source file. Significant changes that affect the categories of information processed will, where practicable, be highlighted on the home page for a short period after the revision. Continued use of the site after a revision constitutes acceptance of the revised notice; readers who do not accept the revision should discontinue use and may contact privacy@apple-pay-casino.com.au to confirm any cleanup of records previously provided.
