Privacy Policy

This Privacy Policy explains how Koala 88, operating via the website koala88-au.com (the "Website"), collects, uses, discloses, and protects personal information of visitors and players. It applies to all individuals who access or use the Website, whether as unregistered visitors or registered account holders. By using the Website, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and supersedes any prior versions.

Who We Are

Observe: The available data does not provide a verified legal entity name, registered office, or confirmed licensing details. The brand "Koala 88" targets Australian users from offshore and is assessed as high risk and potentially operating illegally under Australian law.

Expand: To maintain transparency while avoiding misleading statements, we must clearly state what is known and what is not known, and provide a functional contact channel for privacy matters.

Reflect: The following description balances user information needs with the obligation not to misrepresent corporate or licensing status.

The Website is operated under the brand name Koala 88 and is accessible at https://koala88-au.com. The underlying operating company, its full legal name, and its registered address have not been publicly and reliably disclosed in the materials available to us. A Curacao eGaming licence number 1668/JAZ is claimed in various materials but is assessed as unverified and possibly invalid based on audits conducted in 2024.

For all privacy-related inquiries, including questions, requests to exercise your rights, and complaints, you may contact our data protection contact point:

• Data Protection Contact: Data Protection Team, Koala 88
• Email: [email protected] (please include "Privacy request" in the subject line)
• Website: https://koala88-au.com

No dedicated Data Protection Officer (DPO) or physical postal address is verifiably available at this time. Communications should therefore be made by email.

What Personal Data We Collect

Observe: Operating an online gambling review/service and account-based environment requires collection of identification, contact, technical, payment, and behavioural data, plus cookies. Australian and international standards require clarity about categories and examples.

Expand: We differentiate between data you provide, data collected automatically, and data obtained from partners (e.g., payment processors, marketing affiliates, potential fraud-screening services).

Reflect: The following categories describe the types of information likely processed through koala88-au.com in connection with Koala 88 services.

1. Identity and Contact Data

• Full name, date of birth, and gender (where provided).
• Residential address, country of residence, and postcode.
• Email address (e.g., the support contact uses [email protected] as a channel; players provide their own email for registration and communication).
• Phone number and alternative contact channels, if requested during registration or verification.
• Copies of identification documents (e.g., passport, national ID card, driver licence), proof of address (utility bill, bank statement), and any other Know-Your-Customer (KYC) documentation that you submit.

2. Technical and Usage Data

• IP address, approximate location derived from IP, and timestamps of visits.
• Device identifiers, operating system, browser type and version, screen resolution, and language settings.
• Server logs, including pages viewed, click paths, referral URLs, login times, and session duration.
• Information related to access restrictions or blocking events (for example, if access is affected by Australian ISP-level blocking in connection with ACMA actions).

3. Account, Gameplay, and Behavioural Data

• Account username, internal account ID, registration date, and account status (active, suspended, closed).
• Game preferences, games played, session length, stakes, wins, losses, bonuses claimed, and wagering activity.
• Clicks on banners, offers, and internal navigation; interaction with emails (opens, clicks, unsubscribe actions).
• Records of communications with customer support (including via [email protected]), dispute logs, and complaint histories (e.g., payout delays, KYC issues).

4. Payment and Financial Data

• Deposits and withdrawals: transaction amounts, currency, timestamps, and transaction status.
• Limited payment instrument details, such as masked card numbers, card issuer, or digital wallet identifiers (full card or banking data is generally processed by payment providers, not by us directly).
• Payment verification information (e.g., confirmation codes, screenshots, or documents you provide to resolve payment issues or delays).

5. Cookies and Similar Technologies

• Cookies: small text files stored on your device that enable recognition of your browser and preferences.
• Tracking pixels / tags: code snippets used for analytics or marketing attribution.
• Local storage and similar tools: technologies used to store settings or session information.

6. Data from Third Parties

• Data from payment processors confirming successful or failed transactions, fraud flags, chargebacks, or disputes.
• Data from affiliates or advertising networks indicating which campaign led you to koala88-au.com.
• Data from KYC/AML and fraud-prevention service providers, where applicable (e.g., verification status, risk scores).

Legal Basis for Processing

Observe: As an offshore gambling brand targeting Australians, Koala 88 must still articulate lawful bases in line with global best practice (e.g., GDPR-style grounds). Local Australian Privacy Act principles also emphasise consent, necessity, and reasonable expectations.

Expand: Data processing is primarily based on consent, contract performance, legal obligations (particularly KYC/AML in the operator's claimed jurisdiction), and legitimate interests such as fraud prevention.

Reflect: The following grounds are used depending on the context of the processing.

1. Performance of a Contract

• To create, manage, and secure your player account.
• To process deposits, wagers, bonuses, and withdrawals.
• To provide customer support and handle your requests (including via [email protected]).
• To verify your identity when required to operate your account and process payouts.

2. Compliance with Legal or Regulatory Obligations

• To comply with anti-money laundering (AML), counter-terrorist financing (CTF), and know-your-customer (KYC) rules applicable in the operator's jurisdiction (e.g., Curacao or other offshore regimes, if and to the extent actually binding).
• To respond to lawful requests from regulators or law enforcement authorities, subject to applicable law.
• To maintain records for accounting, tax, and audit purposes in the relevant jurisdiction.

3. Legitimate Interests

• To protect the integrity and security of the Website and our systems (e.g., detecting bots, abuse, unauthorised access, or pirated game activity).
• To prevent, detect, and investigate fraud, chargebacks, bonus abuse, or other prohibited conduct.
• To conduct analytics on aggregated or pseudonymised data to understand service performance and user behaviour.
• To handle disputes and complaints relating to payouts, KYC issues, or other service matters.

4. Consent

• To send you marketing communications (email, SMS, push notifications) about offers and promotions, where required by law.
• To place and access certain non-essential cookies and tracking technologies, particularly for advertising and retargeting.
• To share data with specific affiliates and advertising partners for personalised marketing, where this goes beyond what is strictly necessary for providing the service.

You may withdraw your consent at any time, particularly for marketing emails and non-essential cookies, as described below. Withdrawal does not affect processing that occurred before withdrawal.

Purpose of Processing

Observe: Users must understand why Koala 88 processes their data, especially given the high-risk profile, unverified licence, and Australian regulatory context.

Expand: We group purposes into service provision, safety and compliance, marketing, analytics, and operational management.

Reflect: The purposes are limited to what is reasonably connected with running an offshore online casino targeting Australian players and related services on koala88-au.com.

• Provision of Services:
  • To register and manage player accounts.
  • To operate games, bonuses, and loyalty features.
  • To process deposits, bets, wins, and withdrawals.
  • To provide customer support and technical assistance.
• Improvement and Optimisation of Services:
  • To monitor performance and fix technical issues.
  • To improve the user interface, content, and game offering.
  • To conduct testing, research, and analytics on aggregated data.
• Marketing and Promotions:
  • To send promotional emails and notifications about Koala 88 offers, subject to your preferences.
  • To manage affiliate marketing and track campaign performance.
  • To conduct segmentation and profiling for more relevant offers, within legal limits.
• Fraud Prevention, Security, and Risk Management:
  • To detect suspicious transactions, multiple-accounting, and bonus abuse.
  • To comply with AML/KYC requirements in the operator's jurisdiction.
  • To investigate and address evidence of non-genuine or pirated game software, delays, or misuse of the platform.
• Legal and Regulatory Compliance:
  • To maintain records for audits, tax, and legal defence.
  • To respond to legally binding requests from authorities.
  • To manage risks associated with possible ACMA blocking and related communications.

Disclosure & Sharing

Observe: Koala 88 operates as an offshore brand with a high-risk profile, possible unverified licence, and no clear domestic Australian presence. Data is likely shared with payment processors, technical providers, affiliates, and possibly regulators or enforcement authorities in the operating jurisdiction.

Expand: Sharing must be limited to necessary contexts and include safeguards and user information about the implications.

Reflect: Below we describe main categories of recipients and the circumstances of disclosure.

1. Group and Operational Partners

• Companies that are part of the same group as the Koala 88 operator (where such entities exist) for internal administration, IT hosting, and consolidated risk management.
• Game providers and platform vendors supplying casino software, game content, and technical services (even where some games may be alleged as non-genuine or pirated, data necessary to run those games may still be processed by vendors).

2. Payment Service Providers and Financial Institutions

• Banks, card schemes, e-wallets, and payment gateways used to process deposits and withdrawals.
• Chargeback and dispute management entities handling contested transactions.
• Anti-fraud and risk-scoring providers that help detect suspicious or prohibited transactions.

3. Service Providers (Processors)

• IT hosting, cloud infrastructure, and data centre providers.
• Customer support tools, email delivery providers, and CRM systems.
• Analytics providers that process pseudonymised or aggregated usage data.

4. Affiliates and Advertising Networks

• Marketing affiliates that refer you to koala88-au.com and require limited data for attribution (e.g., tracking identifiers, campaign IDs, country).
• Advertising networks and retargeting partners, when you consent to marketing cookies or personalised advertising.

5. Authorities and Dispute Bodies

• Regulators and authorities in the operator's jurisdiction (for example, in Curacao or any other offshore jurisdiction), to the extent such bodies exist and have authority over the operator.
• Law enforcement or governmental bodies when disclosure is required by applicable law, court order, or lawful request.
• External advisers (lawyers, auditors) for the establishment, exercise, or defence of legal claims.

6. Business Transfers

• In connection with a merger, acquisition, asset sale, restructuring, or insolvency involving the Koala 88 operator, your data may be transferred to new owners or counterparties, subject to confidentiality and data protection safeguards.

We do not sell your personal data as a standalone asset. However, given the high-risk profile and offshore nature of Koala 88, users should be aware that effective oversight and enforcement of data protection promises may be limited in practice.

International Transfers

Observe: Koala 88 targets Australian users from offshore, with a claimed (but unverified) Curacao licence. This implies cross-border transfers from Australia (or your location) to servers and partners in other countries.

Expand: Transfers likely include hosting in the EU/EEA, Curacao, other Caribbean or Asian jurisdictions, and global cloud infrastructures. Standard contractual clauses (SCCs) and equivalent mechanisms are typically relied upon by service providers.

Reflect: Given the unverified regulatory framework, users should understand that their data may be processed in jurisdictions with differing levels of legal protection.

• Locations of Processing: Your personal data may be stored and processed in:
  • Curacao or other offshore jurisdictions connected with the operator.
  • Member States of the European Union or European Economic Area, where some service providers, data centres, or processors may be based.
  • Other countries where our technical, payment, or marketing partners are located, including but not limited to the United States and Asian or Caribbean jurisdictions.
• Transfer Safeguards:
  • Where required by law (e.g., for EU-based providers), we and/or our service providers may use Standard Contractual Clauses (SCCs) adopted by the European Commission or similar contractual mechanisms.
  • Additional technical and organisational measures (encryption, access controls) may be used to mitigate risks of international transfers.
• Practical Limitations:
  • The Koala 88 operator's effective compliance with EU-style transfer mechanisms and oversight from EU or Australian regulators may be limited due to its offshore and high-risk character.
  • By using koala88-au.com, you acknowledge that your data may be processed in countries that may not provide the same level of protection as your home jurisdiction.

Data Retention

Observe: Responsible operators should retain data only as long as necessary for specified purposes and in line with legal obligations, typically several years after account closure for AML and dispute purposes.

Expand: Different categories of data require different retention periods; users must also have a path to deletion where law permits.

Reflect: The retention rules below reflect commonly applied terms in the gambling sector, adjusted to 2026 and beyond.

• Account and Identity Data:
  • Stored for the lifetime of your account and normally for up to 5 - 7 years after account closure, to comply with AML/KYC, tax, and legal record-keeping requirements in the operator's jurisdiction.
• KYC Documents:
  • Retained for up to 5 - 7 years after the end of the business relationship or the completion of the relevant transaction, in line with AML/CTF practices.
• Transaction and Gameplay Data:
  • Retained for at least 5 years after the relevant transaction or account closure, to resolve disputes, verify gameplay, and support accounting, audit, and investigations.
• Technical Logs:
  • Basic web server logs and security logs are typically kept for 6 - 24 months, unless longer retention is required for security investigations or legal proceedings.
• Marketing Data:
  • Contact details used for marketing are kept until you withdraw consent or object to marketing. Evidence of your consent and opt-out actions may be retained for up to 5 years for compliance purposes.
• Complaint and Dispute Files:
  • Records of complaints (e.g., payout delays, KYC loops) are typically stored for 5 - 7 years after resolution.

When data is no longer required, it will be securely deleted, anonymised, or aggregated, unless retention is mandated or permitted under applicable law. Where technical limitations prevent immediate deletion, we will isolate your data from further processing where feasible.

Your Rights

Observe: While Koala 88 primarily targets Australia and is offshore, users expect rights similar to those under the EU GDPR and comparable regimes. The brief also references Mexican law, which suggests alignment with international standards (e.g., access, rectification, cancellation, opposition).

Expand: We therefore outline a harmonised set of rights: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, as well as complaint mechanisms. Response times and cost-free principles must be clear.

Reflect: Actual enforceability may vary given the operator's offshore and high-risk status, but these rights frame our commitments.

1. Right of Access

• You can request confirmation whether we process your personal data and receive a copy of such data, together with information about how it is used and shared.

2. Right to Rectification

• You can ask us to correct inaccurate personal data and complete incomplete data (e.g., incorrect name, outdated address, erroneous transaction records where objectively wrong).

3. Right to Erasure (Right to be Forgotten)

• You may request deletion of your personal data where:
  • The data is no longer necessary for the purposes for which it was collected.
  • You withdraw consent and there is no other legal basis for processing.
  • You successfully object to processing and there are no overriding legitimate grounds.
  • Processing is unlawful or erasure is required by applicable law.
• We may retain data where necessary for legal obligations (e.g., AML/KYC retention periods, defence of legal claims).

4. Right to Restriction of Processing

• You can request that we restrict processing (except storage) where:
  • You contest the accuracy of the data (for the period we verify it).
  • Processing is unlawful and you prefer restriction to deletion.
  • We no longer need the data but you require it for legal claims.
  • You have objected to processing pending verification of overriding grounds.

5. Right to Object

• You may object at any time to:
  • Processing based on our legitimate interests, for reasons relating to your particular situation.
  • Processing for direct marketing, including profiling for such purposes. If you object to marketing, we will stop using your data for that purpose.

6. Right to Data Portability

• Where technically feasible and relevant, you can request data that you provided to us in a structured, commonly used, machine-readable format, and ask us to transmit it to another controller, when processing is based on consent or contract and carried out by automated means.

7. Right to Withdraw Consent

• You may withdraw your consent at any time for:
  • Marketing communications (by using unsubscribe links or contacting [email protected]).
  • Non-essential cookies and tracking technologies (via browser settings or in-site preferences where available).

8. Procedure for Exercising Rights

• How to submit: Send an email to [email protected] with:
  • Your full name, account username (if any), and registered email address.
  • A clear description of your request and the rights you wish to exercise.
• Verification: We may request additional information to verify your identity, especially before disclosing or deleting data.
• Response time: We aim to respond within 30 days of receiving a complete and verifiable request. Complex or multiple requests may require an extension; if so, we will inform you.
• Fees: Requests are normally handled free of charge. We may charge a reasonable fee or refuse requests that are manifestly unfounded, repetitive, or excessive, consistent with GDPR-like standards and similar Mexican data protection principles.

Note: While these rights are aligned with frameworks such as the EU GDPR and Mexican data protection regimes (e.g., rights of access, rectification, cancellation, and opposition), actual enforcement capabilities may be limited due to the Koala 88 operator's offshore status and lack of clear regulatory oversight in Australia.

Cookies & Tracking Technologies

Observe: Cookies are essential for a functional gaming and review environment but also create tracking and profiling risks. Users need clarity about cookie types, purposes, and controls.

Expand: We distinguish session vs. persistent cookies and first-party vs. third-party cookies, and provide management options.

Reflect: Despite offshore status, koala88-au.com commits to transparent cookie practices.

Types of Cookies

• Session Cookies: Temporary cookies that exist only while your browser is open and are deleted when you close it. Used for session management (e.g., keeping you logged in during a visit).
• Persistent Cookies: Remain on your device for a defined period or until you delete them. Used to remember preferences, such as language and login details, and to measure site performance.
• First-Party Cookies: Set by koala88-au.com and used directly by us for providing and improving the Website.
• Third-Party Cookies: Set by external providers such as analytics services, affiliates, and advertising networks for measurement, attribution, or marketing.

Purposes of Cookies

• Strictly Necessary / Functional:
  • Enabling core features such as account login, security protections, and transaction flows.
  • Remembering your language and basic settings.
• Analytics and Performance:
  • Collecting statistics about page views, session duration, and general usage patterns.
  • Helping diagnose technical issues and optimise the Website.
• Advertising and Affiliate Tracking:
  • Measuring the effectiveness of advertising campaigns and affiliate referrals.
  • Serving or tailoring advertising, if allowed under your local laws and subject to your consent where required.

Managing Cookies

• You can manage or delete cookies through your browser settings. Most browsers allow you to:
  • Block all cookies.
  • Block cookies from specific sites.
  • Delete existing cookies.
• Blocking or deleting cookies may impact the functionality of the Website and your ability to log in or use certain features.
• Where available, an in-site cookie or privacy panel may allow you to adjust non-essential cookie preferences directly on koala88-au.com.

Data Security

Observe: Offshore gambling operations must implement robust security due to the sensitivity of financial and identity data, especially given risks such as fake licences, payout issues, and potential piracy allegations.

Expand: Security measures span technical, organisational, and contractual controls aligned with recognised standards (e.g., ISO 27001, SOC 2) where feasible.

Reflect: The measures below aim to reduce risks but cannot guarantee absolute security, particularly in high-risk regulatory environments.

Technical Measures

• Encryption in Transit: Data transmitted between your browser and koala88-au.com is protected using industry-standard TLS (Transport Layer Security) protocols, typically TLS 1.2 or higher.
• Encryption at Rest: Where feasible, sensitive data (e.g., passwords, some financial data) is stored in encrypted or hashed form. Passwords are stored using industry-standard hashing algorithms.
• Access Controls: Access to production systems and databases is restricted to authorised personnel and protected via authentication and role-based access controls.
• Network Security: Use of firewalls, intrusion detection or prevention systems, and other controls to protect against unauthorised access.

Organisational Measures

• Staff Training: Personnel with access to personal data receive periodic training on data protection, confidentiality, and secure handling of customer information.
• Confidentiality Obligations: Staff and contractors are subject to non-disclosure and confidentiality obligations.
• Data Minimisation: We seek to collect only data necessary for specified purposes and to limit access on a need-to-know basis.

Monitoring and Incident Response

• Logging and Monitoring: Security-relevant events may be logged and monitored to detect unusual activity.
• Incident Response: Procedures exist for detecting, assessing, and responding to suspected data breaches, including internal escalation and remediation steps.
• Notification: Where required by applicable law, we will notify relevant authorities and affected individuals of certain personal data breaches without undue delay.

While we strive to implement commercially reasonable safeguards and, where possible, align with recognised frameworks such as ISO/IEC 27001 or SOC 2 principles, the offshore nature and high-risk profile of Koala 88 means that residual risks remain. You should consider these factors before choosing to share data or engage in gambling activities via koala88-au.com.

Complaints & Contacts

Observe: Users need a clear escalation path for privacy concerns, including internal handling and referral to external authorities. The brief mentions Mexican and EU authorities, but Koala 88 primarily targets Australians from offshore with limited clear oversight.

Expand: We therefore provide internal complaint steps and references to applicable privacy regulators, while noting jurisdictional constraints.

Reflect: This section explains how to raise concerns and what to expect.

Contact Channels

• Email: For all privacy questions, rights requests, or complaints, contact:
  • [email protected]
• Website: You may also find general contact information at:
  • https://koala88-au.com

Internal Complaint Procedure

1. Submission: Send an email titled "Privacy Complaint" and describe:
   • Who you are (name, username, and registered email if applicable).
   • The nature of your concern (e.g., data misuse, access issue, security concern).
   • Any supporting documentation or evidence.
2. Acknowledgement: We aim to acknowledge receipt of your complaint within 7 business days.
3. Investigation: We will investigate the matter, which may involve reviewing logs, contacting relevant internal teams, and requesting further information from you.
4. Response: We aim to provide a substantive reply within 30 days of receiving a complete complaint. Complex cases may require more time; if so, we will notify you of the delay and expected timeline.
5. Escalation: If you are not satisfied with our response, you may escalate the matter to relevant supervisory authorities as described below.

Escalation to Supervisory Authorities

Given the offshore and high-risk nature of Koala 88, regulatory oversight is fragmented. Depending on your location, you may raise concerns with:

• Australia:
  • The Office of the Australian Information Commissioner (OAIC) regarding privacy issues:
    https://www.oaic.gov.au
  • For gambling-related harms or illegal offshore gambling concerns, you may consult:
    https://www.acma.gov.au/blocked-gambling-websites
• European Union / EEA:
  • If you are located in the EU/EEA, you may contact your local Data Protection Authority (DPA). Contact details are usually available on national government or EU websites.
• Mexico (if applicable to you):
  • You may contact the competent Mexican data protection authority (e.g., the National Institute for Transparency, Access to Information and Personal Data Protection, INAI) in line with Mexican privacy legislation regarding ARCO rights (Access, Rectification, Cancellation, Opposition).

Please note that these authorities may have limited jurisdiction or enforcement capability over an offshore operator such as the one behind Koala 88.

Updates

Observe: Privacy policies must adapt to regulatory, technical, and organisational changes, especially in high-risk sectors like online gambling with shifting licensing and enforcement landscapes.

Expand: Users should be informed about how changes are communicated, how far in advance, and what options they have.

Reflect: The following rules govern updates to this Privacy Policy.

Notification of Changes

• We may update this Privacy Policy from time to time to reflect:
  • Changes in our data processing activities or services.
  • Changes in applicable laws or regulatory guidance.
  • Organisational or corporate changes affecting Koala 88 or koala88-au.com.
• When changes are material (for example, expanding types of data collected, new categories of recipients, or significant changes to legal bases), we will:
  • Display a prominent notice on the Website (e.g., banner or pop-up).
  • Where feasible, send an email notification to the address associated with your account.
  • Provide notice via your account dashboard, if such a feature is available.

Advance Notice and User Options

• For significant changes that materially affect your rights or the way we use your data, we will, where practicable, provide at least 30 days' advance notice before the changes take effect.
• If you do not agree with the updated Privacy Policy, you may:
  • Adjust your privacy, cookie, or marketing settings where such tools exist.
  • Contact [email protected] to close your account and, where applicable, exercise your rights (e.g., deletion or restriction), subject to legal retention obligations.

Version Control

• Last updated: January 2026.
• Material changes compared with earlier versions may include:
  • Expanded explanation of offshore and high-risk status of Koala 88 and potential limitations in regulatory oversight.
  • More detailed description of international transfers and security measures.
  • Clarification of user rights, complaint procedures, and references to Australian and international privacy authorities.

Your continued use of koala88-au.com after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.