Privacy Policy

Last updated: August 2026

Bangkelian Resort & Casino Pty Ltd (ABN 84 621 903 447) ("Bangkelian", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and, where applicable, the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

1. Who We Are

Bangkelian Resort & Casino operates a licensed casino resort at 88 Bangkelian Parade, Main Beach QLD 4217, Australia. We are the data controller for personal information collected through our website, in-person services and marketing activities.

Privacy enquiries: privacy@bangkelian.com

2. Information We Collect

We may collect the following categories of personal information:

• Identity and contact: name, email, phone number, postal address, date of birth
• Identification documents: driver's licence, passport or other photo ID (required for casino floor access and age verification under Queensland law)
• Booking and enquiry data: reservation details, event requirements, dining preferences, guest counts
• Gaming data: membership information, gaming activity, self-exclusion records (where applicable)
• Website usage: IP address, browser type, pages visited, cookie data (see our Cookie Policy)
• Payment information: processed securely through third-party payment providers; we do not store full credit card numbers

3. How We Collect Information

We collect personal information when you:

• Complete our contact or booking forms (online or in person)
• Check in to the resort or register for casino floor access
• Join the Kelp Club rewards programme
• Subscribe to marketing communications
• Visit our website (via cookies and analytics)
• Communicate with us by phone, email or in person

4. Why We Use Your Information

We use personal information to:

• Process reservations, events, dining and spa bookings
• Verify age and identity for casino floor access (legal requirement)
• Provide customer service and respond to enquiries
• Administer responsible gambling programmes and self-exclusion
• Comply with OLGR licensing and anti-money laundering obligations
• Send marketing communications (with your consent)
• Improve our website and services through analytics
• Protect the security and integrity of our resort and guests

5. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area, we process personal data on the following bases:

• Contract: to fulfil reservations and services you request
• Legal obligation: age verification, gaming regulation, anti-money laundering
• Legitimate interests: resort security, fraud prevention, service improvement
• Consent: marketing communications and non-essential cookies

6. Disclosure to Third Parties

We may share personal information with:

• Queensland Office of Liquor and Gaming Regulation (regulatory compliance)
• Australian Transaction Reports and Analysis Centre (AUSTRAC) where required by law
• Payment processors, IT service providers and cloud hosting partners (under confidentiality agreements)
• Professional advisers (legal, accounting, insurance)
• Law enforcement or regulatory bodies when required by law

We do not sell personal information to third parties.

7. Overseas Disclosure

Some service providers (such as cloud hosting and email platforms) may store data outside Australia. Where we disclose information overseas, we take reasonable steps to ensure recipients comply with privacy standards comparable to the APPs, or we obtain your consent.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, comply with legal obligations (including gaming and financial record-keeping requirements) and resolve disputes. Gaming and identification records may be retained for up to seven years as required by Queensland law.

9. Security

We implement appropriate technical and organisational measures to protect personal information, including encryption, access controls, staff training and secure data storage. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your account credentials.

10. Your Rights

Under the Privacy Act 1988 and APPs, you have the right to:

• Access personal information we hold about you
• Request correction of inaccurate or outdated information
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

Under the GDPR, EEA residents additionally have rights to erasure, restriction of processing, data portability and to object to processing. To exercise any of these rights, contact privacy@bangkelian.com.

11. Cookies and Analytics

Our website uses cookies as described in our Cookie Policy. You can manage cookie preferences through our cookie banner or browser settings.

12. Children's Privacy

Our services are not directed at persons under 18. We do not knowingly collect personal information from minors. Casino floor access is strictly restricted to persons aged 18 and over.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact & Complaints

Privacy Officer
Bangkelian Resort & Casino Pty Ltd
88 Bangkelian Parade, Main Beach QLD 4217
Email: privacy@bangkelian.com
Phone: +61 7 5552 8800

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or phone 1300 363 992.