Privacy Policy

This Privacy Policy explains how Drake Casino at drake-au.com collects, uses, discloses, and protects personal information of website visitors and players who interact with our review services and with the Drake Casino brand as presented on this site. It is intended for individuals located in Australia who access or use drake-au.com. By using this website, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective from 1 January 2026 and replaces any earlier versions published on this website.

Who We Are

Drake Casino is an independent informational and review website operating at https://drake-au.com (the "Website"). The Website reviews and provides information about the online gambling brand "Drake Casino" operated on https://drakecasino.eu. We are not the operator of the Drake Casino gambling platform and do not provide gambling services.

Because the corporate operator details for Drake Casino and related entities are not fully and reliably disclosed in public sources, certain information about the ultimate operating company remains unavailable. To the extent we act as a data controller for personal data collected via this Website, the controller is:

Controller name: Drake Casino (online review service)
Domain: https://drake-au.com
Legal address: not specified (the Website is operated as an offshore online informational service; no verified physical address is currently available)
Registration / company number: not specified (no reliable public registration data is available for disclosure at this time)

For all matters relating to privacy and data protection, including the exercise of your rights, you may contact our data protection contact point (acting as DPO function):

Email: [email protected]
Purpose: general enquiries, privacy and data protection requests
Phone: not specified
Postal address: not specified (requests are handled electronically)

Important regulatory note (Australia): According to information published by the Australian Communications and Media Authority (ACMA), Drake Casino, including drakecasino.eu and associated domains, has been the subject of blocking orders as an illegal offshore gambling service targeting Australians. Drake Casino at drake-au.com does not operate gambling services, does not hold an Australian interactive gambling licence, and is provided strictly as an informational review resource.

What Personal Data We Collect

We collect only the personal data that is reasonably necessary for operating this review Website, for analytics, and for communications with users who choose to contact us. We distinguish the following categories of data:

Identity and Contact Data

Basic identifiers: first name and last name, if you voluntarily provide them when contacting us.
Contact details: email address (for example, when you write to [email protected]), and any phone number you may optionally include in your message.
Content of communications: the text of emails, enquiries, complaints, or feedback you send us, and our replies.

Technical and Usage Data

Technical identifiers: IP address, approximate location derived from IP (country/region), device type, operating system, browser type and version, language settings.
Usage logs: pages visited on drake-au.com, referral source, time and date of access, time spent on pages, click paths, error logs, and interaction with forms or links (for example, clicks on outbound links to drakecasino.eu, betsoft.com, or acma.gov.au).

Cookies and Similar Technologies

Cookies: small text files set on your device to enable core functionality, remember preferences, and support analytics and advertising (see the "Cookies & Tracking Technologies" section).
Tracking technologies: web beacons, pixels, and similar technologies that may be used by our analytics and advertising partners to understand traffic patterns and campaign performance.

Marketing and Preference Data

Subscriptions: information about your subscription preferences (for example, whether you opted in to receive review updates or promotional content, if such features are provided).
Consent records: logs of when and how you provided or withdrew consent for particular processing activities (e.g., marketing emails or specific categories of cookies).

Payment and Gambling Behaviour Data

Payment data: we do not process or store your payment card numbers, e-wallet credentials, or banking details because Drake Casino does not operate deposits or withdrawals. Any payments to Drake Casino or other operators occur on their own platforms and are governed by their privacy policies.
Behavioural gambling data: we do not have access to your betting history, wagering amounts, wins or losses on Drake Casino or other gambling platforms. We may receive only aggregated or anonymised performance metrics from affiliate partners, such as number of sign-ups or conversions attributed to our Website, without direct identification of individual players.

Legal Basis for Processing

Our processing of personal data collected via drake-au.com is based on recognised data protection principles, including consent, contractual necessity, legitimate interests, and compliance with legal obligations. Depending on the processing activity, one or more of the following legal bases may apply:

Consent

Voluntary provision of data: when you deliberately send us an email, complete an optional contact or feedback form, or sign up for newsletters, you consent to the processing of the personal data you provide for the purposes stated at the point of collection.
Cookies requiring consent: non-essential cookies (such as advertising and certain analytics cookies) are used only with your consent, where required by applicable law. You may withdraw your consent at any time through browser settings or available cookie tools.
Marketing communications: where we offer newsletters or promotional emails, we rely on your explicit opt-in consent and provide an unsubscribe option in each communication.

Contractual Necessity

Provision of requested services: when you request information, support, or other services from us (for example, detailed clarification about a review, or handling a complaint), we may need to process your personal data to communicate with you and fulfil your request.
Website functionality: certain technical data and functional cookies are necessary to provide you with access to the Website, maintain session integrity, and ensure that pages display correctly on your device.

Legitimate Interests

Website security and fraud prevention: we process IP addresses, logs, and usage data to monitor for suspicious activity, prevent abuse, and protect our systems, users, and partners from fraud or malicious behaviour.
Analytics and service improvement: we use aggregated and pseudonymised usage data to understand how the Website is used, improve content, fix technical issues, and optimise the user experience.
Business operations: we may process limited personal data for internal administration, record-keeping, and to manage relationships with partners, affiliates, and service providers.

Compliance with Legal Obligations

Regulatory compliance: although Drake Casino does not operate gambling services in Australia and is not licensed as an Australian interactive gambling provider, we may be required under applicable laws and regulatory frameworks to retain certain records, respond to lawful requests from authorities, or comply with court orders.
Risk and enforcement matters: in view of ACMA's enforcement framework against illegal offshore gambling, we may need to cooperate with competent authorities where lawfully required, which can involve processing and disclosure of limited personal data, subject to applicable legal safeguards.

Purpose of Processing

We process personal data strictly for legitimate, specific, and clearly defined purposes. The primary purposes include:

Providing and operating the Website: enabling you to access and use drake-au.com, displaying content correctly on your device, maintaining core functionality, and ensuring the stability and performance of our systems.
Content and service improvement: analysing aggregated usage data to understand which pages are most visited, how users navigate the Website, and where technical issues occur, so we can improve the layout, content quality, and user experience.
Communication with you: responding to your enquiries, feedback, or complaints sent to [email protected], and providing updates or information you specifically request.
Marketing and promotions: if we offer newsletters or promotional communications, using your contact details to send you casino reviews, news, or promotional offers related to Drake Casino or other partners, only where you have consented or where otherwise permitted by law. You can opt out at any time.
Analytics and statistics: using cookies and similar technologies to generate anonymised or pseudonymised statistics about Website traffic, referral sources (for example, from acma.gov.au or researchgate.net), and the effectiveness of affiliate links to operators such as drakecasino.eu or providers such as betsoft.com.
Fraud detection and security: monitoring access patterns, IP addresses, and logs to detect and mitigate fraudulent use, scraping, attacks on our infrastructure, and other prohibited or harmful activities.
Legal and regulatory purposes: establishing, exercising, or defending legal claims; responding to lawful requests from regulators or law enforcement; complying with record-keeping obligations; and documenting compliance with applicable data protection rules.

Disclosure & Sharing

We do not sell your personal data. However, we may disclose or share personal data with carefully selected third parties where reasonably necessary for the purposes described above, subject to appropriate contractual and security safeguards.

Service Providers and Technical Partners

Hosting providers: companies that host our servers or cloud infrastructure, store Website files, and provide related technical support.
Analytics providers: tools that help us collect aggregated statistics about traffic and usage (for example, web analytics platforms). These providers may set third-party cookies or similar technologies.
IT and security providers: vendors that assist us with monitoring, maintaining, and securing our systems, performing backups, or investigating incidents.

Affiliate and Marketing Partners

Affiliate networks: partners who track referrals from drake-au.com to external operators such as drakecasino.eu and other gambling or gaming websites. In principle, these partners receive only limited technical and tracking data (such as click IDs and timestamps) rather than directly identifying personal information.
Advertising networks: subject to your consent where required, we may allow third-party advertising networks to place cookies or pixels on your device to deliver personalised or contextual advertising and measure campaign effectiveness.

Regulators and Public Authorities

Regulatory cooperation: where we are legally required, we may share limited personal data with competent authorities, courts, law enforcement bodies, and regulators (for example, ACMA in Australia or, where applicable, foreign supervisory authorities) in response to binding legal requests, subpoenas, court orders, or to enforce our legal rights.

Corporate Transactions

Business transfers: in the event of a merger, acquisition, sale of assets, reorganisation, or similar transaction affecting Drake Casino or the drake-au.com Website, personal data may be transferred to the acquiring or successor entity, subject to the continuation of protections consistent with this Privacy Policy.

Legal Protection

Protection of rights and safety: we may process and share personal data where reasonably necessary to protect our rights, privacy, safety, or property, and/or that of our users, partners, or the public, including detecting, preventing, or addressing fraud, security, or technical issues.

International Transfers

Drake Casino operates as an online review service in a cross-border environment. As a result, your personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including jurisdictions that may have different data protection laws.

Hosting and infrastructure: our servers and cloud services may be located in or operated from data centres in the European Union, the United States, or other regions, depending on our hosting and infrastructure providers.
Affiliate and marketing partners: some partners (including affiliate networks and analytics or advertising providers) may be established in the EU/EEA, the United States, Curaçao, or other locations.
Drake Casino and related entities: the Drake Casino gambling operator is believed to be registered in Curaçao under a sub-licence associated with master licence 1668/JAZ. Any data you provide directly on drakecasino.eu is governed by that operator's privacy policy and may be subject to separate international transfers beyond our control.

Where we transfer personal data internationally, we take steps designed to ensure an appropriate level of protection, which may include:

entering into contractual arrangements incorporating standard data protection clauses or analogous safeguards where applicable and feasible;
limiting transfers to what is strictly necessary for the purposes described in this Privacy Policy;
using reputable service providers that implement reasonable technical and organisational security measures; and
where applicable, relying on your informed consent for specific cross-border transfers.

However, because we operate as an offshore informational service and some partners may be located in jurisdictions without fully equivalent data protection laws, you acknowledge that certain transfers may involve additional risks compared with transfers within your home jurisdiction.

Data Retention

We retain personal data only for as long as is reasonably necessary for the purposes for which it was collected, or as required by applicable law. Retention periods depend on the type of data and the context of processing:

Contact and enquiry data: emails and communications sent to [email protected], along with related response records, are generally retained for up to 3 years from the date of our last interaction, unless a longer period is required to establish, exercise, or defend legal claims.
Technical and log data: server logs, security logs, and usage data are typically retained for 6 to 24 months for security, analytics, and troubleshooting, after which they are deleted or irreversibly anonymised.
Marketing data: information about your subscription to newsletters or promotional communications is retained for as long as you remain subscribed and for up to 2 years after your last interaction with such communications, unless you withdraw your consent earlier.
Cookie-related data: data associated with cookies and similar technologies is retained for the lifespan of the relevant cookie, which may range from a single session up to 24 months, depending on the cookie's type and purpose. You can clear cookies earlier through your browser settings.
Legal and regulatory records: where applicable law requires specific retention periods (for example, for complaint handling or regulatory cooperation), we retain data for the mandated period and delete or anonymise it thereafter.

When personal data is no longer needed for the purposes for which it was collected, and no legal obligation or legitimate interest justifies further retention, we will delete it or anonymise it in a secure manner. Where deletion is not technically feasible (for example, within backup archives), we will isolate and protect the data from further processing until deletion becomes possible.

Your Rights

Subject to applicable laws and certain limitations, you have a range of rights in relation to your personal data. We aim to align our practices with widely recognised data protection standards, such as the principles embodied in the European Union's General Data Protection Regulation (GDPR). The reference to Mexican data protection legislation in this context is for comparative purposes only; we do not target or specifically serve the Mexican market.

Key Rights

Right of access: you may request confirmation as to whether we process your personal data and, if so, obtain a copy of that data and certain related information (for example, purposes of processing, categories of data, and recipients).
Right to rectification: you may ask us to correct inaccurate personal data or complete incomplete data concerning you.
Right to erasure ("right to be forgotten"): you may request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis, or where you successfully object to processing.
Right to restriction of processing: you may request that we restrict processing of your personal data in specific situations, such as while we are verifying its accuracy or assessing an objection.
Right to object: you may object, on grounds relating to your particular situation, to processing based on our legitimate interests. You also have an unconditional right to object at any time to processing of your personal data for direct marketing purposes.
Right to data portability: where processing is based on your consent or on a contract and carried out by automated means, you may request to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to withdraw consent: where processing is based on your consent (for example, marketing emails or certain cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Exercising Your Rights

Submission of request: send your request by email to [email protected], clearly indicating which right you wish to exercise and providing sufficient information to verify your identity (such as the email address you used to contact us).
Verification: we may request additional information to confirm your identity where reasonably necessary to protect your data from unauthorised access or deletion.
Assessment: we will review your request in light of applicable laws and our legitimate interests, and determine whether the requested action can be taken in full, in part, or must be refused due to legal constraints.
Response time: we aim to respond to all valid requests without undue delay and, in any event, within 30 days of receipt. Where a request is particularly complex or we receive a large number of requests, this period may be extended by a further 30 days, in which case we will inform you of the extension and reasons.
Fees: requests are generally handled free of charge. However, where requests are manifestly unfounded or excessive (for example, repetitive), we may charge a reasonable fee or refuse to act on the request, as permitted by applicable law.

Some rights may not be fully applicable in all jurisdictions or may be subject to specific conditions and exceptions. We will inform you where we are unable to comply with part or all of your request and explain the reasons, where legally permissible.

Cookies & Tracking Technologies

We use cookies and similar technologies on drake-au.com to enable the Website to function, to improve performance, and, where permitted, to support advertising and affiliate tracking. Cookies are small data files placed on your device when you visit a website.

Types of Cookies We Use

Strictly necessary (functional) cookies: these cookies are essential for the operation of the Website and enable basic features such as page navigation, access to secure areas, and correct display of content. The Website cannot function properly without these cookies.
Preference cookies: these remember choices you make (such as language settings or cookie preferences) to provide a more personalised experience.
Analytics / performance cookies: these help us understand how visitors interact with the Website by collecting and reporting information anonymously or pseudonymously, such as which pages are visited most often and whether error messages are encountered.
Advertising and affiliate cookies: these may be set by us or by our advertising and affiliate partners to track your interactions with ads, measure campaign performance, and attribute referrals (for example, from drake-au.com to drakecasino.eu or other partners). They may be used to show more relevant advertisements on third-party websites.

Managing Cookies

Browser settings: you can configure your browser to refuse all or some cookies, to delete existing cookies, or to alert you when websites set or access cookies. The method for doing so varies by browser; please refer to your browser's help or settings section.
Opt-out tools: some analytics and advertising providers offer their own opt-out mechanisms which you can use in addition to or instead of browser controls.
Consequences of disabling cookies: if you disable or block all cookies, some parts of the Website may not function correctly, and certain features may become unavailable or behave unexpectedly.

Data Security

We implement technical and organisational measures designed to protect personal data processed via drake-au.com against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Encryption in transit: where supported by your browser and network, communications between your device and our servers are protected using industry-standard Transport Layer Security (TLS 1.2+) or equivalent protocols.
Encryption at rest: where feasible and supported by our infrastructure, stored data (including backups) is encrypted or otherwise secured using appropriate access controls.
Access management: access to systems and databases containing personal data is restricted to authorised personnel and service providers on a "need to know" basis, protected by authentication controls, strong passwords, and, where possible, multi-factor authentication.
Security governance: we maintain internal procedures and standards aimed at ensuring that personal data is handled securely, including guidelines for secure development, change management, and incident handling.
Staff awareness: individuals involved in processing personal data receive appropriate guidance on confidentiality obligations and data protection principles.
Monitoring and audits: we periodically review our systems and processes, and may perform technical testing or rely on our providers' security certifications (for example, ISO 27001 or SOC 2, where applicable to specific vendors) to evaluate the adequacy of implemented measures.
Incident response: we maintain procedures for identifying, assessing, and responding to suspected personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you and, where required, relevant supervisory authorities, in accordance with applicable law.

While we take reasonable steps to protect personal data, no system can be completely secure. You acknowledge that the transmission of data via the internet carries inherent risks and that absolute security cannot be guaranteed.

Complaints & Contacts

If you have questions, concerns, or complaints about this Privacy Policy or our handling of personal data, you should contact us first so that we can try to resolve the matter informally.

Contacting Us

Primary contact (DPO function): [email protected]
Website: https://drake-au.com
Phone: not specified
Postal address: not specified (correspondence handled electronically)

Complaint Procedure

Initial submission: send an email to [email protected] describing your concern or complaint in as much detail as possible, including any relevant evidence or context.
Acknowledgement: we will aim to acknowledge receipt of your complaint within 7 business days.
Investigation: we will review your complaint, gather relevant information, and, where necessary, request additional details from you to clarify the matter.
Response: we will endeavour to provide a substantive response within 30 days of receiving a complete complaint. If we are unable to meet this deadline due to complexity or volume of complaints, we will inform you of the delay and provide an estimated timeframe.
Remedies: where we identify an issue in our processing, we will take appropriate corrective actions, which may include amending records, adjusting processing practices, or providing additional information.

Escalation to Supervisory Authorities

If you are not satisfied with our response or consider that your privacy rights have been infringed, you may have the right to lodge a complaint with a competent data protection or regulatory authority in your jurisdiction. Depending on your location, this may include:

Australia (regulator of communications and interactive gambling):
Australian Communications and Media Authority (ACMA)
Website: https://www.acma.gov.au
Online complaints forms are available on the ACMA website.
Other jurisdictions: if you are located outside Australia, you may contact your local data protection authority or relevant regulator, where applicable. Contact details can usually be found on the official website of the authority in your country or region.

Your right to complain to a supervisory authority is without prejudice to any other administrative or judicial remedies available to you.

Updates

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, in the Drake Casino service, in applicable laws, or in regulatory guidance (including developments relating to ACMA enforcement against offshore gambling operators). When we make material changes, we will take appropriate steps to inform you.

Notification Methods

Website notice: posting the updated Privacy Policy on https://drake-au.com with a revised "Last updated" date at the bottom.
Prominent banners or pop-ups: for significant changes, displaying a banner, pop-up, or similar notice on key pages of the Website.
Email notifications: where we hold your email address and the change is considered material, sending you a notice via email describing the modifications and linking to the updated policy.
Account/dashboard alerts: if, in future, we offer user accounts or dashboards on drake-au.com, posting alerts or messages within those areas.

Effective Date and User Options

Advance notice: for material changes that significantly affect how we process personal data (for example, new categories of data collected or new categories of recipients), we will aim to provide notice at least 30 days before the changes take effect, where practicable.
Continued use: your continued use of drake-au.com after the effective date of an updated Privacy Policy will constitute your acknowledgement of the changes. If you do not agree with an update, you should stop using the Website.
Right to object and close relationships: where changes involve new processing activities that rely on consent or legitimate interests, you may object or withdraw your consent as described in the "Your Rights" section. If you no longer wish to interact with our services, you may discontinue use of the Website and, if applicable, request deletion of your personal data.

Last updated: January 2026