Privacy policy — palmerbat

Palmer Bookmaking Pty Ltd collects, holds, uses and discloses personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What is collected

Identity information required for verification under the AML/CTF Act 2006 (Cth).
Account credentials, contact information and correspondence.
Wagering activity, payment instrument metadata and device information.

Categories of data collected

Identity — full name, date of birth, government-issued identification numbers, and a photograph where required for verification.
Account — username, password hash, account preferences and communication settings.
Financial — deposit method, partial card or BSB details as stored by the relevant payment processor, and transaction history.
Behavioural — wagers placed, win/loss outcomes, session timing and responsible-gambling signals.
Technical — IP address, device identifier, browser, operating system and cookie data.
Communications — support emails, chat logs and complaint records.

How information is used

To operate the account, to comply with regulatory obligations, to detect and prevent harm, and to respond to enquiries. Marketing communications require explicit opt-in and may be withdrawn at any time.

Purposes of use and legal basis

Account opening and KYC — AML/CTF Act 2006 (Cth).
Age verification — Betting and Racing Act 1998 (NSW), section 15A.
BetStop screening — Interactive Gambling Act 2001 (Cth), Part 7B.
Transaction monitoring and suspicious matter reporting (SMR) — AML/CTF Act 2006 (Cth).
Responsible gambling monitoring — Racing NSW Bookmaker Directions.
Marketing, where consent has been given — Privacy Act 1988 (Cth), APP 7.
Fraud and integrity investigations — contractual necessity and legitimate interest.
Service delivery and customer support — contractual necessity.
Legal compliance and regulator reporting — statutory obligation.
Disputes and complaints handling — contractual and statutory obligation.

Disclosure to third parties

Regulators — AUSTRAC, Racing NSW, Liquor & Gaming NSW, ACMA and the OAIC.
Racing controlling bodies — Racing NSW, Harness Racing NSW, Greyhounds NSW, and interstate equivalents including Racing Victoria and Racing Queensland, under race-fields and integrity agreements.
Sports controlling bodies and Sport Integrity Australia.
Law enforcement agencies where lawfully required.
Payment processors handling deposits and withdrawals.
KYC and identity verification vendors.
Cloud and IT infrastructure providers.
BetStop and the Department of Social Services (Cth).

Overseas disclosure (APP 8)

Some service providers engaged by Palmer Bookmaking Pty Ltd — including cloud-hosting, identity-verification and customer-support technology vendors — may store or process personal information outside Australia. Before disclosing personal information to an overseas recipient, Palmer Bookmaking Pty Ltd takes reasonable steps to ensure the recipient handles that information consistently with the Australian Privacy Principles. A current list of the countries in which personal information may be stored or processed is available on request from our Privacy Officer. Where no overseas disclosure occurs, personal information is held only on infrastructure located in Australia.

Anonymity and pseudonymity (APP 2)

Customers may deal with general enquiries anonymously or by pseudonym where it is lawful and practicable to do so. Identity must, however, be verified before an account is opened or a wager is accepted, as required by the AML/CTF Act 2006 (Cth) and the conditions of the Racing NSW bookmaker licence.

Data retention

Customer records are retained for a minimum of seven (7) years following account closure, in accordance with section 107 of the AML/CTF Act 2006 (Cth). Other categories of personal information are retained only for so long as is operationally and legally necessary.

Direct marketing (APP 7)

Where consent has been provided, direct marketing may be sent by email, SMS and push notification. Each message contains an opt-out mechanism, and opt-out preferences may also be managed from within the account at any time. Customers registered with BetStop are automatically removed from all marketing lists.

Data breach notification

Suspected eligible data breaches are assessed within thirty (30) days. Notifiable breaches are reported to the Office of the Australian Information Commissioner and to affected individuals under the Notifiable Data Breaches scheme (Part IIIC, Privacy Act 1988 (Cth)).

Children's privacy

Wagering services are not offered to any person under 18 years of age. Palmer Bookmaking Pty Ltd does not knowingly collect personal information from minors.

Security framework (APP 11)

Palmer Bookmaking Pty Ltd protects personal information through TLS encryption in transit, encryption at rest where applicable, role-based access controls, mandatory staff training and periodic independent security review.

Cookies

For information on cookies and similar technologies, see the Cookies policy.

Collection notice

An in-context collection notice is also presented on the sign-up page at the point personal information is first collected.

Access and correction

Customers may request access to, or correction of, personal information by writing to privacy@palmerbat.com.

Privacy Officer

The designated Privacy Officer may be contacted at: Privacy Officer, Palmer Bookmaking Pty Ltd — privacy@palmerbat.com.

Complaints

Privacy complaints are first directed to privacy@palmerbat.com. Unresolved matters may be escalated to the Office of the Australian Information Commissioner (OAIC).

Effective date

Effective: 28 May 2026. Version 1.1.

Operated by Palmer Bookmaking Pty Ltd (ABN 89 154 794 411). Sports Bookmaker Licence 5521/2023/WB granted by the Racing New South Wales. Principal place of business: c/- Canterbury Raceway, 98 King Street, CANTERBURY NSW 2193. Contact: support@palmerbat.com.