Privacy Policy

This Privacy Policy explains how Casino Guru s.r.o. collects, uses, discloses and protects personal information in connection with the Australian-focused section of its platform available at guru-au.com (also referred to in this document as "Casino Guru"). It applies to all website visitors, registered community or forum users, complainants, newsletter subscribers and other individuals who interact with our services. By using guru-au.com you acknowledge that you have read and understood this Policy. Effective date: 1 February 2026.

Who We Are

The website guru-au.com, including its Australian localized section known as Casino Guru, is owned and operated by:

• Legal entity: Casino Guru s.r.o.
• Legal form: Slovak limited liability company (s.r.o.)
• Registered office / legal address: Bratislava, Slovakia (no further address details provided in this notice)
• Company registration number (IČO): 52 561 385 (Business Register of the Slovak Republic - orsr.sk)
• Business role: Independent online gambling information portal, affiliate marketing platform, and unofficial alternative dispute resolution (ADR) intermediary. We are not an online casino operator and we do not offer real-money gambling services or accept deposits on guru-au.com.

For the purposes of the EU General Data Protection Regulation (GDPR) and other applicable data protection laws, Casino Guru s.r.o. is the data controller of personal information processed through guru-au.com, including Casino Guru.

Data protection contact / DPO: We have appointed a person responsible for privacy and data protection matters (Data Protection Officer or equivalent). You can reach our data protection contact by using the communication channels made available on our website (such as the "Contact" or complaint forms) or by using the contact details published in the "Contact" or "Privacy Policy" sections of https://guru-au.com. These channels should be used for all privacy-related enquiries, including exercising your rights.

What Personal Data We Collect

We only collect information that is reasonably necessary for operating and improving Casino Guru, providing our content and ADR services, complying with our legal obligations, and protecting our legitimate interests. We do not require you to provide identity documents or gambling KYC information to read our content.

1. Identification and contact data

• Basic personal details: Name, display name or username, country of residence, and language preferences when you register for an account (e.g. forum, community tools) or submit a complaint.
• Contact information: Email address and, if you choose to provide it, telephone number or social media handle. This data is typically used to respond to your enquiries, send updates about complaints, or deliver newsletters and alerts where you have subscribed.

2. Content and communication data

• Complaint and dispute information: Details of your complaint about a third-party casino (e.g. account ID at the casino, screenshots of balances or transaction histories, copies of correspondence with the casino, summaries of events). You provide this data voluntarily when using our ADR / complaint services.
• Community content: Forum posts, reviews, ratings, comments and messages you publish or send through guru-au.com.
• Correspondence: Records of communications with you (emails, internal messages, support tickets, notes related to ADR handling).

3. Technical and usage data

• Device and connection data: IP address, browser type and version, operating system, device identifiers, language settings, time zone, and similar technical identifiers collected through server logs and security tools.
• Usage and behavioural data: Pages visited, time and date of requests, clickstream data (including "Visit Casino" outbound clicks), referral URLs, interaction with banners and filters, session duration, and navigation patterns. This data may be aggregated or pseudonymised for analytics and service improvement.
• Log data: System logs related to error diagnostics, security events (e.g. failed log-ins, rate-limiting triggers), and content moderation actions.

4. Payment and transactional data

Casino Guru does not operate a real-money casino or process your gambling deposits. However, in certain contexts we may process limited payment-related information:

• Voluntary evidence for disputes: Screenshots or statements you upload showing deposits, withdrawals or chargebacks at third-party casinos or payment providers.
• Business-to-business payments: Billing details of our commercial partners and suppliers (e.g. affiliate partners), usually limited to invoicing information and payment confirmations.

5. Cookies and similar technologies

• Cookies: Small text files stored on your device to remember preferences, maintain sessions, perform analytics, and personalise content.
• Similar technologies: Web beacons, pixels, tags, and local storage used to measure traffic, attribute affiliate referrals, and manage advertising or marketing campaigns.

More information about cookies is provided in the "Cookies & Tracking Technologies" section below.

6. Special categories and minors

• We do not intentionally collect special categories of personal data (such as health data, political opinions, religious beliefs) through Casino Guru. If such information appears incidentally in your posts or complaint descriptions, we will treat it with elevated care and may ask you to remove or minimise it.
• Our services are intended for individuals aged 18 or over. We do not knowingly collect personal information relating to children. If you believe a minor has provided personal information to us, please contact us so that we can take appropriate steps.

Legal Basis for Processing

Because Casino Guru s.r.o. is established in the European Union, we rely primarily on the legal bases set out in Article 6 GDPR. Where Australian or other local laws apply (for example, the Australian Privacy Act 1988 and the Australian Privacy Principles), we ensure that our practices are consistent with those frameworks. Depending on the context, one or more of the following legal grounds will apply:

• Consent
  • We process your data when you have given clear, informed consent, for example:
    • subscribing to newsletters or marketing communications;
    • accepting non-essential cookies (analytics, advertising);
    • submitting optional information in reviews, forum posts or complaints beyond what is strictly necessary.
  • You may withdraw your consent at any time, as described in the "Your Rights" section.
• Performance of a contract or steps taken at your request
  • When you create an account, submit a complaint, or otherwise request services that require us to process your data, we do so to:
    • register and maintain your account;
    • investigate and mediate disputes with third-party casinos;
    • provide community features (forum, comments, ratings);
    • send service-related communications (e.g. updates on complaint progress, changes to terms).
• Legitimate interests
  • We may process your data where necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms. This includes:
    • ensuring network and information security (e.g. preventing abuse, DDoS attacks, spam or fraudulent complaints);
    • improving and developing our services, including the Safety Index and review algorithms;
    • measuring the effectiveness of our content, campaigns and affiliate links;
    • defending our legal rights and interests in case of disputes or claims.
• Compliance with legal obligations
  • We process certain data to comply with applicable legal and regulatory obligations, for example:
    • record-keeping and accounting rules applicable in Slovakia and the EU;
    • responding to lawful requests from public authorities (e.g. regulators, courts or law enforcement in the EU, Australia or other jurisdictions, where legally required);
    • upholding consumer protection and information obligations under EU and, where relevant, Australian law.

Purpose of Processing

We use personal information collected through Casino Guru for the following purposes:

1. Providing and operating our services

• To operate guru-au.com, including displaying content, reviews and ratings, and providing access to tools and filters.
• To create and manage user accounts for the community/forum and ADR services.
• To handle player complaints and act as an ADR intermediary between you and third-party casinos.

2. Customer support and communication

• To respond to your enquiries, feedback, and support requests.
• To send you notifications about the status of your complaint, important updates to our services, or changes to this Privacy Policy or our Terms & Conditions.
• To moderate user-generated content (e.g. reviews, forum posts) to ensure compliance with our rules.

3. Improvement, analytics and research

• To understand how visitors use guru-au.com (e.g. which pages are most frequently accessed, how users interact with reviews and filters).
• To improve the usability, functionality and performance of our websites and tools.
• To develop and refine our Safety Index and other internal rating methodologies.

4. Marketing, recommendations and personalised content

• To send you newsletters or promotional communications about our content and features, when you have opted in.
• To display recommendations, rankings and offers that may be more relevant to your interests, based on your interactions with guru-au.com.
• To measure the performance of our affiliate links, banners and campaigns.

5. Security, fraud prevention and legal compliance

• To protect our users, systems and business against fraud, abuse, spam or other harmful activities.
• To detect and investigate suspected misuse of our ADR processes or attempts to manipulate reviews and ratings.
• To comply with legal, regulatory or law enforcement requirements, respond to lawful requests, and defend legal claims.

Disclosure & Sharing

We do not sell your personal data as a standalone business. However, we may share information with carefully selected third parties where this is necessary for the purposes described above or where we are legally obliged to do so.

• Service providers and technical partners
  • Providers of hosting, cloud infrastructure, content delivery networks, security and DDoS protection.
  • Providers of analytics, logging, error monitoring and performance tools.
  • Email delivery services and communication platforms used to send service messages and newsletters.
  • Moderation, anti-spam or anti-fraud services that help keep our community safe.
• Affiliate and business partners
  • We may share limited, aggregated or pseudonymised information with commercial partners (for example, statistics about referral traffic or the outcome of complaints) to administer our affiliate relationships and improve responsible gambling outcomes.
  • When you click a "Visit Casino" link, the destination casino or intermediary tracking provider may receive information via cookies or tracking parameters indicating that you came from guru-au.com.
• Payment and financial institutions
  • In B2B contexts (e.g. paying partners or receiving affiliate commissions), we may share necessary invoicing information with banks and payment providers.
  • In ADR or complaint contexts, we may share evidence you provide (e.g. screenshots, transaction IDs) with the relevant casino or payment provider, but only to the extent necessary to assess and resolve your case.
• Regulators, authorities and legal counterparts
  • Regulatory bodies or public authorities in Slovakia, the EU, Australia or elsewhere when we are legally required to do so (for example, to comply with a court order, legal process or regulatory investigation).
  • Legal advisers, auditors, or consultants acting under appropriate confidentiality obligations when necessary to protect our rights or comply with our legal obligations.
• Advertising networks and third-party cookies
  • Subject to your consent where required, advertising or marketing partners may set third-party cookies or similar technologies on your device to deliver, measure and optimise ads.
  • These partners process data as independent controllers under their own privacy policies, which we encourage you to review.
• Corporate transactions
  • In the event of a merger, acquisition, restructuring or sale of assets involving Casino Guru s.r.o., personal data may be transferred to the relevant third parties, subject to appropriate confidentiality protections and only insofar as permitted by law.

International Transfers

Casino Guru s.r.o. is based in Slovakia, a member state of the European Union. Most processing of personal data for Casino Guru takes place in the EU/EEA. However, because our users, partners and some service providers are located around the world (including Australia, Mexico and other non-EU countries), your data may be accessed from or transferred to countries outside the EU/EEA.

• Transfers within the EU/EEA: Are protected by the GDPR and equivalent EU/EEA data protection laws.
• Transfers to non-EEA countries:
  • Where the European Commission has recognised a country as providing an adequate level of protection, we rely on that adequacy decision.
  • For other countries, including Australia and some locations of our technical or business partners, we use appropriate safeguards such as:
    • Standard Contractual Clauses (SCCs) approved by the European Commission;
    • contractual obligations requiring recipients to protect personal data to GDPR-comparable standards;
    • technical measures such as encryption and pseudonymisation.
• Transfers relating to Mexican data subjects: Where Mexican privacy law applies, including the Federal Law on Protection of Personal Data Held by Private Parties and its regulations, cross-border transfers are made in accordance with applicable legal requirements, including transparency in this Policy, appropriate contractual clauses and, where required, your consent.

By using guru-au.com from Australia or other countries, you acknowledge that your data will be processed in the EU and may be transferred internationally as described above. Such transfers will always be carried out in compliance with applicable law and using appropriate safeguards.

Data Retention

We retain personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, regulatory, accounting or reporting requirements. Where feasible, we anonymise or aggregate data so that it can no longer be associated with you.

• Account and profile data: Stored for the duration of your active account. If you request account closure or your account becomes inactive, we normally retain associated personal data for up to 5 years to handle any outstanding issues, comply with legal obligations, and maintain records of your interactions.
• Complaint and ADR records: Information relating to disputes with casinos (including evidence you provide and our internal handling notes) is typically retained for up to 6 years after closure of the case, reflecting common limitation periods for legal claims and our need to demonstrate how we handled complaints.
• Technical logs and security data: Server logs and security-related data are usually kept for up to 24 months, unless a longer retention period is necessary in connection with a specific incident or legal requirement.
• Marketing and communication preferences: Stored until you unsubscribe or withdraw consent. We may retain a minimal record of your opt-out (e.g. email address and date of unsubscribe) for up to 3 years to demonstrate compliance with your request.
• Cookies: Session cookies are deleted when you close your browser. Persistent cookies are stored for periods ranging from a few days to up to 24 months, depending on their purpose, unless you delete them earlier via your browser settings.

When retention periods expire, or when the data is no longer needed, we will either delete or irreversibly anonymise the information, unless we are legally required or permitted to keep it longer (for example, due to an ongoing legal dispute).

Your Rights

You have a number of rights in relation to your personal data. Because Casino Guru s.r.o. is established in the EU, these rights are primarily governed by the GDPR. Where applicable, we also align with relevant non-EU frameworks, including the Mexican Federal Law on Protection of Personal Data Held by Private Parties and the Australian Privacy Act 1988. In practice, this means that, subject to certain conditions and exemptions, you may exercise the following rights:

• Right of access (GDPR, Mexican "A" in ARCO)
  • You can request confirmation of whether we process personal data about you and receive a copy of such data, along with information about how we use it.
• Right to rectification / correction (GDPR, Mexican "R")
  • You can ask us to correct or update inaccurate or incomplete personal information we hold about you.
• Right to erasure ('right to be forgotten') / cancellation (GDPR, Mexican "C")
  • You can request deletion of your personal data in certain circumstances, for example where the data is no longer needed, you have withdrawn consent, or you have successfully objected to processing.
  • We may need to retain some information where required by law or where necessary to establish, exercise or defend legal claims.
• Right to restriction of processing
  • You can request that we restrict the processing of your data (for example, while we verify its accuracy or handle an objection).
• Right to object / opposition (GDPR, Mexican "O")
  • You may object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation.
  • You have an absolute right to object at any time to the use of your data for direct marketing.
• Right to data portability
  • Where processing is based on consent or on a contract and carried out by automated means, you can request to receive your personal data in a structured, commonly used and machine-readable format, or to have it transmitted to another controller where technically feasible.
• Right to withdraw consent
  • If we rely on your consent to process personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.
• Rights under Australian law
  • Under the Australian Privacy Act and Australian Privacy Principles, you have rights to access and request correction of personal information we hold about you, and to complain if you believe your privacy has been interfered with.

How to exercise your rights

• Submit a request using the contact channels described in the "Complaints & Contacts" section (for example, via our website contact or complaint forms or by contacting our data protection contact).
• To protect your privacy, we may need to verify your identity and ask for additional information before fulfilling your request.
• We aim to respond to all valid requests within 30 days of receipt. If your request is particularly complex, or we receive multiple requests from you, we may extend this period by up to a further 30 days, in which case we will inform you of the extension and the reasons.
• We generally do not charge a fee for handling your request. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, repetitive or excessive, as permitted by applicable law.

Cookies & Tracking Technologies

Casino Guru uses cookies and similar technologies to ensure the proper functioning of guru-au.com, improve user experience, perform analytics and, where applicable, support advertising and affiliate activities.

Types of cookies we use

• Session cookies: Temporary cookies that are deleted when you close your browser. They are used to maintain your session, keep you logged in, and support basic site functionality.
• Persistent cookies: Cookies that remain on your device for a specified period or until you delete them. They help us remember your preferences (e.g. language or cookie choices) and perform longer-term analytics.
• First-party cookies: Set by guru-au.com to support core functionalities, remembering preferences and basic analytics.
• Third-party cookies: Set by external providers, for example analytics services, advertising networks or affiliate tracking partners. These cookies may track your activity across multiple websites in order to measure performance and deliver personalised content.

Purposes of cookies

• Strictly necessary / functional: Required for the website to work properly (e.g. navigation, session management, security features, load balancing).
• Preferences: Used to remember your language, region and other preferences so that you do not need to set them each time.
• Analytics and performance: Help us understand how visitors use the website, which pages are most popular, and how users interact with our content, allowing us to improve usability and performance.
• Advertising and affiliate tracking: Support the display and measurement of ads and affiliate links, and help us understand how users interact with those links. Some of these cookies are set by third parties.

Managing cookies

• You can manage or disable cookies through your browser settings. Most browsers allow you to refuse all cookies or only third-party cookies, and to delete cookies already stored on your device.
• Where available, you may also use cookie management tools or banners provided on guru-au.com to adjust your preferences, especially for non-essential cookies.
• Please note that blocking or deleting cookies that are strictly necessary for the website's operation may affect the functionality and user experience of Casino Guru.

Data Security

We take the security of your personal information seriously and employ technical and organisational measures designed to protect it against unauthorised access, alteration, disclosure or destruction.

• Encryption:
  • Data transmitted between your browser and guru-au.com is protected using industry-standard transport layer security (TLS 1.2+).
  • Where appropriate, we use encryption or pseudonymisation for data at rest, backups and internal transfers.
• Access controls and authentication:
  • Access to personal data is limited to authorised personnel who need it for their job responsibilities and is governed by role-based access controls.
  • We apply strong authentication practices and, where appropriate, multi-factor authentication for administrative accounts.
• Infrastructure and application security:
  • We host our systems with reputable providers who implement robust physical and network security measures.
  • We use firewalls, intrusion detection/prevention systems and other tools to monitor and protect our infrastructure.
  • We regularly update and patch systems and software to address known vulnerabilities.
• Policies, training and confidentiality:
  • Employees and contractors with access to personal data are bound by confidentiality obligations.
  • We provide training and guidelines on data protection, security and privacy-by-design to relevant staff.
• Monitoring, audits and incident response:
  • We monitor systems and logs to detect unusual activity, abuse or potential security incidents.
  • We maintain procedures for responding to and managing security incidents, including investigation, mitigation and notification to affected individuals and supervisory authorities where required by law.

While we strive to follow recognised best practices inspired by international standards (such as ISO 27001 and SOC 2), no online service can guarantee absolute security. You are also responsible for protecting your account credentials and for using up-to-date software and security tools on your devices.

Complaints & Contacts

If you have questions, concerns or complaints about this Privacy Policy or how we handle your personal information, you can contact us directly or escalate your complaint to a supervisory authority.

Contacting Casino Guru (first step)

• Online contact: You can reach us using the contact mechanisms available on https://guru-au.com, such as contact forms or complaint submission tools. Please indicate that your request relates to privacy or data protection.
• Data protection contact / DPO: Address your request to our privacy contact / Data Protection Officer using the contact details published on guru-au.com (for example in the "Contact" or "Privacy Policy" sections).
• Postal correspondence: Where you wish to write to us by post, address your letter to Casino Guru s.r.o., Bratislava, Slovakia, clearly marked "Data Protection".
• Response time: We aim to acknowledge your complaint or request without undue delay and to provide a substantive response within 30 days. If more time is needed due to complexity or volume, we will inform you of the extension and reasons.

Escalating to supervisory authorities

If you are not satisfied with our response, or if you prefer not to contact us first, you have the right to lodge a complaint with a competent data protection authority, in particular in the country where you live, work or where you believe your rights were infringed.

• Slovak Data Protection Authority (our lead EU authority)
  • Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic).
  • Website: https://dataprotection.gov.sk
• Office of the Australian Information Commissioner (OAIC)
  • If you are in Australia and believe your privacy rights under the Privacy Act 1988 have been interfered with, you can contact the OAIC.
  • Website: https://www.oaic.gov.au
• Mexican data protection authority (INAI)
  • For individuals protected by Mexican privacy law, complaints can be lodged with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI).
  • Website: https://www.inai.org.mx
• Other EU / EEA or national authorities:
  • You may also contact your local data protection authority in the EU/EEA. Contact details are typically available on the authority's official website.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data processing practices, particularly as they relate to Casino Guru and guru-au.com.

• Notification of changes:
  • For material changes (for example, new categories of personal data, new purposes of processing, or significant changes to your rights), we will endeavour to provide clear notice, which may include:
    • prominent banners or notices on guru-au.com;
    • notifications in your user account dashboard (where applicable);
    • email notifications to registered users, where appropriate.
• Advance notice:
  • Where reasonably practicable and required by law, we will provide at least 30 days' notice before material changes take effect, especially if they broaden how we use your personal data.
• Your options:
  • If you do not agree with the updated Privacy Policy, you may choose to stop using guru-au.com and, where you have an account, you can request its closure and the deletion or anonymisation of your personal data, subject to our legal retention obligations.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Last updated: February 2026.