Privacy Policy

This Privacy Policy explains how Lincoln Casino, operated via the website lincoln-au.com (the "Site"), collects, uses, discloses, and protects your personal information. It applies to players, account holders, affiliates, and all visitors who access or use the Site and related services provided under the Lincoln Casino brand in Australia. By using the Site, you agree to the practices described in this Privacy Policy. This Privacy Policy is effective as of 1 January 2026.

Who We Are

OBSERVE: Publicly available information does not specify the exact registered legal entity, its registered office address, or company numbers for the operator behind Lincoln Casino and lincoln-au.com. The brand is historically associated with the Deckmedia/Slots Vendor group, but current, verifiable corporate details are not clearly disclosed.

EXPAND: Because Australian privacy and consumer laws require that users be informed who is responsible for their data, we identify the operator in functional terms and provide a primary contact channel. Until the operator publishes full legal details, this section clarifies responsibility without inventing unverifiable corporate information.

REFLECT: For the purposes of this Privacy Policy, the following applies:

• Operator / Data Controller: The online gambling operator that manages and controls the Lincoln Casino brand for Australian players via lincoln-au.com, historically linked to the Deckmedia/Slots Vendor group (the "Operator").
• Trading / Brand Name: "Lincoln Casino", including the AU-facing mirror Lincoln Casino available through lincoln-au.com.
• Jurisdiction and licensing: As of January 2026, no verifiable active gambling licence or clearly stated regulatory jurisdiction is published on the Site. You acknowledge that you are using an offshore, self-regulated/grey-market service, and that your primary contractual relationship is with the Operator described above.

Contact for Privacy Matters (DPO / Data Protection Contact)

• Data Protection Contact: Data Protection Officer (DPO) / Privacy Team, Lincoln Casino (Lincoln Casino).
• Email: [email protected] (please use the subject line "Privacy Request" or "Data Protection").
• Postal address: A dedicated postal address for privacy matters is not currently specified. Any written privacy queries should initially be sent via email.
• Telephone / contact forms: No dedicated phone number or online form is currently specified for privacy matters; email is the primary official channel.

The Operator is responsible for determining the purposes and means of processing personal data collected through the Site and associated services.

What Personal Data We Collect

OBSERVE: To provide remote gambling services and comply with applicable laws, the Operator must collect identification, contact, technical, payment, and behavioural data, as well as cookie and tracking information.

EXPAND: The categories listed below reflect both what you directly provide and what is generated or observed when you use Lincoln Casino services. We avoid collecting more data than is reasonably necessary for the purposes described in this policy.

REFLECT: We may collect and process the following categories of personal data:

1. Identification and Contact Data

• Account and profile data: Full name, date of birth, gender (if provided), country of residence, physical address (billing and/or residential), email address, telephone number(s), username, and password or other login credentials.
• Verification data (KYC/AML): Copies or details of identity documents (e.g., passport, ID card, driver licence), proof of address (e.g., utility bill, bank statement), and any additional information reasonably requested for age, identity, and source-of-funds checks.

2. Technical and Usage Data

• Device and connection data: IP address, device identifiers, operating system, browser type and version, language settings, time zone, and similar technical identifiers.
• Log data: Dates and times of access, login/logout events, session durations, error logs, and related diagnostic information.
• Location-related data: General geolocation inferred from your IP address (e.g., country, region, city) to apply geo-restrictions and fraud prevention.

3. Payment and Financial Data

• Transaction data: Deposits, wagers, wins and losses, withdrawals, bonuses, and associated transactional history, including timestamps and amounts.
• Payment method data: Limited payment instrument details such as masked card numbers, expiry dates, payment provider identifiers, e-wallet details, and bank transfer references, as provided to us by you or our payment partners.
• Anti-fraud and AML data: Information required to monitor and investigate suspicious transactions, chargebacks, and potential money laundering activities, including risk scores generated by us or our service providers.

4. Behavioural and Profile Data

• Gameplay and betting history: Games played, stakes, outcomes, frequency, bet types, session length, and patterns of play.
• Website/app interaction data: Clicks, page views, navigation paths, time spent on pages, and responses to promotions.
• Marketing and communication preferences: Opt-ins/opt-outs to email, SMS, push notifications, and other promotional channels.
• Responsible gambling data: Self-exclusion status, deposit or loss limits, time-out settings, and interactions with responsible gambling tools or support.

5. Communications and Customer Support Data

• Support communications: Emails sent to [email protected], live chat transcripts (if available), complaint submissions, and other correspondence.
• Call or chat metadata: Timestamps, agents involved, resolution notes, and any follow-up correspondence.

6. Cookies and Similar Technologies

• Cookie identifiers: Unique identifiers stored in cookies or similar technologies placed on your device.
• Tracking data: Data from web beacons, pixels, scripts, and similar tools used for analytics, fraud prevention, personalisation, and, where permitted, advertising.

Where we request personal data that is legally required (for example, to verify your age or identity) or contractually necessary (for example, to pay out winnings), failure to provide such data may result in our inability to open or maintain your account or to provide specific services.

Legal Basis for Processing

OBSERVE: As an offshore gambling operator serving Australian users, we align our processing of personal data with widely recognised principles similar to those found in the EU General Data Protection Regulation (GDPR), while acknowledging that Australian Privacy Principles (APPs) may apply to Australian residents.

EXPAND: We rely on different legal grounds depending on the specific purpose of processing. These grounds include contractual necessity, legitimate interests, legal obligations (including KYC/AML), and consent for certain types of marketing and cookies.

REFLECT: Our primary legal bases are:

• Contractual necessity: We process personal data because it is necessary to:
  • Register and manage your player account;
  • Provide access to games and related gambling services;
  • Process deposits, bets, withdrawals, and bonus credits;
  • Provide customer support and handle claims or disputes arising from the Terms and Conditions between you and the Operator.
• Compliance with legal or regulatory obligations: Even though the Operator acts offshore and may not be licensed in Australia, we process certain data to comply with:
  • Anti-money laundering (AML) and counter-terrorism financing (CTF) requirements imposed by relevant financial intermediaries and international standards;
  • Age verification and responsible gambling obligations where applicable;
  • Record-keeping and accounting obligations, including retention of transaction data;
  • Lawful requests from competent authorities, courts, or financial institutions.
• Legitimate interests: We process data where we have a legitimate business interest that is not overridden by your interests or fundamental rights, such as:
  • Detecting and preventing fraud, abuse, and security incidents;
  • Protecting the integrity of our games and preventing bonus abuse, collusion, or match-fixing;
  • Improving and optimising our services, user interfaces, and IT security measures;
  • Conducting non-intrusive analytics, reporting, and internal statistics;
  • Defending legal claims and managing business risk.
• Consent: We rely on your explicit or implied consent when:
  • You opt in to receive marketing communications (email, SMS, push notifications) that are not strictly necessary for the service;
  • We place or read non-essential cookies or similar technologies for advertising or extensive behavioural profiling;
  • We share data with certain third-party advertising or affiliate networks where required by applicable law.

  You may withdraw your consent at any time, as described in the "Your Rights" section. Withdrawal will not affect processing that has already occurred.

Purpose of Processing

OBSERVE: The Operator uses personal data for core gambling operations, regulatory compliance, security, analytics, marketing, and responsible gambling.

EXPAND: Each purpose is tied to specific data categories and legal grounds. We avoid incompatible uses and implement proportional measures.

REFLECT: We process your personal data for the following purposes:

• Provision of services: To create and manage your account; enable deposits, gameplay, and withdrawals; process bonuses; maintain account balances; and provide access to the Site and its features.
• Customer support and communication: To respond to your questions, requests, and complaints; provide service updates; and send transactional messages (e.g., password resets, account alerts, changes to terms or policies).
• Verification, compliance, and risk management: To verify your age and identity; conduct KYC/AML checks; assess and monitor risks; prevent fraud, money laundering, and abusive behaviour; and comply with applicable laws and regulatory expectations.
• Responsible gambling: To manage self-exclusion and cooling-off requests; administer deposit, loss, and session limits; monitor patterns of play that may indicate problem gambling; and provide or signpost appropriate support resources.
• Service improvement and analytics: To understand how players and visitors use our Site; measure performance; test new features; fix bugs; and enhance usability, stability, and security.
• Marketing and promotions (where permitted): To personalise offers; send promotional communications about bonuses, tournaments, and new games; and manage loyalty or VIP programs, subject to your preferences and applicable marketing laws.
• Security and abuse prevention: To protect user accounts; identify and prevent unauthorised access, hacking, DDoS attacks, and other security threats; and secure our IT infrastructure.
• Business continuity and legal defence: To maintain backups and business continuity plans; manage incidents; investigate disputes; establish, exercise, or defend legal claims; and support potential corporate transactions (e.g., mergers or asset sales) subject to appropriate safeguards.

Disclosure & Sharing

OBSERVE: To deliver services, the Operator must share data with carefully selected third parties, including payment providers, technical vendors, and, in limited cases, authorities and partners.

EXPAND: We require such recipients to use personal data only as necessary for agreed purposes and to implement appropriate safeguards. Where applicable, we enter into data protection agreements or equivalent contractual arrangements.

REFLECT: We may disclose your personal data to the following categories of recipients:

• Payment service providers and financial institutions: Banks, card schemes, e-wallet providers, and payment processors involved in processing deposits, withdrawals, and other financial transactions, as well as managing chargebacks, AML checks, and fraud prevention.
• Technical and operational service providers: Hosting providers, IT and cloud infrastructure suppliers, game software providers, analytics vendors, anti-fraud and risk management tools, email and SMS delivery providers, and customer support platforms that assist us in operating the Site.
• Affiliates and marketing partners: Affiliate networks and marketing partners who refer players to our Site may receive limited information (e.g., anonymised or pseudonymised identifiers, conversion data) for tracking and commission calculation purposes. Where required, we will obtain your consent for such sharing, especially for advertising-related tracking.
• Group entities and successors: Other entities within the broader Deckmedia/Slots Vendor group (or any future corporate group) and potential successors or acquirers of the Operator's business, subject to confidentiality obligations and, where required, appropriate privacy notices.
• Professional advisers: Lawyers, auditors, accountants, and consultants who require access to personal data for legitimate business, legal, or compliance reasons, subject to confidentiality obligations.
• Regulators, authorities, and enforcement bodies: Where we are legally required or reasonably consider it necessary to:
  • Comply with applicable law, regulation, or court order;
  • Respond to lawful requests from law enforcement, regulatory, tax, or other public authorities;
  • Protect our rights, property, or safety, or those of our users, staff, or the public;
  • Assist in the prevention or detection of crime, including fraud, money laundering, or other offences.
• Other players or the public: In limited circumstances, certain information (such as winners' usernames, initials, or approximate location) may be used for promotional announcements, subject to applicable laws and your preferences.

We do not sell your personal data to third parties in the traditional sense of the word. Any sharing for advertising or analytics purposes is carried out under strict conditions and, where necessary, based on your consent or a legitimate interest assessment.

International Transfers

OBSERVE: Lincoln Casino and lincoln-au.com operate as offshore online gambling services, with infrastructure and service providers that may be located inside or outside Australia and outside your country of residence.

EXPAND: This may involve transferring personal data to countries that do not provide the same level of data protection as the laws in your home jurisdiction (such as the EU or certain other regions). In such cases, we implement reasonable contractual and technical safeguards where feasible.

REFLECT: By using our services, you acknowledge that:

• Your personal data may be processed in, or transferred to, jurisdictions including (but not limited to) data centre locations in the European Union, the United States, and other countries where our hosting providers, game software providers, payment processors, and group entities are established.
• Where required by laws similar to the GDPR, we will seek to implement appropriate safeguards, such as:
  • Standard Contractual Clauses (SCCs) or equivalent contractual protections approved by relevant regulators;
  • Technical safeguards, including encryption, access control, and pseudonymisation, designed to reduce risks associated with cross-border transfers;
  • Organisational measures, such as strict access rights, confidentiality undertakings, and internal policies.
• Because the Operator is not established in Australia and may not be subject to Australian data protection oversight mechanisms, some of the protections and enforcement rights that might be available against Australian-based entities may not apply or may be limited.

Data Retention

OBSERVE: Gambling operators must retain certain data for legal, regulatory, and dispute-resolution purposes, but should not keep data longer than necessary.

EXPAND: Retention periods vary depending on the data type and purpose. We implement procedures to delete or anonymise data when it is no longer required, subject to legal and business requirements.

REFLECT: We generally apply the following retention practices:

• Account and identification data: Core account data (name, contact details, date of birth, verification records) is typically retained for the duration of your account and for up to five (5) years after account closure, or longer where required for AML, fraud prevention, tax, or legal claims.
• Transaction and gameplay data: Deposit, withdrawal, betting, and gameplay records are usually retained for at least five (5) years after the relevant transaction or account closure, whichever is later, to support legal, regulatory, financial, and dispute-handling obligations.
• Marketing data: Information about your marketing preferences and related logs is generally kept while your account remains active and for up to two (2) years after you last interact with our marketing communications, unless you withdraw consent earlier.
• Customer support communications: Correspondence with support (including complaints) is usually kept for up to five (5) years from the date of the last interaction, or longer if needed for ongoing disputes or investigations.
• Technical and log data: Server logs and security-related logs are generally kept for up to two (2) years, unless a longer period is justified for security or legal reasons.

When the relevant retention period expires, or data is no longer needed for the purposes described in this Privacy Policy, we will either securely delete it or irreversibly anonymise it. In some cases we may retain minimal information (such as username, email hash, or exclusion flags) to comply with self-exclusion obligations, prevent re-registration of excluded or banned users, or to enforce our Terms and Conditions.

Your Rights

OBSERVE: While the Operator is not formally subject to the EU GDPR or Mexican privacy law by establishment, we voluntarily align our practices with widely recognised privacy rights frameworks, to the extent compatible with offshore gambling operations and applicable law. As an Australian user, you may also benefit from rights similar to those set out in the Australian Privacy Principles (APPs).

EXPAND: We therefore recognise a set of user rights that closely corresponds to the core GDPR rights and, where relevant, principles found in Mexican and other modern privacy regimes, adapted to our operational realities.

REFLECT: Subject to legal and contractual limitations, you may have the following rights:

1. Right of Access

• You can request confirmation of whether we hold personal data about you and obtain a copy of such data, along with information on how we use it.

2. Right to Rectification

• You can request that we correct or update inaccurate or incomplete personal data (for example, your address or contact details).

3. Right to Erasure ("Right to be Forgotten")

• You can request deletion of your personal data where:
  • The data is no longer necessary for the purposes for which it was collected;
  • You withdraw consent and we have no other legal basis to continue processing;
  • You have successfully objected to the processing; or
  • The data has been processed unlawfully.
• We may be unable to delete data that we must retain to comply with legal, regulatory, or legitimate business obligations (for example, AML, fraud prevention, or accounting rules). In such cases, we will restrict use to the minimum necessary.

4. Right to Restrict Processing

• You may request that we temporarily suspend certain processing activities where:
  • You contest the accuracy of the data;
  • The processing is unlawful and you prefer restriction over deletion;
  • We no longer need the data, but you require it for legal claims; or
  • You have objected to processing and we are verifying our overriding interests.

5. Right to Object

• You can object to processing based on our legitimate interests, including certain profiling. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests or the processing is needed for legal claims.
• You always have the right to object to direct marketing, including profiling related to such marketing. If you object, we will stop using your data for these purposes.

6. Right to Data Portability

• Where technically feasible and applicable, you may request that we provide you with certain personal data you have provided to us in a structured, commonly used, and machine-readable format, or transmit it directly to another controller, where processing is based on consent or contract and carried out by automated means.

7. Right to Withdraw Consent

• Where we rely on your consent (for example, for promotional emails or non-essential cookies), you can withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

8. Non-Discrimination and Free-of-Charge Guarantees

• We do not charge a fee for exercising your rights, unless your request is manifestly unfounded or excessive. In that case, we may charge a reasonable fee or refuse to act.
• We will not discriminate against you solely for exercising your privacy rights, but please note that certain services may not be available if we cannot process necessary personal data.

How to Exercise Your Rights and Response Timeframes

1. Submit your request: Send an email to [email protected] with:
   • Your full name and account username;
   • The right(s) you wish to exercise;
   • Any relevant details to help us locate your data.
2. Verification: To protect your privacy, we may need to verify your identity before acting on your request (for example, by asking you to confirm certain account details or provide ID documentation).
3. Response time: We aim to respond to your request within 30 days of receipt. If your request is complex or we receive multiple requests, we may extend this period by a further 30 days, and we will inform you of any extension and the reasons for it.
4. Limitations: Certain rights may be limited where processing is required by law, necessary for our contractual relationship, or where disclosure would adversely affect the rights of other individuals or our legitimate interests (for example, preventing fraud).

Cookies & Tracking Technologies

OBSERVE: The Site uses cookies and similar technologies to ensure functionality, improve performance, and, where permitted, personalise content and marketing.

EXPAND: Some cookies are strictly necessary for the Site to function and cannot be disabled. Non-essential cookies can generally be controlled through your browser settings and, where available, internal cookie preference tools.

REFLECT: We use the following types of cookies and tracking technologies:

Types of Cookies

• Session cookies: Temporary cookies that remain on your device only while your browser is open and are automatically deleted when you close your browser. They help manage sessions, authentication, and short-term preferences.
• Persistent cookies: Cookies stored on your device for a defined period, used to remember preferences, keep you logged in (where you choose this option), or analyse long-term usage trends.
• First-party cookies: Cookies set directly by lincoln-au.com for core functionality, security, and analytics.
• Third-party cookies: Cookies set by external service providers, such as analytics platforms or marketing/affiliate partners, which may track your activity across different websites, subject to applicable laws and your consent.

Purposes of Cookies

• Strictly necessary / functional cookies: Required for core site functions, including secure login, page navigation, maintaining sessions, processing transactions, and preventing fraud. These cannot be switched off using standard preference tools.
• Performance and analytics cookies: Help us understand how users interact with the Site (e.g., most visited pages, error messages, load times). The information is usually aggregated and used to improve performance and user experience.
• Personalisation cookies: Remember your language, region, and other preferences to provide a more tailored experience.
• Advertising and affiliate cookies: Used to deliver relevant promotional content, measure campaign effectiveness, and track referrals by affiliate partners. These may involve profiling and, where required, will only be used with your consent.

Managing Cookies

• Browser settings: Most web browsers allow you to:
  • View which cookies are stored on your device;
  • Delete cookies;
  • Block all or certain types of cookies;
  • Set preferences for cookie behaviour.

  Disabling certain cookies, particularly strictly necessary cookies, may affect your ability to use some features of the Site or access your account.

• Internal tools: Where available, we may provide an internal preference centre or banner allowing you to manage non-essential cookies and tracking technologies.
• Third-party tools: Some third-party providers offer opt-out mechanisms for their cookies (for example, for analytics or advertising). These are managed by the relevant third parties and subject to their privacy policies.

Data Security

OBSERVE: Online gambling platforms process sensitive financial and behavioural data and must implement robust security measures to reduce the risk of unauthorised access, loss, or misuse.

EXPAND: While no system can be completely secure, we apply a combination of technical, organisational, and physical controls aligned with recognised security practices and, where feasible, international standards.

REFLECT: We implement, among others, the following security measures:

• Encryption in transit and at rest: We use TLS 1.2 or higher to encrypt data transmitted between your browser and our servers. Where feasible, we encrypt sensitive data at rest and apply hashing/salting for passwords.
• Access control and authentication: Access to personal data is restricted to authorised personnel on a need-to-know basis, protected by strong authentication methods and role-based permissions. We encourage players to use strong, unique passwords and may implement additional authentication factors where available.
• Network and infrastructure security: Use of firewalls, intrusion detection/prevention systems, secure configuration standards, and routine patching of servers and applications to reduce vulnerabilities.
• Data minimisation and pseudonymisation: Where appropriate, we minimise the amount of personal data stored and may pseudonymise or aggregate data for analytics and reporting purposes.
• Regular audits and monitoring: Periodic internal reviews, logging, and monitoring of systems and access events to detect abnormal activities and potential breaches. We aim to align practices with established security frameworks such as ISO 27001 or SOC 2 principles, even if formal certification may not be held.
• Staff training and confidentiality: Employees and contractors with access to personal data are bound by confidentiality obligations and receive training on data protection, information security, and responsible handling of player information.
• Incident response: We maintain procedures for identifying, assessing, and responding to suspected or actual data breaches. Where required by applicable law, we will notify affected individuals and/or relevant authorities of significant data breaches without undue delay, and take remedial steps to reduce harm.

Despite our efforts, transmission of data over the internet always carries some risk. You are responsible for maintaining the confidentiality of your login credentials and for using secure devices and networks when accessing the Site.

Complaints & Contacts

OBSERVE: Users need clear channels to raise privacy concerns and complaints, including escalation options to supervisory bodies where available.

EXPAND: Although the Operator is offshore and may not fall squarely within the jurisdiction of EU or Mexican regulators, we will make reasonable efforts to address privacy concerns in a timely and fair manner and acknowledge the role of relevant authorities in your home country to the extent they may apply.

REFLECT: If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal data, you can contact us as follows:

Contact Details

• Data Protection Officer / Privacy Contact: Lincoln Casino (Lincoln Casino) - Privacy Team
• Email: [email protected]
• Website: https://lincoln-au.com
• Postal address / phone: Not currently specified; email is the primary and official contact method for privacy matters.

Complaint Procedure

1. Initial submission: Send a detailed description of your concern to [email protected], including:
   • Your name and username;
   • The nature of your complaint or request;
   • Any supporting evidence or documentation.
2. Acknowledgement: We aim to acknowledge receipt of your complaint within 7 business days.
3. Investigation: We will investigate your complaint internally, which may involve contacting you for additional information or clarification.
4. Response: We strive to provide a substantive response within 30 days of receiving your complete complaint. If more time is needed due to complexity, we will inform you of the reason and the expected timeframe.
5. Further steps: If you are not satisfied with our response, you may request that the matter be escalated internally to a more senior representative for further review.

Escalation to Supervisory Authorities

Because the Operator is offshore and may not be under the direct jurisdiction of Australian, EU, or Mexican data protection authorities, your enforcement options may be limited. However, depending on your residence, you may consider:

• In Australia: You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
  • Website: https://www.oaic.gov.au
• In the European Union: If you are an EU resident and believe your data protection rights have been infringed, you may contact your national data protection authority. A list is available at: https://edpb.europa.eu/about-edpb/board/members_en.
• In Mexico: If you are a Mexican resident, you may contact the Mexican data protection authority (INAI - Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) via https://home.inai.org.mx.

Please note that these authorities may or may not have jurisdiction over an offshore operator, but they can still provide guidance on your rights and available remedies in your country.

Updates

OBSERVE: Laws, regulatory guidance, and our services evolve over time, requiring updates to this Privacy Policy.

EXPAND: We must ensure that users are kept informed of significant changes and have an opportunity to review and, if necessary, object or close their accounts before new practices take effect.

REFLECT: We may update this Privacy Policy from time to time. When we make material changes, we will:

• Revise the "Last updated" date at the end of this document;
• Post the updated Privacy Policy on https://lincoln-au.com in a prominent location;
• Where appropriate, provide additional notice via:
  • Email to your registered address;
  • In-account notifications or dashboard alerts; and/or
  • Website banners or pop-up messages.

For significant changes that materially affect your rights or how we use your data (for example, new processing purposes or new categories of recipients), we will, where practicable:

• Provide notice at least 30 days before the changes take effect; and
• Give you the opportunity to review the revised policy and, if you do not agree, to close your account and request appropriate handling of your data in line with this Privacy Policy.

Continued use of the Site after the effective date of the updated Privacy Policy will constitute your acknowledgement and acceptance of the changes, to the extent permitted by applicable law.

Last updated: January 2026.