Privacy Policy

This Privacy Policy explains how Heart Of Vegas, operated through the website heartofvegas-aussie.com, collects, uses, discloses, and protects personal information of our users. It applies to all visitors to our website, users who interact with our content (including reviews, information about the Heart Of Vegas social casino, and related services), and any person who contacts us via the channels listed below. By accessing or using heartofvegas-aussie.com, you agree to the practices described in this Privacy Policy. This Privacy Policy is effective from 1 January 2026 and supersedes any earlier versions published on this website.

Who We Are

OBSERVE: The website heartofvegas-aussie.com is a review and informational site about the Heart Of Vegas social casino experience for Australian users and is not itself a gambling operator. The brand "Heart Of Vegas" is owned and operated separately by Product Madness (UK) Limited and ultimately by Aristocrat Leisure Limited. This Privacy Policy applies only to the processing carried out through heartofvegas-aussie.com in connection with Heart Of Vegas.

EXPAND: To provide transparent information, we identify the corporate group connected with the Heart Of Vegas brand while clarifying that this site is a review/information service. Any gameplay, payments, or account management in the Heart Of Vegas app are subject to the relevant app operator's own privacy notice.

REFLECT: For the purposes of this Privacy Policy, references to "we", "us", or "our" relate to the operator of heartofvegas-aussie.com, which cooperates with or references the following entity:

• Operator company of the Heart Of Vegas brand: Product Madness (UK) Limited
• Registered office / legal address: 10 Finsbury Square, London, United Kingdom
• Company registration number: 06963238 (registered with UK Companies House)
• Parent company: Aristocrat Leisure Limited (ASX: ALL), via its Pixel United division

For privacy-related matters concerning this website (Heart Of Vegas on heartofvegas-aussie.com), you can contact our data protection contact point:

• Data Protection Contact / DPO Contact: "Data Protection Officer - heartofvegas-aussie.com"
• Email (primary): [email protected]
• Email (support): [email protected] (for user-facing requests including privacy questions)
• Postal contact (care of Product Madness (UK) Limited): Data Protection Officer, Product Madness (UK) Limited, 10 Finsbury Square, London, United Kingdom

If your query specifically concerns the Heart Of Vegas app's own data practices, we may redirect you to https://productmadness.com/privacy-notice/ or to the relevant app platform privacy documentation.

What Personal Data We Collect

OBSERVE: Operating a review and information site targeting Australian users requires limited personal data, mostly related to website usage, communication, and marketing analytics. Additional technical and behavioural data are collected through cookies and similar technologies.

EXPAND: While we do not run a real-money gambling service and do not manage Heart Of Vegas player accounts directly, we still process certain categories of data to operate Heart Of Vegas, improve content, and where applicable refer you to the official Heart Of Vegas channels.

REFLECT: We distinguish categories of data for clarity and compliance with Australian privacy principles and international best practice.

Personal Identification and Contact Data

• Basic contact data: Name, email address, and any other contact details you provide when:
  • Subscribing to newsletters or marketing communications (if enabled on the site);
  • Contacting us via email ([email protected], [email protected] or any other listed address);
  • Responding to surveys, feedback forms or promotions (if implemented).
• User-generated content: Any information you include in open text fields (for example, support requests or feedback), which may incidentally contain personal information.

Technical and Usage Data

• Technical identifiers: IP address, device identifiers (where available), browser type and version, operating system, language settings, screen resolution.
• Log data: Date and time of access, pages visited, clickstream data, referral URLs, and interaction with site features.
• Approximate location data: Country or region inferred from IP address, to adapt content to Australian audiences and for analytics and compliance purposes.

Payment and Financial Data

• For heartofvegas-aussie.com: We do not provide real-money gambling services and generally do not process payment card details or bank account data.
• Third-party payments: If in the future we offer paid premium content, affiliate offers, or subscriptions through third-party payment processors, those processors may collect and process your payment details. In such cases:
  • We will receive only limited information (e.g., payment confirmation, partial card data tokens, billing country) to reconcile transactions and prevent fraud.
  • The full details will be processed under the payment processor's own privacy policy.

Behavioural and Profile Data

• Usage and engagement data: Information about how you interact with Heart Of Vegas content, including:
  • Pages viewed (e.g., specific Heart Of Vegas reviews, guides, or news);
  • Click behaviour on internal and outbound links (e.g., links to the official Heart Of Vegas app or Product Madness pages);
  • Time spent on pages, scroll depth, and interaction with banners or forms.
• Marketing and segmentation data: If you consent to marketing cookies or email marketing, we may create segments based on your interactions with our communications to tailor offers and content (for example, highlighting specific Heart Of Vegas features relevant to Australian players).

Cookies and Similar Technologies

• Cookies: Small text files stored on your device to remember your preferences and recognise your browser across sessions.
• Pixels / tags: Small snippets of code used to measure page visits, conversions, or the effectiveness of campaigns (e.g., from advertising networks or analytics providers).
• SDKs and mobile identifiers: Where used in connection with mobile access to our site, for analytics or attribution purposes.

Further details are provided in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

OBSERVE: Our primary regulatory frame is the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We also align, where appropriate, with international standards such as the EU General Data Protection Regulation (GDPR) for transparency and user rights, even though heartofvegas-aussie.com is targeted at Australian users.

EXPAND: While Australian law does not use the GDPR "legal bases" terminology, explaining our grounds using these concepts clarifies when and why we process personal information.

REFLECT: Depending on the situation, we rely on one or more of the following grounds:

• Consent:
  • When you actively subscribe to newsletters or agree to receive marketing communications from Heart Of Vegas.
  • When you accept non-essential cookies (such as analytics or advertising cookies) through our consent tools or browser settings, if implemented.
  • You can withdraw your consent at any time (see "Your Rights").
• Performance of a contract or steps prior to entering into a contract:
  • Where we offer any registered user features, subscriptions, or other services via heartofvegas-aussie.com, we process your data to provide and support those services.
  • This includes responding to your requests, providing customer support, or managing any account you hold with us (if applicable in future site versions).
• Legitimate interests:
  • To operate, maintain, and improve Heart Of Vegas and its content for Australian users.
  • To analyse and understand how our website is used, in order to improve usability, relevance, and performance.
  • To prevent misuse of our site, detect and mitigate fraud or security incidents, and ensure network and information security.
  • To protect our legal rights, respond to disputes, and enforce our terms of use.
  • Where required, we balance these interests against your privacy expectations and implement appropriate safeguards.
• Compliance with legal obligations:
  • To comply with Australian laws, regulations, and lawful requests by Australian regulators (including, where relevant, the Australian Communications and Media Authority (ACMA) and other authorities).
  • To comply with record-keeping and reporting obligations (for example, under consumer protection or corporate law) that may apply to our operations or to the corporate group we belong to.

Purpose of Processing

OBSERVE: We process data primarily to operate a safe, relevant, and legally compliant review and information service focused on Heart Of Vegas for Australian users.

EXPAND: Even though the service does not involve real-money gambling, it is associated with a social casino product and therefore subject to elevated expectations around responsible data handling and transparency.

REFLECT: We use your information for the following purposes:

• Provision of services:
  • To deliver the Heart Of Vegas content via heartofvegas-aussie.com.
  • To respond to your queries, support requests, or feedback sent to our email addresses.
  • To manage any optional registrations, newsletters, or promotions (if implemented).
• Improvement of content and services:
  • To better understand how Australian users interact with our reviews and guides about Heart Of Vegas, and to improve relevance and structure of our content.
  • To test, monitor, and enhance website performance, security, and usability.
• Marketing and communications:
  • To send you information about updates to Heart Of Vegas, promotions, surveys, or other marketing communications, where you have consented or where permitted by law.
  • To personalise marketing messages and website content based on your interactions and preferences, where allowed.
• Analytics, research, and reporting:
  • To carry out statistical analysis of site usage, including aggregated or de-identified data, to understand trends in the Australian social casino and gaming review space.
  • To create reports about site performance and effectiveness of campaigns, including affiliate performance where we refer traffic to official Heart Of Vegas channels or related products.
• Fraud prevention and security:
  • To monitor and protect heartofvegas-aussie.com against unauthorised access, denial-of-service attacks, bots, and other abusive behaviour.
  • To detect and prevent fraudulent use of promotional offers, referral schemes, or advertising campaigns.
• Legal and regulatory purposes:
  • To respond to lawful requests from regulators, law enforcement, or courts, particularly in Australia and the United Kingdom.
  • To enforce or defend our legal rights, including in relation to intellectual property, content misuse, or contractual disputes.

Disclosure & Sharing

OBSERVE: We do not sell your personal information to third parties. However, we do share data with specific categories of recipients to operate our services and comply with legal requirements.

EXPAND: Some of these recipients are located in other jurisdictions (such as the United Kingdom or other regions where Aristocrat Leisure Limited and Product Madness operate) and may process data about Australian users.

REFLECT: We implement contractual and technical safeguards to protect your information when it is shared.

• Service providers and technical partners:
  • Website hosting providers, content delivery networks, and IT service providers supporting heartofvegas-aussie.com.
  • Analytics providers (e.g., web analytics tools) that help us understand and improve user engagement with Heart Of Vegas.
  • Email service providers and marketing automation tools used for sending newsletters or service communications.
  • Security and anti-fraud providers that assist in protecting the site.
• Corporate group entities:
  • Product Madness (UK) Limited and other entities within the Pixel United / Aristocrat Leisure Limited group, to the extent necessary for:
    • Corporate governance, auditing, or compliance;
    • Group-level analytics regarding product interest, content performance, and market trends in Australia;
    • Coordination of communications or cross-promotion of the Heart Of Vegas brand where permitted by law and, if required, with your consent.
• Payment partners:
  • If we ever introduce paid services on heartofvegas-aussie.com, we may share necessary transaction details with payment processors and financial institutions to process payments, prevent fraud, and comply with regulatory obligations.
• Affiliates, advertising networks, and analytics partners:
  • Affiliate networks, where we participate in programmes that reward us when you install or use the official Heart Of Vegas app through our links.
  • Advertising networks and remarketing providers, where you have consented to advertising cookies, to deliver relevant advertisements and measure their performance.
• Regulators, authorities, and legal counterparties:
  • Australian and foreign regulators, law enforcement agencies, or courts where we are required to disclose information to comply with legal obligations or respond to lawful requests.
  • External legal advisers, auditors, and consultants for legal or compliance support.
• Business transfers:
  • In the event of a corporate transaction involving our business or the relevant website (such as a merger, acquisition, reorganisation, or asset sale), personal data may be transferred to the acquiring or successor entity, subject to this Privacy Policy or an equivalent level of protection.

International Transfers

OBSERVE: Heart Of Vegas is directed mainly at users in Australia, but the technical infrastructure, corporate governance, and service providers may be located in other countries, including the United Kingdom, the European Economic Area (EEA), the United States, and other regions where third-party providers operate.

EXPAND: When data is transferred internationally, it may be subject to different privacy laws. We therefore implement additional safeguards to protect your information in line with Australian expectations and international best practice.

REFLECT: By using heartofvegas-aussie.com, you understand that your information may be transferred, stored, and processed outside of Australia as described below.

• Likely destinations of data transfers:
  • United Kingdom: For operations, governance, and support via Product Madness (UK) Limited located at 10 Finsbury Square, London.
  • European Economic Area (EEA): Where hosting, analytics, or security providers are based or store data.
  • United States and other countries: For global cloud hosting, email delivery, analytics, and other technical services.
• Safeguards for international transfers:
  • Use of contractual safeguards, including Standard Contractual Clauses or equivalent contractual mechanisms, where required under applicable law, to ensure a level of protection comparable to that in the originating jurisdiction.
  • Due diligence on service providers' security and privacy practices, including alignment with recognised standards such as ISO 27001 or SOC 2 where applicable.
  • Implementation of technical measures, such as encryption in transit and at rest, access controls, and data minimisation, to protect transferred data.

Data Retention

OBSERVE: We retain personal data only for as long as necessary for the purposes for which it was collected, subject to any legal obligations requiring longer retention.

EXPAND: Different categories of data have different retention periods, driven by technical needs, legal requirements, and our legitimate interests (for example, to maintain records in case of complaints or disputes).

REFLECT: When data is no longer needed, we will either delete it securely or irreversibly de-identify it.

• Contact and communication data:
  • Emails and contact details used for support, feedback, or general enquiries are typically retained for up to 3 years from the date of our last interaction, to handle follow-up questions and demonstrate compliance.
• Newsletter and marketing data:
  • Data relating to your subscription and interaction with marketing emails is retained while you remain subscribed.
  • After you unsubscribe, we keep a minimal record (e.g., your email address and the fact you opted out) for up to 5 years to demonstrate compliance with marketing laws and to ensure we respect your opt-out.
• Technical and analytics data:
  • Raw server logs (IP addresses, access logs) are typically kept for security and troubleshooting for up to 12 months, unless a longer period is required for investigation of specific incidents.
  • Aggregated or anonymised analytics data may be retained longer as it no longer identifies individuals.
• Payment and transaction records (if applicable in future):
  • Any transaction records, invoices, or payment confirmations relating to services on heartofvegas-aussie.com would usually be kept for 7 years to comply with tax and accounting obligations.
• Legal and dispute-related data:
  • Data relevant to actual or potential claims, complaints, or regulatory investigations may be retained for the duration of the matter plus a reasonable limitation period (which may be up to 7 years or longer if legally required).

We may apply shorter or longer retention periods where required or permitted by law. When retention periods expire, we will:

• Securely delete the data; or
• De-identify it so that it can no longer be linked to you.

Your Rights

OBSERVE: As an Australian-focused site, we primarily follow the Australian Privacy Act and the Australian Privacy Principles (APPs), which provide rights relating to access, correction, and complaints. We also broadly align with GDPR-style rights to enhance user control over personal information. The brief provided additionally references Mexican privacy law; while our service is not directed at Mexico, the rights described below are broadly consistent with international best practice, including data subject rights recognised under the GDPR and Mexican data protection frameworks.

EXPAND: Depending on your location and applicable law, you may have some or all of the rights listed below in relation to the personal information we hold about you. We will always apply at least the level of protection required under Australian law and, where reasonable, we may extend certain rights on a voluntary basis.

REFLECT: We will respond to all valid requests within 30 days of receipt or within a longer period if permitted by law, informing you of any extension and the reasons for it. We will not charge you for making a request, unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request as allowed by law.

Key Rights

• Right of access: You can request confirmation of whether we process your personal information and obtain a copy of that information, together with an explanation of how we use it. Under the Australian Privacy Act and analogous international standards, we will provide access unless an exception applies (for example, where providing access would unreasonably impact the privacy of others or breach confidentiality obligations).
• Right to correction / rectification: You can ask us to correct inaccurate, incomplete, or outdated personal information about you. We will take reasonable steps to ensure that personal information is accurate, up to date, and complete.
• Right to deletion / erasure: You can request deletion of your personal information where:
  • We no longer need it for the purposes for which it was collected;
  • You have withdrawn your consent (where processing was based on consent); or
  • We have processed it unlawfully or are otherwise obliged to delete it.
  We may retain certain data where required by law or where we have overriding legitimate grounds (e.g., record-keeping or dispute resolution).
• Right to restrict processing: You may request that we limit the use of your information where:
  • You contest the accuracy of the data (until we verify it);
  • The processing is unlawful and you prefer restriction over deletion; or
  • We no longer need the data but you require it for legal claims.
• Right to object: You can object at any time to:
  • Direct marketing (including profiling related to direct marketing). We will then stop processing your data for marketing purposes.
  • Processing based on our legitimate interests, on grounds relating to your particular situation. We will assess your objection and cease processing unless we have compelling legitimate grounds that override your interests or need the data for legal claims.
• Right to data portability (where applicable): Where technically feasible and where processing is based on your consent or on a contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller.
• Right to withdraw consent: Where we rely on your consent (for example, for marketing communications or non-essential cookies), you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

1. Submit your request: Contact us using:
   • Email: [email protected] or [email protected], with the subject "Privacy Request - Heart Of Vegas".
   • Postal mail: Data Protection Officer - heartofvegas-aussie.com, Product Madness (UK) Limited, 10 Finsbury Square, London, United Kingdom.
2. Provide necessary details: Describe your request clearly and provide sufficient information for us to verify your identity and locate your data (e.g., email address used, approximate dates of interaction, type of service).
3. Verification: We may ask for additional information to confirm your identity or authority (for example, if you act on behalf of someone else).
4. Response timeframe: We aim to respond within 30 days of receiving a complete request. If more time is needed due to complexity or number of requests, we will inform you of the extension and the reasons.
5. Outcome: We will either implement your request or explain why we cannot fully comply, citing the relevant legal basis or exemption.

Cookies & Tracking Technologies

OBSERVE: heartofvegas-aussie.com uses cookies and similar technologies to operate the site, remember your preferences, and understand how Heart Of Vegas is used by visitors.

EXPAND: Some cookies are strictly necessary for the site to function, while others are used for analytics and marketing, including potential affiliate tracking for visits to the official Heart Of Vegas channels.

REFLECT: You can control many aspects of cookie use through your browser settings and, where implemented, our internal consent tools.

Types of Cookies

• Session cookies: Temporary cookies that remain on your device only while your browser is open and are deleted when you close it. They support essential site functions such as navigation and security.
• Persistent cookies: Cookies that remain on your device for a set period or until you delete them. They are used to remember your preferences and to help us understand how you interact with the site over time.
• First-party cookies: Cookies set by heartofvegas-aussie.com to support core functionality and analytics.
• Third-party cookies: Cookies set by external domains (e.g., analytics providers, advertising networks, social media platforms) that may collect information about your browsing across different websites.

Purposes of Cookies

• Strictly necessary / functional cookies:
  • Enable basic site features (page navigation, secure areas, load balancing).
  • Remember your basic settings (such as cookie consent preferences).
  • Without these cookies, the site may not function properly.
• Analytics and performance cookies:
  • Collect aggregated information about how visitors use Heart Of Vegas (e.g., pages viewed, time on page, error messages).
  • Help us improve the structure, content, and performance of heartofvegas-aussie.com for Australian users.
• Advertising and affiliate cookies:
  • Support tracking of visits and conversions when you follow links from heartofvegas-aussie.com to official Heart Of Vegas channels or related offers.
  • Enable more relevant advertisements on our site or third-party sites, based on your interests and browsing behaviour, where permitted by law and, where required, based on your consent.

Managing and Disabling Cookies

• Browser settings:
  • You can usually configure your browser to refuse all or some cookies, or to alert you when websites set or access cookies.
  • If you disable or refuse cookies, some parts of heartofvegas-aussie.com may become inaccessible or may not function properly.
• Internal tools and consent banners:
  • Where implemented, you may be able to manage cookie categories (e.g., enable/disable analytics or advertising cookies) through an on-site cookie banner or settings panel.
• Third-party opt-outs:
  • Some third-party providers offer their own opt-out mechanisms for analytics or advertising cookies. Please refer to their privacy policies for more details.

Data Security

OBSERVE: Protecting personal information connected with Heart Of Vegas is essential, given the heightened sensitivity surrounding online gaming and social casino services.

EXPAND: We apply a layered security approach that covers technical, organisational, and procedural safeguards, in line with recognised security standards and industry expectations.

REFLECT: While no system can be guaranteed 100% secure, we continually review and strengthen our controls to reduce risks of unauthorised access, disclosure, or loss.

• Encryption:
  • Data in transit between your device and heartofvegas-aussie.com is protected using industry-standard transport layer security (TLS 1.2 or higher), where supported by your browser and device.
  • Where appropriate, we encrypt certain stored data at rest (for example, credentials, security tokens, or other sensitive technical information).
• Access control and authentication:
  • Access to personal data is restricted to authorised personnel or service providers who need it for legitimate business purposes and are bound by confidentiality obligations.
  • Internal administrative systems may use multi-factor authentication and strong password policies to reduce the risk of unauthorised access.
• System hardening and monitoring:
  • Regular patching and updating of systems and software to address known vulnerabilities.
  • Use of firewalls, intrusion detection or prevention systems, and logging mechanisms to monitor for suspicious activities.
• Security audits and assessments:
  • Periodic internal reviews of security controls and vendor security practices.
  • Where relevant, reliance on service providers that align with recognised international security standards (such as ISO 27001 or SOC 2), as indicated in their documentation.
• Staff training and awareness:
  • Training for relevant staff on privacy, data protection, and information security requirements, including handling of user data related to Heart Of Vegas.
• Incident response:
  • Documented procedures to detect, assess, and respond to potential data breaches or security incidents.
  • Where required by law, we will notify affected individuals and relevant authorities of qualifying data breaches without undue delay and within applicable timeframes.

Complaints & Contacts

OBSERVE: Users should have clear channels for raising questions or complaints about how their personal information is handled in connection with Heart Of Vegas.

EXPAND: Complaint procedures must indicate how to contact us, what to expect in terms of response time, and how to escalate matters to supervisory authorities if you are not satisfied with our response.

REFLECT: The following process is designed to meet Australian regulatory expectations and align with best practice standards referenced in other jurisdictions.

Contact Channels

• Email (primary for privacy): [email protected]
• Email (support / user queries): [email protected]
• Postal address (for formal complaints): Data Protection Officer - heartofvegas-aussie.com, Product Madness (UK) Limited, 10 Finsbury Square, London, United Kingdom

Internal Complaint Procedure

1. Submission: Send your complaint or query in writing to one of the contact channels above, clearly marking it as a "Privacy Complaint - Heart Of Vegas". Include:
   • Your name and contact details;
   • A detailed description of your concern; and
   • Any supporting documentation or evidence.
2. Acknowledgement: We will acknowledge receipt of your complaint, usually within 5 business days.
3. Investigation: We will investigate the matter, which may include:
   • Reviewing relevant systems and records;
   • Seeking clarification from you if necessary; and
   • Consulting with internal or external experts where appropriate.
4. Response: We aim to provide a substantive response within 30 days of receiving a complete complaint. If we need more time due to complexity or volume, we will inform you of the extension and reasons.
5. Outcome: Our response will:
   • Explain the outcome of our investigation;
   • Describe any steps we propose to take to address your concerns; and
   • Inform you of your options if you remain dissatisfied.

Escalation to Supervisory Authorities

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection or privacy authority in your jurisdiction. For Australian users, this is generally:

• Office of the Australian Information Commissioner (OAIC)
  Website: https://www.oaic.gov.au
  Phone (within Australia): 1300 363 992
  Address: GPO Box 5218, Sydney NSW 2001, Australia

If your complaint concerns processing by Product Madness (UK) Limited or within the EU/UK context, you may also contact the relevant European or UK supervisory authority as indicated in the Product Madness privacy notice: https://productmadness.com/privacy-notice/.

Where Mexican data protection regulations or EU GDPR frameworks might be applicable due to your location or service access route, you may also have rights to complain to the relevant local authority; information about such authorities can typically be found on official government or regulator websites.

Updates

OBSERVE: Legal requirements, industry practices, and our own services may evolve over time, especially in the online gaming and social casino review sector.

EXPAND: We may update this Privacy Policy to reflect changes in law, guidance from regulators, technological developments, or modifications to Heart Of Vegas or heartofvegas-aussie.com.

REFLECT: We aim to ensure that users are given clear notice of material changes and sufficient time to consider them.

• Notification methods:
  • Publishing the updated Privacy Policy on heartofvegas-aussie.com, with a revised "Last updated" date at the bottom of the document.
  • Displaying prominent notices such as website banners or in-page alerts on Heart Of Vegas pages when significant changes are made.
  • Where you have provided your email address and consented to receive communications, sending you an email notification outlining material changes.
• Advance notice for significant changes:
  • For material changes that significantly affect how we process your personal information (for example, introduction of new categories of data, new disclosures, or materially different purposes), we will provide, where practicable, at least 30 days' advance notice before the changes take effect.
  • During this notice period, you may choose to object to the changes or, where relevant, discontinue your use of heartofvegas-aussie.com.
• User options in case of changes:
  • If you do not agree with the updated Privacy Policy, you should stop using heartofvegas-aussie.com and may request deletion or restriction of your data, subject to legal requirements and our legitimate interests.
  • For any optional account or subscription features (if implemented), you may cancel your account or unsubscribe at any time.
• Version control and changelog:
  • We maintain internal records of previous versions of this Privacy Policy.
  • On request, we can provide a summary of material changes between the current version and earlier versions.

Last updated: January 2026