Definition / Principle
Australia does not have a specific "cookie law" like the EU's ePrivacy Directive (which requires explicit opt-in consent for non-essential cookies). Instead, cookie governance falls under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The Office of the Australian Information Commissioner (OAIC) has issued guidance stating that cookies collecting personal information must comply with APP 5 (notification of collection) and APP 6 (use and disclosure).
But here's the catch — this site is hosted offshore (on AWS us-east-1). The Privacy Act applies to entities with an "Australian link." If the site operator is outside Australia and doesn't carry on business in Australia, the Act's extraterritorial application (Section 5B) may not bite. That creates a grey area.
Comparative Analysis
In the EU, the cookie consent banner is aggressive — blocking all third-party scripts until the user clicks "Accept." In Australia, most gambling affiliate sites use the same banner (because it's easier to implement globally), but legally, they could technically get away with implied consent (e.g., "by continuing to use the site, you agree"). We don't do that. We use explicit opt-in. It's cleaner and avoids the inevitable class action risk.
California (CCPA/CPRA) gives residents the right to opt out of the "sale" of their personal information — and "sale" is defined broadly to include sharing data for cross-contextual advertising. The OAIC's 2022 review of the Privacy Act (Final Report, Chapter 7) recommended Australia introduce a similar "opt-out of targeted advertising" right, but as of January 2026, it's not legislated. [4]
Practical Application
What does this mean for you? If you're in Melbourne and you visit this site, the data Google Analytics collects is not currently protected by Australian privacy law in a way that gives you a private right of action. You can complain to the OAIC, but the OAIC may have limited enforcement power over an offshore entity.
The practical workaround: use a VPN (if the casino you play at allows it — many do not) and a browser that blocks third-party cookies by default. Firefox with Enhanced Tracking Protection on "Strict" and a uBlock Origin extension will kill most trackers. Genie's Gem Bonanza demo runs fine under that setup. I tested it on a Windows 11 machine with Firefox 133.0, uBlock Origin 1.60.0, and ET Protection set to "Strict," on 19 January 2026. The game loaded in <2 seconds.
Data retention summary for Australian users: We retain aggregated Google Analytics data for 2 months. Hotjar recordings for 365 days. Facebook Pixel conversion data for 90 days. No personally identifiable information (PII) — such as your name, email, or address — is collected by any of these third-party tools. The "affiliate_ref" cookie only stores an alphanumeric partner ID, not your browsing history.
