Privacy Policy

1. Scope and legal framework

This Privacy Policy explains how Morquellianprestigestay Pty Ltd handles personal information when you visit morquellianprestigestay.com, contact us, request information, use guest-facing features or interact with services described on the site. It is designed for an Australian business context and also provides GDPR transparency where that law applies to an individual or processing activity.

We aim to manage personal information openly and transparently. Australian obligations may arise under the Privacy Act 1988 and Australian Privacy Principles (APPs). Where the GDPR applies, we observe principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.

Separate on-site notices may apply to regulated gaming, security, identity verification or third-party services where required by law.

This provision applies to information connected with the casino experience described on this website.

2. Information we collect

We may collect your name, email address, telephone number, message content, booking or event preferences, accessibility requests, device type, browser information, language, approximate location derived from IP address, pages viewed, referral information and security logs.

Do not place unnecessary sensitive information, financial credentials or government identifiers in the general contact form. If sensitive information is genuinely required for accessibility, safety or legal purposes, it will be handled only with an appropriate legal basis and safeguards.

On-site CCTV, entry controls or age verification may be covered by separate venue notices.

Where a casino service is subject to a separate venue notice, that notice should be read together with this policy.

3. Collection methods

Information may be collected directly when you submit a form, send an email, call, request support or make a booking-related enquiry. Technical information may arise automatically from essential website functions. Optional analytics or marketing technologies, if introduced, will be addressed in the Cookie Policy and by consent controls where legally required.

We may receive information from someone acting on your behalf, a service provider supporting a requested service, or a public source where verification is reasonably necessary.

References to the casino describe the on-premises gaming and entertainment context of Morquellianprestigestay.

4. Purposes

We may process information to answer enquiries, administer bookings and event requests, provide customer service, maintain security, detect misuse, troubleshoot technical issues, preserve business records, comply with law, establish or defend legal claims and improve accessibility and performance.

We do not sell personal information and do not use the general contact form for solely automated decisions producing legal or similarly significant effects.

A casino-related enquiry may require additional verification where law, safety or venue rules require it.

5. GDPR legal bases where applicable

Where the GDPR applies, processing may rely on steps requested before a contract or contract performance, compliance with legal obligations, legitimate interests in operating a secure and responsive website where not overridden by your rights, consent for optional technologies or communications where required, and limited legal-claims or vital-interest grounds.

When consent is the basis, you may withdraw it for future processing. When legitimate interests are relied on, a right to object may apply depending on circumstances.

Information generated through a casino booking or guest request is handled only for legitimate operational purposes.

6. Australian Privacy Principles

Where the Privacy Act and APPs apply, we seek to follow requirements on transparent management, collection, notice, use and disclosure, direct marketing, cross-border disclosure, data quality, security, access and correction.

You may request access to or correction of personal information we hold, subject to lawful exceptions. We will explain a refusal where an explanation is legally required.

The casino context does not reduce any privacy, consumer or accessibility rights that apply to a visitor.

7. Sharing and processors

Information may be disclosed to service providers supporting hosting, cybersecurity, communications, professional advice, booking administration or customer support. Providers are expected to use data only for authorised purposes and with appropriate confidentiality and security controls.

We may disclose information to regulators, courts, law-enforcement bodies or other authorities where required or permitted by law, or in a corporate restructuring subject to applicable safeguards.

Any casino promotion shown on the website remains subject to eligibility, availability and applicable law.

8. International transfers

Some providers may process information outside Australia. Where cross-border disclosure or an international transfer occurs, we assess applicable legal requirements. GDPR-restricted transfers may use an adequacy decision, standard contractual clauses or another lawful mechanism with supplementary safeguards where required.

Australian privacy requirements may also require reasonable steps regarding overseas recipients, subject to statutory exceptions.

A casino guest may contact us using the details below about this policy or service.

9. Retention

We keep personal information only for as long as reasonably necessary for the relevant purpose, including service follow-up, contractual administration, security, disputes, accounting and legal recordkeeping. Retention varies by category and legal context.

When information is no longer needed and no legal reason requires retention, we take reasonable steps to delete, de-identify or securely dispose of it.

We apply this policy consistently across hotel, entertainment and casino-related website interactions.

10. Security and data breaches

We use reasonable administrative, technical and organisational controls such as access restrictions, least privilege, software maintenance, secure hosting practices, confidentiality obligations, logging and incident-response procedures.

No internet system is completely secure. If a breach occurs, we assess notification duties under applicable law, including the Australian Notifiable Data Breaches framework and GDPR rules where relevant.

The casino sections of the website are intended for adults and may include age-related access information.

11. Individual rights

Depending on applicable law, rights may include access, correction, deletion, restriction, objection, portability, withdrawal of consent and protections relating to certain automated decisions. Australian law also provides access and correction rights in applicable circumstances.

Rights are not absolute. We may verify identity before fulfilling a request and may retain information where law requires it.

Nothing in this policy permits casino activity that is prohibited by applicable Australian or Victorian law.

12. Complaints

If you believe personal information was mishandled, contact us with enough detail to investigate. Individuals in Australia may also have complaint rights through the Office of the Australian Information Commissioner (OAIC). Individuals protected by the GDPR may complain to the competent supervisory authority.

Where casino operations involve a regulated third party, that party may provide its own legally required notices.

13. Children and age-restricted services

The website is not intended to encourage gambling by minors. Gaming areas and gambling-related services are subject to applicable age restrictions and venue rules. We do not knowingly solicit personal information from children for gambling purposes through the general contact form.

The casino venue context may involve security and safety measures that are explained where required by law.

14. Direct marketing

We send promotional electronic communications only where a lawful basis exists. Where consent is required, it is requested separately. Marketing messages should provide a practical unsubscribe method. A general service enquiry is not unlimited permission for unrelated marketing.

Website content about the casino is informational unless a specific service is expressly offered for booking.

15. Changes

We may update this policy for changes in law, technology, services or information-handling practices. The current version is identified by the updated date. Publication does not replace express consent where law requires consent for a particular processing activity.

Questions about a casino-related service can be directed to the contact details stated in this policy.

16. Data quality, anonymity and pseudonymity

We take reasonable steps to keep personal information accurate, complete and current for the purpose for which it is used. If you believe information is inaccurate, contact us with the correction requested and enough detail to locate the relevant record. Where Australian privacy law requires an option to interact anonymously or by pseudonym and it is practicable to provide that option, we will consider it. Identification may still be necessary where law, safety, fraud prevention, contractual administration or the nature of a requested service reasonably requires us to know who we are dealing with.

17. Sensitive information and special categories

We do not seek health information, biometric information, political opinions, religious beliefs, sexual orientation or other sensitive or special-category information through ordinary website browsing. A visitor should not volunteer this material in a general enquiry unless it is genuinely necessary. If information of this kind is required for accessibility, safety, legal compliance or another specific purpose, we will identify an appropriate legal basis, limit access, apply additional safeguards and retain it only for as long as justified by that purpose and applicable law.

18. Privacy by design and accountability

When website functions are changed, we consider the amount of personal information involved, the purpose of processing, access permissions, retention, security and the effect on individuals. Higher-risk processing may require a more detailed privacy assessment. We maintain documentation appropriate to our role and the processing performed, and we expect service providers to support reasonable privacy and security requirements. Privacy controls are reviewed when technology, legal requirements or operational practices materially change.

19. Incident response and notification

A suspected privacy or security incident is assessed to determine what happened, what information was involved, who may be affected, the likely consequences and what containment or remediation is appropriate. Where the Australian Notifiable Data Breaches scheme applies, we assess whether the statutory threshold for notification is met. Where the GDPR applies, we assess the relevant controller or processor notification requirements. We may also contact affected individuals when notification is legally required or when direct notice is otherwise appropriate to reduce foreseeable harm.

20. Automated processing and profiling

The general website does not require automated eligibility decisions that produce legal or similarly significant effects. Technical security measures may automatically identify patterns associated with abuse, malicious traffic or repeated failed requests, but such measures are intended to protect the service rather than to make significant decisions about an individual. If materially different profiling or automated decision-making is introduced, we will update the relevant transparency information and provide any rights or safeguards required by applicable law.

21. Verification of rights requests

Before providing access to personal information or carrying out a request that could expose or alter a record, we may ask for information reasonably necessary to verify the requester. Verification is proportionate to the sensitivity of the record and the risk of unauthorised disclosure. We do not require excessive identification merely to create friction. If an authorised representative acts for you, we may request evidence of that authority. Records of privacy requests may be retained where reasonably necessary to demonstrate compliance and prevent repeated unauthorised access.