Privacy Policy at Perkharbor

1. Information We Collect

Perkharbor (also referred to as "we", "us", or "our") is committed to protecting the privacy of every visitor, guest and user of our website. In accordance with the Australian Privacy Principles and the GDPR where applicable, we outline how we collect, store, use and disclose your personal information when you access or interact with our services, book a stay, participate in entertainment events, or otherwise engage with the Perkharbor brand at 833 Collins Street, Melbourne VIC 3000.

• Identity Data: your full name, date of birth, gender and identification documentation that may be required for legal compliance and age verification.
• Contact Data: email address, telephone number, postal address and preferred language of communication.
• Booking & Transaction Data: your reservation history, payment details, purchase of tickets for casino hotel entertainment events and any special requests you have communicated to our concierge.
• Technical & Usage Data: internet protocol (IP) address, browser type and version, time-zone setting, operating system and platform, your activity on our website including pages viewed, dwell time and clickstream data.

2. How We Use Your Information

We process your personal information for the legitimate purposes of managing our relationship with you, improving our service quality and securing our physical and digital environments.

• To process and manage your reservation at our casino hotel resort, including check-in and check-out procedures.
• To facilitate access to our casino hotel entertainment events and ensure compliance with responsible gaming regulations.
• To communicate important updates regarding your stay, special offers and event reminders, provided you have opted in to receive such marketing communications.
• To improve the personalisation of our website content and present services that are most relevant to your preferences.
• To comply with applicable legal obligations, including anti-money laundering checks and age verification laws of Australia.

3. Sharing and Disclosure

We never sell or rent your personal information to third parties. We may share limited information strictly within the framework of legitimate business operations, as described below.

• Service Providers: trusted partners who assist us in operating our website, payment processing, event production and IT support are given access to your data only to perform tasks on our behalf and are bound by strict data processing agreements.
• Legal & Regulatory Authorities: when required by Australian law or any lawful request by a government authority, we may disclose your information to comply with a legal obligation or to protect the rights, property or safety of our guests and staff.
• Corporate Restructuring: in the event of a merger, acquisition, or asset sale, your personal information may be transferred as part of that business asset under the same confidentiality commitments.

4. Data Retention and Security

We retain your personal information only for as long as necessary to fulfil the purposes described above, while also complying with statutory retention periods which range from three to seven years for accounting and legal purposes.

We have established comprehensive technical and organisational security measures to safeguard your data, including encrypted transmission via SSL/TLS protocols, limited access rights with multi-factor authentication, continuous monitoring of our networks, and periodic security assessments conducted by certified independent third parties.

5. Your Rights and Choices

You possess the following rights over your personal data, subject to certain legal restrictions.

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct any inaccuracies or complete incomplete information.
• Erasure: request deletion of your data where it is no longer needed or where consent is withdrawn.
• Restriction: block the processing of your data in specific circumstances while we verify your claim.
• Data Portability: receive your data in a structured, commonly used and machine-readable format.
• Objection: object to direct marketing or processing based on legitimate interests at any time.

If you wish to exercise any of these rights, please contact our Privacy Officer using the details at the beginning of this document. Additionally, if you reside in the European Union, you have the right to lodge a complaint with your local supervisory authority (DPA). For Australian residents, the Office of the Australian Information Commissioner (OAIC) may be contacted at www.oaic.gov.au.