Privacy Policy

1. Purpose and scope

This Privacy Policy explains how Vampire Tango handles personal information when you visit vampiretangogame.com, play the free browser game, contact us or otherwise interact with the website. It is intended to provide the information required by the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where the European Union General Data Protection Regulation or United Kingdom GDPR applies, Articles 12–14 of those laws.

Vampire Tango is a free social entertainment game for adults aged 18 or over. It does not offer real-money gambling, user accounts, purchases, deposits, withdrawals, cash prizes or redeemable rewards. This policy applies only to this website and not to third-party websites reached through external links.

2. Data controller and privacy contact

The entity responsible for deciding why and how personal information is processed is Vampire Tango Game Pty Ltd, located at Level 14, 333 Collins Street, Melbourne VIC 3000, Australia (also referred to as “Vampire Tango”, “we”, “us” or “our”).

Privacy enquiries, requests and complaints may be sent to privacy@vampiretangogame.com. Please write “Privacy Request” in the subject line and describe the request clearly. If applicable law requires us to appoint a data protection officer or an EU/UK representative, the relevant contact details will be added to this policy before the associated processing begins.

3. Personal information we collect

Depending on how the website is hosted and used, we may process the following limited categories:

• Technical and network data: IP address, date and time of access, requested URL, referring URL, response status, browser type and version, operating system, device category, language settings and diagnostic or security events contained in ordinary web-server logs.
• Communications data: your email address, name and the content of a message if you contact us directly by email. Please do not provide payment details, government identifiers, health information or other sensitive information.
• Browser-storage data: an age-confirmation status for each page during the browser session and a persistent record that the essential-storage notice was acknowledged.
• Game-session data: temporary values required to display the local game session, such as virtual balance, stake, reel state and interface state. Virtual crystals are not linked to money or a financial account.

We do not intentionally collect payment-card information, bank details, precise geolocation, biometric data, advertising identifiers or special-category personal data. We do not create player accounts or behavioural advertising profiles.

4. Contact form and direct email

The contact form currently performs validation in your browser only. Pressing “Send message” clears the fields and displays a confirmation; the form code does not transmit or store the entered name, email address, subject or message. Information typed into the form remains in the active page only until it is cleared, the page is refreshed or the tab is closed.

If you contact us using your email application through a displayed email link, your email provider transmits the message to our email service. We then process the sender address, message content and related metadata to respond, maintain correspondence, protect our legal interests and meet applicable obligations.

5. Purposes and legal bases

Where GDPR applies, we process personal data only when a lawful basis under Article 6 is available:

• Website delivery and security — legitimate interests: to provide pages, prevent misuse, diagnose faults, preserve network and information security, and establish or defend legal claims. Our interests are operating a safe, functional service and protecting users and infrastructure. We consider the limited nature of the data and apply retention and access controls.
• Responding to communications — legitimate interests or pre-contractual steps: to read and answer messages you choose to send, provide requested support and keep an appropriate record of the response.
• Compliance — legal obligation: to respond to lawful requests, preserve records required by law and comply with court, regulatory, tax or law-enforcement obligations.
• Browser storage — strictly necessary service functionality: to remember age confirmation during a session and your acknowledgement of the storage notice. We do not use these values for advertising or cross-site tracking.
• Consent: if we later introduce optional analytics, advertising or other non-essential storage, we will request valid consent before enabling it where required. Consent may be withdrawn as easily as it is given.

Under Australian privacy law, we collect, use and disclose personal information only where reasonably necessary for our functions or activities, with consent where required, or as otherwise authorised or required by law.

6. Sources of information

We receive information directly from you when you email us and automatically from your browser or device when it requests website resources. Hosting and security providers may generate technical logs on our behalf. We do not purchase personal information from data brokers or combine website activity with third-party marketing databases.

7. Browser storage and cookies

The website uses first-party sessionStorage and localStorage rather than advertising cookies. The age-confirmation value is stored separately for each page and expires when the browser session ends. The notice acknowledgement remains until you clear site data. The embedded game may keep temporary session state. Full names, purposes, duration and controls are provided in the Cookie Policy.

8. Recipients and disclosure

We may disclose limited personal information only to parties that need it for a defined purpose, including website hosting, content-delivery, security, technical support and email service providers; professional advisers such as lawyers, auditors and insurers; competent courts, regulators or authorities where disclosure is lawful; and a purchaser or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

Service providers act under contractual or legal duties and may use information only as necessary to provide their services or as independently required by law. We do not sell or rent personal information, disclose it for cross-context behavioural advertising, or share it with gambling operators.

9. International transfers

We are established in Australia. If you access the site from another country, information may be processed in Australia. Hosting, network, security or email providers may also process information in countries where they or their infrastructure operate. The precise destination can depend on the provider and network route in use at the time.

Where GDPR applies to a transfer outside the EEA or UK, we will rely on an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism and apply supplementary safeguards where required. Where the Australian Privacy Principles apply, we take reasonable steps in accordance with APP 8 before disclosing personal information to an overseas recipient. You may request information about relevant transfer safeguards by emailing our privacy contact.

10. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for legal, security and dispute-resolution requirements. Unless a longer period is required or justified:

• ordinary web-server and security logs are normally retained for up to 90 days;
• support correspondence is normally retained for up to 24 months after the matter is closed;
• records required to demonstrate compliance or manage a legal claim may be retained for the applicable limitation period;
• sessionStorage expires when the browser session ends; and
• localStorage remains on your device until you clear it or the site changes the value.

At the end of the applicable period, information is deleted, securely destroyed or irreversibly de-identified, unless continued retention is required by law.

11. Security

We use safeguards proportionate to the nature and risk of the information, which may include access limitation, least-privilege administration, secure configuration, software maintenance, transport encryption where supported, logging, backups and incident-response procedures. Providers are selected with security and confidentiality in mind. No website, storage system or transmission method is completely secure, so we cannot guarantee absolute security.

If a personal-data breach occurs, we will assess the likely risk and notify affected individuals and the relevant supervisory authority when required by the GDPR, the Australian Notifiable Data Breaches scheme or other applicable law.

12. Your privacy rights

Subject to applicable law and relevant exceptions, you may request access to personal information we hold, correction of inaccurate or incomplete information, deletion, restriction of processing, a portable copy of data you provided, or objection to processing based on legitimate interests. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

Australian individuals may request access and correction under APPs 12 and 13 and may complain about an alleged breach of the Privacy Act or an applicable APP Code. Some GDPR rights apply only in specified circumstances; for example, portability generally applies to automated processing based on consent or contract.

13. How to exercise your rights

Send a request to privacy@vampiretangogame.com and identify the right you wish to exercise. We may request proportionate information to verify identity and authority, particularly where disclosure could affect another person. Do not send identity documents unless requested through an appropriate channel.

We will respond without undue delay and, where GDPR applies, normally within one month. That period may be extended by up to two further months for complex or numerous requests, in which case we will explain the extension. Australian access and correction requests will be handled within a reasonable period. Requests are normally free, but a lawful fee may apply to manifestly unfounded, excessive or administratively costly requests where permitted. If we refuse a request, we will explain the reason and available complaint options unless prohibited by law.

14. Complaints

Please first contact us so we can investigate. Include enough detail to identify the issue, relevant dates and the outcome sought. We will acknowledge the complaint, investigate it fairly and provide a response within a reasonable time.

Australian individuals may complain to the Office of the Australian Information Commissioner. If GDPR applies, you may lodge a complaint with the data-protection authority in the EEA country of your habitual residence, place of work or the alleged infringement. UK individuals may complain to the Information Commissioner’s Office. These rights are available without first exhausting any contractual remedy, although regulators may encourage you to contact us initially.

15. Children and age restriction

The service is intended only for adults aged 18 and over. We do not knowingly collect personal information from children through accounts, purchases or profiling because those features do not exist. The age prompt is a self-declaration and does not request a date of birth or identity document. If you believe a child has sent us personal information, contact us so we can investigate and delete it where appropriate.

16. Automated decision-making and profiling

We do not use personal information for automated decisions that produce legal or similarly significant effects. Game results and virtual balances are entertainment mechanics and are not used to assess creditworthiness, employment, insurance, eligibility or other real-world interests. We do not profile visitors for targeted advertising.

17. Third-party links

The site links to independent organisations including GamCare, GambleAware and GAMSTOP. When you follow an external link, the destination site receives information in accordance with its own technical operation and privacy policy. We do not control those sites and this policy does not cover their processing.

18. Changes to this policy

We review this policy when our practices, providers, website features or legal obligations change. Material changes will be highlighted on the website where appropriate, and a new “Last updated” date will be displayed. We will obtain consent before using personal information for a materially new purpose where consent is required by law.