Privacy Policy
Who We Are
OBSERVE: The provided data indicates that Lightning Link is a review and informational project focused on Lightning Link-branded gambling content in Australia, hosted on the domain lightninglink-au.com. No specific operating company, registration number, or physical address is provided in the source data.
EXPAND: To avoid misrepresentation, we must clarify that Lightning Link is not an official gambling operator, is not affiliated with Aristocrat Leisure Limited or Product Madness, and does not itself offer real-money gambling services. We also need to provide a practical contact point for privacy matters while acknowledging missing corporate details.
REFLECT: On this basis, we structure this section to be transparent about our nature, limitations, and contact channels, and to avoid implying any official licensing or corporate status that is not evidenced.
Operator Identity
For the purposes of this Privacy Policy, references to "we", "our", or "us" mean the operator of the informational project known as Lightning Link, available at https://lightninglink-au.com. This project:
- is an independent review and information website about Lightning Link-themed games and related gambling content;
- does not provide real-money gambling services and does not accept wagers or payments from users;
- is not affiliated with, endorsed by, or owned by Aristocrat Leisure Limited, Product Madness, or any official Lightning Link product owner, unless explicitly stated on the Site;
- focuses primarily on the Australian market and the regulatory context of online gambling for informational purposes only.
Legal and Registration Details
Based on the information available at the time of drafting this Privacy Policy, the following applies:
- Legal entity name: Not publicly specified. The Site is operated by an online publishing entity that has not provided public company details in the source data.
- Registered office / legal address: Not specified.
- Company registration number / tax identification: Not specified.
- Gaming licences: No gaming licence is required or held for this Site because it does not offer real-money gambling. Real-money Lightning Link operations targeting Australia are generally prohibited under the Interactive Gambling Act 2001 (Cth) and are not conducted by this Site.
Where local law requires identification of the data controller, the "data controller" is the operator of Lightning Link in respect of personal information collected through https://lightninglink-au.com.
Data Protection Contact
We have appointed an internal contact point responsible for privacy and data protection matters (Data Protection Officer-equivalent):
- Data Protection Contact / DPO-equivalent: Privacy Officer, Lightning Link
- Email: [email protected]
- Website: https://lightninglink-au.com
- Phone: Not specified
- Postal address: Not specified; contact is primarily via email.
You may contact this address for any questions or requests concerning this Privacy Policy or our handling of your personal information.
What Personal Data We Collect
OBSERVE: The Site operates as an informational and review service, so it may collect identity, contact, technical, behavioural, and cookie data, and possibly limited payment-related data if it refers or links to partner services. No explicit payment processing on-site is indicated.
EXPAND: Under Australian privacy principles and general international standards, we must categorize data and explain specific examples and collection channels, including forms, cookies, logs, and affiliate tracking.
REFLECT: We therefore distinguish personal, technical, behavioural, and cookie data categories and clarify that any payment data is typically handled by third-party partners, not directly by us.
Categories of Personal Information
- Identification and contact data
We may collect:- Full name, display name or username;
- Email address (for newsletters, enquiries, or feedback);
- Optional contact details you provide (such as phone number or social media handle) when you contact us.
- Technical and device data
When you access the Site, our servers and analytics tools may automatically collect:- IP address and approximate location (e.g., country or region);
- Device type, operating system, browser type and version;
- Referring URLs, pages visited, time and date of visits;
- Log data such as error logs, performance metrics, and session identifiers.
- Usage and behavioural data
In connection with your interaction with content on Lightning Link, we may collect:- Clickstream data, navigation paths, and time spent on pages;
- Interactions with reviews, guides, or comparison tables;
- Responses to polls, surveys, or feedback forms (where used).
- Marketing and communication preferences
If you subscribe to newsletters or similar communications, we may process:- Subscription status and opt-in records;
- Preferences about types of information you wish to receive;
- Unsubscribe/opt-out data.
- Payment and financial data
We do not process real-money wagers or payments on lightninglink-au.com. However:- We may obtain anonymised or aggregated information from advertising, tracking, or affiliate partners (e.g., whether a link led to a registration or deposit on a third-party site);
- Any actual payment card or banking information you provide will normally be handled directly by third-party operators or payment processors under their own privacy policies, not by us.
- Cookies and similar technologies data
We use cookies, pixels, tags, and similar technologies to collect:- Unique cookie identifiers tied to your browser or device;
- Session data and preferences (such as language settings);
- Analytics and advertising identifiers.
Legal Basis for Processing
OBSERVE: The Site is Australia-focused; however, visitors may access it globally. While the primary framework is Australian Privacy Principles (APPs), references to GDPR-like standards are relevant for international users and industry practice.
EXPAND: We should state the main legal bases typically recognised under GDPR (consent, contract, legitimate interests, legal obligation) and align them with APP concepts such as consent, reasonably necessary use, and lawful purposes.
REFLECT: We clearly map each processing activity to one or more legal bases, including anti-fraud, analytics, and legal compliance obligations.
Our Legal Grounds
- Consent
We rely on your consent when:- you subscribe to email newsletters or other direct marketing communications;
- you accept non-essential cookies (such as advertising cookies) where consent is required;
- you provide optional information in forms, surveys, or feedback tools.
- Performance of a contract or steps taken at your request
We may process personal information where necessary to:- provide you with access to the Site and its features;
- manage any user account or subscription you choose to create (if applicable);
- respond to your enquiries and support requests.
- Legitimate interests
We process personal information where it is necessary for our legitimate interests, and where these are not overridden by your rights and interests, including to:- operate, maintain, and improve the Site and our services;
- monitor usage patterns and perform analytics to enhance content relevance;
- protect the security and integrity of the Site, including detecting and preventing fraud, abuse, or technical issues;
- conduct limited, targeted marketing about our content and services, consistent with applicable law.
- Compliance with legal obligations
We may process your personal information to:- comply with applicable laws, regulations, and regulatory guidance, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles;
- cooperate with competent authorities such as the Australian Communications and Media Authority (ACMA) where legally required, for example in relation to illegal offshore wagering or mimicked Lightning Link domains;
- retain certain records for audit, tax, or dispute resolution purposes where applicable.
Purpose of Processing
OBSERVE: The Site primarily provides informational and review content. Processing purposes will focus on service delivery, user support, analytics, marketing, and security.
EXPAND: We should align purposes with the categories of data collected and make clear that we do not operate as a gambling provider, but as a content and affiliate-based site.
REFLECT: We summarise each purpose plainly and link to the relevant legal bases and user expectations.
Main Purposes
- Providing and operating the Site and services
We use your personal information to:- allow you to access and browse Lightning Link content;
- respond to contact requests, questions, and feedback;
- manage any user settings or preferences where such features exist.
- Improving and developing our services
Usage and analytics data help us:- understand which pages, reviews, or guides are most useful;
- detect and resolve technical problems, performance issues, or navigation difficulties;
- test new features, layouts, and content formats.
- Marketing and communications
With your consent where required, we may:- send newsletters or promotional messages about new content, guides, or offers from our partners;
- display personalised or interest-based content recommendations;
- measure the effectiveness of information campaigns or promotions.
- Analytics and audience measurement
Through cookies and analytics tools, we may:- compile statistics about overall website traffic and user behaviour;
- evaluate which referral sources and campaigns are effective;
- produce aggregated, non-identifiable reports for internal decision-making.
- Security, fraud prevention, and legal compliance
We process data to:- protect the Site and our users from misuse, attacks, or unauthorised access;
- identify and address suspicious activity related to affiliate links or illegal offshore wagering targeting Australians;
- cooperate with regulators and law-enforcement authorities where necessary and lawful.
Disclosure & Sharing
OBSERVE: As a review site, Lightning Link may collaborate with third-party service providers, analytics platforms, advertising networks, and affiliate partners. Regulatory bodies may also be involved in certain cases.
EXPAND: We must describe situations where personal information may be shared, including data processors, regulators, and potential corporate transactions, with appropriate safeguards.
REFLECT: We structure this section to show that sharing is limited, purpose-driven, and subject to contractual and legal protections.
Categories of Recipients
- Service providers and technical vendors
We may share personal information with third-party companies that provide services on our behalf, such as:- website hosting, cloud infrastructure, and content delivery networks;
- analytics providers and performance monitoring tools;
- email delivery platforms and customer support tools.
- Advertising and affiliate partners
We may work with:- affiliate networks and partner gambling operators (where lawful) to track conversions and performance of referral links;
- advertising networks that display ads on the Site or measure ad performance.
- Regulators and public authorities
We may disclose personal information when required by law or in response to valid legal processes, including to:- regulatory bodies such as the Australian Communications and Media Authority (ACMA) for matters relating to illegal offshore wagering or domain misuse;
- law-enforcement agencies or courts, to comply with subpoenas, orders, or legal obligations.
- Business transfers
In the event of a merger, acquisition, reorganisation, sale of assets, or other corporate transaction involving Lightning Link, personal information may be transferred to the relevant successor entity, subject to the same or equivalent protections described in this Privacy Policy. - With your consent
We may share your information with third parties where you have explicitly requested or consented to such sharing, for example when you enter joint promotions or competitions (if offered).
International Transfers
OBSERVE: The Site focuses on Australia but may rely on infrastructure and service providers located in other countries. Users may also access the Site from outside Australia.
EXPAND: We need to address potential transfers to regions such as the European Economic Area (EEA), the United States, and other jurisdictions, and describe safeguards like contractual clauses.
REFLECT: We emphasise that we strive to apply robust protections regardless of where data is processed.
Countries and Regions
Personal information collected through lightninglink-au.com may be processed or stored in:
- Australia - where our primary regulatory focus exists;
- Member states of the European Economic Area (EEA) or the United Kingdom - for hosting, analytics, or service provisioning;
- United States and other countries - where some of our technical vendors, analytics providers, or advertising partners may be located.
Transfer Safeguards
- Where personal information is transferred from Australia or the EEA/UK to a country that does not provide an equivalent level of data protection, we will:
- use contractual safeguards, such as standard contractual clauses or similar data transfer agreements, where appropriate;
- seek to ensure that the recipient implements adequate technical and organisational measures to protect the information;
- limit transfers to what is necessary for the purposes described in this Privacy Policy.
- Regardless of where your information is processed, we will handle it in accordance with this Privacy Policy and applicable law.
Data Retention
OBSERVE: Privacy frameworks require that information not be kept longer than necessary. Review sites typically retain logs and analytics data for defined periods and marketing data until consent is withdrawn or a reasonable period passes.
EXPAND: We must outline retention by category and state criteria for deletion or anonymisation, consistent with legal obligations and technical needs.
REFLECT: We define indicative retention periods, subject to extension where required for legal or security reasons.
Retention Periods and Criteria
- Identification and contact data
- Stored for as long as you maintain an active relationship with us (e.g., newsletter subscription, ongoing correspondence);
- Upon unsubscribe or closure of any account, we generally retain this data for no more than 5 years from your last interaction, unless a longer period is required to resolve disputes or comply with law.
- Technical and log data
- Server logs and security-related data are usually kept for 6 - 24 months, depending on the nature of the logs and security requirements;
- Aggregated or anonymised analytics data may be retained for longer periods, as it no longer identifies you.
- Marketing data
- Information relating to your marketing preferences is kept for as long as you remain subscribed and up to 2 years after your last interaction with our messages, unless you withdraw consent earlier;
- We will retain a minimal record of your opt-out request indefinitely to ensure that we respect your choice.
- Affiliate and referral data
- Pseudonymous identifiers and conversion data used for affiliate tracking are kept in accordance with contractual obligations with partners, typically for up to 5 years to allow accurate reporting and dispute resolution.
Deletion and Anonymisation
- When personal information is no longer required for the purposes for which it was collected, and there is no legal requirement or legitimate interest justifying further retention, we will:
- delete it or securely destroy it; or
- irreversibly anonymise it so it can no longer be associated with you.
- We will honour your rights to deletion or erasure as described below, subject to lawful exceptions.
Your Rights
OBSERVE: The Site targets Australia but may receive international traffic. The instructions reference GDPR and Mexican privacy law alignment, so we address core rights recognised under these frameworks, even though our primary legal obligations stem from Australian law.
EXPAND: We identify rights such as access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent, and specify procedures, timeframes, and cost-free access, noting that Mexican regulations (e.g., Federal Law on Protection of Personal Data Held by Private Parties) similarly emphasise ARCO rights (Access, Rectification, Cancellation, and Opposition).
REFLECT: We express these rights in a technology-neutral manner and provide a consistent process for exercising them globally.
Overview of Your Rights
Subject to applicable law (including the Australian Privacy Act 1988 (Cth), the EU General Data Protection Regulation (GDPR), and, where relevant, Mexican data protection regulations on ARCO rights), you may have the following rights:
- Right of access - to obtain confirmation as to whether we process your personal information and, if so, to receive a copy and certain related details.
- Right to rectification / correction - to request that inaccurate or incomplete personal information be corrected or updated.
- Right to erasure / cancellation - to request deletion of your personal information where, for example, it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent (subject to legal retention obligations).
- Right to restriction of processing - to request that we restrict processing in certain circumstances, such as when you contest the accuracy of the data.
- Right to object / opposition - to object to processing based on legitimate interests, including profiling, and to object at any time to processing for direct marketing.
- Right to data portability - where technically feasible and required by law, to receive personal information you provided to us in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.
- Right to withdraw consent - where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
How to Exercise Your Rights
- Submit a request
Send an email to [email protected] with:- your full name and contact details;
- a clear description of the right you wish to exercise and the information concerned;
- any information that may help us locate your records (such as approximate dates of interaction with the Site).
- Verification
We may request additional information reasonably necessary to verify your identity and prevent unauthorised access or changes to your data. - Response timeframe
We aim to respond to all legitimate requests within 30 days of receipt. If your request is complex or we receive numerous requests, we may extend this period in accordance with applicable law, and we will notify you of any extension and reasons. - Cost
We will handle your request free of charge, unless it is manifestly unfounded or excessive (for example, repetitive). In such cases we may charge a reasonable fee or refuse to act, as permitted by law. - Limitations
Your rights are subject to certain legal limitations and exemptions. For instance, we may decline to delete information that we are required to retain by law or that is needed to establish, exercise, or defend legal claims.
Cookies & Tracking Technologies
OBSERVE: The Site uses cookies for functionality, analytics, and possibly advertising and affiliate tracking.
EXPAND: We categorise cookies and explain management options at browser and site level.
REFLECT: We provide concise yet comprehensive explanations aligned with industry practice.
Types of Cookies We Use
- Strictly necessary / functional cookies
These cookies are essential for the operation of the Site and to provide requested services, such as:- maintaining session state and security;
- remembering basic settings (e.g., language) necessary to display content correctly.
- Analytics and performance cookies
These cookies help us understand how visitors interact with the Site, including:- pages visited, time spent, and navigation paths;
- browser and device information for performance optimisation;
- aggregated statistics about traffic sources.
- Advertising and affiliate cookies
Subject to applicable law and consent requirements, we may use:- advertising cookies to deliver or measure interest-based content and promotions;
- affiliate tracking cookies or pixels that allow us and our partners to know if you visited or registered on a third-party site after clicking a referral link on lightninglink-au.com.
- Third-party cookies
Some cookies may be placed by third-party service providers (e.g., analytics tools, ad networks). These are governed by the privacy policies of the respective third parties.
Managing Cookies
- Browser settings
You can typically configure your browser to:- block all cookies;
- block cookies from specific sites; or
- delete cookies when you close your browser.
- On-site controls (if implemented)
Where available, our cookie banner or preference centre will allow you to manage non-essential cookies and withdraw consent at any time. - Do Not Track and similar signals
The Site's response to browser-based "Do Not Track" or similar signals may be limited, as standardised industry solutions are still evolving. However, you can manage tracking technologies using the tools above.
Data Security
OBSERVE: The Site must protect personal information using appropriate technical and organisational measures, referencing common standards like TLS and encryption.
EXPAND: We describe encryption, access controls, audits, staff training, and incident response processes in a way suitable for an informational site, without overstating specific certifications not evidenced by the source data.
REFLECT: We emphasise continuous efforts and risk-based approaches while avoiding guarantees of absolute security.
Our Security Measures
- Encryption
- Data transmitted between your browser and the Site is protected by TLS 1.2 or higher (HTTPS), where technically implemented, to reduce the risk of interception;
- Where feasible, data at rest (e.g., on servers or backups) is stored using secure, industry-standard encryption or access control mechanisms.
- Access controls
- Access to systems holding personal information is restricted to authorised personnel who require it for their job functions;
- Authentication measures, such as strong passwords and multi-factor authentication where supported, are used to reduce unauthorised access risks.
- Organisational measures
- Staff and contractors with access to personal information are expected to follow confidentiality obligations;
- Processes are in place to review access rights and manage third-party service providers.
- Monitoring and incident response
- We monitor our infrastructure for unusual activity, vulnerabilities, or potential threats;
- If we become aware of a data breach that is likely to result in serious harm, we will take reasonable steps to contain the incident, notify affected individuals and relevant authorities as required by law, and take steps to prevent recurrence.
While we strive to protect your personal information, no method of transmission or storage is completely secure. You are responsible for taking reasonable precautions to protect your own information, such as using updated software and avoiding sharing sensitive data in unencrypted communications.
Complaints & Contacts
OBSERVE: Users need clear channels to raise privacy concerns and escalate complaints to regulators where appropriate, including, for EU users, supervisory authorities, and, as referenced, Mexican authorities, even though the Site is AU-focused.
EXPAND: We outline an internal complaints procedure and identify external oversight bodies relevant to the primary jurisdiction and international frameworks.
REFLECT: We provide straightforward steps and realistic response times, aligned with the 30-day standard.
Contacting Us
If you have questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal information, please contact:
- Privacy Officer / DPO-equivalent: Lightning Link
- Email: [email protected]
- Website: https://lightninglink-au.com
Internal Complaint Procedure
- Submit your complaint
Send us an email describing:- the nature of your concern;
- how you believe your privacy rights may have been affected; and
- any supporting information or evidence.
- Acknowledgement
We will acknowledge receipt of your complaint as soon as reasonably practicable, generally within 5 business days. - Investigation and response
We will investigate your complaint and aim to provide a substantive response within 30 days of receipt. If additional time is required, we will inform you of the reason and expected timeframe. - Further steps
If you are not satisfied with our response, you may escalate the matter to the appropriate supervisory authority, as described below.
Regulatory and Supervisory Authorities
- Australia
If you are in Australia or your complaint relates to our handling of personal information under Australian law, you may contact:- Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au
- Office of the Australian Information Commissioner (OAIC)
- European Union / EEA
If you are located in the EU/EEA, you may have the right to lodge a complaint with your local data protection authority. Contact details are available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en - Mexico
If you are in Mexico and believe your ARCO rights have been infringed, you may contact the Mexican data protection authority (INAI - Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales). Details are available at: https://www.inai.org.mx
Updates
OBSERVE: Privacy policies must be updated over time and users need to be informed about significant changes.
EXPAND: We design a process for version control, notification, and user options, including advance notice for material changes.
REFLECT: We state a clear "Last updated" date and describe communication channels for updates.
Changes to This Privacy Policy
- We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
- When we make material changes, we will:
- change the "Last updated" date at the end of this document;
- provide a prominent notice on the Site, such as a banner or notification in your account area (where applicable); and
- where required by law, seek your consent to material changes affecting how we use or share your personal information.
- For significant changes that materially affect your rights or the way we process your data, we will endeavour to provide at least 30 days' advance notice before the new version takes effect, except where immediate changes are required by law or to address urgent security or compliance needs.
Your Options When This Policy Changes
- If you do not agree with the updated Privacy Policy, you should discontinue use of the Site and, if applicable, request deletion of your personal information as described above.
- Continued use of the Site after the effective date of any changes will constitute your acknowledgement of the updated Privacy Policy, to the extent permitted by applicable law.
Last updated: January 2026