Sportsbet
Gambling & Gaming
Clear exclusion statement for children accessing services and parental responsibility guidance. Age verification mentioned through identity services, but lacks specific age thresholds, proactive verification mechanisms, or detailed child-specific protections. Overall: Good with minor gaps.
10 dimensions · 82 claims · assessed 19 Apr 2026 · methodology · source policy ↗
Score Breakdown
Transparency
Good with minor gaps
7.5/107.5/10
Transparency
Good with minor gaps
Transparency & Clarity
8/10Comprehensive scope statement covering multiple platforms, clear contact information with specific Privacy Office details, section overview provided, and current date. Strong transparency with specific entity identification and platform coverage.
Purpose Limitation & Use
7/10Comprehensive list of primary collection purposes clearly stated, including marketing, compliance, and business operations. Consent mechanism disclosed and AI processing purposes specified, though secondary use limitations could be more explicit.
Policy Maintenance & Accountability
7/10Clear Privacy Office contact details with 30-day response commitment, current last updated date, and compliance commitment to Privacy Act. Review frequency mentioned but not specific, and governance framework details limited.
Data Protection
Good with minor gaps
7.11/107.11/10
Data Protection
Good with minor gaps
Data Collection Disclosure
8/10Extensive enumeration of specific data types collected including financial, identity verification, and behavioral data. Clear disclosure of collection methods including automated technologies and AI tools, with consent mechanisms specified.
Third-Party Sharing & Disclosure
7/10Good specificity with named parties like Flutter Entertainment plc and specific locations (UK, Ireland, Romania, etc.). Clear categories of recipients and purposes disclosed, with express consent required for IDMatch Service and opt-out available for CRB sharing.
Data Security
6/10Basic security measures disclosed including SSL encryption and password protection, with employee confidentiality requirements. However, lacks specific certifications, audit practices, or detailed breach notification procedures.
Cross-Border Data Flows
7/10Specific countries named (UK, Ireland, Romania, Hyderabad, USA) with clear recipients identified. Safeguards disclosed requiring protection in accordance with Privacy Act, though adequacy mechanisms not detailed.
Your Rights
Room for improvement
5.8/105.8/10
Your Rights
Room for improvement
Consumer Rights & Control
8/10Multiple access mechanisms provided (online, phone, email) with specific contact details and 30-day response timeframe for complaints. Clear correction processes and marketing opt-out mechanisms with various methods available.
Automated Decision-Making
4/10Basic disclosure of AI tool use for customer service responses, but lacks specificity about decision types, opt-out rights, human review availability, or transparency about logic used in automated processing.
Children's Data
not assessedClear exclusion statement for children accessing services and parental responsibility guidance. Age verification mentioned through identity services, but lacks specific age thresholds, proactive verification mechanisms, or detailed child-specific protections.
Sector Comparison
Gambling & Gaming comparison