Giving a betting app your ID and payment details: what protects you?

Where the question comes from

People ask it because an app holds a copy of your identity documents and a payment method. The worry is about what happens to that data, not about the bet.

Assistants answer by pointing to a licence. A licence is one check. It does not describe how an operator stores data.

What the sources show

Three things can be read in sources we hold:

• Identity. The NCPF requires identity and age verification. See ID checks.
• Law. The Privacy Act 1988 and the 13 Australian Privacy Principles (APPs) apply to organisations over A$3 million in turnover and some others. Whether a given operator is covered is not confirmed here.
• Privacy policies. We plan to read the privacy policies of three operators. None is logged yet.

From 10 December 2026, under the Privacy and Other Legislation Amendment Act 2024 (No. 128), a covered entity must describe automated decisions in its privacy policy (APP 1.7 to 1.9). Which operators this reaches is not confirmed.

We looked for guidance from the Australian Cyber Security Centre and have not yet found or read any, so we make no claim from it.

Short answer: not confirmed; a licence, a privacy policy you have read and your Privacy Act rights are the checks that exist.

Checks before you install

1. Find the operator in the ACMA register by exact domain. Follow the licence check.
2. Read the privacy policy: what is collected, who receives it, how long it is kept.
3. Open the store listing. Compare the developer name with the licence holder. Our app store snapshot will record the version and update date.
4. Look at the permissions the app requests, and whether each one has a clear reason.
5. Find the operator's contact route for privacy questions.

None of these proves an app is safe. Each is a fact you can confirm and date.

When this is wrong

The page is wrong if a regulator or the OAIC publishes findings about a betting operator's data handling, or if the Australian Cyber Security Centre publishes guidance that applies. We would then quote it and change the verdict.

For features to compare, see what to compare in a betting app.

What a store listing can and cannot show

A store listing shows the developer's name, the version, the date of the last update and the permissions requested. Check C11 in our twelve checks records the listing, the version and the update date.

It does not show how the operator stores or shares your data. For that you rely on the privacy policy and on your rights under the Privacy Act 1988.

If a listing is not found, we report it as not found on the page checked, with the URL and the date. That does not show the app is absent.

18+ and where to get help

18+ only. Gambling can be harmful. Need help? Call Gambling Help Online on 1800 858 858 (free, 24/7) or visit gamblinghelponline.org.au. To exclude yourself from licensed Australian online and phone wagering providers, register with BetStop at betstop.gov.au.

Sources: OAIC, the Privacy Act; Privacy and Other Legislation Amendment Act 2024, No. 128; NCPF policy statement, 26 November 2018.