Privacy Policy for Midnightstackresort Hotel & Casino Resort
Midnightstackresort Hotel & Casino is committed to protecting your privacy and handling personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy applies to all personal information collected through our website, reservations, and on-site services. By using our services, you consent to the practices described in this policy.
Effective date: 9 September 2026
Resort location: 18 Sturt Street, Southbank VIC 3006, Melbourne, Australia
Key Definitions
For clarity, the following definitions apply throughout this policy.
- Personal information
- Information or an opinion about an identified individual, or an individual who is reasonably identifiable. This may include your name, contact details, payment information, and preferences.
- Sensitive information
- Health data, biometric data, and other categories protected under the Privacy Act. Sensitive information is only collected with explicit consent and when necessary.
- We, us, and our
- Midnightstackresort Hotel & Casino, located at 18 Sturt Street, Southbank VIC 3006, Melbourne, Australia.
Information We Collect
We collect information you provide directly, such as when making a reservation, contacting us, or signing up for communications. This may include your name, email address, phone number, postal address, payment details, and preferences. We also collect information automatically through cookies and similar technologies, including IP address, browser type, and pages visited.
Information you provide
- Reservation details: dates, room preferences, and special requests.
- Contact information: name, email address, phone number, and postal address.
- Payment information processed securely and not stored in full.
Information collected automatically
- Usage data that helps us improve our website and services.
- Device and browser information, including IP address.
- Pages visited and interactions with our website.
Note: No cash betting or real-money gambling data is collected. Payment processing complies with PCI DSS standards.
How We Use Your Information
We use your personal information to provide and improve our services, process reservations, respond to inquiries, send transactional communications, and, with your consent, send marketing communications. We may also use information for legal compliance, fraud prevention, and to protect the security of our guests and property.
- Reservation management and guest services. We use your details to confirm bookings, arrange suite preferences, and coordinate your stay.
- Personalization of your stay. We may use your preferences to tailor room amenities and dining recommendations.
- Marketing communications. With your opt-in consent, we send updates about resort offers and events. You can opt out at any time.
- Legal obligations. We process information as required under Australian law, including record-keeping and security requirements.
Note: Marketing communications require opt-in consent. We do not sell personal information to third parties, and no gambling-related data is used for any purpose.
Disclosure of Information
We may disclose your personal information to service providers who assist us in operating our website, processing payments, managing reservations, and delivering services. These providers are contractually obligated to protect your information and use it only for the purposes we specify. We may also disclose information when required by law or to protect our rights and safety.
Examples of service providers include payment processors, IT support, and marketing platforms. All third-party providers must comply with Australian privacy laws, and international transfers are conducted with appropriate safeguards.
Our commitment: We do not sell or rent personal information to third parties. No information is shared with gambling operators or betting services.
Data Security and Retention
We implement reasonable physical, technical, and administrative safeguards to protect personal information from unauthorized access, disclosure, alteration, and destruction. These include encryption, access controls, and regular security assessments. We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law.
- Encryption of data in transit and at rest.
- Restricted access to personal information on a need-to-know basis.
- Regular staff training on privacy and security.
- Retention periods vary based on legal and operational requirements.
Our security practices comply with Australian Privacy Principle 11 (security of personal information). While we strive to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Rights and Choices
You have the right to request access to the personal information we hold about you, to request correction of inaccurate information, and to request deletion of your information where appropriate. You may also opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.
- Access requests can be made via email or phone. We will respond within 30 days as required by law.
- Correction requests allow you to update inaccurate or incomplete information.
- Deletion requests are honored where appropriate, subject to legal retention obligations.
- Opt-out options are available in every marketing communication.
- Complaints may be lodged with the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response.
To exercise any of these rights, contact us at [email protected] or call +61 3 9639 2471.
International Data Transfers
Some of our service providers may be located outside Australia, and your personal information may be transferred to and stored in other countries, including the United States and European Union member states. We take reasonable steps to ensure that such providers comply with the Australian Privacy Principles and provide adequate protection for your information. We use contractual clauses and other safeguards for international transfers, in accordance with Australian Privacy Principle 8 (cross-border disclosure).
Contact Us
If you have any questions or concerns about this privacy policy or our data practices, please contact our Privacy Officer at the details below. You may also visit our contact page for general inquiries and reservations.
Privacy Contact Information
- Email: [email protected]
- Phone: +61 3 9639 2471
- Address: 18 Sturt Street, Southbank VIC 3006, Melbourne, Australia