VenuePlay ← Back to site
Privacy

Privacy Policy

Effective date: 21 September 2026

This Privacy Policy explains how VenuePlay, a product of Gflam Group Pty Ltd (ABN 35 679 383 049), trading as VenuePlay ("VenuePlay", "we", "us", "our"), collects, uses, discloses and protects your personal information. It applies to venueplay.com.au and the VenuePlay platform.

We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using our website or signing up, you agree to this policy.

1. Who this policy is about

VenuePlay is a platform sold to venues (pubs, clubs, bowls clubs and similar). Most of the personal information we handle relates to the venue operators and staff who sign up and use the platform. Players who join a game do so from their own phone with a name of their choosing, without creating an account. Anything more a venue asks a player for is optional and is set out in section 2. Clubs may also upload their own members list for a members draw, which is covered in section 2 as well.

2. What we collect

When a venue signs up or enquires

Payment information

Card and payment details are collected and processed directly by Stripe, our payment provider. We do not see or store your full card number. We store the billing status and the Stripe customer and subscription identifiers Stripe returns to us, so we can manage your subscription.

Players

When someone joins a game on their phone, they enter a name to play. They do not create an account and they do not log in.

A venue can also choose to ask joining players for some or all of the following. Every one of these fields is optional for the player, and a game can always be played by giving a name alone:

The venue is the owner of that information, not VenuePlay. Details a player gives are collected for the venue they are playing at, and are held for that venue alone. We hold them on that venue's behalf so the venue can see and export its own list. We do not sell player data, we do not use it to market VenuePlay, and we never pass one venue's players to another venue, to a visiting host, or to anyone else.

Marketing contact only happens where the player has ticked the box, and only from the venue they were playing at. A player who wants to be removed, or wants to know what a venue holds about them, can ask that venue, or contact us at the address in section 14. We will remove their details from that venue's list. Where the venue has already downloaded a copy of its list, we also tell the venue, so that they are removed from that copy too.

Players are told what is being collected and who gets it at the point they are asked, on the join screen itself.

What a player's phone sends us without being asked. So that one phone is counted once, and so that a game cannot be flooded or a join forged, we keep a random identifier that the game stores in the player's own browser, and a scrambled (hashed) form of the phone's internet address rather than the address itself. Neither is used for advertising, neither is given to the venue, and both are removed with the rest of the player's details.

Members lists. A club running a members draw can upload its own members list: a member number and a name for each member. Those people may never use VenuePlay themselves. The list belongs to the club, is held for that club alone, is used only to run and record that club's draw, and is never used for marketing by us or shared with anyone else. A member who wants to come off it should ask their club, which can remove them on the spot, or contact us at the address in section 14.

We keep player details for as long as the venue holds an active VenuePlay account. When a venue's account is closed, the details that identify its players and its members (names, email addresses, mobile numbers, postcodes and the identifiers described above) are deleted within 90 days. What remains is anonymous: how many people played on which night, which we keep as a billing record, and anything else we have to keep for tax or legal record-keeping.

Technical information

Like most websites, we automatically collect basic technical data such as your IP address, browser and device type, and pages visited. We use Google Analytics for this. We also run the Meta Pixel on our public pages, which tells Meta that a browser visited us so we can show VenuePlay ads to venues who have looked at the site. It is not on the host console, the venue screens or the player pages, and it is never sent a venue’s player list, anyone’s name or anyone’s email address.

Google Analytics also uses Google’s advertising features. These estimate an age range and a gender for visitors, and recognise the same person across their phone and computer, using the profile Google already holds for people signed in to a Google account. We only ever see this as totals for the whole site, never as an individual, and we never match it to a venue, a host or a player. You can turn it off for yourself at Google’s opt-out page or in your Google ad settings.

3. How we use your information

4. Marketing and your consent

We only send marketing communications where you have agreed to receive them, and every marketing message includes a way to unsubscribe. We handle electronic marketing in line with the Spam Act 2003 (Cth). Opting out of marketing does not stop essential service messages about your account or billing.

5. Who we share it with

We do not sell your personal information. We share it only with the service providers we use to run VenuePlay, and only so they can perform their function for us:

We may also disclose information where required by law, or to protect our rights, safety or property.

6. Overseas disclosure

Some of the providers above store or process data on servers outside Australia (for example in the United States or the European Union). Where this happens we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

7. How we protect your information

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including using reputable providers, encrypted connections and PCI-compliant payment handling through Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. How long we keep it

We keep your personal information while you are a customer and for as long afterwards as we need it for legitimate business and legal reasons, including tax and financial records, which Australian law generally requires us to keep for at least five years.

9. Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong or out of date. Contact us using the details below and we will respond within a reasonable time.

10. Cookies

Our website uses cookies to make the site work and, where enabled, to measure how it is used. You can control or delete cookies through your browser settings, though some parts of the site may not work as well without them.

11. Children

VenuePlay is a business tool intended for venue operators. It is not directed at children and we do not knowingly collect personal information from children.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details below and we will work to resolve it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Changes to this policy

We may update this policy from time to time. The current version will always be posted on this page, with the effective date shown at the top.

14. Contact us

VenuePlay
Gflam Group Pty Ltd · ABN 35 679 383 049
Gold Coast, Queensland, Australia
Email: hello@venueplay.com.au