Privacy Policy

Who we are

Sampieri Racing is a licensed Victorian bookmaking operation. We hold bookmaker's licence No. BP14000117, issued by the Victorian Gambling and Casino Control Commission (VGCCC).

In this policy, "we", "us" and "our" mean the trustee for the M & P Sampieri Family Trust, trading as Sampieri Racing.

Why this policy applies to us

The Privacy Act 1988 (Cth) contains a small business exemption for businesses with an annual turnover of $3 million or less. That exemption does not apply to us.

Businesses that are "reporting entities" under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) must comply with the Privacy Act in relation to their AML/CTF activities regardless of turnover. A bookmaker providing a designated gambling service is a reporting entity, so we are bound by the Australian Privacy Principles (APPs) whatever our size.

We are also bound by the conditions of our Victorian bookmaker's licence and by the National Consumer Protection Framework for online wagering.

What we collect

We collect only what we need. What that means in practice:

When you apply for an account

• Full legal name, any middle names, preferred name and date of birth
• Residential address, time at that address, and a postal address if different
• Email address and contact telephone number
• Citizenship or residency status, and which identification documents you hold
• Employment status, occupation, gross income range and approximate net assets
• The source of the funds you intend to bet with, and a short description of that source
• An indication of what you could comfortably afford to lose over a year
• Your betting history: experience, turnover, typical stake, frequency, markets, bet types, and accounts you hold with other operators
• Your answers about BetStop registration and any exclusion history
• Whether you have opted in to marketing

If we open an account for you

• Identity verification results and the records our verification provider returns
• Account and settlement details, including the bank account you nominate for settlement. We do not store card numbers.
• A record of every bet placed, and the settlement of each
• Deposit limits you set and any changes to them
• Records of our communications with you, including recordings of telephone calls to our on course betting lines. Calls are recorded so that there is an accurate record of every bet placed and so that a disputed bet can be resolved. You are told at the start of each call that it is being recorded, and if you do not wish to be recorded we cannot accept a telephone bet from you.

Some of this — financial information and information about your betting — is sensitive. We treat it accordingly.

Why we collect it

We collect personal information for four purposes, and no others:

1. To meet our obligations under the AML/CTF Act. We are legally required to verify a customer's identity before providing a designated service, to understand the source of their funds, and to conduct ongoing customer due diligence.
2. To meet the duty of care attached to our licence. We must form a reasonable view that the level of betting proposed is affordable for the person proposing it.
3. To assess your application and operate your account — accepting bets, settling them, applying limits, and contacting you about your account.
4. To meet our other legal and regulatory obligations, including reporting to AUSTRAC and responding to lawful requests from regulators.

If you choose not to give us information we have asked for, we may be unable to assess your application or continue to operate your account. Where information is required by law, we will tell you so.

Identification documents

We verify identity electronically. Our application form asks for the details printed on your driver licence, passport or Medicare card — the document number, its expiry, and where it was issued — and those details are checked against the authority that issued the document.

We do not ask you to send us scans or photographs of your identification, and you should never email them to us. If a check does not return a match we will contact you by telephone to resolve it.

We record the information we verified, the method used and the result. From 31 March 2026, reporting entities are not required to retain copies of identification documents in order to meet their record-keeping obligations, and we do not retain images of documents.

Who we disclose it to

We do not sell personal information. We do not disclose it for anyone else's marketing. We disclose it only where it is necessary for the purposes above or where the law requires it.

Under the AML/CTF Act we are prohibited from telling you if we have made certain reports. Where those "tipping off" provisions apply, we cannot notify you of the disclosure.

Overseas disclosure

Applications submitted through this website are processed by Formspark, operated by Trampoline Software SRL, a company registered in Belgium. Submission data is stored on servers in Ireland and Germany, within the European Economic Area.

This means that when you submit an application, the personal information in it is disclosed to an overseas recipient. We take reasonable steps to ensure that recipient handles your information consistently with the Australian Privacy Principles; Formspark operates under a data processing agreement and is subject to the General Data Protection Regulation, which imposes protections broadly comparable to, and in some respects stricter than, those under Australian law.

The website itself is hosted by Netlify, Inc. in the United States. Netlify does not receive the contents of an application; its servers log ordinary technical information such as IP addresses when a page is requested.

Once we have retrieved an application, it is held by us in Australia — in our email system and in the client records we are required to keep. It is not transferred overseas by us.

Direct marketing

The marketing opt-in on our application form is optional and separate from the application itself. Leaving it unticked has no bearing on whether an application is accepted, and we will not require consent to marketing as a condition of opening an account.

If you opt in, you can withdraw consent at any time by using the unsubscribe link in any message or by contacting us. We will action it promptly and at no cost to you.

We do not offer sign-up bonuses, free bets, referral rewards or other inducements to open or use an account.

How we keep it secure

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. In practice that means:

• applications are submitted over an encrypted connection and stored encrypted at rest;
• access to applications and client records is limited to Mark and Mitchell Sampieri;
• the mailbox and form account that receive applications are protected by strong, unique passwords and multi-factor authentication;
• we do not ask for identification documents by email, and do not store images of them;
• anything held on paper is kept in a locked cabinet; and
• records are destroyed securely once we are no longer required to keep them.

How long we keep it

Retention periods are set largely by law rather than by us.

When personal information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it, we destroy it or de-identify it.

Access and correction

You can ask us for the personal information we hold about you, and you can ask us to correct it if it is wrong. Write to us using the contact details below.

We will respond within a reasonable period, and within 30 days where we can. There is no charge for making a request. If we refuse access or refuse to correct information, we will tell you why in writing and explain how to complain.

In limited cases we may be unable to give access — for example where doing so would reveal information about a suspicious matter report, or would breach the tipping-off provisions of the AML/CTF Act.

Data breaches

We are covered by the Notifiable Data Breaches scheme. If a data breach occurs that is likely to result in serious harm to anyone whose information we hold, we will assess it promptly and, where the scheme requires, notify the affected individuals and the Office of the Australian Information Commissioner.

Complaints about privacy

If you think we have mishandled your personal information, tell us first. Write to accounts@sampieriracing.com and we will acknowledge your complaint within 2 business days and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, or 1300 363 992.

How to contact us

Sampieri Racing
PO Box 2381, Hawthorn VIC 3122
accounts@sampieriracing.com
0412 279 672 · 0493 962 148

Changes to this policy

We may update this policy from time to time. The current version is always available at this address, and the date at the top of the page shows when it last changed. Where a change is significant we will tell account holders directly.