The protection of personal information is important to Moonee Valley Racing Club Inc. (MVRC). MVRC is committed to respecting individual privacy rights and the protection of personal information.

This Privacy Policy sets out how MVRC may collect, hold, use and disclose personal information. By providing your personal information to MVRC, you consent to its collection, storage, use and disclosure in accordance with this Privacy Policy and applicable privacy laws.

WHAT PERSONAL AND SENSITIVE INFORMATION DOES MVRC COLLECT?

Personal Information

Personal information is information or an opinion (including information or an opinion forming part of a database) from which it is possible to determine an individual’s identity.

The information collected by MVRC about a particular person will vary depending on the circumstances of collection. It may include, but is not limited to:

• name; 
• email address; 
• postal address; 
• telephone number; 
• next of kin details; 
• date of birth; 
• gender; 
• occupation; 
• payment and transaction details; 
• driver's licence number; 
• passport number; 
• insurance details; 
• communication history with MVRC; 
• attendance history at Moonee Valley Racecourse or MVRC gaming venues; 
• details about a computer device used to access MVRC websites or Wi-Fi services (including IP address, geolocation data, domain name and browser type); 
• information downloaded from an MVRC website; and 
• details of goods and/or services purchased from MVRC.

Sensitive Information

Sensitive information is a type of personal information that includes information or an opinion about a person's:

• racial or ethnic origin; 
• political opinions; 
• membership of a political association, professional or trade association, or trade union; 
• religious beliefs, affiliations or philosophical beliefs; 
• sexual orientation or practices; 
• criminal record; or 
• health information, genetic information or disability. 

Although unlikely, MVRC may collect sensitive information where reasonably necessary for its functions and activities and where permitted by law.

Where required by law, MVRC will obtain your consent before collecting sensitive information. If you voluntarily provide sensitive information to MVRC, you consent to its collection, use and disclosure in accordance with this Privacy Policy unless you advise otherwise.

HOW DOES MVRC COLLECT PERSONAL AND SENSITIVE INFORMATION?

Information may be collected when you:

1. become a member of MVRC or an MVRC-operated venue (MVRC Venues);
2. purchase goods or services from MVRC or an MVRC Venue;
3. join any customer loyalty or rewards program operated by MVRC;
4. become a member of a racing club, association or other body affiliated with MVRC;
5. subscribe to publications, newsletters or promotional communications;
6. complete an application, consent form, survey, complaint, feedback form or incident report;
7. use one of MVRC's websites, mobile applications or online platforms;
8. access MVRC Wi-Fi services;
9. contact MVRC by telephone, email, post or social media;
10. participate in a competition, promotion, event or activity conducted by MVRC;
11. purchase tickets, hospitality packages, memberships, products or services;
12. apply for employment or volunteer opportunities; or
13. where MVRC is required or authorised to collect information under applicable laws.

Providing information

Depending on the circumstances, some information will be mandatory and some optional.

If you do not provide requested information, MVRC may be unable to:

• provide products or services; 
• process membership applications; 
• administer promotions or competitions; 
• communicate with you; or 
• consider employment or volunteer applications.

Collection from third parties

MVRC may collect personal information from third parties including:

• MVRC Venues; 
• racing and sporting bodies; 
• sponsors and event organisers; 
• service providers; 
• recruitment agencies; 
• emergency service providers; 
• Victoria Police; 
• government authorities; and 
• regulatory bodies. 

MVRC will only collect personal information from third parties where lawful and reasonably necessary.

Information storage and protection

MVRC stores personal information in both electronic and physical formats.

Personal information may be stored in customer relationship management systems, databases and other business systems operated by MVRC or its authorised service providers.

MVRC takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These measures include:

• secure databases; 
• restricted access controls; 
• password protection; 
• network monitoring; 
• security audits; and 
• confidentiality obligations imposed on employees and contractors. 

If an eligible data breach occurs, MVRC will comply with its obligations under the Privacy Act 1988 (Cth), including notification requirements under the Notifiable Data Breaches Scheme.

HOW DOES MVRC USE AND DISCLOSE PERSONAL AND SENSITIVE INFORMATION?

MVRC may use personal information to:

• verify identity; 
• provide products and services; 
• administer memberships and loyalty programs; 
• conduct events and promotions; 
• communicate with members and customers; 
• administer gaming, hospitality and racing operations; 
• respond to incidents and emergencies; 
• manage insurance claims; 
• process payments; 
• comply with legal obligations; 
• improve products and services; and 
• undertake marketing activities where permitted by law.

Direct Marketing

MVRC may use your personal information to provide information about products, services, events, promotions and special offers that may be of interest to you where permitted by applicable law.

You may opt out of receiving marketing communications at any time by:

• clicking the unsubscribe link in electronic communications; 
• contacting MVRC directly; or 
• updating your communication preferences. 

MVRC will action unsubscribe requests within a reasonable period.

Disclosures

MVRC may disclose personal information to:

• MVRC Venues and affiliates; 
• racing and sporting bodies; 
• service providers; 
• marketing providers; 
• IT and cloud service providers; 
• professional advisers; 
• insurers; 
• regulators; and 
• government authorities where required by law.

Overseas Disclosure

MVRC will take reasonable steps to ensure overseas recipients handle personal information in a manner substantially similar to the Australian Privacy Principles where required under applicable law.

MVRC Website and Cookies

When you visit an MVRC website, certain information may be collected automatically, including:

• IP address; 
• browser type; 
• operating system; 
• pages viewed; 
• dates and times of access; and 
• referral websites. 

MVRC may use cookies and similar technologies to improve website functionality, user experience and analytics.

You may disable cookies through your browser settings, although some website functionality may be affected.

Accessing and Correcting Your Information  

You may request access to, or correction of, personal information held by MVRC.

MVRC will respond to requests within a reasonable period and may require proof of identity before providing access.

If MVRC refuses a request, it will provide reasons unless prohibited by law.

RESOLVING PRIVACY ISSUES AND COMPLAINTS

Any privacy-related complaint may be directed to:

MVRC Privacy Officer

PO Box 245
Moonee Ponds Victoria 3039
Email: privacy@mvrc.net.au
Phone: (03) 9373 2222

MVRC will acknowledge receipt of your complaint as soon as reasonably practicable and will endeavour to investigate and respond within 30 days.

If you are not satisfied with MVRC's response, you may contact the Office of the Australian Information Commissioner (OAIC).  http://www.oaic.gov.au/ 

CHANGES TO THIS PRIVACY POLICY

MVRC reserves the right to amend this Privacy Policy at any time. Any updated version will be published on the MVRC website and will take effect from the date of publication unless otherwise stated.