Privacy policy
What tibbi collects is a record of a person at their most vulnerable. Leaking it would do real harm, to exactly the people this project says it protects. So this page is specific rather than general.
How we are regulated
tibbi handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Data is stored in Australia. The pilot retention schedule below applies to every account state, including while you are on a mandatory break.
What we hold, why, and for how long
| Type of data | What it is used for | How long we keep it | Anonymised |
|---|---|---|---|
| Account email, display name and sign-in credentials |
Signing in, password recovery and operating your account | Until an approved deletion request is completed or the service closes. At pilot close you may actively choose to keep the service account; no response means deletion by 31 January 2027. Encrypted backups then expire within 30 days | No |
| Age-check record date, declared eligibility and policy version — not your date of birth |
Proving the 18+ control was applied | 7 years from the date of the check, including after account closure | Kept separately |
| Linked pilot research records learning, quizzes, baseline/endline answers, token ledger, simulated bets, runs and break events |
Operating the pilot and measuring knowledge and behaviour change | Operational activity remains with the service account until deletion. The consented research link is revocable until pilot close; it is then removed and the anonymous research copy is kept for 5 years | At pilot close |
| Real-world betting survey (E-37) voluntary answers with no account identifier written |
Measuring self-reported behaviour outside tibbi | Anonymous at the moment it is saved and kept in the anonymous research dataset for 5 years after pilot close. A saved response cannot be identified, exported or withdrawn later | At collection |
| Active break safeguard a one-way account match and scheduled break end |
Preventing account deletion or re-registration from ending a live break early | Only until the scheduled break ends, then deleted | Not used for research |
| Support link taps anonymous totals only; not which person asked for help |
Checking whether support is visible and reachable | Included in the anonymous pilot dataset kept for 5 years after pilot close | At collection |
| Technical security and fault logs truncated IP address, device type, sign-in outcome and system errors |
Security and fixing faults | 90 days | IP truncated |
| Privileged access audit trail authorised staff account, sensitive record, time and reason |
Append-only accountability for restricted admin reads; this is not the technical log above | 12 months | Staff access evidence |
Your rights
See and export. Submit a request from your Profile, re-authenticate, then download the machine-readable file there. The secure link expires after 7 days; tibbi never sends the file as an email attachment.
Delete. Submit a deletion request from your Profile. Account data is removed from live systems when the request is completed and encrypted backups expire within 30 days. A one-way token ledger and append-only safety-control evidence remain without identity. The separate age-check record is retained for 7 years from the date of the check; already anonymous research totals are not account data that can be restored or used to sign in.
Decline. The survey is opt-in. The "I'd rather not answer" button sits alongside the send button, no smaller and no fainter. Baseline/endline research remains linked and withdrawable until pilot close; E-37 is anonymous at save, so a sent response has no identity link that could later be withdrawn.
Turn off notifications. Turning them all off changes nothing else. No feature is locked because you do not accept messages.
What tibbi will never do with your data
- Never sell, rent or trade personal information.
- Never share data with a bookmaker or a gambling advertiser.
- Never use behavioural data for advertising retargeting.
- Never give sponsors individual-level data — they receive group totals about their own campaign only.
- Never use your data to adjust odds or difficulty for you personally.