The protection of personal information is important to the Victoria Amateur Turf Club (incorporating the Melbourne Racing Club), including its corporate group and related entities, including the Pegasus Leisure Group (theClub). This policy applies to any collection, use, and disclosure of personal information by the Club.
The Club is committed to respecting the right to privacy and the protection of personal information.
This document sets out how the Club may collect, hold and use personal information. By providing your personal information to the Club, you consent to its use, storage and disclosure in accordance with this Privacy Policy.
1.1. Personal Information
Personal information is information or an opinion (including information or an opinion forming part of a database) from which it is possible to determine someone’s identity.
The information collected by the Club about a particular person will vary depending on the circumstances of collection and is limited to information which is reasonably necessary for the Club’s functions or activities. It may include, but is not limited to:
The Club may take (or may arrange another person to take) photographs and electronic images of you whilst at any Club venue (which include racecourses, hotels and clubs). By attending a Club venue, you acknowledge and agree that such photographs and other images are owned by the Club and the Club may use them for promotional, legal or other purposes without your further consent being necessary.
1.2. Sensitive Information
Sensitive information is a type of personal information that also includes information or an opinion about someone’s:
If it is reasonably necessary in the circumstances and permitted by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth), the Club may also collect sensitive information, such as a person’s medical history, nationality, their ethnic background or disabilities.
The Club is required by law to obtain consent when collecting sensitive information. The Club will assume consent to the collection of all sensitive information that is provided to it for use in accordance with this Privacy Policy, unless told otherwise.
2.1. Collection of information
Circumstances in which the Club may collect your information include when you:
2.2. Providing information
Depending on the circumstances, some types of information will be required to be provided to us and some information might be optional. If you do not provide some or all of the information requested, or remain anonymous or use a pseudonym, this may affect the Club’s ability to communicate with you or provide the requested products or services. By not providing requested information, you may jeopardise your ability to participate in programs or services or otherwise interact with the Club, If it is impracticable for the Club to deal with you as a result of you not providing the requested information or consent, the Club may refuse to do so.
2.3. Collection from third parties
The Club may collect personal information regarding a person from a third party where it is unreasonable or impractical to collect that information from the person directly. The Club may collect personal information regarding a child from the parent or other responsible from the person directly. The Club may collect personal information regarding a child from the parent or other responsible person associated with that child. In many circumstances, the Club collects information from other third parties (in accordance with the privacy policies of such third parties). Examples of such third parties could include, without limitation, Racing Victoria Limited, the Tabcorp Group (for the purposes of a reward or loyalty program), government and law enforcement bodies.
2.4. Information storage and protection
The Club stores information in different ways, including in paper and electronic form. The information we collect from and about our members is added to the Club’s membership database. When your information is entered into the Club’s membership database, the information may be combined or linked with other information held about you. We collect information from members via both paper and electronic application forms. Information obtained from non-members in relation may be combined or linked with other information held about you. Information held about you. Information obtained at our venues is added to the Pegasus Leisure Group’s database and/or the respective venue’s database. Additionally, information provided by patrons for our venues’ loyalty programs is collected by the Club and the Tabcorp Group who operate gaming equipment at our venues. Security of personal information is important to the Club. The Club has taken steps to protect the information we hold from misuse, loss, unauthorised access, modification or disclosure. Some of the security measures the Club uses includes strict confidentiality requirements of our employees, volunteers and service providers, security measures for system access and security measures for our various websites.
3.1. Use
The Club, and third parties to whom we may disclose personal information in accordance with this Privacy Policy, may use your personal information to:
3.2. Disclosure
Where permitted by law, the Club may disclose your personal information to a range of organisations which include, but are not limited to:
In some circumstances, personal information may also be disclosed outside of Australia, including where we are contracting with international service providers (for example, one of the Club’s software providers storing personal information is based in New Zealand). In such circumstances, the Club will use its best endeavours to ensure such parties are subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are suitably similar to the Australian Privacy Principles.
3.3. Direct marketing
We will assume consent to use non-sensitive personal information to provide better services and for marketing purposes (including disclosure of such information to service providers) where this complies with the Australian Privacy Principles and the Spam Act 2003 (Cth). Every person whose data is collected by the Club has the option to reduce to receive marketing e-mail, SMS, or posted offers by making a request in writing to the Club’s Privacy Officer via the contact details set out below or by making use of the opt-out procedures included in any communications from us (however, information relating to the option to unsubscribe from those communications may be retained).
3.4. Video Surveillance
Whilst you are at a Club venue, your movements may be subject to video and audio monitoring and recording by security and surveillance systems, including CCTV and facial recognition technology for the purpose of:
3.5. Facial Recognition Technology (FRT)
The use of FRT is strictly aligned with the principles of privacy, transparency, and compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
FRT analyses facial features of individuals entering specific areas within our venues. This analysis is conducted in temporary memory and only for the purpose of identifying matches against predefined databases, such as self-excluded individuals or banned patrons.
No biometric data is stored or retained after the analysis. If no match is found, the data is automatically purged from memory in real-time.
At no point is the facial data linked to an individual’s identity unless a match occurs, and even in those cases, no biometric template is retained by our systems.
Individuals are informed about the use of FRT through clearly visible signage at venue entry points. Additional information about the use of FRT is available upon request.
All data collected and processed is limited to what is necessary to achieve specific safety and compliance objectives.
3.6. FRT – How Data is Stored
Temporary Memory Only: All facial data processed by FRT is held in temporary memory for the sole purpose of conducting real-time comparisons. This data is not stored in any database or retained after processing.
Anonymous Analytics: We may store aggregate, anonymised data for operational insights, such as people counts, gender demographics, and approximate age ranges. This data is fully anonymised and cannot be linked to any individual or facial profile.
3.7 FRT – How Data is Used
Self-Exclusion Compliance: FRT is used to assist in identifying individuals who have voluntarily enrolled in self-exclusion programs or have received formal ban notices.
Operational Insights: Anonymous and aggregate data may be used to optimise venue operations, such as managing crowd density and enhancing service offerings. This data contains no personal or identifiable information.
3.8 FRT – Transparency and Your Rights
We are committed to transparency regarding the use of FRT. If you have questions about how FRT operates or your rights under the Privacy Act, please contact us using the details provided below.
You have the right to understand how FRT is used and the purposes for which data is processed. You may also request additional details about how anonymous data is managed.
3.9 Other disclosures
In addition, the Club may also disclose personal information:
3.10 The Club’s websites
When users visit the Club’s websites, our systems may record certain information about their use of the sites, including the web pages visited and the time and date of their visit. The Club uses this information to help analyse and improve the performance of the Club’s websites. In addition, we may use “cookies” on the Club’s websites. Cookies are small text files that help a website to remember the preferences of users to improve the experience of using that website. In some cases, the cookies that we use may collect some personal information. The Club will treat this information in the same way as other personal information we collect. You are free to disable cookies on your internet browser to prevent this information being collected. Website linked to the Club’s websites are not subject to the Club’s privacy standards, policies or procedures. The Club cannot take any responsibility for the collection, use, disclosure or security of any personal information that you provide to a third party website.
The Club will take all reasonable steps to ensure that the personal information it collects, uses or discloses is accurate, complete and up-to-date. However, we rely on the accuracy of personal information as provided to us both directly and indirectly. We encourage all users to exercise their right to regularly access, review and update their personal information held by the Club. If you would like to access personal information that we hold about you, we require you to put your request in writing to the Club Privacy Officer via the contact details set out below. We will respond to your request for access within 14 days and endeavour to provide the requested information within 30 days. If we do not allow your access to any part of the personal information we hold about you, we will tell you why. If you find that the personal information we hold about you is inaccurate, incomplete or out-of-date, please contact us immediately and we will see that it is corrected.
Any issues or complaints in relation to the collection, use, disclosure, quality, security of and access to your personal information may be made in writing to the Club Privacy Officer at this address:
Legal Counsel
Melbourne Racing Club
PO Box 231
CAULFIELD EAST VIC 3145
Email: privacy@mrc.net.net.au
Phone: (03) 9257 7200
We will respond to your complaint within 30 days and try to resolve it within 90 days. If we are unable to resolve your complaint within this time, or you are unhappy with the outcome, you can contact the Office of Australian Information Commissioner via its enquires line 1300 363 992 or via its website to lodge a complaint. For further information on the Club’s management of personal information, please contact the Club. The Club may amend this Privacy Policy from time to time. Updates will be publicised on our websites.
From time to time, it may be necessary for us to revise this Privacy Policy. Any changes will be in accordance with any applicable requirements under the Australian Privacy Act as well as the Australian Privacy Principles and Information Privacy Principles. We may notify you about changes to this Privacy Policy by posting an updated version on our Platform.
Policy last reviewed 22 September 2025