pokeplus Privacy Policy

Effective: 5 August 2026

Last updated: 25 September 2026

Version: 1.1

1. About this Privacy Policy

POKEPLUSCO PTY LTD (ABN 79 701 573 579) ("pokeplus", "we", "us" or "our") respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

visit pokeplus.co;
create or use a pokeplus account;
purchase or use a pokeplus membership;
purchase or use Poké Balls;
enter a draw or promotion;
use our collection tracking, valuation, grading or other tools;
upload photographs or other content;
communicate with us; or
otherwise use our website, web application, mobile applications or related services (collectively, the "Services").

This Privacy Policy should be read together with our Terms of Service and, when you enter a draw, the applicable Competition Terms.

By using the Services, you acknowledge that we will handle your personal information as described in this Privacy Policy.

Nothing in this Privacy Policy limits any rights you have under applicable privacy or consumer protection laws.

2. Who we are

The Services are operated by:

POKEPLUSCO PTY LTD

ABN 79 701 573 579

Sydney, New South Wales, Australia

Email: hello@pokeplus.co

Website: pokeplus.co

pokeplus is responsible for the personal information it collects and holds through the Services.

3. Who can use pokeplus

pokeplus accounts, memberships and prize draws are intended for people aged 18 years and over.

We do not knowingly allow anyone under 18 to enter a pokeplus prize draw.

If we become aware that we have collected personal information from a person under 18 in circumstances where they were not permitted to use the relevant Service, we may close the account and delete or restrict the information, subject to any legal obligations requiring us to retain it.

If you believe a person under 18 has provided personal information to us, please contact hello@pokeplus.co.

4. Personal information we collect

The information we collect depends on how you use pokeplus.

4.1 Account and identity information

When you create or maintain an account, we may collect information including:

first and last name;
display name or username;
email address;
telephone number;
date of birth or confirmation that you are at least 18;
country, state, territory or region of residence;
delivery or postal address;
account credentials and authentication information;
profile information; and
communication preferences.

Your region or country of residence may be required to determine whether you are eligible to participate in a particular draw.

4.2 Membership and transaction information

If you purchase a membership, Poké Balls or another paid service, we may collect information about:

your membership tier;
subscription status;
subscription and renewal dates;
products or services purchased;
Poké Balls credited, purchased, used or remaining;
draw entries;
transaction amounts;
transaction dates;
refunds;
payment status; and
relevant transaction identifiers.

Payments are processed through third-party payment processors such as Stripe.

We do not ordinarily receive or store your complete credit or debit card number. Your payment provider processes that information in accordance with its own privacy and security practices.

4.3 Draw and competition information

When you enter a pokeplus draw, we may collect and process:

your identity;
age;
account details;
jurisdiction or place of residence;
number of entries;
Poké Balls used;
entry date and time;
eligibility information;
winner status;
communications relating to the draw; and
information reasonably required to verify compliance with the applicable Competition Terms.

If you win, we may require additional information to verify your identity, age, residency and eligibility and to deliver your prize.

This may include identification documents where reasonably necessary.

We will only use verification information for legitimate purposes connected with verification, fraud prevention, legal compliance, prize administration and related record keeping.

5. Collection and portfolio information

pokeplus may allow you to build and track a collection of trading cards and other collectible items.

When you use these features, we may collect:

cards or collectibles you add to your collection;
quantities;
purchase prices;
estimated values;
acquisition dates;
notes;
collection history;
watchlists;
favourites;
alerts;
portfolio information; and
other information you choose to record.

We use this information to provide collection tracking, portfolio information, market data, valuation tools, alerts and other features available through the Services.

Your personal collection information is not made public unless a feature clearly allows you to share it and you choose to do so.

6. Photographs and content you upload

You may be able to upload photographs, notes, card images and other content to pokeplus.

We may process that content to provide features you request, including:

identifying cards;
recording cards in your collection;
assessing visible card characteristics;
providing condition or grading estimates;
displaying your collection;
improving image presentation; and
providing other features you choose to use.

You retain ownership of content you upload, subject to the licence contained in our Terms of Service.

We do not use your uploaded private content to train artificial intelligence or machine-learning models.

We also do not sell or licence your uploaded private content to third parties for the purpose of training their artificial intelligence or machine-learning models.

If a pokeplus feature uses automated or artificial-intelligence technology to analyse an image or provide an estimate, the content may be processed by technology providers acting on our behalf where necessary to provide that feature.

Where we use such providers, we take reasonable steps to ensure that information is handled consistently with this Privacy Policy and our contractual requirements.

7. Technical and usage information

When you use the Services, certain information may be collected automatically.

This may include:

IP address;
browser type and version;
device type;
operating system;
device identifiers;
approximate location derived from your IP address;
pages or screens visited;
features used;
date and time of access;
time spent using particular features;
referring websites;
links clicked;
errors and diagnostic information;
application performance information; and
other technical usage data.

We use this information to operate, secure, analyse and improve pokeplus.

8. Cookies and similar technologies

We may use cookies, pixels, local storage, software development kits and similar technologies.

These technologies may help us:

keep you signed in;
authenticate accounts;
remember preferences;
operate essential functionality;
prevent fraud and abuse;
understand how the Services are used;
measure performance;
diagnose technical problems;
improve features;
measure marketing campaigns; and
provide relevant communications or advertising where permitted.

Cookies may be either session cookies, which expire when you close your browser, or persistent cookies, which remain for a specified period.

Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

You can also control certain cookies through your browser or device settings. Disabling some cookies may prevent parts of pokeplus from working correctly.

8.1 Meta advertising measurement

We advertise pokeplus on Meta platforms (Facebook and Instagram). To measure whether those ads work, we use two Meta tools, and we only use them if you have chosen Allow on the cookie notice shown on our public pages. If you have not made a choice, or you chose No thanks, neither tool is used for you.

The Meta pixel runs only on our public pages (the home page, the sign-in and join page, the giveaways and winners pages, and these legal pages). It records that a page was viewed and, when you create an account, that an account was created. It sets Meta cookies in your browser. It does not run on any page you see after signing in, such as your dashboard, collection, portfolio or account pages.

Meta's Conversions API is a server-to-server report. If you allowed measurement and later purchase a membership or Poké Balls, our payment system tells Meta that a purchase occurred, with the amount and currency and a unique event reference so the same purchase is never counted twice. To let Meta match the purchase to the ad you saw, we include your email address in hashed form (a SHA-256 digest, which Meta compares against its own hashed records and does not receive in readable form). We do not send your name, address, date of birth, what you bought, or anything about your collection. Renewals of an existing membership are not reported.

Your choice is stored in your browser (in local storage and a first-party cookie named pk_ads) for up to 12 months. When you start a purchase, the choice recorded in that browser is attached to the payment so that the Conversions API report respects it. If the choice cannot be read, we treat it as No thanks.

You can change your choice at any time using the cookie choices control, which reopens the notice. Withdrawing consent stops the pixel on later pages and stops purchase reporting for later purchases; it does not recall information already sent to Meta. Meta processes this information under its own Privacy Policy, and in relation to measurement acts as our processor for the hashed email and as an independent controller for the data it holds about its own users.

Meta Platforms, Inc. and Meta Platforms Ireland Limited are located outside Australia (see clause 14).

9. Information from third parties

We may receive personal information about you from third parties where necessary to provide or protect the Services.

These may include:

payment processors;
authentication providers;
analytics providers;
fraud-prevention providers;
delivery and logistics providers;
competition administration providers;
customer-support systems;
email and communication providers;
technology and hosting providers; and
business partners.

If we offer account creation or sign-in through a third-party service such as Google or Apple, we may receive information that you authorise that service to provide to us, such as your name, email address and account identifier.

We will only request information reasonably necessary to provide the relevant functionality.

10. How we use personal information

We may use personal information to:

Provide the Services

Create and manage your account, maintain your collection, provide market information, valuations, alerts, grading tools and other pokeplus features.

Manage memberships and payments

Process subscriptions and purchases, administer membership benefits, manage Poké Balls, process renewals, investigate failed or disputed payments and provide refunds where applicable.

Run prize draws

Record entries, determine eligibility, conduct draws, contact winners, verify winners, publish information where required or permitted, arrange prize delivery and comply with Competition Terms and regulatory requirements.

Communicate with you

Send account notices, transaction confirmations, security alerts, membership communications, draw information, service announcements and respond to enquiries.

Improve pokeplus

Analyse how people use the Services, diagnose issues, develop features, improve usability and measure performance.

Protect pokeplus and our users

Detect, investigate and prevent fraud, duplicate accounts, automated entries, draw manipulation, security incidents, misuse and breaches of our Terms.

Comply with the law

Meet legal, regulatory, accounting, taxation, competition, gaming, consumer protection and law-enforcement requirements.

Marketing

With your consent where required, send information about upcoming draws, new features, offers, promotions and pokeplus news.

Business administration

Manage our business, obtain professional advice, enforce agreements, resolve disputes and facilitate legitimate corporate transactions.

11. Marketing communications

If you subscribe to marketing communications, we may send you information about:

upcoming draws;
new prizes;
membership offers;
new pokeplus features;
card and collection tools;
promotions; and
other pokeplus news.

You can unsubscribe from marketing emails at any time using the unsubscribe link contained in the message or by contacting us.

Unsubscribing from marketing does not prevent us from sending necessary service communications, such as payment receipts, security notices, draw-entry confirmations or important changes affecting your account.

We will comply with applicable electronic marketing laws, including Australia's Spam Act 2003 (Cth).

12. When we disclose personal information

We do not sell your personal information.

We may disclose personal information in the circumstances described below.

Service providers

We may provide information to trusted service providers that help us operate pokeplus, including providers of:

cloud hosting;
databases and storage;
payment processing;
email delivery;
customer support;
analytics;
advertising measurement (Meta, only with your consent, as described in clause 8.1);
security;
fraud detection;
authentication;
communications;
prize fulfilment;
shipping and logistics; and
technology infrastructure.

They may only receive information reasonably necessary to perform their services.

Business partners

Where pokeplus provides a partner offer, benefit or integrated service, information may be shared with the relevant partner where necessary to provide that feature or where you have authorised us to do so.

Professional advisers

We may disclose information to lawyers, accountants, insurers, auditors and other professional advisers where reasonably necessary.

Legal and regulatory authorities

We may disclose information where reasonably necessary to:

comply with applicable law;
comply with a court order or lawful government request;
satisfy competition or gaming regulatory requirements;
investigate suspected fraud or unlawful conduct;
protect the rights, safety or property of pokeplus or another person; or
establish, exercise or defend legal claims.

Business transfers

If pokeplus is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and privacy protections.

With your consent

We may disclose information for another purpose where you have expressly authorised us to do so.

13. Winners and public information

If you win a pokeplus draw, certain information may be published where permitted or required by the applicable Competition Terms or law.

This may include your:

display name or first name;
state, territory, region or country; and
prize won.

Where a law or regulatory authority requires additional winner information to be published, we will comply with that requirement.

We may invite you to participate in additional publicity, including photographs, videos, interviews or social-media content.

Additional publicity is voluntary unless the applicable Competition Terms clearly state otherwise and applicable law permits it.

Where we ask separately for your consent, declining that request will not affect your entitlement to a prize you have validly won.

14. International users and overseas disclosure

pokeplus is operated from Australia but may be accessible to people in other countries.

Some of our service providers may store or process personal information outside Australia.

Depending on the providers and services we use, information may therefore be processed in countries other than your country of residence.

Privacy laws in those countries may differ from those applying where you live.

Where required, we take reasonable steps to ensure overseas recipients handle personal information appropriately and use contractual, technical or organisational safeguards appropriate to the circumstances.

If you are located outside Australia, you may also have additional privacy rights under the laws applying in your jurisdiction.

15. Storage and security

We take reasonable technical and organisational measures designed to protect personal information against:

unauthorised access;
loss;
misuse;
interference;
alteration;
disclosure; and
destruction.

Measures may include access controls, authentication, encryption, secure hosting, monitoring, backups and internal security procedures where appropriate.

However, no internet transmission, database or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should contact us promptly if you believe your account has been compromised.

16. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required or permitted by law.

Retention periods may depend on:

whether your account remains active;
the type of information;
membership and transaction history;
draw and competition record-keeping requirements;
taxation and accounting obligations;
fraud and security requirements;
disputes or potential legal claims; and
applicable legal requirements.

When information is no longer reasonably required, we will take reasonable steps to delete, destroy or de-identify it, subject to applicable law and legitimate backup or archival requirements.

17. Accessing, correcting and deleting your information

You may be able to access, update or delete certain personal information directly through your account settings.

You may also contact us at hello@pokeplus.co to request access to or correction of personal information we hold about you.

You may request deletion of your account or personal information.

We will action valid requests where required by applicable law.

We may need to retain certain information after an account is deleted where reasonably necessary to:

comply with law;
maintain financial records;
maintain required competition records;
investigate or prevent fraud;
resolve disputes;
enforce our Terms; or
establish or defend legal claims.

Deleting your account does not necessarily require us to erase information we are legally required or otherwise lawfully entitled to retain.

We may need to verify your identity before actioning a privacy request.

18. Privacy rights for international users

Depending on where you live, you may have additional rights concerning your personal information.

These may include rights to:

access personal information;
correct inaccurate information;
request deletion;
restrict certain processing;
object to certain processing;
withdraw consent;
receive certain information in a portable format; or
complain to your local privacy regulator.

These rights are subject to applicable law and may not apply in every circumstance.

Nothing in this Privacy Policy is intended to remove privacy rights that cannot lawfully be excluded.

19. Third-party websites and services

pokeplus may contain links to websites, applications, offers or services operated by third parties.

We do not control those third parties and their handling of your information is governed by their own privacy policies and terms.

We encourage you to review those policies before providing personal information to them.

20. Data breaches

If a data breach occurs involving personal information we hold, we will investigate and respond in accordance with applicable law.

Where required by Australia's Notifiable Data Breaches scheme or another applicable privacy law, we will notify affected individuals and the relevant regulator.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time as pokeplus, our technology or applicable laws change.

The current version will be published on our website with the date it was last updated.

If we make a material change affecting how we use your personal information, we will provide reasonable notice, which may include email or a prominent notice through the Services where appropriate.

We will not materially change the way we use previously collected personal information in a manner requiring consent without obtaining that consent where required by law.

22. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first at:

hello@pokeplus.co

Please provide enough information for us to understand and investigate your concern.

We aim to acknowledge privacy complaints promptly and respond within a reasonable period.

If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner (OAIC) or another privacy regulator applicable to you.

23. Contact us

For privacy questions, requests or complaints:

POKEPLUSCO PTY LTD

ABN: 79 701 573 579

Location: Sydney, New South Wales, Australia

Email: hello@pokeplus.co

Website: pokeplus.co

Pokémon intellectual property notice

pokeplus is not affiliated with, endorsed by, sponsored by or associated with Nintendo, The Pokémon Company, Creatures Inc., GAME FREAK Inc. or their respective affiliates.

Pokémon names, characters, artwork, card images, trademarks and other intellectual property belong to their respective owners. References to them through the Services are used for identification, informational and collectible-related purposes.