(1) Subject to subregulation (2), a casino operator must not access, use or disclose, or allow another person to access, use or disclose, any information or data collected by a player card for a non‑regulatory purpose.
Penalty: 20 penalty units.
(2) A casino operator may access, use or disclose, or allow another person to access, use or disclose, information or data collected by a player card for the purpose of carrying out a loyalty scheme if the casino operator first obtains the express consent of the person to whom the card is issued.