Privacy Policy

MELBOURNE CRICKET ACADEMY INTERNATIONAL

PRIVACY POLICY

Your privacy is important to Melbourne Cricket Academy International Pty Ltd (ACN 697 227 802) and each of its wholly owned or controlled entities operating under the “MCA” or “Melbourne Cricket Academy” brand (MCA). MCA respects your privacy and is committed to protecting your personal information.

MCA will collect, hold and use your personal information in accordance with this Privacy Policy.

In this Privacy Policy, a reference to “MCA”, “we”, “our” and “us” is a reference to Melbourne Cricket Academy International Pty Ltd (ACN 697 227 802) and each of its wholly owned or controlled entities operating under the “MCA” or “Melbourne Cricket Academy” brand.

If you do not provide us with the information that we request, then we may not be able to provide you with our products and services.

What is personal information?

Personal information is information or an opinion, whether true or not, and whether recorded in material form or not, about an individual whose identity is reasonably apparent, or can be reasonably ascertained, from the information or opinion. Examples can include your name, postal address, telephone number and email address.

We collect personal information to properly and efficiently carry out our respective functions, including to provide you with your requested products and services, and to facilitate the provision of marketing and promotion services that may be of interest to you.

The personal information collected and held about you by MCA will vary depending on the circumstances of collection and may include, but is not limited to, the following:

• your name, address, email address, date of birth, gender, occupation, contact information;
• information about your favourite cricket club(s) or team(s);
• information about dealings with MCA, including registrations or subscriptions for MCA services, and attendance at cricket matches or programs or clinics;
• details of cricket programs you have participated in and the organisations you have participated with;
• details of items ordered or purchased from us;
• background checks including police checks and working with children checks if you apply for employment, coaching and volunteer positions at MCA;
• other information provided voluntarily by you, for example in response to surveys or competitions.

How do we collect your personal information?

We collect personal information about you in a number of ways, including:

• directly from you, for example, when you provide information to us by phone, email, in an application form or competition entry form, when you participate in a MCA program or clinic, or submit information through or access our websites; and
• from third parties, such as third party service providers, Cricket Victoria or MCA commercial partners and other commercial data sources and data providers. We may collect personal information regarding a child from the parent or other responsible person associated with that child.

We may also receive information about you from third parties in relation to other websites. For example, you may choose to participate in a third party application or feature as part of our services (such as logging in through Facebook Connect or Google+ or otherwise linking to the services from another website or interactive service) or on a third party website or service (such as a Facebook application or a similar application or feature) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on MCA services with that third party website or service, which may then collect information about your visits to MCA websites and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on MCA websites with your "connections" on the third party's website or service).

The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices with regard to what is visible to others on that third party's website or service. The third party may allow you to remove the application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected. In addition, we may receive information about you if other users of a third-party website or service give us access to their profiles and you are one of their "connections" or information about you is otherwise accessible through your "connections" web page, profile page, or similar page on a social networking or other third-party website or interactive service.

Providing information

If you do not provide some or all of the information that we request from you, this may affect our ability to communicate with you or provide the requested products or services. By not providing requested information, you may jeopardise your ability to attend events, participate in programs or competitions or apply for employment or volunteer positions with us. If it is impracticable for us to deal with you as a result of you not providing the requested information or consent, we may refuse to do so.

If you provide information to us about any person other than yourself, you must ensure that they understand how their information will be collected, used and disclosed as set out in this Privacy Policy and that you are authorised to disclose it to us, and to consent to its use on their behalf, before doing so.

Information storage and protection

We store information in different ways, including in paper and electronic form. When your information is provided to us, the information may be combined or linked with other information held about you.

Security of personal information is important to us. We have taken steps to protect the information we hold from misuse, loss, unauthorised access, modification or disclosure. Some of the security measures we use include strict confidentiality requirements of our respective employees, volunteers, service providers, security measures for system access and security measures for our website.

How do we use your personal information?

MCA may use your personal information for the primary purpose for which it was collected and secondary purposes related to the primary purpose. Such primary and secondary purposes may include, without limitation, use of your personal information to:

• Administer your request to register or participate in MCA programs or clinics, process payment and deal with any permitted refunds or exchanges;
• Provide the services and/or communications you request from us;
• Inform you of important event-related information, for example time or event changes, transport information or related events;
• Investigate and take action in the event the any terms and conditions, local ground regulations or other applicable laws are breached;
• Carry out market research and surveys;
• Track and analyse activity on our websites;
• Understand and respect your preferences and to provide details of relevant offers and opportunities where you have agreed to receive them;
• Verify your identity;
• Where applicable as part of an engagement with MCA, complete background checks and/or working with children checks;
• Develop, run, administer and market competitions, programs, activities and other events relating to cricket and other sports;
• Market products, services, merchandise and special offers made available by MCA or our corporate partners, licensees, suppliers and sponsors;
• Administer and manage our respective websites and provide you with access to those websites;
• Keep you informed of news and information (such as advance notice of ticket sales) relating to cricket and other sports, including by distributing newsletters, publications and other communication via various mediums;
• Research, develop, run, administer and market new competitions, programs, activities and other events relating to cricket and other sports; and
• Research and develop new products, services and merchandise relating to cricket and other sports.

Health and sensitive information

If it is reasonably necessary in the circumstances, or you have elected to provide it, MCA may also collect sensitive information (which is a type of personal information) such as:

• information about your health and medical history; or
• other sensitive information about you (for example, information about your racial or ethnic origin or that of your parents).

Sensitive information is afforded a higher level of privacy protection than other personal information. Where you provide sensitive information to us, you also provide consent to us collecting it in accordance with this Privacy Policy, unless you tell us otherwise.

MCA may use health information about you for insurance purposes and/or to ensure that cricket programs in which you participate are run safely and in accordance with any special health needs you may have. If you do not consent to the collection of your health and sensitive information (and we are not otherwise permitted under law to collect that information) please do not provide your health and sensitive information when prompted to do so.

In addition, we may use de-identified health information and other sensitive information to carry out research, to plan events and activities or to prepare submissions to government or a government body. De-identified information is information which has been aggregated or otherwise de-identified so that it cannot be used to identify you or any other individual.

When do we disclose your personal information?

We may disclose your personal information to:

• MCA;
• Organisations (other than MCA) involved in cricket and sporting programs and initiatives in Australia;
• Companies that we have engaged or used to carry out functions and activities on our behalf, including companies involved in:
  • advertising and marketing our products, services, merchandise and special offers (including social media partners);
  • data aggregation, enrichment, augmentation, processing, analytics and research; and
  • the design, implementation, maintenance and hosting of any database on our behalf;
• Our professional advisers, including our accountants, auditors and lawyers;
• Our insurers;
• Our commercial partners, including our broadcasters (only non-sensitive personal information to be provided);
• Governmental bodies including without limitation the Australian, State & Territory Institutes of Sport, the Australian Sports Anti-Doping Authority and the Australian Sports Commission, the Major Sporting Events Taskforce in the Australian Government’s Department of Health and the Department of Immigration and Border Protection, federal, state and territory law enforcement and security agencies such as the Australian Security Intelligence Organisation, the Australian Federal Police, and State and Territory policing organisations, contracted service providers to the Australian Government, and other entities, government departments and agencies who have responsibilities that interact with Australia hosting an event; and
• Third party service providers.

Our service providers are not authorised by us to use or disclose your personal information except as necessary to perform services on our behalf or to comply with legislation. We may also disclose your personal information for the purposes of safety and security to relevant law enforcement bodies or for the purposes of planning an event including, for example, traffic and transport planning purposes.

Transfer of Information Overseas

We may disclose your information to third party service providers who may be located (and so your personal information may be disclosed) overseas, including in India, the USA and the UK, and other countries from time to time. In such circumstances, we will use our best endeavours to ensure such parties are subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are suitably similar to the Australian Privacy Principles.

Due to the nature of the internet, if you are visiting our website(s) your communications will inevitably result in the transfer of information across international boundaries. In particular, information obtained will be stored by our data hosting provider on dedicated servers located in multiple international jurisdictions. Our data hosting provider offers reliability and security by storing data in high-performance data centres in multiple international locations.

Direct marketing

We will use non-sensitive personal information to provide better services and for marketing purposes.

If you do not wish to receive e-mail, SMS or posted offers from us, you may opt-out by using the link provided. Alternatively, you may advise us at any time that you do not wish to receive e-mail, SMS or posted offers.

Other disclosures

In addition, we may also disclose personal information:

• with your express or implied consent;
• when required or authorised by law;
• to an enforcement body when reasonably necessary; or
• to lessen or prevent a threat to an individual or public health or safety.

Our websites

When you visit MCA websites, our systems may record certain information about your use of those websites (such as which web pages you visit and the time and date of your visit). We use this information to help analyse and improve the performance of our websites.

In addition, we may use “cookies” on MCA websites. Cookies are small text files that help a website to remember your preferences and improve your experience of using that website. Using cookies is standard practice for most large websites. In some cases, the cookies that we use may collect some personal information about you. We will treat this information in the same way as other personal information we collect about you (*This information is subject to this Privacy Policy and will be treated in the same way as other personal information we collect about you). If you prefer, you may be able to disable cookies on your internet browser. However, if you do so, you will not be able to enjoy the enhanced user experience that our cookies offer or gain access to all of the content and facilities in our website.

We may also collect Internet Protocol (IP) addresses relating to you when you access and use the websites. IP addresses are assigned to computers on the internet to uniquely identify them within the global network of computers which makes up the internet. We may collect and manage IP addresses for internet session management and security purposes.

Websites linked to any of the MCA websites are not subject to our privacy standards, policies or procedures. We cannot take any responsibility for the collection, use, disclosure or security of any personal information that you provide to a third-party website.

Accuracy of your personal information

MCA takes all reasonable steps to ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date.

However, we rely on the accuracy of personal information as provided to us both directly and indirectly. You are encouraged to regularly review and update your personal information. If you find that the personal information we hold about you is inaccurate, incomplete or out-of-date, please contact us immediately (our contact details are set out below) and we will take reasonable steps to ensure that it is corrected.

How can you access the personal information we hold about you?

Subject to some exceptions provided by law, you have the right to access your personal information.

For security purposes, if you would like to access personal information that we hold about you, we require you to put your request in writing. If we do not allow you access to any part of the personal information we hold about you, we will tell you why.

We will not charge you for lodging a request to access your personal information, but we may charge you for our reasonable costs in supplying you with access to this information.

Opt-Out/Unsubscribe

You can easily unsubscribe from our communications at any time by contacting us using the contact details specified in this Privacy Policy, accessing the MCA Preference Centre or by following the instructions contained in an e-mail. It may take some time to effect an opt-out or an unsubscribe so you may still receive communications from us for several weeks after your request is received.

For the avoidance of doubt, opting–out or unsubscribing yourself from a mailing list of a MCA product or service will ensure your removal from that particular mailing list but will not guarantee your removal from other mailing lists that MCA may store your details in as a result of your engagement with a different service or product.

Contacting Us

If you would like to access the personal information that MCA holds about you, have any questions in relation to this Privacy Policy or have a complaint, you can contact us using the contact details specified below.

MCA takes all privacy complaints seriously and will investigate your complaint in a confidential manner. You will be informed of the outcome of the investigation within a reasonable period of time.

You can contact MCA by emailing privacy@cricketvictoria.com.au

Alternatively, you can write to MCA’s Privacy Officer at Melbourne Cricket Academy, Junction Oval, Lakeside Drive, St Kilda VIC 3182.

If we are unable to resolve your complaint or you are unhappy with the outcome, you can contact the Office of Australian Information Commissioner via its enquiries line 1300 363 992 or website http://www.oaic.gov.au/ to lodge a complaint.

Changes to this Privacy Policy

From time to time, we may need to change this Privacy Policy to reflect our changing business practices. We will notify you of any amendments by posting an updated version of this Privacy Policy on our website (/privacy-policy). This Privacy Policy was last updated on 2 October 2026.

Rights under the UK Data Protection Act 2018 and General Data Protection Regulation (GDPR)

This section only applies to you if you are using our website(s) or interacting with MCA from the UK or European Union or otherwise benefit from rights as a data subject under the UK Data Protection Act 2018 (GDPR).

Please note for the purposes of this Privacy Policy, MCA is the data controller and is responsible for your personal information collected in connection with this Privacy Policy.

If you wish to exercise any of the rights set out below, please contact us on the details below:

• Emailing: privacy@cricketvictoria.com.au
• Writing to us at: Melbourne Cricket Academy

Junction Oval

Lakeside Drive

St Kilda VIC 3182

If this section applies to you, you may have certain additional rights in relation to our handling of your personal information, including the following rights:

• to request access to your personal information
• to correct your personal information
• to erase your personal information
• to restrict the processing of your personal information;
• to transfer your personal information;
• to object to the processing of personal information;
• to withdraw consent;
• to obtain a copy of personal information safeguards used for transfers outside your jurisdiction; and
• to lodge a complaint with your local supervisory authority.

No Fee Usually Required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

If you wish to access any of these rights, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing personal information to you. We reserve the right to refuse to provide this additional information if your request is manifestly unfounded or excessive.

Time Limit to Respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.

We may not always be able to address your request fully, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

We will take steps to ensure that prior to profiling your information for a legitimate interest, that our legitimate interest is not overridden by your own interests or fundamental rights and freedoms. A legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. If you are a data subject with rights under the GDPR you may have rights to object to us profiling your personal information.

Right to access, correction or erasure of personal information

You have a right to request access to the personal information that we hold on you. You also have the right to request that we correct any inaccurate personal information. We may seek to verify the accuracy of the personal information before rectifying it. You can also request that we erase your personal information in limited circumstances where:

• it is no longer needed for the purposes for which it was collected;
• you have withdrawn your consent (where the data processing was based on consent);
• following a successful exercise of the right to object (see right to object below); or
• it has been processed unlawfully.

We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:

• for compliance with a legal obligation; or
• for the establishment, exercise or defence of legal claims.

Right to restrict the processing of your personal information

You can ask us to restrict your personal information, but only where:

• its accuracy is contested, to allow us to verify its accuracy;
• the processing is unlawful, but you do not want it erased;
• it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
• it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims.

We can continue to use your personal information following a request for restriction, where:

• we have your consent;
• to establish, exercise or defend legal claims; or
• to protect the rights of another natural or legal person.

Right to transfer your personal information

You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller, but in each case only where:

• the processing is based on your consent or on the performance of a contract with you; and
• the processing is carried out by automated means.

Right to object to the processing of your personal information

You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.

If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

Right to withdraw consent

Where we have collected your personal information via consent, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Right to lodge a complaint with your local supervisory authority

You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information.

We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.