Cookie Policy
Last updated: 1 July 2025
This Cookie Policy explains how , registered at , operating the hotel-casino website for Xenurilodgehaven (Mildura), uses cookies and similar tracking technologies when you visit our website. It describes what these technologies are, why we use them, and your rights to control our use of them.
This Cookie Policy should be read together with our Privacy Policy, which provides further detail about how we collect, use, and protect your personal information.
If you have any questions about our use of cookies, please contact us at privacy@xenurilodgehaven.com.
1. What Are Cookies?
Cookies are small text files that are placed on your computer, smartphone, tablet, or other internet-enabled device when you visit a website. They are widely used to make websites work, or work more efficiently, as well as to provide reporting information to website operators.
Cookies set by the website owner (in this case, ) are called first-party cookies. Cookies set by parties other than the website owner are called third-party cookies. Third-party cookies enable third-party features or functionality to be provided on or through the website (such as advertising, interactive content, and analytics).
Cookies can be session cookies (which are deleted when you close your browser) or persistent cookies (which remain on your device for a set period of time, or until you delete them). In addition to cookies, we may also use similar tracking technologies such as web beacons, pixel tags, local storage, and scripts for similar purposes.
2. Why Do We Use Cookies?
We use cookies and similar technologies for a number of reasons, including to:
- Ensure the website functions correctly and securely;
- Remember your preferences and settings;
- Understand how visitors interact with our website and improve its performance;
- Deliver relevant advertising and marketing communications;
- Analyse the effectiveness of our marketing campaigns; and
- Comply with legal and regulatory obligations applicable to hotel-casino operations in Victoria, Australia.
3. Types of Cookies We Use
We categorise the cookies we use as follows:
3.1 Strictly Necessary (Essential) Cookies
These cookies are essential for the operation of our website. They enable core functionality such as security, network management, user authentication, and accessibility. Without these cookies, services you have asked for cannot be provided. Because these cookies are strictly necessary, they do not require your consent under applicable law; however, you can disable them via your browser settings (see Section 5), though this may affect your ability to use the website.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Bot management and security — distinguishes between humans and automated bots to protect the website from malicious traffic. | First-party (set by Cloudflare on our behalf) | 30 minutes |
| cf_clearance | Cloudflare | Stores the result of solving a CAPTCHA challenge so users are not repeatedly prompted during their session. | First-party (set by Cloudflare on our behalf) | 1 year |
| __cfruid | Cloudflare | Identifies trusted web traffic and is used for rate limiting and DDoS protection. | First-party (set by Cloudflare on our behalf) | Session |
| XNLH_session | Maintains your logged-in session as you navigate between pages (e.g., room booking portal, loyalty account). | First-party | Session | |
| XNLH_csrf | Protects against Cross-Site Request Forgery (CSRF) attacks when you submit forms on our website. | First-party | Session | |
| cookie_consent | Stores your cookie consent preferences so we do not repeatedly display the cookie banner. | First-party | 12 months |
3.2 Analytics and Performance Cookies
These cookies allow us to recognise and count the number of visitors to our website, and to understand how visitors move around the website when they are using it. This helps us improve the way our website works — for example, by ensuring that users find what they are looking for easily. All information collected by these cookies is aggregated and therefore anonymous unless you have created an account with us.
These cookies are only placed on your device with your consent. You may withdraw your consent at any time (see Section 5).
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _ga | Google Analytics (Google LLC) | Registers a unique ID used to generate statistical data on how visitors use the website. | Third-party | 2 years |
| _ga_[container] | Google Analytics (Google LLC) | Used by Google Analytics 4 to persist session state and measure user interactions at a granular level. | Third-party | 2 years |
| _gid | Google Analytics (Google LLC) | Registers a unique ID used to generate statistical data on how visitors use the website. | Third-party | 24 hours |
| _gat | Google Analytics (Google LLC) | Used to throttle the request rate — limits data collection on high-traffic sites. | Third-party | 1 minute |
| _gac_[container] | Google Analytics / Google Ads (Google LLC) | Contains campaign-related information for the user. Used to link advertising data with analytics data. | Third-party | 90 days |
3.3 Marketing and Advertising Cookies
These cookies are used to make advertising messages more relevant to you and your interests. They also help limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns. They are usually placed by advertising networks with the website operator's permission.
Please be aware that our website is operated by a licensed hotel-casino and, in compliance with responsible gambling regulations in Victoria, we take care to ensure that our marketing cookies do not target individuals who have self-excluded from gambling services.
These cookies are only placed on your device with your consent. You may withdraw your consent at any time (see Section 5).
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _fbp | Meta Platforms, Inc. (Facebook Pixel) | Used by Facebook to deliver a series of advertisement products such as real-time bidding from third-party advertisers. | Third-party | 3 months |
| _fbc | Meta Platforms, Inc. (Facebook Pixel) | Stores last click attribution information from Facebook ads when the user clicks a Facebook ad and lands on the website. | Third-party | 2 years |
| fr | Meta Platforms, Inc. | Used by Facebook to show relevant advertisements and measure their effectiveness by tracking user behaviour across websites. | Third-party | 3 months |
| _gcl_au | Google LLC (Google Ads / Conversion Linker) | Used by Google AdSense and Google Ads to experiment with advertisement efficiency across websites using their services. | Third-party | 3 months |
| IDE | Google LLC (Google Display Network / DoubleClick) | Used to register and report the website user's actions after viewing or clicking one of the advertiser's advertisements for the purpose of measuring the efficacy of an ad and presenting targeted ads. | Third-party | 13 months |
| NID | Google LLC | Registers a unique ID to remember your preferences and other information such as preferred language, number of search results, and activation of SafeSearch for personalised Google advertising. | Third-party | 6 months |
| _pin_unauth | Pinterest, Inc. (Pinterest Tag) | Used by Pinterest to track usage of services, and measures the effectiveness of advertising campaigns on Pinterest. | Third-party | 1 year |
3.4 Functionality Cookies
These cookies allow our website to remember choices you make (such as your language preference, currency, or booking search criteria) and provide enhanced, more personalised features. They may also be used to provide services you have asked for. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| XNLH_lang | Stores your preferred language setting for the website. | First-party | 12 months | |
| XNLH_booking_pref | Remembers your recent room and package search criteria so you can resume your booking journey easily. | First-party | 30 days |
4. Third-Party Services and Their Privacy Policies
Some cookies on our website are set by third-party service providers. We do not control the placement or use of cookies by these third parties and encourage you to review their privacy and cookie policies directly:
- Cloudflare, Inc. — Security and content delivery network provider. Cloudflare Privacy Policy
- Google LLC — Analytics, advertising, and technology services (Google Analytics, Google Ads, DoubleClick). Google Privacy Policy | Google Analytics Opt-Out
- Meta Platforms, Inc. — Social media and advertising services (Facebook Pixel). Meta Privacy Policy
- Pinterest, Inc. — Social media and advertising services (Pinterest Tag). Pinterest Privacy Policy
We are not responsible for the content or privacy practices of these third-party websites or services.
5. How to Manage and Control Cookies
You have several options to manage, control, or opt out of cookies:
5.1 Our Cookie Consent Banner
When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies (analytics, marketing, and functionality cookies). You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of our website.
5.2 Browser Settings
Most web browsers allow you to control cookies through their settings preferences. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Please note that if you disable or refuse cookies, some parts of our website may become inaccessible or may not function properly.
For more information on how to manage cookies in your browser, please visit the relevant support pages:
5.3 Opt-Out Tools Provided by Third Parties
You can also opt out of certain third-party tracking and advertising cookies by using the following tools:
- Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Google Ads Personalisation Settings: https://adssettings.google.com
- Meta (Facebook) Ad Preferences: https://www.facebook.com/ads/preferences
- Your Online Choices (European Interactive Digital Advertising Alliance): https://www.youronlinechoices.com
- Network Advertising Initiative (NAI) Opt-Out: https://optout.networkadvertising.org
5.4 Do Not Track
Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Our website does not currently respond to DNT signals as there is no agreed standard for how websites should respond to such signals. However, you may use the other opt-out methods described above.
6. Your Consent
In accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as other applicable Australian privacy and electronic communications regulations, we will only set non-essential cookies (analytics, marketing, and functionality cookies) on your device where you have given your informed consent.
When you visit our website for the first time, our cookie consent banner will ask you to either accept or customise your cookie preferences. By clicking "Accept All Cookies", you consent to the use of all categories of cookies described in this policy. By clicking "Reject Non-Essential Cookies" or selecting specific categories, only the cookies you have consented to will be set.
You may withdraw your consent at any time by accessing the "Cookie Settings" link in the footer of our website, or by following the instructions in Section 5. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdrew your consent.
Strictly necessary cookies are set on the basis of our legitimate interest in operating a secure and functional website and do not require your consent.
7. Data Transfers
Some of our third-party cookie providers (including Google LLC and Meta Platforms, Inc.) are based outside of Australia, including in the United States of America. Where data collected through cookies is transferred internationally, we take steps to ensure that appropriate safeguards are in place in accordance with the Australian Privacy Principles, including by relying on privacy frameworks and data processing agreements entered into with those third-party providers.
For further information about international data transfers, please refer to our Privacy Policy.
8. Responsible Gambling and Cookie Use
Xenurilodgehaven operates as a licensed hotel-casino in Mildura, Victoria. In accordance with our obligations under Victorian gambling regulations and our commitment to responsible gambling, we apply specific controls to our marketing cookie usage. In particular:
- We do not use marketing cookies or advertising pixels to target gambling-related promotions at individuals who have registered on self-exclusion schemes.
- We do not use cookies to collect or process information relating to gambling activity for marketing purposes in a manner that would be inconsistent with applicable regulatory requirements.
- All gambling-related marketing carried out via cookie-enabled channels complies with the Gambling Regulation Act 2003 (Vic) and directions issued by the Victorian Gambling and Casino Control Commission (VGCCC).
If you have concerns about our use of cookies in connection with gambling-related marketing, please contact us at privacy@xenurilodgehaven.com.
9. Retention of Cookie Data
The duration for which each cookie stores data is specified in the tables in Section 3. In general:
- Session cookies are deleted automatically when you close your browser.
- Persistent cookies remain on your device until they expire (as listed in the tables above) or until you delete them via your browser settings or our Cookie Settings tool.
Where cookie data feeds into our own internal analytics or reporting systems, that data is retained in accordance with the data retention periods set out in our Privacy Policy.
10. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date at the top of this policy.
Where we make material changes to this Cookie Policy, we will take reasonable steps to notify you, including by displaying a prominent notice on our website or by sending you an email notification if you have provided us with your contact details. We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies.
11. Contact Us
If you have any questions, concerns, or complaints about this Cookie Policy or our use of cookies and similar technologies, please contact us:
- Legal Entity:
- Registered Address:
- Privacy Email: privacy@xenurilodgehaven.com
If you are not satisfied with our response, you may have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001, Australia