How long an Australian registered club has to retain incident register entries, AML/CTF records, gaming records, RSA/RCG documentation, payroll, fire safety, and more. With the citations attached, so the answer to “how long do I keep this” lands on a statute, not a guess.
Working reference, not legal advice
Retention periods can vary by record type, jurisdiction, and the specific terms of an obligation. The summary below is a working map. For a definitive view of your club's retention obligations, talk to your lawyer or auditor.
Most of a NSW club's record-retention obligations sit in one of three buckets:
Anything outside those three buckets has a category-specific period — fire safety, food safety, WHS, gaming-machine accounting — usually three or seven years, occasionally longer. The pragmatic default for any record that doesn't obviously fit one of the above is seven years.
Citations are working pointers, not full citations. Check the source statute or your legal adviser for the authoritative interpretation in your context.
Two operational patterns make retention manageable.
One: default to seven years. Where a record sits in any operational compliance surface that touches money, employment, or AUSTRAC reporting, defaulting to a seven-year retention period covers most of the statutory variations and avoids the cost of separately tracking three-year and seven-year buckets. The marginal cost of an extra four years of digital records is near zero; the marginal cost of getting it wrong on the short side is the cost of an enforcement breach.
Two: tie retention to the source-of-truth record.Don't maintain parallel paper-and-digital records with different retention rules. One record per obligation, one retention period, one location. Pointers from related records (an SMR points to the underlying transaction log; an incident register entry points to the welfare-check timestamp; a board pack references the Compliance Report data window) rather than duplicates.
The structural failure mode is having the right records but not being able to find them inside the retention window — an inspector or AUSTRAC reviewer asking for a specific transaction record from four years ago and the club spending two days finding it. The retention obligation assumes accessible-on-request, not just “exists somewhere”.
Three timeframes cover most of the surface. Three years for the L&GNSW incident register (s 72L(5)). Seven years for AML/CTF records (AML/CTF Act 2006 (Cth) — different sections for different record classes, see below) and for ASIC/financial records under the Corporations Act. Ongoing for active records like the self-exclusion register, current licence and conditions, and current employee certifications. Outside those three buckets there are a handful of category-specific timeframes — payroll, fire safety, food safety — that vary by jurisdiction and obligation.
At least three years from when the record was made, under Liquor Act 2007 (NSW) s 72L(5). The register itself is a continuous record; the three-year retention applies to each individual entry. The incident-register obligation is triggered for licences that authorise sale or supply of liquor after midnight on a regular basis (s 72L(1)), and the register must be available to police or inspectors on request (s 72L(4)). Practical pattern: keep the current register active and rolling, and archive entries older than three years for at least a further period in case they're requested for audit or litigation. Many clubs retain seven years to match AML retention.
Seven years across all AML/CTF record classes, but under different sections of the AML/CTF Act 2006 (Cth) with different start clocks: transaction records under s 107(3) — seven years from the day the record is made; customer-provided transaction documents under s 108 — seven years after the document is given; customer-due-diligence records under s 111(2) — seven years after the business relationship ends (or the occasional transaction completes); AML/CTF program (Part 1A) records under s 116(3) — seven years after the record is no longer relevant to Part 1A compliance. Independent-evaluation reports and AUSTRAC correspondence sit in the program-records class (s 116).
The active register is continuous — a participant must be prevented from withdrawing from the scheme within six months after requesting participation (Gaming Machines Regulation 2019 (NSW) cl 45(f)). Section 49 of the Gaming Machines Act 2001 (NSW) requires the venue to ensure patrons have access to a self-exclusion scheme and to publicise it; the scheme's minimum requirements (including the 6-month non-withdrawal period) sit in the Regulation, not in s 49 itself. Records of completed orders (after the exclusion period ends or the order is revoked) are retained per the venue's broader record-retention policy. Refusal-on-entry logs and self-exclusion-check evidence — the records that demonstrate the venue is actually enforcing the scheme — should be retained at least three years to match the incident register, and seven years is a common policy-level default. The MVSE (Multi-Venue Self-Exclusion) scheme operates on its own retention schedule managed by the scheme administrator.
The general baseline under Gaming Machines Regulation 2019 (NSW) cl 143 is three years for records required under the Act or Regulation, unless a specific provision sets a longer period. Hours of operation logs, jackpot records, gaming-machine accounting records, and central monitoring system data each have specific provisions in the Act or Regulation that may require longer retention. The practical operational default for many NSW clubs is to retain anything that touches money or could be relevant to an AML/CTF inquiry for seven years (matching the AML/CTF Act record-keeping periods), and to keep purely operational records like maintenance logs for the cl 143 three-year minimum.
While the staff member is employed and for a reasonable period after — typically the same period the venue retains other employment records (Fair Work Act regime: seven years for most). The certifications themselves are checkable in real time via the Service NSW database, but the venue's record of having sighted current cards (the manager's compliance evidence) needs to be retained per the broader employee-records regime. Don't rely on Service NSW to retain certifications for you; keep your own evidence.
Seven years under s.535 of the Fair Work Act 2009 (Cth), and similarly under ATO record-keeping requirements. Payroll, superannuation contributions, leave records, and employee tax records all run seven years. This is one of the cleanest retention periods because it doesn't vary by state or by industry — it's a flat-rate Commonwealth obligation.
Fire safety statements and AFSS records under the Environmental Planning and Assessment Act 1979 (NSW) — typically retained for the life of the building plus a reasonable period; annual fire safety statements specifically run seven years. Food Authority records under the Food Act 2003 (NSW) — typically three years from the date the record was made. WHS records under the Work Health and Safety Act 2011 (NSW) and Regulation 2017 — varies by record type: incident notifications five years, hazardous chemical records varies, training records typically until the worker leaves plus seven years. The practical default for most clubs is seven years across all WHS-adjacent records.
The single unified AML/CTF programme (Act s.26B post-reform) — risk assessment, policies, and AMLCO designation.
Gaming Machines Act 2001 (NSW) s 49 ↗ requirements, MVSE coordination, refusal-on-entry obligations.
What inspectors ask for first, where findings cluster, how to prepare in advance.
Retention works when the records are findable inside the window. The shape of compliance work shifts when every obligation links to where its evidence actually lives. First three months free, no card up front.