A Legal Guide To ATM Agreements

ATMs can be a smart add-on for hospitality venues, service stations, shopping centres and events - they drive foot traffic and generate a steady stream of surcharge revenue.

Whether you’re an ATM deployer, a venue owner hosting a machine on-site or a supplier in the chain, the commercial success of your ATM operation depends on one thing: a clear, fair and legally sound ATM Agreement.

In this guide, we break down what an ATM Agreement is, the key clauses to include, common negotiation issues, and the wider Australian laws you’ll need to comply with. We’ll also outline the related contracts and compliance steps so you can set things up right from day one.

What Is An ATM Agreement?

An ATM Agreement is the contract that sets out the terms under which an automated teller machine is installed, operated and maintained at a particular location.

It typically involves a venue (the host location) and an ATM operator (sometimes called an independent ATM deployer or IAD). In some structures, the operator supplies the machine and processing, while the venue provides the space, power and internet connection. In others, there may be additional parties, such as a cash-in-transit (CIT) provider, a network processor or the venue itself supplying the cash float.

At its core, the ATM Agreement allocates responsibilities and risk: who supplies and owns the equipment, who replenishes cash, who handles faults, what the revenue share looks like, how long the term runs, and what happens if something goes wrong.

Key Clauses To Include In Your ATM Agreement

Every site and operator is different, but strong ATM Agreements tend to cover the following areas. If a clause below doesn’t fit your model, consider how the underlying risk is otherwise addressed.

1) Site Access, Power And Connectivity

Spell out the host’s obligations to provide safe access during business hours (and after-hours if required), stable power with dedicated outlets, and a suitable data connection (e.g. ethernet or 4G failover). If you rely on the venue’s internet, clarify who pays, acceptable downtime and any backup arrangement.

2) Equipment Ownership, Title And Security

State who owns the ATM, cash cassette and peripherals. If the operator retains ownership but places the machine on the host’s premises, it’s common to protect that ownership with a security interest on the Personal Property Securities Register (PPSR). For operators, registering a perfected security interest reduces the risk of losing the machine if the venue becomes insolvent. If this is new to you, it’s worth understanding what the PPSR is and how it works in practice.

If you take or grant security over the equipment or revenues, consider a dedicated General Security Agreement alongside the ATM Agreement.

3) Revenue, Fees And Settlement

Define the surcharge amount, who sets it, and how it can be changed (including notice requirements and compliance with network rules). Detail any revenue share (fixed amount or percentage), who bears merchant service fees or network costs, and settlement timing into each party’s nominated account. It’s helpful to include a worked example and a right to audit transaction reports.

4) Uptime, Maintenance And SLAs

Uptime drives revenue. Include response times for faults, parts replacement, and routine servicing. Many operators use a separate or embedded Service Level Agreement (SLA) with clear metrics (e.g. respond within 4 hours, fix within 24 hours) and agreed credits if service levels are repeatedly missed.

5) Cash Replenishment And Risk

Specify who supplies the cash float (operator, CIT or host), how often it’s replenished, who is responsible in transit, and who bears the risk of loss or theft at each stage. If the venue manages cash, set minimum cash balances, reconciliation processes and secure storage requirements between replenishments.

6) Compliance, Signage And Customer Notices

Australian ATM operators must disclose direct charges clearly and not mislead customers about fees or availability. Your agreement should require the right on-screen and on-machine notifications, plus any venue signage you need to display to meet Australian Consumer Law (ACL) standards. In practice, many businesses manage this by aligning their policies with the principles in section 18 of the ACL on misleading or deceptive conduct.

7) Data, Security And Privacy

ATMs process sensitive data and often operate in areas subject to CCTV. Clarify who is responsible for data security, compliance with network and industry standards, and retention of logs or footage. If you collect any personal information (for example, for technical support, incident reports or marketing around the ATM site), have a compliant Privacy Policy and ensure the venue’s privacy practices are compatible.

If the site uses surveillance, ensure compliance with relevant security camera laws in Australia, including rules on notice and placement.

8) Term, Exclusivity And Exit

Agree on the term (often 2-5 years), options to renew, and any exclusivity (e.g. no competing ATM within the shopping centre). Include relocation rights if the venue renovates and a fair process for early termination (with removal logistics and any break fee calibrated to unrecovered costs rather than a penalty).

9) Liability, Indemnities And Insurance

Allocate liability for property damage, vandalism, skimming events and cash losses, reflecting who controls the relevant risk. Require appropriate public liability and property insurance, plus fidelity or cash-in-transit cover where relevant. Cap liability reasonably, with carve-outs where appropriate (e.g. fraud, wilful misconduct).

10) Dispute Resolution, Notices And Governing Law

Include a practical dispute process (e.g. good-faith negotiations, escalation to senior reps, then mediation before court), clear notice provisions, and Australian governing law with the relevant state specified.

11) Assignment, Subcontracting And Novation

Decide whether the operator can subcontract maintenance or cash handling and in what circumstances an assignment or novation of the agreement is allowed (for example, on a business sale or network migration). Ensure any subcontracting does not reduce service levels or compliance.

12) Personal Guarantees Or Security

Some operators ask for director guarantees - tread carefully and make sure any guarantee or security is proportionate to the risk and clearly documented. Directors should understand the practical effect of a guarantee and how it interacts with any separate security interest registered on the PPSR.

Who Are The Parties And How Do Their Obligations Differ?

Most ATM arrangements feature the following roles. Your agreement should reflect the real-world responsibilities of each party.

• ATM Operator/Deployer (IAD): Supplies or leases the machine, manages processing, coordinates maintenance, sets surcharge (within network rules) and typically bears uptime obligations.
• Host Venue: Provides floor space, power and connectivity, supports secure placement, allows access for technicians/CIT and promotes user access. May share in surcharge revenue.
• Cash-In-Transit (CIT) Provider (if used): Collects, replenishes and reconciles cash floats. The CIT contract should align with the ATM Agreement on risk, timing and standards.
• Processor/Network: Provides transaction routing and settlement; often contracted separately to the operator.

Make sure the ATM Agreement and any subcontracts (e.g. with CIT or a maintenance vendor) fit together so there are no gaps - otherwise you may promise the venue an SLA your subcontractor isn’t obliged to meet.

Do I Need Any Licences Or Compliance Steps In Australia?

There isn’t a single “ATM licence” for independent ATM deployers in Australia, but you will need to meet a range of legal and industry obligations. Your contracts should build in these requirements so everyone knows their role.

Australian Consumer Law (ACL)

You must display accurate, clear fee information and avoid any conduct that could mislead customers (for example, suggesting the ATM is free when it charges a direct fee). This is anchored in the ACL’s general prohibition on misleading or deceptive conduct - see the principles summarised under section 18. Additionally, on-screen consent to direct charges should be obvious before a transaction proceeds.

Payment Networks And Industry Standards

ATM operators need to comply with their network and processor rules, card scheme obligations and reasonable security standards. While PCI DSS and similar frameworks are industry-driven rather than legislation, many processors require you to follow them under your commercial agreements.

Privacy And Surveillance

If any personal information is collected during incident handling or customer support, ensure your Privacy Policy covers what you collect, why, and how long it’s retained. If CCTV is used in the ATM area, check state-based surveillance and workplace laws as well as local rules on signage and storage, starting with the national overview of security camera laws in Australia.

Work Health And Safety

Venue owners should provide safe access for technicians and CIT staff, including after-hours lighting and incident procedures. Operators should document safe installation and servicing practices to reduce manual handling and electrical risks.

Signage, Placement And Access

Council approvals are rarely needed for indoor ATMs, but do check landlord and centre management rules for common areas, shopfronts and external signage. Your lease or licence should permit the ATM placement and power draw, and the ATM Agreement should dovetail with those rights.

How Should You Structure Your ATM Business And Contracts?

Plan your commercial model early and make sure your legal structure and agreements match it.

Choose A Business Structure

Many ATM operators trade through a company for limited liability and growth flexibility, while some venues host ATMs under their existing business entity. Consider how ownership, tax and risk allocation will work if you’re operating as a sole trader, partnership or company. If you have co-founders or investors, a Shareholders Agreement can clarify roles and decision-making from the outset.

Protect Ownership And Finance Arrangements

If you finance machines or place them at third-party venues, consider registering a security interest on the PPSR to protect your ownership. For broader collateral or funding lines, a lender may require a General Security Agreement over company assets. Ensure your ATM Agreement explicitly recognises any third-party security interests to avoid disputes.

Align Your Subcontracts

Where you rely on maintainers or CIT providers, flow down key obligations (e.g. response times, confidentiality, data security) so your promises to the venue can be met. A well-drafted Service Level Agreement makes it much easier to monitor and enforce performance.

Build Privacy And Security By Design

Even if card data is not stored by you, your business will touch logs, error reports, CCTV and contact details. Have a live Privacy Policy, secure incident reporting processes and a clear division of responsibilities with your processor and venue around data and footage access.

Hiring Technicians Or Support?

If you’re building an in-house team for field services or customer support, make sure each staff member has a tailored Employment Contract and that your policies cover safety, confidentiality and device use when working on-site.

Common Negotiation Issues And Risk Allocation

Here are the topics that most often come up at the bargaining table - and how to approach them.

• Exclusivity And Non-Compete: Venues may want multiple ATMs for redundancy; operators typically seek exclusivity to justify the capital outlay. Consider compromising with minimum transaction guarantees or reasonable exclusivity radius within a centre.
• Minimum Transaction Thresholds: Avoid rigid quotas that punish normal seasonal variance. If used, pair them with data-based review triggers and reasonable cure periods.
• Relocation And Renovations: Venues change. Agree on a process and who pays for relocation, including downtime. Set a cap on operator contributions and define what “comparable location” means to preserve foot traffic.
• Early Termination: Balance flexibility with cost recovery. Transparent break costs (e.g. remaining depreciation on the machine plus reasonable de-install costs) are easier to agree than broad liquidated damages.
• Damage And Theft: Decide who bears risk at each stage - in transit, installed, after-hours. Back this with appropriate insurance and clear incident reporting and cooperation clauses.
• Personal Guarantees: Some operators ask for a director guarantee from smaller venues. If used, limit it to defined obligations (not “all monies”) and explain when it is released (e.g. on expiry and return of equipment).
• Bank Or Landlord Requirements: Shopping centres or landlords may require bonds or evidence of insurance. Build those third-party requirements into the deal timelines so they don’t delay installation.

What Legal Documents Will I Need?

Your exact document suite will depend on your role (operator vs host) and whether you outsource any functions. As a starting point, consider the following:

• ATM Site Agreement: The core contract between the operator and venue covering installation, access, revenue share, service and exit. If you’re the venue, ensure it dovetails with your head lease or centre rules.
• Service Level Agreement (SLA): Either embedded or standalone, an SLA sets clear response and resolution times, reporting and remedies for repeated failures.
• General Security Agreement: If you’re taking or granting security over equipment or receivables, use a robust General Security Agreement and register interests on the PPSR.
• Privacy Policy: If you collect any personal information (support tickets, incident logs, marketing contacts), implement a compliant Privacy Policy and ensure your practices match it.
• Maintenance/CIT Contracts: Where you outsource maintenance or cash handling, align obligations with the ATM Agreement so service levels and risk allocation are consistent.
• Employment And Contractor Agreements: If you use in-house techs or support staff, put clear role descriptions, confidentiality and safety obligations in each Employment Contract or contractor agreement.
• Surveillance Policy And Notices: If CCTV covers the ATM area, ensure signage and retention rules comply with security camera laws in Australia.

Not every business will need every document, but most operators and venues will need several of the above. The right mix depends on your model, scale and risk appetite.

Step-By-Step: Getting Your ATM Agreement In Place

Step 1: Map Your Commercial Model

Decide who owns equipment, who supplies cash, how revenue is shared and who handles maintenance. Put some numbers around expected transactions to test viability.

Step 2: Check Property And Landlord Settings

Confirm the venue has rights to host an ATM at the proposed location, including power access and any required approvals or consents. If you’re the operator, ask to see the relevant lease clauses.

Step 3: Draft The Agreement And Align Subcontracts

Prepare the ATM Agreement reflecting your model. Where you rely on a processor, maintainer or CIT, align those terms - especially SLAs, incident response and data handling - so the pieces work together.

Step 4: Address Security Interests And Insurance

If you’re protecting ownership, register on the PPSR and ensure your agreement acknowledges those rights. Check both parties hold appropriate insurance with evidence before installation.

Step 5: Implementation Plan And Handover

Create a simple installation and go-live checklist: site readiness, connectivity, signage, test transactions, contacts for faults, reconciliation and settlement details. The first week’s run-in is your chance to iron out issues before peak trade.

Key Takeaways

• An ATM Agreement allocates responsibilities for installation, access, uptime, cash management, fees and compliance - get these fundamentals clear upfront.
• Protect equipment ownership and finance arrangements with PPSR registrations and, where appropriate, a dedicated General Security Agreement.
• Use practical service levels to keep machines earning; align your subcontractors with a clear SLA and reporting obligations.
• Comply with Australian Consumer Law when displaying fees and avoid any misleading statements about charges or availability.
• Build privacy and security into your processes, including a compliant Privacy Policy and lawful CCTV practices where relevant.
• Negotiate fair terms on exclusivity, relocation and early termination, focusing on real cost recovery rather than punitive penalties.

If you’d like a consultation on drafting or reviewing your ATM Agreement, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.