Privacy Policy
This Privacy Policy outlines how we collect, use, store, and protect your personal information when you access and use our online gaming platform. We are committed to maintaining the highest standards of privacy protection and data security in accordance with New Zealand’s Privacy Act 2020 and applicable gaming regulations. By using our services, you acknowledge that you have read, understood, and agree to the practices described in this policy. Last updated: January 28, 2026.
1. Information We Collect
We collect various types of personal information to provide you with secure and compliant gaming services. The information we gather falls into several categories, each serving specific purposes related to account management, regulatory compliance, and service enhancement.
Personal identification information includes your full name, date of birth, residential address, email address, and phone number. This data is essential for account verification, age confirmation, and compliance with New Zealand gambling legislation. We also collect government-issued identification documents, such as driver’s licenses or passports, to verify your identity and prevent fraudulent activities.
Financial information encompasses payment method details, including credit card information, bank account details, e-wallet credentials, and transaction histories. We maintain comprehensive records of all deposits, withdrawals, and gaming activities to comply with anti-money laundering regulations and ensure responsible gambling practices.
Technical information automatically collected includes:
- IP addresses and geolocation data to verify New Zealand residency
- Device information including browser type, operating system, and mobile device identifiers
- Gaming session data, including games played, bet amounts, and session duration
- Website navigation patterns and user interaction data
- Cookies and similar tracking technologies for personalization and security purposes
2. Purpose of Data Collection
We process your personal information for legitimate business purposes that are essential to operating a licensed online casino in New Zealand. Our primary objectives include ensuring regulatory compliance, maintaining platform security, and delivering personalized gaming experiences while promoting responsible gambling practices.
Account management purposes include user registration, identity verification, age confirmation, and ongoing account maintenance. We use your information to authenticate your identity, prevent unauthorized access, and maintain accurate player records as required by New Zealand gaming authorities.
Regulatory compliance necessitates extensive data collection and retention. We process your information to meet obligations under the Gambling Act 2003, Anti-Money Laundering and Countering Financing of Terrorism Act 2009, and Privacy Act 2020. This includes monitoring gaming patterns, reporting suspicious activities, and maintaining detailed transaction records.
Service delivery and improvement involve using your data to:
- Process deposits, withdrawals, and gaming transactions
- Provide customer support and resolve technical issues
- Offer personalized game recommendations and promotional content
- Implement responsible gambling tools and spending limits
- Enhance platform security and prevent fraudulent activities
- Conduct statistical analysis for service optimization
3. Data Sharing and Third-Party Disclosure
We maintain strict controls over data sharing and only disclose personal information to authorized third parties when necessary for legitimate business operations or legal compliance. All data sharing arrangements include comprehensive confidentiality agreements and security requirements.
Regulatory authorities receive information as required by New Zealand law. We cooperate fully with the Department of Internal Affairs, Financial Intelligence Unit, and other relevant agencies for compliance verification, investigation purposes, and regulatory reporting obligations.
Service providers with whom we share data include payment processors for transaction handling, identity verification services for account authentication, cloud storage providers for secure data hosting, and customer support platforms for service delivery. All third-party providers undergo rigorous security assessments and must comply with equivalent data protection standards.
We may disclose personal information in specific circumstances including:
- Legal proceedings where disclosure is required by court order or subpoena
- Suspected fraud, money laundering, or other illegal activities
- Business transfers, mergers, or acquisitions with appropriate safeguards
- Emergency situations involving threats to personal safety or security
4. Data Security Measures
We implement comprehensive security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security framework combines advanced technology, strict policies, and regular monitoring to maintain the highest protection standards.
Technical safeguards include industry-standard SSL encryption for all data transmissions, secure database storage with encryption at rest, multi-factor authentication systems for account access, and advanced firewall protection against cyber threats. We utilize tokenization for payment data and maintain segregated systems for different data types.
Administrative controls encompass employee background checks, mandatory privacy training programs, role-based access controls limiting data access to authorized personnel only, and regular security audits conducted by independent third parties. We maintain incident response procedures for immediate threat mitigation.
Physical security measures protect our data centers and include:
- Restricted access facilities with biometric authentication
- 24/7 monitoring and surveillance systems
- Environmental controls for equipment protection
- Secure backup and disaster recovery systems
5. Data Retention and Deletion
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and protect our legitimate business interests. Our retention periods align with New Zealand regulatory requirements and industry best practices.
Active account data is maintained throughout your relationship with us and for a minimum period following account closure as mandated by gambling regulations. Transaction records and gaming history are retained for seven years from the date of the last transaction to comply with anti-money laundering requirements.
Identity verification documents are securely stored for the duration required by regulatory authorities, typically five to seven years after account closure. Marketing preferences and communication records are maintained until you withdraw consent or request deletion, subject to regulatory retention requirements.
Automated deletion processes ensure timely removal of data when retention periods expire. However, certain information may be retained longer if required for ongoing legal proceedings, regulatory investigations, or dispute resolution. We conduct regular reviews of stored data to ensure compliance with retention schedules and minimize unnecessary data storage.
6. Your Privacy Rights
Under New Zealand’s Privacy Act 2020, you possess comprehensive rights regarding your personal information. We are committed to facilitating the exercise of these rights while maintaining necessary regulatory compliance and security measures.
You have the right to access your personal information held by us, including the right to request copies of data, understand how information is being used, learn about data sharing arrangements, and review the legal basis for processing activities. We provide detailed responses to access requests within the timeframes specified by law.
Correction rights allow you to request updates to inaccurate or incomplete information. We maintain procedures for verifying and implementing legitimate correction requests while ensuring regulatory compliance and maintaining data integrity for compliance purposes.
Additional rights include:
- Requesting restriction of processing for specific purposes where legally permissible
- Objecting to certain types of data processing, particularly for marketing purposes
- Withdrawing consent for voluntary data processing activities
- Filing complaints with the Privacy Commissioner if you believe your rights have been violated
Certain rights may be limited by regulatory requirements, ongoing investigations, or legitimate business needs. We will clearly explain any limitations and provide alternative solutions where possible.
7. Policy Updates and Contact Information
We regularly review and update this Privacy Policy to reflect changes in regulatory requirements, business practices, and technology developments. Significant changes will be communicated through prominent website notices, email notifications, or account messages, depending on the nature and impact of the modifications.
Minor updates addressing clarifications or administrative changes may be implemented without prior notice, though we will always update the “last modified” date to indicate recent changes. We encourage regular review of this policy to stay informed about how we protect your privacy.
For privacy-related inquiries, data access requests, or concerns about our data handling practices, please contact our dedicated privacy team. We maintain specialized staff trained in privacy law and committed to addressing your concerns promptly and professionally.
Our privacy team can assist with account privacy settings, data access and correction requests, complaint resolution, and general privacy inquiries. We strive to respond to all privacy-related communications within five business days and provide comprehensive resolutions within reasonable timeframes. For urgent matters involving security concerns or suspected data breaches, immediate assistance is available through our customer support channels.
