Privacy Policy

This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you access and utilise our online gaming platform, including all associated services, features, and interactive content. We are committed to protecting your privacy in accordance with the Privacy Act 2020 and other applicable New Zealand legislation. This policy was last updated on January 18, 2026, and we encourage you to review it periodically for any changes.

1. Information We Collect

We gather various types of information from our users to provide comprehensive gaming services, ensure regulatory compliance, and enhance user experience. The information we collect may be provided directly by you during registration, account management, or transactions, or it may be collected automatically through your interactions with our platform. This data enables us to verify your identity, process payments, prevent fraud, and deliver personalised gaming experiences tailored to your preferences and jurisdiction.

Data Category	Description	Collection Method
Personal Identification Data	Full name, date of birth, residential address, email address, phone number	Account registration form
Financial Information	Bank account details, credit card numbers, payment method information, transaction history	Payment processing systems
Gaming Activity Data	Betting patterns, game preferences, wager amounts, win/loss records, session duration	Platform tracking systems
Technical Data	IP address, device type, browser information, operating system, cookies, login timestamps	Automatic collection via website
Identity Verification Documents	Passport scans, driver’s license copies, utility bills, proof of address documents	User uploads for KYC compliance

2. Purpose of Data Collection and Processing

We process your personal information for several legitimate purposes that are essential to delivering safe, legal, and enjoyable gaming services. Our data processing activities are grounded in contractual necessity, legal obligation, legitimate business interests, and your explicit consent. Each piece of information serves specific operational, compliance, or marketing functions that contribute to your overall platform experience and our regulatory obligations within New Zealand’s gaming framework.

Account creation, verification, and management
Processing deposits, withdrawals, and financial transactions
Compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations
Prevention of fraud, problem gambling, and illegal activity
Personalisation of gaming content and promotional offers
Customer support and dispute resolution
Statistical analysis and platform improvement
Legal and regulatory reporting obligations
Communication regarding account updates and policy changes
Marketing communications where consent has been provided

3. Legal Basis for Data Processing

Our processing of personal data is undertaken under several established legal grounds recognised by New Zealand privacy law and international standards. We ensure that every processing activity has a legitimate foundation and that users understand why their information is being utilised. We balance the needs of regulatory compliance with your privacy rights, and we never process data beyond what is necessary for stated purposes.

Contract performance: Processing necessary to establish and maintain your account
Legal obligation: Compliance with Gambling Act 2003 and financial regulations
Legitimate interests: Fraud prevention, platform security, and service improvement
Explicit consent: Marketing communications and optional data collection
Public task: Cooperation with regulatory bodies and law enforcement agencies

4. Data Sharing and Third-Party Disclosure

We maintain strict controls over third-party access to your personal information. While we may share certain data with service providers, regulators, and partners essential to operating our platform, we implement contractual safeguards to ensure these recipients maintain equivalent privacy standards. Your information is never sold to unrelated commercial entities for their independent marketing purposes. All third-party disclosures comply with Privacy Act 2020 principles and only occur when necessary for service delivery or legal requirements.

Payment processors and financial institutions for transaction handling
Identity verification service providers for KYC compliance procedures
Responsible gambling organisations for player protection initiatives
Law enforcement and regulatory bodies for legal investigations
Cloud service providers for secure data storage and backup
Customer support platforms for ticketing and dispute resolution
Marketing analytics partners for anonymised statistical analysis

5. Cookies and Automatic Data Collection Technologies

Our platform utilises cookies, web beacons, pixel tags, and similar technologies to enhance functionality, maintain security, and analyse user behaviour. These technologies allow us to remember your preferences, track session information, prevent fraudulent activity, and gather aggregate data about platform usage patterns. You have the ability to control cookie settings through your browser, though disabling certain cookies may limit platform functionality and affect your gaming experience.

Essential cookies: Required for account security and platform operation
Performance cookies: Track analytics and identify technical issues
Targeting cookies: Enable personalised content and promotional recommendations
Third-party cookies: Allow integration with external analytics and advertising platforms
Session management: Maintain login status and prevent unauthorised access

6. Data Retention and Deletion Policies

We retain your personal information for the minimum duration necessary to fulfil stated purposes and comply with legal obligations. Financial data is typically retained for seven years to meet taxation and AML requirements under New Zealand law. Account information remains accessible during your membership but may be archived after account closure. You may request deletion of non-essential data, though certain information must be retained for regulatory compliance, fraud prevention, and legal proceedings. Deletion requests will be processed within thirty days where legally permissible.

Active account data: Retained for the duration of membership and seven years thereafter
Transaction records: Maintained for minimum seven years for regulatory compliance
Identity verification documents: Retained per Gambling Commission requirements
Marketing preferences: Deleted upon request or after two years of inactivity
Cookie data: Automatically cleared based on retention settings (typically three months)
Support communications: Archived for two years following case closure

7. Data Security and Protection Measures

Protecting your personal information against unauthorised access, alteration, and disclosure is a fundamental priority. We implement comprehensive security measures including encryption protocols, firewalls, intrusion detection systems, and regular security audits. All financial data is encrypted using industry-standard SSL/TLS technology during transmission and storage. Our data centres comply with ISO 27001 information security standards, and our staff undergo mandatory security training. However, no security system is impenetrable, and we cannot guarantee absolute protection against sophisticated cyber attacks.

End-to-end encryption for all sensitive data transmission
Multi-factor authentication for account access protection
Regular penetration testing and vulnerability assessments
Restricted employee access on need-to-know basis
Encrypted backups with geographically distributed storage
Continuous monitoring for suspicious activity patterns
Immediate breach notification procedures for regulatory reporting
Annual third-party security audits and compliance certifications

8. Your Privacy Rights and Control Options

Under the Privacy Act 2020, New Zealand residents possess several fundamental rights regarding their personal information. You have the right to request access to data we hold about you, seek correction of inaccurate information, request deletion where appropriate, and obtain portability of your information. You may also opt out of marketing communications, restrict certain processing activities, and lodge complaints with the Office of the Privacy Commissioner. We are committed to fulfilling these requests promptly and transparently, typically within thirty calendar days.

Right of access: Request complete copies of information we hold about you
Right of correction: Ensure your personal data is accurate and up-to-date
Right of deletion: Request removal of personal information where legally permitted
Right of portability: Receive your data in machine-readable format for transfer
Right to object: Withdraw consent or restrict processing activities
Right to lodge complaints: Contact the Privacy Commissioner regarding violations
Marketing opt-out: Unsubscribe from promotional communications at any time

9. Responsible Gambling and Harm Minimisation

Your safety and wellbeing extend beyond data privacy to encompass responsible gaming practices. We collect and analyse gaming behaviour data to identify patterns indicating potential problem gambling. This information helps us implement protective measures such as deposit limits, self-exclusion periods, and reality checks. We share anonymised data with Gambling Commission and responsible gambling organisations to support industry-wide harm minimisation initiatives. Personal gaming data is treated with absolute confidentiality and is never disclosed to third parties for purposes unrelated to responsible gambling protection.

Monitoring excessive betting patterns and session durations
Implementing voluntary self-exclusion and account suspension options
Facilitating referrals to gambling addiction support services
Supporting mandatory responsibility declarations and cooling-off periods
Sharing aggregate, anonymised data with harm minimisation organisations
Maintaining confidential records of player protection interventions

10. International Data Transfers and Jurisdiction

Our platform operates primarily within New Zealand, and your personal data is predominantly stored on servers located within New Zealand or Australia. Where data transfers occur internationally for service provision or regulatory purposes, we implement Standard Contractual Clauses, adequacy decisions, and other safeguards approved by New Zealand authorities. You acknowledge that your information may be accessed by authorised personnel in jurisdictions outside New Zealand when necessary for service delivery. All international transfers comply with Privacy Act 2020 requirements and maintain equivalent protection standards.

Primary data storage in New Zealand or APAC region data centres
Limited international transfers only when operationally necessary
Standard Contractual Clauses for transfers to non-equivalent jurisdictions
Regular audits of international service providers’ security practices
Explicit notification when data will be transferred internationally

11. Policy Updates and Contact Information

We reserve the right to modify this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Substantive updates will be communicated via email notification to your registered address, and your continued platform use constitutes acceptance of revised terms. If you have questions about this policy, require clarification regarding your data, or wish to exercise your privacy rights, contact our dedicated privacy team through the channels listed below. We commit to responding to all privacy inquiries within ten business days.

Privacy inquiries: [email protected]
Data access requests: [email protected]
Complaints and disputes: [email protected]
Responsible gambling concerns: [email protected]
Last updated: January 18, 2026