Kiwi’s Treasure Casino (referred to in this policy as “we,” “us,” or “the Casino”) operates the online gambling platform accessible at kiwitreasure-casino.com. We are the data controller responsible for personal information collected through this website and its associated services.
We are committed to protecting the privacy of all individuals who visit our website or register as players, in accordance with the New Zealand Privacy Act 2020 and internationally recognised data protection principles.
2
What Personal Data We Collect
We collect personal information in several ways — when you register, when you use the platform, and automatically through technical systems. The categories of data we collect include:
👤 Registration Data
Full name, date of birth, email address, residential address, phone number, username, and account password (stored encrypted).
💳 Financial Data
Payment method details, transaction history, deposit and withdrawal records, and NZD balance information. Full card numbers are never stored.
🪪 Verification Data
Identity documents (NZ passport, driver’s licence), proof of address documents, and facial verification data where required by KYC obligations.
🎮 Activity Data
Game history, session duration, wagering activity, bonus usage, responsible gambling limit settings, and self-exclusion status.
🌐 Technical Data
IP address, device type, browser type and version, operating system, referring URLs, pages visited, and time spent on pages.
📩 Communication Data
Records of correspondence with our support team, live chat transcripts, email exchanges, and any complaints or feedback submitted.
Sensitive Data
We may process sensitive data (such as information about financial vulnerability relevant to responsible gambling assessments) only where strictly necessary and in compliance with applicable laws. We apply additional safeguards to all sensitive data categories.
We use the personal information we collect for the following purposes:
✓Account creation and management — to register your account, verify your identity, and maintain your player profile.
✓Processing transactions — to handle deposits, withdrawals, and refunds in NZD securely and accurately.
✓Legal and regulatory compliance — to meet obligations under anti-money laundering (AML) legislation, KYC requirements, and responsible gambling regulations applicable in New Zealand.
✓Responsible gambling monitoring — to enforce deposit limits, self-exclusion requests, and session controls you have set, and to identify signs of problem gambling activity.
✓Customer support — to respond to your enquiries, resolve disputes, and maintain records of communications.
✓Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other illegal activities.
✓Marketing communications — to send you promotional offers, bonuses, and updates about Kiwi’s Treasure, where you have given consent or where we have a legitimate interest. You may opt out at any time.
✓Service improvement — to analyse usage patterns, improve the functionality and design of our platform, and personalise your experience.
✓Technical operations — to maintain, test, and troubleshoot our platform infrastructure, and to ensure system security and reliability.
4
Legal Basis for Processing
We process your personal data on the following legal grounds:
📋
Contractual Necessity
Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, and providing the gambling services you have requested.
⚖️
Legal Obligation
Processing required to comply with New Zealand law, including the Anti-Money Laundering and Countering Financing of Terrorism Act 2009, age verification requirements, and regulatory reporting obligations.
🤝
Legitimate Interests
Processing in our legitimate interests or those of a third party, where not overridden by your interests — including fraud prevention, security monitoring, responsible gambling oversight, and service improvement.
✅
Consent
Where you have given explicit consent — primarily for direct marketing communications. You may withdraw consent at any time by unsubscribing or contacting us, without affecting the lawfulness of prior processing.
5
Sharing Your Personal Data
We do not sell your personal data to third parties. We may share your information only in the following circumstances:
→Service providers and processors: Third-party companies who process data on our behalf — including payment processors, KYC verification providers, fraud detection services, cloud hosting providers, and customer support platforms. All processors are bound by data processing agreements and are required to handle your data securely.
→Regulatory and law enforcement authorities: Where required by New Zealand law, court order, or regulatory request — including reports to the Financial Intelligence Unit (FIU) under AML/CFT obligations.
→Problem gambling support services: Where necessary to comply with responsible gambling obligations — for example, referrals to the Problem Gambling Foundation NZ or registration on multi-operator self-exclusion registers.
→Game software providers: Game providers such as Pragmatic Play and NetEnt may receive limited technical data (session tokens, bet values) necessary to deliver their games. They do not receive personally identifiable information beyond what is technically required.
→Business transfers: In the event of a merger, acquisition, or sale of all or part of the business, your data may be transferred to the successor entity, subject to the same privacy protections.
6
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate, analyse, and improve the platform. A cookie is a small text file placed on your device when you visit our website.
🍪 Strictly Necessary
Required for the website to function. Cannot be disabled. Includes session management, login authentication, and security tokens.
📊 Analytics
Help us understand how visitors use the site — pages visited, session length, and errors encountered. Used to improve performance and usability.
⚙️ Functional
Remember your preferences — language settings, game display options, and responsible gambling tool configurations between sessions.
📣 Marketing
Used to deliver relevant promotions and track the effectiveness of our advertising campaigns. Require your consent and can be refused without affecting core functionality.
You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect your ability to log in or use certain platform features. For full details on cookies we use, please see our Cookie Policy.
We retain your personal data only as long as necessary for the purposes described in this policy or as required by law. Our retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|
| Account & registration data | Duration of account + 5 years | Legal and regulatory |
| Financial & transaction records | 7 years | AML/CFT Act 2009 (NZ) |
| KYC / identity documents | 5 years after account closure | Regulatory obligation |
| Responsible gambling records | Lifetime of account | Player protection |
| Support communications | 3 years | Dispute resolution |
| Technical / log data | 12 months | Security and diagnostics |
After the applicable retention period, data is securely deleted or anonymised so it can no longer be linked to you as an individual.
Under the New Zealand Privacy Act 2020 and applicable data protection law, you have the following rights regarding your personal data:
👁️ Right of Access
Request a copy of the personal data we hold about you. We will respond within 20 working days.
✏️ Right to Correction
Ask us to correct any inaccurate or incomplete information we hold about you.
🗑️ Right to Erasure
Request deletion of your data where we no longer have a legal basis to hold it. Note: some data must be retained to meet regulatory obligations.
🚫 Right to Object
Object to processing based on legitimate interests, including direct marketing. We will stop processing unless we have compelling grounds to continue.
📦 Data Portability
Receive your data in a structured, machine-readable format and transfer it to another controller where technically feasible.
⏸️ Right to Restrict
Ask us to limit how we use your data while we investigate a dispute about its accuracy or the lawfulness of our processing.
To exercise any of these rights, contact us at
[email protected]. We will verify your identity before processing any request. If you are not satisfied with our response, you may lodge a complaint with the New Zealand Office of the Privacy Commissioner at
privacy.org.nz.
9
How We Protect Your Data
We implement technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:
🔐256-bit SSL/TLS encryption on all data in transit between your browser and our servers — the same standard used by major New Zealand banks.
🗄️Encrypted storage of all sensitive data at rest, including passwords (hashed with bcrypt), identity documents, and financial records.
🛡️Access controls — staff access to personal data is strictly limited by role, logged, and reviewed regularly. No employee can access player data without a documented business need.
🔍Fraud detection systems that monitor for unusual account activity, suspicious login patterns, and potential account takeover attempts in real time.
📋Data breach procedures — we have a documented incident response plan. In the event of a breach affecting your rights, we will notify you and the Privacy Commissioner within 72 hours.
While we apply robust safeguards, no internet transmission is completely secure. We encourage you to use a strong, unique password, enable two-factor authentication where available, and keep your login credentials confidential.
10
Third-Party Links and Services
Our website may contain links to third-party websites — including game providers, payment services, and responsible gambling organisations. This Privacy Policy applies only to data processed by Kiwi’s Treasure Casino. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before submitting personal information.
Third-party payment processors (such as Visa, Mastercard, POLi, Skrill, and Neteller) have their own privacy policies and security standards. We do not store complete card numbers on our systems — payment data is tokenised and handled directly by the payment provider.
Game studios supplying our software library may use analytics SDKs to collect aggregated, anonymised gameplay data for performance and fairness monitoring. This data does not include personally identifiable information and is governed by each provider’s own data agreements.
🔞Our services are strictly for persons aged 18 and over.
We do not knowingly collect or process personal data from individuals under the age of 18. Age verification is conducted at registration and during KYC review using identity documents. If we discover that a minor has provided personal data, we will close their account and delete all associated data immediately.
If you are a parent or guardian and believe your child has accessed our platform, please contact us immediately at [email protected] or via live chat. We will investigate and take appropriate action without delay.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:
→Update the “Last Updated” date at the top of this page
→Notify registered players by email where the changes materially affect their rights
→Display a prominent notice on the website for a period following the update
Your continued use of our platform following the effective date of any updated policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our Data Protection team:
📧
Email
Response within 5 business days
💬
Live Chat
Available in your account
24/7 support
🏛️
Privacy Commissioner NZ
privacy.org.nz
External escalation
🛡️ We Take Your Privacy Seriously
Kiwi’s Treasure Casino is committed to transparent, lawful, and fair handling of your personal data. If something in this policy is unclear, please reach out — we are here to help.
