Privacy Policy

Last updated: 23 February 2026

This Privacy Policy applies to the website national-casino-nz.win (“Website”, “we”, “us”, “our”) and to all related services offered through it (together, the “Services”).

We act as a data controller in respect of personal data processed in connection with your use of the Website and Services. As a provider of online gambling and betting services, we have a legal obligation to process certain personal data in order to:

• provide and administer gambling services;
• comply with anti–money laundering and counter–financing of terrorism (AML/CFT) obligations;
• comply with responsible gambling requirements and other regulatory duties.

By registering an account, using the Services, or otherwise providing personal information through the Website, you:

• acknowledge that you have read and understood this Privacy Policy; and
• consent to the processing of your personal data as described herein, to the extent that such processing is based on consent.

This Privacy Policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (GDPR), as applicable, as well as relevant New Zealand privacy and gambling regulations.

If you have any questions, please contact us at: [email protected].

Information We Collect

We may collect and process the following categories of personal data about you:

1. Identification and Contact Details

• Full name
• Date of birth and age confirmation
• Residential address and country of residence
• Email address
• Telephone number
• Username and account ID
• Copies of identification documents (e.g. passport, driver licence, national ID card)

2. Account and Gambling Information

• Account registration details and preferences
• Login history and session information
• Game activity (e.g. games played, game results)
• Bet history (stakes, odds, outcomes)
• Bonus and promotion participation
• Self-exclusion, time-outs, and responsible gambling limits

3. Financial and Transaction Data

• Payment method details (e.g. partial card numbers, e‑wallet details, bank account identifiers – never full card details where not necessary)
• Deposit and withdrawal records
• Transaction timestamps and amounts
• Currency and payment status
• Chargeback and refund information

4. Technical and Usage Data

• IP address and approximate location derived from IP
• Device identifiers, operating system, browser type and version
• Language settings and time zone
• Log files related to access, errors and security events
• Clickstream data, pages viewed, time spent on the Website
• Referring URLs and traffic sources

5. Verification and Compliance Data (KYC/AML/CFT)

• Identity documents (passport, ID card, driver licence)
• Proof of address (utility bills, bank statements, government letters)
• Source-of-funds or source-of-wealth documentation where required
• Outcome of sanctions, politically exposed persons (PEP) and adverse media checks
• Notes and decisions relating to AML/CFT and responsible gambling assessments

6. Correspondence and Support

• Emails, live chat transcripts, and other communications with our support team
• Records of complaints, requests and queries
• Internal notes related to handling your enquiries

7. Marketing and Preference Data

• Subscription status to newsletters and promotional communications
• Marketing campaign interactions (e.g. email opens, clicks)
• Preferences for specific games, tournaments, or promotions

How We Use Your Information

We process your personal data for the following purposes and legal bases:

• Provision of gambling services

  • Creating and managing your player account
  • Processing deposits, bets, and withdrawals
  • Enabling access to games and tournaments
  • Managing bonuses, loyalty programmes, and promotions
  • Legal bases: performance of a contract; legitimate interests

• Customer support and account management

  • Responding to enquiries and complaints
  • Providing technical assistance
  • Communicating important service updates
  • Legal bases: performance of a contract; legitimate interests

• Compliance with legal and regulatory obligations

  • Verifying your identity and age (KYC)
  • Conducting AML/CFT checks and transaction monitoring
  • Preventing problem gambling and supporting responsible gambling tools
  • Meeting record-keeping obligations for gambling operators
  • Responding to lawful requests from law enforcement or regulators
  • Legal bases: compliance with legal obligations; public interest

• Fraud prevention and security

  • Monitoring for suspicious behaviours, collusion, or bonus abuse
  • Detecting and preventing account takeover or identity theft
  • Ensuring network and information security
  • Legal bases: legitimate interests; compliance with legal obligations

• Service improvement and analytics

  • Analysing site performance and user behaviour
  • Developing and testing new features, products and services
  • Conducting statistical and market research (data used in aggregated or pseudonymised form where possible)
  • Legal bases: legitimate interests

• Marketing and personalisation

  • Sending promotional communications (where permitted)
  • Providing tailored offers, recommendations, and content
  • Conducting surveys and feedback requests
  • Legal bases: consent (where required); legitimate interests

We will not use your personal data for any purpose that is incompatible with the purposes set out above without informing you and, where appropriate, obtaining your consent.

Marketing Communication

We may use your contact details to send you information about:

• new games, tournaments and features;
• special offers, bonuses, and loyalty rewards;
• news, surveys or events related to our Services.

We will only send electronic marketing communications (such as email or SMS) where permitted under applicable law and:

• you have provided consent, or
• we rely on our legitimate interests in marketing similar services to existing customers, in compliance with legal requirements.

You may opt-out of marketing at any time by:

• clicking the “unsubscribe” link in any marketing email;
• adjusting your communication preferences in your account settings (where available); or
• contacting us at [email protected].

Opting out of marketing will not affect transactional or service-related communications that are necessary for your account and gameplay.

Obtaining Personal Information

We collect personal data from various sources:

• Directly from you

  • When you register an account
  • When you play games, place bets, or carry out transactions
  • When you submit documents for verification
  • When you contact customer support or participate in promotions

• Automatically when you use the Website

  • Through cookies and similar technologies
  • Through security and system logs

• From third-party providers and partners

  • Identity verification and KYC service providers
  • Payment service providers and banks
  • Fraud and risk management providers
  • Marketing, analytics and affiliate partners (where applicable)

• From public or regulatory sources

  • Sanctions lists, PEP databases, and other compliance-related sources
  • Publicly available registers and databases where legally permitted

Data Recipients

Access to your personal data is restricted to individuals and entities that require it for legitimate business or legal reasons. These may include:

• Internal recipients

  • Customer support and account managers
  • Payments and finance teams
  • Compliance, AML/CFT and risk management personnel
  • IT, security and technical teams
  • Management, audit and legal teams

• Group companies

  • Other entities within our corporate group that support the provision of Services, subject to appropriate safeguards and intra-group data protection arrangements

Releasing Data to Third Parties

We may share your personal data with third parties in the following circumstances and subject to data protection safeguards:

• Service providers (processors)

  • Payment processors, banks and financial institutions
  • Identity verification and KYC/AML service providers
  • Game and software providers that supply the gaming platform
  • Cloud hosting, data storage and IT support providers
  • Analytics, anti-fraud and security solution providers
  • Marketing and communications service providers (for permitted marketing)

• Regulators and public authorities

  • Gambling regulators and supervisory bodies
  • Financial intelligence units and AML/CFT authorities
  • Police, courts, or other enforcement bodies, where required by law or court order

• Professional advisers

  • Lawyers, auditors, consultants, and insurers, where necessary for the protection of our legal rights and compliance with obligations

• Corporate transactions

  • In connection with a merger, acquisition, sale of assets, restructuring or similar transaction, provided that appropriate confidentiality and data protection measures are in place.

We will not sell your personal data to third parties for their own independent marketing purposes. Any sharing of data outside New Zealand or the EU/EEA will be carried out in compliance with GDPR transfer mechanisms and local legal requirements (for example, using standard contractual clauses or equivalent safeguards).

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, and to comply with our legal and regulatory obligations.

In particular, for AML/CFT and gambling regulatory purposes, we are generally required to retain certain customer and transactional data for a minimum period of five (5) years after:

• the closure of your account, or
• the date of your last transaction with us,

whichever is later, or for such longer period as may be required by applicable laws or regulatory guidance.

After the mandatory retention period has expired and where no longer required for legal, regulatory, or legitimate business purposes, your personal data will be:

• securely deleted or destroyed; or
• anonymised so that you can no longer be identified.

Subject to these legal and regulatory retention obligations, you have the right to request erasure of your personal data, as described below.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, among others:

• Secure account access via unique username and password
• Encryption of data in transit (e.g. HTTPS/TLS) and, where appropriate, in storage
• Firewalls and intrusion detection/prevention systems
• Strict access controls based on roles and “need to know” principles
• Regular security monitoring, logging and incident response procedures
• Secure backup and business continuity arrangements
• Staff training on data protection, confidentiality, and security policies

While we take reasonable steps to protect your data, no system can be guaranteed as completely secure. You are responsible for keeping your login credentials confidential and for immediately notifying us of any suspected unauthorised use of your account.

Your Rights & Contacting Us

Subject to applicable law (including GDPR and New Zealand privacy law), you may have the following rights concerning your personal data:

• Right of access – to obtain confirmation as to whether we process your data and, if so, to receive a copy and information about the processing.
• Right to rectification – to request correction of inaccurate or incomplete data.
• Right to erasure – to request deletion of your data, particularly where it is no longer necessary for the purposes collected, or where you withdraw consent and there is no other legal basis for processing, subject to our legal retention obligations (e.g. 5-year AML/CFT period).
• Right to restriction of processing – to request that we limit the processing of your data in certain circumstances.
• Right to data portability – to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller where processing is based on consent or contract and carried out by automated means.
• Right to object – to object, on grounds relating to your particular situation, to processing based on our legitimate interests, and to object at any time to processing for direct marketing purposes.
• Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time (without affecting the lawfulness of processing carried out before withdrawal).

To exercise any of the above rights or for privacy-related queries, please contact us at:

Email: [email protected]

When you contact us, we may need to verify your identity before handling your request.

You also have the right to lodge a complaint with a data protection or privacy supervisory authority. In New Zealand, this is the Office of the Privacy Commissioner. If you are located in the EU/EEA, you may also contact your local data protection authority.

Cookie Policy

Our Website uses cookies and similar technologies to distinguish you from other users, enhance your experience, and improve our Services. A cookie is a small text file placed on your device when you visit a website.

Types of Cookies We Use

• Essential cookies

  • Necessary for the operation of the Website and core functionality, such as:
    • enabling login and account authentication;
    • maintaining your session while you navigate the site;
    • ensuring security and preventing fraud.
  • These cookies are required for the Website to function properly and cannot be switched off in our systems.

• Functional cookies

  • Enhance your experience and help us remember your preferences, such as:
    • language and region settings;
    • game and display preferences;
    • saved choices and customisation.
  • If you disable these cookies, some features or personalisation options may not work correctly.

• Analytics and performance cookies

  • Collect information about how visitors use the Website, including:
    • pages visited and time spent;
    • error messages;
    • user flows and navigation patterns.
  • We use this data in aggregated form to improve the Website’s performance and usability.

• Advertising and targeting cookies

  • Used to deliver adverts that are more relevant to your interests, and to:
    • limit the number of times you see a particular ad;
    • measure the effectiveness of marketing campaigns;
    • help us and our partners understand user engagement.

Managing Cookies

You can control or delete cookies through your browser settings and, where available, through on-site cookie preference tools. Please note that:

• blocking or deleting essential cookies may impair the functionality of the Website and prevent you from using some Services;
• your cookie preferences are device- and browser-specific.

For more detailed information about cookies used on the Website and how to manage them, please refer to any cookie management interface available on the Website or contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our processing activities, or the Services. Updated versions will be posted on the Website and will take effect from the date indicated at the top of the Policy.