burger icon
Kiwis Treasure Casino New Zealand
Log In

Privacy Policy

This Privacy Policy explains how kiwis-treasure-casino-new-zealand, operating exclusively via kiwis-treasure-nz.com, collects, uses, discloses, and protects personal information of players and visitors in compliance with New Zealand law and international standards. The policy applies to all users of the website and services as of 6 November 2025.

Who We Are

OBSERVE: Identification of legal operator and key contact details is mandatory for transparency and compliance under the New Zealand Privacy Act 2020 and international data protection frameworks.

  • Operator: kiwis-treasure-casino-new-zealand, a Limited company and a subsidiary of Super Group.
  • Legal Address: La Corvee House, La Corvee, Alderney, Channel Islands, GYP 3TQ.
  • Registration: Company registration number not specified; Remote Gambling (Casino) License No. 155 C1, valid through 2025, issued by Alderney Gambling Control Commission (AGCC).
  • eCOGRA Certification: Fair Gaming & RNG Certification.
  • Data Protection Contact (DPO): Sophie McKenzie
    Email: support@kiwis-treasure-nz.com
    Website: https://kiwis-treasure-nz.com
    Live Chat: Help Centre Live Chat

REFLECT: All contact routes are consolidated for efficient resolution of privacy matters.

What Personal Data We Collect

OBSERVE: Comprehensive identification and description of data categories is required by NZ Privacy Act and international standards.

  • Personal Data: Full name, date of birth, residential address, email address, telephone number.
  • Technical Data: IP address, device information, browser type, operating system, access logs, and geolocation data.
  • Payment Data: Bank account details, credit/debit card information, payment transaction records.
  • Behavioral Data: Betting history, game activity, interaction logs, clicks, account preferences, and responsible gambling indicators.
  • Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party analytical and advertising cookies, device identifiers.

EXPAND: Collection is limited to what is necessary for regulatory obligations and service provision, with all categories reviewed regularly.

Legal Basis for Processing

REFLECT: All processing is justified under New Zealand law and, where applicable, international standards, supporting lawful, fair, and transparent data use.

  1. User Consent: Explicit consent is sought for marketing communications and use of certain cookies. Consent can be withdrawn at any time via account settings or by contacting the DPO.
  2. Contract Fulfilment: Data is required to establish, manage, and operate user accounts, process payments, and provide gaming services as per user agreement.
  3. Legitimate Interests: Necessary for fraud prevention, security monitoring, analytics, service optimization, and ensuring fair gaming operations.
  4. Compliance with Legal Obligations: Data is processed to fulfil KYC (Know Your Customer), AML (Anti-Money Laundering), and regulatory reporting requirements as mandated by AGCC and New Zealand law.

Regional Compliance Note: Special consideration is given to harmonizing NZ Privacy Act requirements with international standards, including the GDPR where applicable.

Purpose of Processing

OBSERVE: Each processing purpose is mapped to legitimate business and legal requirements.

  • Service Provision: To register users, manage accounts, process transactions, and deliver casino services on kiwis-treasure-nz.com.
  • Service Improvement: To monitor performance, analyze usage trends, and enhance user experience.
  • Marketing: To send promotional offers and updates, subject to user consent.
  • Analytics: To evaluate website performance, user engagement, and effectiveness of marketing campaigns.
  • Fraud Prevention & Security: To detect, investigate, and prevent fraudulent or unlawful activity, and ensure the integrity of gaming operations.

EXPAND: All processing purposes are subject to ongoing legal review and user notification upon change.

Disclosure & Sharing

REFLECT: kiwis-treasure-casino-new-zealand maintains strict controls over third-party disclosures, ensuring compliance with NZ and Alderney regulations.

  • Payment Partners: Data may be shared with banks and payment processors for transaction facilitation and fraud checks.
  • Service Providers: Includes IT infrastructure, cloud storage, analytics, and customer support providers who process data under strict contractual obligations.
  • Regulators and Law Enforcement: Disclosure is made as required by law, regulatory inquiries, or court orders to authorities such as AGCC or NZ regulatory bodies.
  • Affiliates and Advertising Networks: With explicit user consent, limited data may be shared for cross-promotional or advertising purposes.

Legal Obligation: All third parties are required to adhere to equivalent data protection standards and subject to regular compliance audits.

International Transfers

OBSERVE: Data may be transferred from New Zealand to Alderney, Channel Islands, or other jurisdictions where service providers are located.

  • Safeguards: Transfers are conducted using Standard Contractual Clauses (SCCs), binding corporate rules, or equivalent mechanisms ensuring an adequate level of protection.
  • Transparency: Users are notified prior to any material change in transfer practices, and may request details of international transfer safeguards at any time.

REFLECT: All transfers are regularly reviewed for compliance with NZ Privacy Act and international data protection standards.

Data Retention

EXPAND: kiwis-treasure-casino-new-zealand implements strict data retention policies in line with regulatory and operational requirements.

  • Personal Data: Retained for the duration of the user relationship plus up to 5 years after account closure or last transaction, to satisfy KYC/AML, tax, and regulatory obligations.
  • Technical and Behavioral Data: Retained for service optimization and security for up to 2 years, unless required longer for regulatory investigations.
  • Cookies and Analytics Data: Stored for up to 2 years, subject to user preference and browser controls.
  • Deletion Criteria: Data is deleted upon expiry of retention period, user request, or when processing purposes have been fulfilled, unless legal obligations require longer retention.

Legal Obligation: All deletions are managed securely in accordance with industry best practices.

Your Rights

REFLECT: kiwis-treasure-casino-new-zealand upholds the rights of users under the NZ Privacy Act 2020 and aligns with relevant GDPR principles.

  1. Access: Users may request confirmation of whether data is held and receive a copy of their data within 30 days, free of charge.
  2. Correction: Users can request prompt correction of inaccurate or incomplete data.
  3. Deletion: Users may request deletion of data where it is no longer necessary or where consent is withdrawn, subject to legal retention requirements.
  4. Restriction: Processing may be restricted if data accuracy is disputed or processing is unlawful but users object to deletion.
  5. Objection: Users may object to processing based on legitimate interests or direct marketing at any time.
  6. Data Portability: Users may receive their data in a structured, commonly used format and have it transmitted to another provider upon request.
  7. Withdrawal of Consent: Users may withdraw consent for marketing or non-essential processing at any time without affecting service provision.
  8. Procedures: All rights can be exercised by contacting the DPO or via account settings; written responses are provided within 30 days.
  9. No Fee Guarantee: All rights requests are processed free of charge unless manifestly unfounded or excessive.

Regional Compliance Note: While Mexican data protection law reference is included for completeness, only NZ and Alderney law is primarily applicable to kiwis-treasure-nz.com users.

Cookies & Tracking Technologies

OBSERVE: kiwis-treasure-casino-new-zealand uses cookies and similar technologies solely for legitimate business purposes.

  • Session Cookies: Necessary for secure navigation and account management; expire when browser is closed.
  • Persistent Cookies: Used for remembering preferences and login, retained for up to 2 years.
  • Third-Party Cookies: Analytics (e.g., Google Analytics), advertising (with consent), and social media integrations.
  • Purposes: Functionality, analytics, advertising, fraud detection.
  • Management: Users may manage or disable cookies via browser settings or dedicated internal cookie controls available in the account dashboard.

REFLECT: Full cookie disclosure and management tools are made available as required under NZ and international law.

Data Security

REFLECT: Security is a core obligation under the NZ Privacy Act 2020 and international standards. kiwis-treasure-casino-new-zealand employs a multi-layered security framework.

  • Encryption: All data in transit is protected with TLS 1.2+; data at rest is encrypted using industry-standard algorithms.
  • Access Controls: Role-based access, multi-factor authentication, and strict user permission management.
  • Security Audits: Regular internal and third-party audits, including compliance reviews for ISO 27001 and SOC 2 where applicable.
  • Incident Response: Dedicated response procedures for potential breaches, with prompt user and authority notifications in accordance with legal requirements.
  • Staff Training: Ongoing privacy and security awareness programs for all personnel.

Legal Obligation: Security measures are regularly reviewed and enhanced to address evolving risks and regulatory changes.

Complaints & Contacts

OBSERVE: kiwis-treasure-casino-new-zealand offers several channels for privacy complaints and inquiries.

  • Contact DPO: Email support@kiwis-treasure-nz.com or use Live Chat for prompt assistance.
  • Complaint Procedure:
    1. Submit your complaint or inquiry via email, live chat, or contact form.
    2. The DPO will acknowledge receipt within 3 business days.
    3. Substantive response will be provided within 30 days, free of charge.
  • Escalation: If unsatisfied, escalate to:

REFLECT: All complaints are handled with professionalism and transparency, following regulatory timelines and escalation protocols.

Updates

OBSERVE: kiwis-treasure-casino-new-zealand maintains version control and transparent update notifications for this policy.

  • Notification Procedures: Users are informed of material changes via email, prominent website banners, and account dashboard alerts.
  • Advance Notice: Minimum of 30 days' notice is provided before significant updates take effect.
  • User Options: Users may object to changes or close their accounts if they do not agree to revised terms.
  • Version Control: This policy is effective as of 6 November 2025. Last updated: 6 November 2025.
  • Changelog: All material amendments are documented and accessible via the website.

REFLECT: Ongoing compliance monitoring ensures all policy changes are communicated in line with regulatory expectations and user rights.