Privacy Policy

Who We Are and What This Policy Covers

This Privacy Policy applies to Kiwi’s Treasure Casino, operated from 12 Osterley Way, Manukau City Centre, Auckland 2104, New Zealand. When you use our website at https://kiwis-treasure-casino-new-zealand.com/, create an account, make a deposit or withdrawal, use our mobile app, or contact our support team, you are sharing personal information with us. This policy explains what we collect, why we collect it, how long we keep it, who we share it with, and what your rights are under New Zealand law.

We take our obligations under the Privacy Act 2020 seriously. That legislation, which came into force on 1 December 2020 and replaced the Privacy Act 1993, sets out thirteen Information Privacy Principles (IPPs) that govern how organisations operating in New Zealand collect, store, use and disclose personal information. Our practices are built around those principles.

If you have questions about anything in this policy, you can reach our team directly at support@kiwis-treasure-casino-new-zealand.com or by calling +64 9 168 8071.

Information We Collect

We collect personal information through several different channels depending on how you interact with our platform. The categories below cover what we gather and the circumstances in which we gather it.

Information You Provide Directly

When you register an account, we ask for your full legal name, date of birth, email address, residential address, and contact number. This information is required to open an account and is not optional. We collect it because we are obligated under New Zealand’s Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act) to verify the identity of customers before providing gambling services, and to maintain accurate records of those customers throughout the period they remain active with us.

When you make a deposit or request a withdrawal, we collect payment-related information. Depending on your chosen method, this may include card details (Visa or Mastercard), Apple Pay or Google Pay transaction references, or cryptocurrency wallet addresses (Bitcoin, Ethereum, or USDT). We do not store full card numbers on our servers. Card data is handled by payment processors who operate under their own applicable security standards, and we receive only the information needed to complete and record the transaction on our end.

When you contact our support team by email, live chat, or by calling +64 9 168 8071, we collect the contents of that communication, your account details where relevant, and any supporting documentation you provide. We keep records of support interactions to resolve disputes, identify recurring issues, and improve the quality of assistance we provide.

Information Collected Automatically

When you visit our website or use our app, we automatically collect certain technical data. This includes your IP address, the type of device and browser you are using, the pages you visit on our site, the duration of your session, and referring URLs. We collect this data to keep the platform functioning correctly, to detect and prevent fraudulent activity, and to understand how players navigate the site so we can make it easier to use.

We also collect gameplay data. This covers which games you play, how long your sessions last, the amounts you bet, and your win and loss history across those sessions. This data serves several purposes: it is required for regulatory compliance and AML monitoring, it helps us identify patterns that may indicate problem gambling, and it allows us to provide you with an accurate account history at any time.

Identity Verification Documents

Before we process withdrawals above certain thresholds, or at any point where our AML/CFT obligations require it, we will ask you to provide identity verification documents. These typically include a copy of a government-issued photo ID (such as a New Zealand passport or driver licence) and proof of your current residential address (such as a recent utility bill or bank statement). We may also request evidence of your source of funds in certain circumstances. These requirements are not discretionary on our part. They reflect legal obligations that apply to all operators providing gambling services to New Zealand residents.

Why We Use Your Information

We use personal information only for the purposes described below. Where a purpose requires your consent, we will seek it. Where a purpose is required by law, we will explain that clearly.

• Account creation and management. We use your registration details to create and maintain your account, process your deposits and withdrawals, and communicate with you about your account activity.
• Identity verification and AML/CFT compliance. We are required by the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 to verify the identity of our customers, monitor transactions for suspicious activity, and report certain transactions to the relevant authorities. Your identity documents and transaction records are used to meet these obligations.
• Responsible gambling monitoring. We monitor gameplay patterns to identify signs of problem gambling. Where our systems or staff identify behaviour that suggests a player may be experiencing difficulty, we may use your contact information to reach out or to apply responsible gambling measures such as deposit limits or account restrictions. This use of your information is in the public interest and is consistent with our obligations to operate our platform responsibly.
• Fraud prevention and security. We use technical data including IP addresses, device fingerprinting, and session behaviour to detect and prevent fraudulent activity, account takeovers, and abuse of our bonus system. Where fraud is detected, we may share relevant information with law enforcement or regulatory bodies as required.
• Customer support. We use the information you provide when you contact us to investigate and resolve your query, to keep a record of the outcome, and to identify trends in customer issues that we should address at a platform level.
• Legal and regulatory compliance. We use your information to comply with applicable New Zealand law, to respond to lawful requests from regulatory or law enforcement authorities, and to defend our legal position in any dispute.
• Marketing communications. If you have opted in to receiving promotional emails, we will use your email address to send you information about bonuses, new games, and other offers. We will not send you marketing communications without your consent, and you can withdraw that consent at any time by using the unsubscribe link in any marketing email or by contacting us directly. This is consistent with our obligations under the Unsolicited Electronic Messages Act 2007.
• Platform improvement. Aggregated and anonymised data drawn from player activity is used internally to make decisions about the games we add to our library, how we structure our bonus offerings, and how we improve navigation on the site and app.

The Legal Basis for Processing Your Information

Under the Privacy Act 2020, personal information must be collected for a lawful purpose connected to our functions and activities, and only to the extent necessary for that purpose. Each of the uses described above meets that standard.

Where we process information to comply with the AML/CFT Act 2009, that processing is legally required. Where we process information to verify your identity and provide you with gambling services, that processing is necessary to perform our contract with you. Where we process information to detect fraud and protect the integrity of the platform, that processing is in our legitimate operational interest as well as in the broader interest of all players. Where we send you marketing communications, that processing is based on your consent.

We do not use your information for automated decision-making that produces legal effects concerning you without human review. Where our systems flag an account for investigation (for example, under our AML monitoring), a member of our team reviews the flag before any consequential action is taken.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies. A cookie is a small file placed on your device that allows the website to recognise you between visits, remember your preferences, and track certain types of behaviour for analytical and security purposes.

Categories of Cookies We Use

• Essential cookies. These are necessary for the website to function. They enable you to log in, maintain your session while you browse, and use core features of the platform. You cannot opt out of these without preventing the site from working properly.
• Analytics cookies. We use analytics tools to understand how players navigate our site, which pages receive the most traffic, and where users encounter difficulties. The data collected through analytics cookies is aggregated and does not identify you personally. We use this information to make the site easier to use.
• Functional cookies. These remember your preferences such as your preferred language, currency settings, and game display options. They make the experience more convenient but are not essential to the platform’s operation.
• Marketing cookies. These track your activity on our site to help us serve you relevant promotional content and to understand the effectiveness of our advertising. Marketing cookies are only set where you have given consent.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect how parts of our site function. Where your consent is required for non-essential cookies, we will ask for it through our cookie consent tool when you first visit the site.

Sharing Your Information with Third Parties

We do not sell your personal information to third parties. We do share it in specific, limited circumstances described below.

Service Providers

We work with third-party companies who help us deliver our services. These include payment processors who handle card and cryptocurrency transactions, identity verification providers who assist with our AML/CFT checks, cloud infrastructure providers who host our platform, and customer support software providers. These companies process your data on our behalf and are required to handle it in accordance with our instructions and applicable privacy law. They are not permitted to use your data for their own purposes.

Game Providers

Our game library is powered by a range of software studios including Play’n Go, Evolution, Playtech Live, Spribe, PG Soft, BGaming, Evoplay, Ezugi, 3 Oaks Gaming, SmartSoft, Turbo Games, OnlyPlay, Barbara Bang, VoltEnt, Velipay, and 100HP Gaming. When you play a game provided by one of these studios, certain session data (such as bet amounts and round outcomes) is shared with that provider to run the game and to ensure that the result is generated correctly. This data sharing is necessary to deliver the gaming service and does not extend to your full personal profile.

Regulatory and Law Enforcement Authorities

We are required under the AML/CFT Act 2009 to report certain transactions and to cooperate with investigations conducted by the New Zealand Police Financial Intelligence Unit and other relevant authorities. We will disclose personal information where we are legally required to do so. We will also disclose information where we reasonably believe it is necessary to prevent serious harm, to assist with the enforcement of the law, or to protect the rights and safety of our players or our platform.

Responsible Gambling Organisations

We are affiliated with BeGambleAware and Gambling Therapy. In circumstances where a player has consented to referral or where we are acting under our duty of care obligations, we may share relevant information with these organisations to facilitate support. We will not share information with these organisations for any other purpose.

Business Transfers

In the event that Kiwi’s Treasure Casino undergoes a change of ownership, merger, or acquisition, your personal information may be transferred to the new entity as part of that transaction. We will notify you of any such change where required by law, and any successor entity will be required to honour the terms of this Privacy Policy.

International Data Transfers

Some of the third-party service providers we work with are based outside New Zealand. Where your personal information is transferred to another country, we take steps to ensure that it continues to receive a standard of protection consistent with the Privacy Act 2020. This may involve entering into contractual arrangements with the recipient, or satisfying ourselves that the recipient operates in a jurisdiction with comparable privacy protections.

If you would like information about the specific countries to which your data may be transferred in connection with a particular service provider, you can contact us at support@kiwis-treasure-casino-new-zealand.com.

How Long We Keep Your Information

We keep your personal information for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law.

• Account information and transaction records are retained for a minimum of seven years after the closure of your account. This reflects our obligations under the AML/CFT Act 2009, which requires us to retain records of customer due diligence and transaction history for that period.
• Identity verification documents are retained for the same seven-year minimum period following account closure.
• Customer support records are retained for five years after the resolution of the relevant interaction.
• Marketing consent records are retained until you withdraw your consent, and for a period thereafter sufficient to demonstrate that we had valid consent for any communications we sent.
• Technical and analytical data collected through cookies is retained for the periods specified in our cookie settings, typically between 30 days and two years depending on the type of cookie.

When the applicable retention period ends, we delete or anonymise your personal information in a secure manner. Anonymised data that can no longer be linked to any individual may be retained and used for analytical purposes indefinitely.

Your Rights Under the Privacy Act 2020

The Privacy Act 2020 gives you certain rights in relation to personal information we hold about you. These are set out below along with information on how to exercise them.

Right of Access

You have the right to ask us whether we hold personal information about you and, if so, to request a copy of that information. We will respond to access requests within 20 working days of receiving them, as required by the Privacy Act 2020. In some circumstances we may be permitted to refuse access or to provide it in a modified form, for example where disclosure would reveal information about another individual, or where the information is subject to legal privilege. Where we refuse or limit access, we will tell you why.

Right of Correction

If you believe that personal information we hold about you is inaccurate, incomplete, misleading, or not up to date, you have the right to ask us to correct it. We will correct the information or, where we disagree that a correction is warranted, attach a note to the record indicating that you have requested a correction and what that request was.

Right to Complain

If you believe we have interfered with your privacy, you have the right to make a complaint to us in the first instance. You can do this by contacting us at support@kiwis-treasure-casino-new-zealand.com. If you are not satisfied with how we handle your complaint, you have the right to complain to the Office of the Privacy Commissioner at www.privacy.org.nz or by calling 0800 803 909.

Marketing Opt-Out

You can withdraw your consent to receive marketing communications at any time. The simplest way to do this is to use the unsubscribe link in any marketing email. You can also contact our support team directly and we will update your preferences immediately. Withdrawing consent does not affect the lawfulness of any marketing we sent before you withdrew it.

Responsible Gambling Tools

In addition to your rights under privacy law, you have the right to access and use our responsible gambling tools at any time. These include deposit limits, session time limits, reality check reminders, and self-exclusion. These tools are accessible from your account settings. Setting a deposit limit or activating self-exclusion does not require you to close your account or forfeit your balance.

Mandatory Privacy Breach Reporting

The Privacy Act 2020 introduced mandatory reporting of privacy breaches that cause or are likely to cause serious harm to affected individuals. In the event that we become aware of a notifiable privacy breach, we will notify the Office of the Privacy Commissioner and all affected individuals as soon as practicable. We will provide details of what happened, what information was involved, what steps we have taken in response, and what you can do to protect yourself.

We maintain an internal privacy breach response procedure to ensure that any breach is identified, contained, and assessed promptly. Staff responsible for handling personal information receive training on recognising and reporting potential breaches.

Security of Your Information

We use SSL encryption across our website and mobile app, which means that data transmitted between your device and our servers is encrypted in transit and cannot be read by a third party intercepting the connection. This is the same technology used by online banking services and e-commerce platforms throughout New Zealand.

Access to personal information within our organisation is restricted to staff who need it to carry out their responsibilities. We use access controls, audit logging, and staff training to minimise the risk of internal misuse. Payment card data is handled by our payment processors and is not stored on our servers in a form that would allow it to be retrieved and used.

No system is entirely free from risk, and we cannot guarantee that a breach will never occur. What we can tell you is that we have taken reasonable steps appropriate to the sensitivity of the information we hold, and that we have procedures in place to respond quickly and responsibly if something goes wrong.

Children and Age Restrictions

Kiwi’s Treasure Casino is strictly for players aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. Age verification is a required step during account registration, and we may request additional evidence of age as part of our identity verification process.

If we become aware that a person under the age of 18 has created an account or provided us with personal information, we will close the account and delete the associated information as soon as reasonably practicable. If you have reason to believe that a minor has registered an account with us, please contact us at support@kiwis-treasure-casino-new-zealand.com so we can investigate.

Responsible Gambling and Your Personal Information

New Zealand has a significant body of public policy around gambling harm minimisation, and our platform takes those obligations seriously. The personal information we collect about your gameplay, including session lengths, betting patterns, win and loss history, and deposit frequency, is used in part to monitor for signs that a player may be experiencing difficulties.

Where our responsible gambling systems flag a concern, a member of our team may review your account and, in some cases, make contact with you. We may apply voluntary or mandatory account restrictions where we have reasonable grounds to believe that continued unrestricted access would be harmful. This use of your personal information is consistent with the public interest purpose of harm minimisation and with our obligations as an operator serving New Zealand players.

Our responsible gambling tools are available at any time through your account settings. If you are concerned about your own gambling or that of someone you know, Gambling Therapy provides free, confidential support at www.gamblingtherapy.org. BeGambleAware provides additional resources and information at www.begambleaware.org. Gambling Helpline New Zealand is available around the clock on 0800 654 655.

Anti-Money Laundering Obligations and Your Privacy

We are subject to the Anti-Money Laundering and Countering Financing of Terrorism Act 2009. This law requires us to collect and retain identity verification information, monitor transactions, identify and report suspicious activity, and cooperate with investigations by the New Zealand Police Financial Intelligence Unit and other relevant authorities.

These obligations take precedence over certain aspects of your privacy rights in specific circumstances. For example, where we are required to file a suspicious transaction report, we are prohibited by law from telling you that we have done so. This is not a discretionary position on our part. It is a direct requirement of the legislation.

Where we are required to collect and retain information for AML/CFT purposes, we collect only what is necessary and retain it only for as long as the law requires. We apply the same security standards to AML/CFT records as to all other personal information we hold.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, changes in our practices, or changes in the services we provide. When we make material changes, we will notify you by email (to the address associated with your account) or through a prominent notice on our website. Continuing to use our platform after such notice constitutes acceptance of the updated policy.

Previous versions of this policy are available on request by contacting our support team.

How to Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights under the Privacy Act 2020, or need to report a concern, you can reach us through any of the following channels:

• Email: support@kiwis-treasure-casino-new-zealand.com
• Phone: +64 9 168 8071
• Post: 12 Osterley Way, Manukau City Centre, Auckland 2104, New Zealand

Our support team is available 24 hours a day, seven days a week. For privacy-specific queries, please include “Privacy Request” in the subject line of your email so we can direct it to the right person without delay.

If you are not satisfied with our response to a privacy complaint, you can contact the Office of the Privacy Commissioner at www.privacy.org.nz or on 0800 803 909. The Privacy Commissioner can investigate complaints and, where appropriate, refer matters to the Human Rights Review Tribunal.