Privacy Policy
Information We Collect
When you register or use Luxury Casino NZ, we collect the following categories of personal information:
Full legal name, date of birth, gender, nationality, country of residence, email address, username, and password (stored in encrypted form). This information is required to create and verify your account in compliance with our licensing obligations and the NZ Anti-Money Laundering and Countering Financing of Terrorism Act 2009.
Government-issued photo identification (NZ passport, NZ driver’s licence, or equivalent), proof of address documents (utility bills, bank statements dated within 3 months), and in some cases source-of-funds documentation. KYC documents are processed by our secure verification partner and are not stored beyond the legally required retention period.
Payment method details (card type, last four digits â full card numbers are never stored by us), deposit and withdrawal amounts, transaction timestamps, payment processor references, and account balance history. This data is required for processing payments and for AML/CFT regulatory compliance.
Game history (titles played, bet sizes, win/loss outcomes, session durations), bonus usage, responsible gambling tool activations, and account activity logs. This data enables us to provide the service, personalise your experience, and fulfil our responsible gambling obligations under our licence.
IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, pages visited, time on site, and cookie identifiers. This data is collected automatically when you visit luxury-casinonz.com and is used for security, fraud prevention, and service improvement.
Records of your communications with our customer support team (live chat transcripts, email correspondence, support ticket history) and your marketing preferences (opt-in/opt-out status for promotional emails and SMS).
How We Use Your Information
Luxury Casino NZ uses your personal information exclusively for the following purposes. We do not sell your data to third parties under any circumstances.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Identity, contact data | Contract |
| Payment processing | Financial data | Contract |
| Identity verification (KYC) | KYC documents | Legal obligation |
| Anti-money laundering | Financial, gaming data | Legal obligation |
| Responsible gambling monitoring | Gaming, behavioural data | Legal obligation |
| Fraud prevention & security | Technical, financial data | Legitimate interest |
| Customer support | Communications data | Contract |
| Service personalisation | Gaming, behavioural data | Legitimate interest |
| Marketing communications | Contact, preferences | Consent |
| Analytics & service improvement | Technical, gaming data | Legitimate interest |
Legal Basis for Processing
Under the New Zealand Privacy Act 2020 and applicable international data protection frameworks, Luxury Casino NZ processes personal data on the following legal grounds:
Processing required to perform the contract between you and Luxury Casino NZ â account creation, payment processing, game delivery.
Processing required by NZ law â AML/CFT Act, Gambling Act 2003, tax reporting obligations, and our gaming licence conditions.
Processing based on your explicit opt-in â primarily for marketing emails and promotional communications. You may withdraw consent at any time.
Processing for fraud prevention, security monitoring, service analytics, and personalisation â balanced against your rights and expectations as a player.
Cookies & Tracking Technologies
Luxury Casino NZ uses cookies and similar tracking technologies to operate the site, remember your preferences, and analyse usage. You can control cookie settings through your browser at any time.
Session management, login authentication, security tokens, and fraud prevention. These cookies are strictly necessary for the site to function and cannot be disabled. No consent is required for essential cookies.
Google Analytics and similar tools track page visits, session duration, and usage patterns. This data is aggregated and anonymised â we cannot identify individual users from analytics data. You may opt out via your browser or Google’s opt-out tools.
Affiliate tracking cookies identify how you arrived at our site, enabling us to compensate referring partners. These cookies do not collect sensitive personal data and expire within 30 days. You may block these via your browser settings without affecting core site functionality.
Remember your language settings, preferred game categories, and UI preferences. Disabling these cookies will cause the site to reset your settings on each visit but will not prevent access.
To manage cookies, visit your browser settings: Chrome â Settings â Privacy â Cookies; Safari â Preferences â Privacy; Firefox â Options â Privacy & Security.
Data Sharing & Third Parties
Luxury Casino NZ does not sell, rent, or trade your personal information to any third party for their marketing purposes. Sharing occurs only as described below, and only with appropriate contractual safeguards in place.
We share your data with the following categories of third party only to the extent necessary:
Your username and session token are passed to Microgaming’s servers to load games and record game outcomes. Microgaming processes this data under its own privacy policy and is bound by strict contractual data protection obligations with Luxury Casino.
PayPal, Visa, Mastercard, and bank transfer processors receive the financial data required to process your transactions. These providers are PCI-DSS compliant and are independently regulated. We do not store full card numbers.
Specialist verification services process your identity documents to confirm your age, identity, and address. These partners are bound by strict data processing agreements and are prohibited from using your documents for any other purpose.
We are legally obligated to report suspicious transactions to the NZ Financial Intelligence Unit (FIU) under the AML/CFT Act 2009, and to provide account data to law enforcement agencies when presented with a valid court order or statutory demand.
Google Analytics, fraud detection tools, and customer support platforms (such as live chat providers) may receive anonymised or pseudonymised technical data. These providers act as data processors under our instructions and are prohibited from using your data independently.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | 7 years after closure | AML/CFT Act legal requirement |
| KYC documents | 7 years after closure | Regulatory obligation |
| Transaction records | 7 years after transaction | Tax & AML compliance |
| Game history & logs | 5 years after last activity | Dispute resolution, licensing |
| Support communications | 3 years after last contact | Dispute resolution |
| Marketing preferences | Until opt-out + 1 year | Consent records |
| Technical & cookie data | 13 months (analytics) | Analytics cycle |
After the applicable retention period, data is securely deleted or anonymised so it can no longer be associated with you. Certain anonymised statistical data may be retained indefinitely for aggregate analysis.
Your Rights & Choices
Under the New Zealand Privacy Act 2020, you have the following rights regarding your personal information held by Luxury Casino NZ. To exercise any right, contact our Privacy Officer at the details in Section 10.
Request a copy of all personal data we hold about you. We will respond within 20 working days.
Request correction of inaccurate or incomplete personal data. Some data cannot be altered where it is required for regulatory purposes.
Request deletion of your data where we have no legal obligation to retain it. Regulatory retention periods may limit the scope of deletion.
Object to processing based on legitimate interest, including direct marketing. We will stop processing unless we can demonstrate compelling legitimate grounds.
Request your data in a structured, machine-readable format (CSV or JSON) where technically feasible. Applies to data you provided directly to us.
Withdraw marketing consent at any time via the unsubscribe link in any email, or from your account preferences. Withdrawal does not affect lawfulness of prior processing.
To exercise any of the above rights, email our Privacy Officer at [email protected] with the subject line “Privacy Request â [Right Type]”. We may require identity verification before processing your request. We aim to respond within 20 working days.
Security Measures
Luxury Casino NZ implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
All data in transit is encrypted using industry-standard SSL/TLS protocols â the same standard used by global banks.
Passwords are stored using bcrypt hashing with salt â they cannot be reversed or read by our staff under any circumstances.
Player funds, personal data, and gaming data are stored in separate systems with independent access controls and audit logging.
Staff access to personal data is restricted on a need-to-know basis. All access is logged and regularly audited. MFA is required for all internal systems.
Our data security practices are independently reviewed as part of the annual eCOGRA Safe & Fair certification process.
In the event of a data breach that poses risk to your rights, we will notify affected players and the Office of the Privacy Commissioner within 72 hours of becoming aware.
International Data Transfers
Some of our service providers and technology partners operate outside New Zealand. When your personal data is transferred internationally, we ensure appropriate safeguards are in place:
Where data is transferred to countries with an adequacy determination under NZ Privacy Act 2020 principles (including EU/EEA countries and Australia), transfers proceed without additional safeguards.
All international data processors sign data processing agreements that include standard contractual clauses aligned with NZ and international data protection standards. These agreements impose binding obligations on how your data is handled.
Core account and transaction data is stored on servers located in jurisdictions with strong data protection frameworks. We do not transfer sensitive KYC documents outside of jurisdictions with equivalent privacy protections to New Zealand.
Contact & Complaints
If you have questions about this Privacy Policy, wish to exercise your rights, or wish to raise a privacy concern, please contact us through any of the following channels:
If you believe your privacy rights have been breached, please first contact our Privacy Officer at [email protected]. We will acknowledge your complaint within 5 working days and provide a substantive response within 20 working days. If you are not satisfied with our response, you may escalate your complaint to the Office of the New Zealand Privacy Commissioner at privacy.org.nz or by calling 0800 803 909 â this service is free.
