Privacy Policy
01
Data We Collect
We collect only the information necessary to provide our services, comply with legal obligations, and protect both you and Kingdom Casino. Here is a complete breakdown of what we collect and why:
🪪 Identity Information Full name, date of birth, gender, nationality, government-issued ID number. Collected during registration and KYC verification. Required by law for anti-money laundering compliance. |
📍 Contact Information Email address, phone number, residential address, postcode. Used for account management, security alerts, and required regulatory correspondence. |
💳 Financial Information Payment method details (card last 4 digits, bank account identifiers), deposit and withdrawal history, transaction records. Full card numbers are never stored — processed by PCI DSS-certified providers only. |
🎮 Gaming Activity Games played, bets placed, session duration, win/loss records, bonus usage, responsible gambling limit settings. Used to provide the service and monitor for problem gambling indicators. |
💻 Technical Data IP address, device type, browser, operating system, screen resolution, time zone, geolocation (country/city level). Used for security, fraud prevention, and service optimisation. |
📄 KYC Documents Copies of government photo ID (passport, driver’s licence), proof of address documents, and payment method verification images. Stored encrypted and used solely for identity verification and AML compliance. |
02
How We Use Your Data
We process your personal data only where we have a lawful basis to do so. Every use of your data falls into one of four legal categories: contract performance, legal obligation, legitimate interest, or consent.
⚙️
Service Delivery CONTRACT
Processing your registration, account management, deposits, withdrawals, bonus awards, gaming sessions, and customer support communications. This is the core reason we hold your data.
⚖️
Legal & Regulatory Compliance LEGAL OBLIGATION
Identity verification (KYC), anti-money laundering (AML) checks, age verification, problem gambling monitoring, tax reporting, and maintaining records required by our gaming licence and NZ law.
🛡️
Security & Fraud Prevention LEGITIMATE INTEREST
Detecting and preventing fraud, unauthorised account access, payment abuse, and multi-accounting. Monitoring for suspicious activity to protect all players and the integrity of the platform.
📧
Marketing Communications CONSENT
Sending promotional emails, SMS offers, and push notifications about bonuses and new games — only if you have opted in. You can withdraw consent and unsubscribe at any time from your account settings or via the unsubscribe link in any email.
📊
Service Improvement & Analytics LEGITIMATE INTEREST
Analysing aggregated, anonymised usage data to improve our platform, fix bugs, optimise game performance, and enhance the player experience. We never sell individual player data for analytics purposes.
04
How We Protect Your Data
We implement multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
🔐 256-bit SSL All data in transit encrypted with industry-standard TLS 1.3 protocol — the same used by major banks. | 🗄️ Encrypted Storage Sensitive data at rest (KYC documents, financial records) stored with AES-256 encryption on secure servers. | 🕐 24/7 Monitoring Continuous security monitoring, intrusion detection, and automated alerts for any unusual account or system activity. |
🔑 Access Controls Strict role-based access — only authorised personnel with a legitimate need can access player data, with full audit trails. | 🧪 Regular Audits Independent security audits and penetration testing conducted regularly by certified third-party security firms. | 🆘 Breach Response A documented data breach response plan. Affected players notified within 72 hours of discovering any breach, as required by law. |
06
Your Rights
Under the New Zealand Privacy Act 2020 and GDPR, you have the following rights regarding your personal data. You can exercise any of these rights by contacting our Data Protection team.
👁️ Right of Access Request a copy of all personal data we hold about you. We will provide this within 30 days at no charge. | ✏️ Right to Rectification Request correction of inaccurate or incomplete personal data. Most account details can be updated directly in your profile settings. |
🗑️ Right to Erasure Request deletion of your personal data. Note: some data must be retained for up to 7 years for legal compliance — we will explain exactly what can and cannot be deleted. | 📦 Right to Portability Request your personal data in a structured, machine-readable format (JSON or CSV) to transfer to another service provider. |
✋ Right to Object Object to processing of your data for direct marketing at any time. Unsubscribe from all marketing in one click via account settings or any marketing email. | ⏸️ Right to Restriction Request that we limit processing of your data while you contest its accuracy or our legal basis for processing it. |
📧
To exercise any of your rights, email [email protected] with your registered email address and the right you wish to exercise. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner NZ at privacy.org.nz.
07
Data Retention
We retain your personal data for as long as necessary to provide our services and meet our legal obligations. Here are our specific retention periods:
08
Minors
Our platform is strictly for persons aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has provided us with personal information, we will immediately delete that data and close the account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].
09
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email (to your registered address) and display a prominent notice on our website for at least 30 days before the changes take effect. The “Last Updated” date at the top of this page indicates when the policy was last revised. Continued use of Kingdom Casino after notification of changes constitutes your acceptance of the updated policy.
10
Contact Us
