Casigo New Zealand Privacy Policy
Casigo processes personal data to fulfill legal obligations and provide services. Data handling adheres to New Zealand privacy laws and employs industry-standard security measures.
This Privacy Policy outlines the data protection practices of Casigo casino in relation to its services offered to players in New Zealand. The document exists to inform users about how their personal information is collected, used, stored, and disclosed. It explains our commitment to processing personal data lawfully, transparently, and in accordance with applicable privacy laws, including the Privacy Act 2020. The policy details the purposes for which data is processed, which include account management, transaction processing, regulatory compliance, and security. By defining these practices, we provide clarity on user rights and our obligations as a data controller.
Data Collection and Categories of Personal Information
Casigo casino collects personal data necessary to provide its services, operate accounts, and meet legal obligations. This information is obtained directly from you during interactions with our platform, such as registration and transactions, and automatically through your use of our services. The primary categories of personal data processed are as follows.
Registration and identification data includes information provided when creating an account or verifying your identity. This encompasses your full name, date of birth, residential address, contact email address, and telephone number. For verification purposes, we may also process copies of identification documents, such as a driver's licence or passport, and proof of address documents.
Financial and transactional information relates to all payment activities on your account. This includes deposit and withdrawal records, payment method details (e.g., card number, e-wallet account identifier), transaction amounts, dates, and IP addresses associated with transactions. Gameplay data, such as wagering history, game sessions, and bet amounts, is also recorded.
Technical and usage data is automatically generated and collected. This comprises your device’s IP address, browser type and version, operating system, device identifiers, and broad geographical location. We also collect data about your interaction with our website, including pages visited, clickstream data, and response times. This information is essential for platform functionality, security, and analytical purposes.
Communication and compliance records include the content of any correspondence with our support team via email, live chat, or other channels. Furthermore, we maintain records related to regulatory compliance, such as responsible gambling interactions, self-exclusion requests, and records of identity verification checks performed to prevent fraud and money laundering.
Purposes of Processing and Legal Bases
We process your personal data for specific, explicit, and legitimate purposes. Each processing activity is conducted under a recognised lawful basis as required by data protection law. The following outlines the core purposes and corresponding legal justifications for our data processing activities.
Account administration and service provision form the primary basis for processing. We use your registration and contact details to create and manage your player account, facilitate deposits and withdrawals, and provide customer support. The legal basis for this processing is the performance of the contract between you and Casigo casino. This also includes processing related to any casigo casino bonus offers you choose to claim, which are administered as part of your account operations.
Compliance with legal obligations is a mandatory reason for processing. We are required by law to verify your identity, age, and location to prevent underage gambling, fraud, and money laundering. We must also maintain records of transactions and report certain activities to regulatory authorities. Processing for these purposes is necessary to comply with our legal obligations under New Zealand law and the rules of our licensing authority.
Legitimate interests pursued by Casigo casino provide a basis for certain processing activities where necessary and balanced against your rights. This includes using technical data for system security, fraud prevention, and network protection. It also encompasses analysing website usage to improve our services and for business administration. You have the right to object to processing based on legitimate interest.
Marketing communications may be sent where you have provided explicit consent. You may withdraw this consent at any time through your account settings or by contacting us. Please note that the terms of a casigo no deposit bonus or other promotional offers may be communicated to you as part of essential service messages related to your account.
Data Storage, Protection, and Retention Periods
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Data is stored on secure servers located in controlled environments with restricted physical and electronic access.
Security measures employed include encryption technologies for data in transit and at rest, particularly for sensitive financial and identification information. Access to personal data is strictly limited to authorised personnel on a need-to-know basis, governed by confidentiality obligations. Our systems are designed to ensure ongoing confidentiality, integrity, and resilience of processing systems.
Data retention periods are determined by the purpose for which the information was collected and relevant legal or regulatory requirements. We will not retain your personal data for longer than is necessary. A general outline of retention criteria is provided in the table below.
| Data Category | General Retention Criteria |
|---|---|
| Account Data (Active) | Retained for the duration your account is active and for a period thereafter as defined below. |
| Transaction and Financial Records | Retained for a minimum of seven (7) years from the date of the transaction to comply with financial and anti-money laundering regulations. |
| Identification and Verification Documents | Retained for as long as required by licensing conditions, typically seven (7) years after account closure. |
| Closed Account Data | Following account closure, core personal data is archived and securely retained for a period of seven (7) years to meet regulatory obligations, after which it is securely deleted or anonymised. |
| Marketing Consent Records | Retained while consent is active and for a short period after withdrawal to maintain an audit trail. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so it can no longer be associated with an individual. Archived data is subject to the same security protections as active data.
Your Rights Regarding Personal Information
Under the Privacy Act 2020 and other applicable data protection principles, you possess several rights concerning your personal data. You may exercise these rights by submitting a verifiable request to our Privacy Officer using the contact details provided within your account. We will require proof of your identity before acting on any request to protect your data from unauthorised access.
You have the right to request access to the personal data we hold about you and to receive a copy of that information. You may also request the correction of any inaccurate or incomplete personal data we hold. In certain circumstances, you have the right to request the erasure of your personal data, often referred to as the 'right to be forgotten'.
You may request the restriction of processing of your personal data, which limits how we use your information while a dispute about its accuracy or lawful use is resolved. Furthermore, you have the right to object to processing based on our legitimate interests. You also have the right to data portability, which allows you to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
If our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You have the right to lodge a complaint with the New Zealand Privacy Commissioner if you believe our processing of your personal data infringes applicable law. All requests will be handled within the timeframes stipulated by law, and any applicable fees or reasons for denying a request will be communicated in accordance with legal requirements.