Privacy Policy — Low Deposit Casino (New Zealand)

Welcome to the official Privacy Policy for Low Deposit Casino, serving players in Wellington and across New Zealand. This notice explains what data we collect when you explore Casinos NZ content, compare offers, or complete an Auckland casino sign up via our links; how we handle payments for low deposits, references to rewards card programs (e.g., a casino loyalty card), jackpots, and integrations such as TAB Casino; and how to exercise your rights under the Privacy Act 2020. We are an independent review platform and are not affiliated with SkyCity; any SkyCity Casino card, currency exchange, jobs, or contact number details are governed by their own policies. We also cover security, AML/CFT practices, international transfers within Oceania and Australia, and how to contact our Wellington team. If you ask about careers (e.g., how to get a job at the casino or Sky Casino jobs), this policy explains how we process candidate data.

What personal data do we collect in New Zealand and why?

We collect only the information needed to provide comparison content and referral services to players in New Zealand, comply with the Privacy Act 2020 (administered by the Office of the Privacy Commissioner: https://www.privacy.org.nz/privacy-act-2020/), and meet anti-money laundering obligations where they apply to our activities under New Zealand’s AML/CFT regime (administered by the Department of Internal Affairs: https://www.dia.govt.nz/AML-CFT-about). We do not operate a casino; we are an independent information and referral platform for low-deposit casinos. Certain personal data may be collected directly from you (e.g., when you create an account or subscribe), or received in pseudonymous form from our advertising/affiliate partners to measure campaign performance and prevent fraud.

Account sign-up, identity (KYC), and Auckland location details

When you create an account on our website or subscribe to alerts (for example, to follow low-deposit promotions in Auckland or nationwide), we collect basic contact and security information. We do not run gambling accounts and do not perform full gaming KYC; however, we may verify limited identity attributes if required to administer promotions, prevent fraud, or meet applicable NZ legal obligations. We also process technical and location signals (e.g., IP region) to deliver content relevant to Auckland and to enforce age and territory rules.

• We do not collect precise GPS location unless you explicitly enable and share it with us in your browser or device settings.
• If we use a verification service for eligibility checks, we receive a pass/fail or limited attribute confirmation, not your full identity dossier.

What payment and currency exchange data do we record?

We do not process your gambling deposits or store full payment card numbers or CVV codes. Payments for gameplay occur on licensed operator websites you visit via our outbound links and are governed by those operators’ policies. For transparency and to improve our comparison service, we may record non-sensitive transaction metadata and currency information related to referrals and on-site tools (e.g., currency selectors), and we may receive pseudonymous conversion reports from partners to reconcile commissions and detect fraudulent traffic.

• Any currency exchange information we show is for guidance only and may not reflect the rate applied by a casino or payment processor at the time of your transaction.
• If you make purchases directly from us (e.g., premium content or newsletters), we use third‑party payment processors and receive only limited billing confirmations, not your full card data.

Rewards cards, jackpots, and gameplay analytics

We do not operate a rewards (loyalty) program and we are not affiliated with any operator’s rewards card. If you choose to store loyalty identifiers in our tools (for example, to compare benefits), we process that information only to provide the requested service. We track engagement with jackpot pages and outbound clicks to operators to improve content relevance. Some partners may share pseudonymous gameplay or bonus redemption metrics with us for performance reporting; these do not include your real name or full account details.

• If you do not input rewards card information into our tools, we do not collect it.
• Any operator‑specific card data you share directly with a casino (for example, a casino in Auckland) is governed by that casino’s privacy policy, not ours.

Data use, sharing, and storage practices

We use your information to provide comparison content about low-deposit casinos, manage your account and preferences, deliver newsletters or alerts you opt into, measure campaign performance, prevent fraud, comply with the New Zealand Privacy Act 2020, and meet other legal obligations. We do not operate a gambling platform and do not process your gameplay deposits; sensitive payment data is handled by the licensed operators you choose to visit. Any data sharing is limited, purpose-bound, and either aggregated or pseudonymous where feasible.

Who we share data with: game studios, payments, TAB partners

We share personal information only as necessary to run our services, attribute referrals, and comply with the law. We do not disclose your full payment card details or operator account credentials. Where possible, partners receive non-identifying or pseudonymous data (for example, a hashed or partner-issued ID). Game content on our site is informational; we do not normally send data directly to game studios unless a studio is acting as our service provider (e.g., analytics or embedded content) under contract. If you follow links to TAB NZ or casino operators, those sites collect data under their own policies; we may receive pseudonymous conversion signals back for attribution.

We do not sell personal information. Disclosures to third parties are governed by contracts that restrict processing to the documented purposes and require appropriate security. If a partner requests additional data, we evaluate the request against necessity, proportionality, and the Information Privacy Principles (IPPs) before any disclosure.

International transfers: Australia and Oceania safeguards

When personal information is transferred outside New Zealand, we take reasonable steps under Privacy Act 2020 Information Privacy Principle 12 to ensure the recipient is subject to comparable safeguards, or we obtain your express authorization where appropriate. For transfers to Australia, many recipients are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs); we also use contractual protections and due diligence. Some services use global cloud infrastructure; in those cases, we apply access controls, region selection where available, and data minimisation.

• Legal framework: See OPC guidance on cross-border disclosures under IPP 12 at https://www.privacy.org.nz/privacy-act-2020/privacy-principles/privacy-principle-12/.
• Australia context: APPs under the Privacy Act 1988 are overseen by the OAIC: https://www.oaic.gov.au/privacy/the-privacy-act.
• Safeguards we rely on: contractual clauses with audit/assurance rights, purpose limitation, incident notice obligations, and technical controls (encryption in transit, role-based access).
• Data minimisation: we prefer aggregated or pseudonymous IDs for cross-border attribution, avoiding direct identifiers wherever feasible.

Retention periods and deletion schedules

We retain personal information only for as long as needed to deliver the service you requested, meet legal/accounting obligations, resolve disputes, and enforce agreements. When the retention period expires, we delete or irreversibly anonymise the data. Backup copies are removed on a rolling schedule once they age out of backup retention.

• Account profile and preferences: kept while your account is active and for 24 months after last activity, then deleted or anonymised.

• Consent and marketing records (opt-ins/opt-outs): retained for 24 months after the last related communication to demonstrate compliance.

• Customer support records: retained for 24 months after ticket closure.

• Referral and attribution logs (pseudonymous): retained for up to 36 months to reconcile partner reports and resolve disputes.

• Security and access logs: retained for up to 180 days, unless needed for an active investigation.

• Backups: encrypted backups are retained on a rolling 35-day schedule and then overwritten.

• Deletion triggers: verified request, account closure, expiry of the retention period, or legal requirement.

• Deletion method: application-layer deletion, followed by removal from search indexes and caches; backup expiration occurs on the next scheduled cycle.

• Exceptions: if a legal hold applies (e.g., dispute or regulatory request), deletion is paused until the matter is resolved.

What are your rights under the NZ Privacy Act 2020?

Under the New Zealand Privacy Act 2020, you have rights to access and correct personal information we hold about you (Information Privacy Principles 6 and 7), to expect reasonable safeguards when information is disclosed overseas (IPP 12), and to have your information kept only as long as needed (IPP 9). Our policy also provides practical controls such as deletion upon request where legally permissible, marketing opt-outs, and transparency about cookies and analytics. We respond to privacy requests as soon as reasonably practicable and no later than 20 working days for access and correction requests.

How to access, correct, or delete your information

You can request a copy of your personal information, ask us to correct anything you believe is inaccurate or incomplete, or request deletion where continued retention is not required by law or legitimate business needs (for example, outstanding disputes or accounting records). If we decline a correction, you may ask us to attach a statement of correction to your record. We will verify your identity before fulfilling a request and will provide our decision within 20 working days for access and correction.

• How to submit: use the account privacy settings or the help/contact form within your account. Clearly describe the request and the email address tied to your account.
• If your request involves third-party operator data (e.g., your casino account), you may need to contact that operator directly under their policy in addition to our request.
• We do not charge a fee for standard requests. If a request is unusually large or complex, we will inform you in advance if any cost-recovery applies and provide options to narrow the scope.

Marketing choices, cookies, and tracking technologies

We use cookies and similar technologies to operate our site, remember your preferences (e.g., currency), measure content performance, and prevent fraud. You can manage these technologies through our preferences panel (where offered) and your browser settings. Opting out of non-essential cookies will not affect core site functionality, but some features (such as personalised recommendations) may not work as intended.

Cookie categories:

• Strictly necessary: authentication, security, load balancing.

• Preferences: language, region, currency display.

• Analytics: aggregated traffic measurement and diagnostics.

• Marketing/affiliate: track referral performance using pseudonymous IDs.

• Browser controls: you can block or delete cookies in your browser. See vendor guides such as Chrome cookie settings and Firefox cookie settings.

• Do Not Track: we treat DNT as a preference signal and reduce non-essential tracking where technically feasible in addition to any explicit choices you set in our preferences panel.

• Email preferences: unsubscribe links appear in every marketing email. System or transactional notices (e.g., changes to this policy) may still be sent.

How to contact us or lodge a complaint in Wellington

If you have a privacy question or wish to make a request, please contact our privacy team using the help/contact form available in your account. Provide your account email, a clear description of your request, and any supporting details. If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner (OPC), based in Wellington.

• Office of the Privacy Commissioner (NZ): https://www.privacy.org.nz/

• Guidance on your rights and how to complain: https://www.privacy.org.nz/your-rights/

• You can also seek guidance from the Department of Internal Affairs on unsolicited electronic messages (spam): https://www.dia.govt.nz/Spam-Complaints

• We acknowledge all complaints and requests as soon as practicable and provide a substantive response within the statutory timeframe where applicable.

• If your concern involves a third-party operator (e.g., a casino you visited via our links), we may direct you to that operator’s privacy team while we address any aspects within our control.

• For Wellington-based correspondence, the OPC is the independent regulator overseeing the Privacy Act 2020 and can review how we handled your concern.

Security, responsible gambling, and AML/CFT compliance

We apply layered technical and organizational controls to protect personal information, and we design our services to support safer gambling. We are an information and referral platform, not a casino operator. Accordingly, we typically are not an “AML/CFT reporting entity” under the Anti‑Money Laundering and Countering Financing of Terrorism Act 2009. However, we still implement fraud-prevention controls, limit data collection, and—where partners lawfully share pseudonymous risk signals—use them only to reduce harm (for example, to suppress marketing to self‑excluded users). For New Zealand’s AML/CFT regime see the Department of Internal Affairs (DIA) at https://www.dia.govt.nz/AML-CFT-about.

Technical security: encryption, access controls, monitoring

Our security programme focuses on confidentiality, integrity, and availability. We encrypt data in transit and at rest, restrict access on a least‑privilege basis, monitor for threats, and regularly test our defences. Administrative access is protected with multi‑factor authentication, and production changes follow review and logging requirements.

• Encryption: TLS 1.2+ for data in transit; industry‑standard encryption (e.g., AES‑256) for data at rest where applicable; HSTS enabled on public endpoints.
• Account security: password hashing using strong, salted algorithms; optional two‑factor authentication for user accounts where available.
• Access controls: role‑based access, least privilege, just‑in‑time elevation for sensitive actions, quarterly access reviews.
• Monitoring and logging: centralised audit logs for authentication, administration, and data access; alerting on anomalous patterns.
• Vulnerability management: regular dependency updates, security patches according to severity, and periodic third‑party testing.
• Backup and recovery: encrypted backups retained on a rolling schedule with restoration tests.
• Vendor governance: data processing agreements, security due diligence, and contractual purpose limitations for processors.

Do we track self-exclusion and responsible gambling signals?

We do not operate gambling accounts and cannot place or block bets. We respect responsible gambling by limiting how we use data and by providing clear off‑ramps to help. If a licensed operator or partner lawfully shares a pseudonymous flag that a user has self‑excluded or reached a harm threshold, we use it only to suppress personalised marketing and to reduce exposure to gambling prompts on our site. We do not build sensitive profiles about you for the purpose of targeting vulnerable users.

• Your choices: you can mute promotional notifications and opt out of personalised offer reminders at any time via preferences.
• Operator self‑exclusion: venue or operator self‑exclusion is managed by the operator; contact them directly to manage your status.
• Support services: confidential help is available from Gambling Helpline Aotearoa at https://www.gamblinghelpline.co.nz/.
• Legal framework: see harm‑prevention obligations in the Gambling Act 2003 at https://www.legislation.govt.nz/act/public/2003/0051/latest/DLM207497.html.

Casino rules, age checks, and location verification

Access to our content is intended for adults in New Zealand. We apply age and location safeguards—such as age attestations and IP‑based geolocation—to tailor content to New Zealand and to discourage use by minors. We do not collect precise GPS data unless you explicitly enable it. Casino venue entry rules and betting eligibility are set by New Zealand law and enforced by operators; our controls complement, but do not replace, those checks.

• Age gates: we require users to confirm they are of legal age; suspected under‑age accounts or requests are restricted or deleted.
• Geolocation: we infer region (e.g., Auckland) from IP address to apply location‑based content rules; VPN/proxy traffic may be limited.
• Operator policies: if you follow a link to an operator, their terms, age checks, and verification processes apply.

Operators may conduct additional checks (e.g., face‑to‑face ID at venues, electronic identity verification, and proof of address). Our role is to provide information and suppress marketing where risk flags are signalled; only operators can enforce play restrictions or self‑exclusion at their properties or platforms.

How do we process data for job applicants and staff?

We collect and use applicant and staff information only for recruitment, onboarding, payroll/HR administration, and legal compliance in New Zealand. We follow the Privacy Act 2020 (Information Privacy Principles), Employment Relations Act 2000, Holidays Act 2003, Tax Administration Act 1994, Immigration Act 2009, and Human Rights Act 1993. We obtain information directly from you wherever practicable (IPP 2), explain why we collect it (IPP 3), protect it with appropriate safeguards (IPP 5), and keep it only as long as needed (IPP 9). We do not request information that is irrelevant to the role and do not use prohibited grounds of discrimination in hiring decisions (Human Rights Act 1993). Where we use third-party service providers (e.g., applicant tracking or background checking services), they act under contract and are subject to confidentiality and security obligations.

What candidate data we collect and why

We request only the information necessary to evaluate your application and, if successful, to make an offer and complete onboarding. Some information is optional (e.g., whether you wish to be considered for future roles). We do not conduct automated-only decision-making; human review is part of every hiring decision. Sensitive checks (e.g., criminal record or verification of qualifications) are performed only with your explicit consent and when relevant to the position.

Checks for NZ roles: right to work and references

Before an offer is confirmed, we verify your right to work in New Zealand and, where appropriate for the role, we may seek references and conduct limited background checks with your consent. We do not conduct credit checks for roles where they are not relevant, and we avoid collecting information unrelated to job performance.

• Right to work: we confirm your entitlement using official evidence you provide (e.g., NZ passport or visa grant) and, with consent, may verify status through Immigration NZ’s VisaView.
• References: we contact referees you nominate and ask job‑related questions to validate skills and conduct.
• Criminal record (role‑dependent): conducted only with your consent through the Ministry of Justice Criminal Record Check; we record only the outcome necessary for a hiring decision.
• Non‑discrimination: decisions must comply with the Human Rights Act 1993; see the Act at legislation.govt.nz.
• Employment recordkeeping duties: employers must keep wage, time, and holiday/leave records; guidance is available at Employment New Zealand.

Recruitment retention and how to withdraw consent

Unsuccessful applicant records are retained for up to 12 months to document fair process, respond to queries, and consider you for similar roles if you opt in. If you do not want us to keep your information for future opportunities, you can withdraw consent and request deletion (subject to any legal holds). For employees, we retain personnel, wage, time, and leave records to meet statutory obligations—generally at least 6 years for employment/holiday records and at least 7 years for tax records in New Zealand.

• Staff records: holiday and leave, wage and time records must be kept; see Employment New Zealand guidance.

• Tax records: businesses must keep tax records for at least 7 years; see Inland Revenue at ird.govt.nz.

• Access and correction: you can request access/correction under the Privacy Act 2020; see the Office of the Privacy Commissioner at privacy.org.nz.

• To withdraw consent or request deletion of your application: submit a request via your candidate portal or our help/contact form identifying the email used for your application.

• We will verify your identity and respond as soon as practicable, typically within 20 working days for access/correction, and promptly for deletion where no legal hold applies.

• If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner: How to complain.

Frequently Asked Questions

What personal information do you actually collect, and do you ever store GPS or full card numbers?

We collect account and contact details you provide, technical data like IP region and device, and pseudonymous referral IDs; we do not store precise GPS unless you explicitly enable it and we never store full payment card numbers or CVV. Gameplay payments occur on operator sites, so 0 PAN/CVV fields are processed by us; any location use is limited to coarse signals such as inferred city or region.

Can I use the site without cookies or tracking, and what breaks if I block them?

Yes, core pages will load without non‑essential cookies, but some features will degrade. If you block analytics and marketing cookies, you may lose saved preferences like currency, stay signed out between visits, see less relevant content, and referral attribution and fraud controls may be less effective.

What happens if there’s a privacy breach—will you notify me and the OPC?

If a notifiable privacy breach occurs, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable under the Privacy Act 2020. We investigate incidents using centralised audit logs (retained up to 180 days), apply containment and remediation, and disclose only facts necessary for risk mitigation.

How do you verify my identity for an access or deletion request if I can’t sign in?

We confirm identity via a reply from your registered email and a second factor such as a one‑time code or limited attribute match; we only request government ID if strictly necessary. Access and correction decisions are provided within 20 working days, and deletions proceed as soon as practicable once verification is complete.

Do you sell or rent my data, or share it with SkyCity, TAB NZ, or game studios?

We do not sell or rent personal information; partners receive only purpose‑bound, pseudonymous data for attribution and fraud control. For referrals (including TAB NZ where applicable), disclosures are limited to items like a hashed or partner‑issued ID, click timestamp, and conversion flag, with 0 full card details or operator credentials shared.

Can I ask you to stop using partner risk or self‑exclusion flags about me?

Yes, we will suppress our use of any pseudonymous self‑exclusion or risk flags for personalised marketing on our platform without undue delay. This does not change your status with a casino or TAB NZ; you must contact the operator directly to modify or remove their records.

Will using a VPN or being outside New Zealand limit access or my rights?

VPN or proxy traffic may be limited because we rely on IP‑based geolocation to apply NZ age and territory rules. Your rights to access and correct information we hold apply regardless of where you are located, provided we can complete identity verification.

How long until my data is fully erased, including backups and partner logs?

Application‑layer data is deleted promptly after verification, and search caches are cleared thereafter; encrypted backups roll off on the next cycle, up to 35 days. Security logs can persist up to 180 days, and pseudonymous referral records may be retained for up to 36 months solely to reconcile partner reports and disputes.

If I sign up with an operator through your links, what exactly can you see about my activity?

We see only pseudonymous conversion metadata from partners, such as a partner user ID, a registration or deposit event flag, and bonus opt‑in status. We cannot view your operator login, bets, balances, or full payment card data, which remain under the operator’s privacy and PCI‑DSS controls.

What practical safeguards do you use for cross‑border transfers to Australia or global clouds?

We apply IPP 12 assessments, contractual safeguards, and technical controls like encryption in transit (TLS 1.2+) and at rest (e.g., AES‑256), with role‑based access. Where feasible we transfer aggregated or pseudonymous identifiers rather than direct personal identifiers, and we use region selection and access minimisation on cloud services.

What proof of consent for marketing do you keep and for how long?

We keep records of your opt‑ins and opt‑outs, including timestamp and channel, to demonstrate compliance. These marketing consent records are retained for 24 months after the last related communication, and you can unsubscribe at any time.

Do you use automated decision‑making that materially affects me?

No, we do not use solely automated decision‑making that produces legal or similarly significant effects about you. Content personalisation and fraud screening use limited, pseudonymous signals, and any material outcomes involve human review; recruitment decisions are not automated‑only.

What age evidence do you require and do you keep copies of my ID?

We typically rely on an 18+ attestation and coarse location checks, and only request limited identity attributes or a verification pass/fail when needed for promotions, fraud prevention, or legal duties. Where a verification service is used, we retain only status or minimal attributes rather than a full copy of your ID whenever possible.

How can New Zealand job applicants control their data, and what if I decline a criminal record check?

You can request access or correction within 20 working days and ask us to delete your application data unless a legal hold applies; unsuccessful applications are kept for up to 12 months. Criminal record or similar checks are conducted only with consent and when relevant to the role; declining may make you ineligible for positions where such checks are an essential requirement.

Can I request a machine‑readable export of my data, and what will it include?

Yes, on request we provide a machine‑readable export of core account data where feasible, typically within 20 working days. Exports generally include your account details, preferences, and site activity history we hold, and exclude operator‑held data such as your casino account records.

Which staff can access my data and how is that access controlled?

Only personnel with a need‑to‑know role—such as support, analytics, or compliance—can access personal information, protected by multi‑factor authentication and role‑based permissions. Administrative access is centrally logged and reviewed on a quarterly schedule to enforce least‑privilege.