Action Casino New Zealand Privacy Policy
Action Casino processes personal data to fulfill legal obligations and provide services. Data is handled according to New Zealand privacy laws and protected by industry-standard security measures.
This Privacy Policy outlines how Action Casino collects, uses, stores, and discloses personal information in connection with its services in New Zealand. The document is provided to ensure transparency regarding our data handling practices. It explains the lawful bases for processing personal data, including compliance with legal obligations, the performance of our user agreement, and legitimate business interests. The policy details the categories of information processed for account management, transaction processing, security, and regulatory compliance. It also describes the security measures implemented to protect data and clarifies the rights available to individuals under applicable privacy laws, including the New Zealand Privacy Act 2020.
Data Collection and Categories of Personal Information
Action Casino processes personal information necessary to provide its services and meet legal obligations. This data is collected directly from you during interactions with our platform and through automated means. The primary categories of information are outlined below.
Registration and identification data includes the information provided when creating and maintaining an account. This typically encompasses your full name, date of birth, contact details such as address, email, and phone number, and proof of identity and address documents for verification purposes.
Transactional and financial information is processed to facilitate deposits, wagers, and withdrawals. This includes payment method details, transaction histories, account balances, and records of gaming activity. For certain payment methods, bank account or card details may be collected and processed by our payment partners.
Technical and usage data is automatically generated when you access our services. This includes your device’s IP address, browser type, operating system, pages viewed, and other diagnostic data. We also use cookies and similar tracking technologies to collect information about your interaction with the website for operational and security purposes.
Compliance and communication records are maintained as part of our regulatory duties. This includes records of your interactions with our customer support team, copies of correspondence, responsible gambling interactions, self-exclusion requests, and records necessary to meet anti-money laundering and countering financing of terrorism obligations.
Purposes of Processing and Legal Bases
Personal data is processed for specific, explicit, and legitimate purposes. Each processing activity is conducted under a recognized lawful basis as required by applicable privacy principles. The following table summarizes the primary purposes and corresponding legal grounds.
| Purpose of Processing | Legal Basis |
|---|---|
| Account registration, identity verification, and age confirmation. | Legal obligation and necessity for the performance of our contract with you. |
| Processing financial transactions, managing your account, and providing gaming services. | Necessity for the performance of our contract with you. |
| Monitoring for fraud, security threats, and money laundering. | Legal obligation and legitimate interests in protecting our business and users. |
| Maintaining records for regulatory reporting and compliance with the Gambling Act 2003. | Legal obligation. |
| Communicating service updates, responsible gambling information, or changes to terms. | Legal obligation and legitimate interests in effective service administration. |
| Analyzing website performance and technical issue resolution. | Legitimate interests in maintaining and improving service functionality. |
Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests. Marketing communications are sent only with your explicit consent, which you can withdraw at any time.
Data Storage, Security Protocols, and Retention Periods
Action Casino implements technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. Data is stored on secure servers located in controlled facilities with restricted physical and electronic access.
Security measures include encryption of data in transit using TLS technology and encryption of sensitive data at rest. Access to personal information is strictly limited to authorized personnel who require it to perform their job functions, governed by confidentiality agreements and access control policies. Our systems are monitored for potential vulnerabilities and attacks.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods are determined based on the nature of the data and the legal or operational need to retain it.
- Account data and transactional records are typically retained for a minimum of seven years following account closure to comply with financial and gambling regulations.
- Records related to responsible gambling interactions, including self-exclusion, are retained for longer periods as mandated by the Department of Internal Affairs.
- Technical logs and security data are retained for a shorter period necessary for system integrity and investigation purposes.
- Upon expiry of the applicable retention period, data is securely deleted or anonymized so it can no longer be associated with an individual.
Individual Rights and Request Procedures
Under the New Zealand Privacy Act 2020, you have rights regarding your personal information. Action Casino has established procedures to facilitate the exercise of these rights. To protect your data, all requests are subject to a verification process to confirm your identity.
You have the right to request access to the personal information we hold about you. You may also request the correction of any inaccurate or incomplete information. In certain circumstances, you may request the erasure of your personal data, or the restriction of its processing. You can object to processing based on legitimate interests and, where processing is based on consent, you may withdraw that consent at any time.
You have the right to request the portability of your personal data provided to us, in a structured, commonly used, and machine-readable format, where the processing is based on consent or contract and carried out by automated means. To initiate any request related to your rights, you must contact our Privacy Officer using the designated contact details provided separately. We will respond to your request within the timeframes stipulated by law.
We will not ordinarily charge a fee for responding to access or correction requests. If a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee or refuse to act on the request. You have the right to lodge a complaint with the New Zealand Privacy Commissioner if you believe we have not adequately addressed your privacy concerns.