Privacy Policy and Your Data Rights

Version of 19 September 2026. Dated on purpose. A privacy notice that changes without a date is impossible to hold anyone to, including us.

What we collect

What you give us: name, date of birth, email address, phone number, residential address and the payment details you deposit with.
Verification documents: photo identification, proof of address and an image of the payment method, held because anti-money-laundering law requires us to hold them.
How you use the account: games played, stakes, deposits, withdrawals, login times, device type and IP address.
Support contact: chat transcripts and emails.

Nothing on that list is collected because it might be useful one day, and none of it is bought from a data broker. If a field is not needed to run the account or required of us by law, it is not asked for.

Why we hold it

To run your account, take deposits and pay withdrawals.
To verify identity and age, which we are required to do.
To detect fraud and to meet anti-money-laundering obligations.
To answer you when you contact support.
To send offers, where you have agreed to receive them. That agreement can be withdrawn at any time and withdrawing it does not affect the account.

Who sees it

Payment processors, our verification provider, the game studios whose titles you play, and our own staff on a need-to-know basis. Selling personal information is not something we do, at any price and to anyone. Disclosure to an authority happens only where the law obliges it, and a record is kept every time it does.

Where it is held

On servers inside the European Economic Area under contractual protections, with backups in the same region. Because we operate from outside New Zealand, your information leaves the country when you use the account; the New Zealand Privacy Act 2020 nonetheless sets the standard we follow for players here, and Principle 12 on cross-border disclosure is the one that matters most for this.

How long we keep it

Account and transaction records are held for seven years after an account closes, because financial and anti-money-laundering rules require that period. Marketing consent records are deleted when you withdraw consent. Chat transcripts are held for two years.

What you can ask for

A copy of everything we hold about you.
Correction of anything that is wrong.
Deletion, except where we are legally required to keep it.
An end to marketing, immediately.
A copy in a portable format.

Write to [email protected]. We answer within twenty working days. If you are not satisfied with the answer, you can complain to the Office of the Privacy Commissioner in New Zealand.

How a request is handled

A request goes to one named person rather than into the support queue, and the first thing they do is establish that you are who the account says you are — a request answered to the wrong person is the breach it was meant to prevent. Expect one round of questions and then the answer itself. There is no charge, and asking does not put a mark on the account.

Deletion is the request most often answered with a partial yes. Marketing records, preferences and chat transcripts can go straight away. Transaction and verification records cannot, because the seven-year retention below is a legal obligation rather than a choice of ours; those are locked away from everyday access instead, and deleted when the period runs out.

Why we are allowed to hold it

Because you asked us to open an account, and the account cannot exist without it.
Because anti-money-laundering and age-verification law requires it, whether or not either of us would prefer otherwise.
Because we have a genuine interest in stopping fraud on our own platform, weighed against your interest in being left alone.
Because you agreed, in the case of marketing — and only in that case.

Decisions made by software

Some checks run automatically: an age test at registration, a fraud score on a deposit, a pattern flag on withdrawal behaviour. None of them closes an account on its own. Where an automated flag would cost you money or access, a person reviews the file before anything happens, and you can ask for that review by replying to the message that told you about it.

Marketing, and stopping it

If you opted in, you may hear from us by email and by notification inside the account, at no more than a few messages a week. Every email carries an unsubscribe link that works on the first click without a login. The switch also sits in your profile. Stopping marketing has no effect on the account, the bonus you are already running or anything in the cashier.

Somebody else's information

Do not send us documents belonging to another person, and do not put a third party's details in a chat. If a bank statement you upload shows names other than yours, cover them before you send it. Where we receive information about someone who is not our player, we delete it rather than file it.

If something goes wrong

A breach that could cause you serious harm is notified to you and to the Privacy Commissioner, as the Privacy Act 2020 requires, and we do not wait for the investigation to finish before telling you. What you will get is what we know at the time: which data, when, and what to change at your end. The one thing we will never do is ask for your password while we do it.

Security

Connections are encrypted throughout. Full card numbers are never stored on our servers; the cashier passes them to the processor and keeps the last four digits so you can tell two cards apart. Access to verification documents is logged.

Children

Our service is for adults of 18 or over. We do not knowingly hold information about anyone younger, and if we find that we do, we delete it and close the account.

Questions about your data

Anything in this notice can be queried at [email protected]. We will explain how a thing works rather than leave you to guess from the wording.