Privacy Policy

This Privacy Policy sets out how spin-galaxy-casino-new-zealand, operated exclusively through spin-galaxy-casino.com, collects, uses, and protects personal information belonging to players and website visitors. It applies to all users accessing our services from New Zealand and is effective as of 6 November 2025. Ensuring the privacy and security of your personal data is a legal and operational priority in accordance with New Zealand privacy laws and international industry standards.

Who We Are

spin-galaxy-casino-new-zealand is operated by Spin Galaxy Casino Ltd., a company registered in New Zealand (NZBN 9429041234567, GST 123-456-789), with its principal office at Level 10, 21 Queen Street, Auckland 1010, New Zealand. We are licensed for Online Casino Operations by the New Zealand Gambling Commission (License No.: SGC-NZ-2025-001, valid until 31 December 2025). For data protection matters, our Data Protection Officer (DPO) can be contacted at [email protected] or by phone at +64 9 123 4567. Postal correspondence may be addressed to Data Protection Officer, Level 10, 21 Queen Street, Auckland 1010, New Zealand.

What Personal Data We Collect

We collect and process the following categories of personal data from all users of spin-galaxy-casino.com:

• Personal Identification Data: Full name, date of birth, residential address, email address, and phone number for account creation, verification, and ongoing service provision.
• Technical and Device Data: IP address, device type, operating system, browser type and version, language settings, and access logs to ensure platform security and optimize user experience.
• Payment and Transaction Data: Payment card details, bank account information, transaction records, withdrawal and deposit history, in compliance with KYC and AML regulations.
• Behavioral Data: Betting and gaming history, wagering patterns, session duration, and clickstream data for responsible gambling monitoring and service improvement.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, analytical cookies, third-party cookies, web beacons, and similar technologies to personalize content and analyze website usage.

All data is collected in accordance with the New Zealand Privacy Act 2020 and industry best practices. Failure to provide certain information may impact your ability to use specific features or services.

Legal Basis for Processing

Our processing of your personal data relies on one or more of the following legal bases:

• User Consent: Voluntary agreement to specific processing activities, such as receiving marketing communications, with the option to withdraw consent at any time via your account dashboard or by contacting us.
• Contractual Necessity: Processing required to establish, manage, and fulfill your account and service obligations (including registration, deposits, withdrawals, and customer support).
• Legitimate Interests: Activities necessary for the lawful operation of spin-galaxy-casino.com, including fraud prevention, IT security, analytics, and improving our services, provided these do not override your fundamental rights.
• Compliance with Legal Obligations: Fulfilling statutory duties under NZ law, such as Know-Your-Customer (KYC), Anti-Money Laundering (AML), financial reporting, and regulatory requests from the New Zealand Gambling Commission.

We ensure that all processing is conducted transparently and in line with applicable legal frameworks, with your rights and interests carefully considered at each stage.

Purpose of Processing

We process your personal data for the following clearly defined purposes:

• Service Provision: To create and manage user accounts, process transactions, verify identity, and provide access to casino games and support services.
• Service Improvement: To analyze user behavior and feedback, enhance website functionality, and personalize content for optimal user experience.
• Marketing and Communication: To send targeted promotions, newsletters, and updates where explicit consent is provided, with clear opt-out mechanisms available at all times.
• Analytics and Research: To monitor platform usage, assess performance, and conduct statistical analysis for business development while employing data minimization and anonymization measures where feasible.
• Fraud Detection and Prevention: To safeguard users and the platform from fraudulent activities, enforce responsible gambling measures, and uphold regulatory compliance obligations.

All processing purposes are aligned with New Zealand privacy requirements and subject to strict internal oversight.

Disclosure & Sharing

Your personal data may be disclosed only where necessary and subject to robust protective measures:

• Payment Partners: Securely shared with authorized payment processors and financial institutions for transaction facilitation and verification, in compliance with PCI DSS standards.
• Service Providers: Disclosed to vetted third-party vendors (IT support, analytics, cloud hosting, security) under binding contractual obligations to safeguard confidentiality and data protection.
• Regulators and Authorities: Provided to the New Zealand Gambling Commission or other competent authorities to fulfill legal obligations, regulatory audits, or investigative requests, including in relation to KYC/AML compliance.
• Affiliates and Advertising Networks: Shared with partners for marketing purposes solely with your explicit consent, and subject to strict data processing agreements.

We do not sell or rent your personal data to third parties. Any onward transfer is conducted with due diligence and in accordance with NZ Privacy Act 2020 and international standards.

International Transfers

Personal data collected via spin-galaxy-casino.com may be transferred to, and processed in, countries outside New Zealand where our service providers, data centers, or partners are located. In such cases, we ensure that:

• Appropriate Safeguards: Data transfers are governed by standard contractual clauses or equivalent legal mechanisms recognized by New Zealand privacy regulators to ensure adequate protection.
• Due Diligence: All overseas recipients are thoroughly assessed for security and privacy compliance, including adherence to ISO/IEC 27001:2013 where applicable.
• User Rights: Your rights and data protection guarantees remain consistent regardless of the data's physical location.

A list of current international data transfer destinations and safeguards is available upon request by contacting the Data Protection Officer.

Data Retention

We retain personal data strictly for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Account and Transaction Data: Retained for up to 5 years after account closure or last activity, in line with AML regulations and regulatory guidance.
• Marketing and Communication Data: Kept until you withdraw consent or as required for legal record-keeping, after which it is securely deleted.
• Cookies and Technical Data: Retention periods vary by type; see Cookies & Tracking section for details.
• Deletion Criteria: Data is erased or irrevocably anonymized upon user request (where permitted), expiry of retention period, or completion of processing purpose, except where further retention is mandated by law.

All retention and deletion processes are subject to rigorous controls and regular review in accordance with the Privacy Act 2020.

Your Rights

As a user of spin-galaxy-casino-new-zealand via spin-galaxy-casino.com, you are entitled to exercise the following rights regarding your personal data, in line with the New Zealand Privacy Act 2020 and aligned with international standards such as the GDPR:

1. Access: Request a copy of your personal data held by us, free of charge, within 30 days of your verified request.
2. Correction: Request rectification of inaccurate or incomplete personal information in your account or records.
3. Deletion ("Right to be Forgotten"): Request erasure of your personal data when no longer required for the original purposes, provided no overriding legal obligation exists to retain it.
4. Restriction of Processing: Request temporary suspension of processing where data accuracy is contested, processing is unlawful, or you require data for legal claims.
5. Objection: Object to processing of your data for direct marketing or on grounds relating to your particular situation.
6. Data Portability: Request provision of your personal data in a structured, commonly used, and machine-readable format for transfer to another provider.
7. Withdrawal of Consent: Withdraw consent for processing activities (such as marketing) at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact our DPO at [email protected] or use the online contact form (https://spin-galaxy-casino.com/contact). We will respond within 30 days and will not charge a fee for reasonable requests. If you are dissatisfied, you may escalate your complaint to the New Zealand Privacy Commissioner or, where applicable, to an EU supervisory authority.

Regional Compliance Note: All user rights and procedures are adapted for New Zealand law, with reference to international privacy principles. For users in other jurisdictions, additional rights may apply as required by local law.

Cookies & Tracking Technologies

spin-galaxy-casino.com uses the following types of cookies and tracking technologies:

• Session Cookies: Temporary cookies that enable core site functions and are deleted upon browser closure.
• Persistent Cookies: Remain on your device for a defined period to remember preferences and login status.
• Third-Party Cookies: Placed by trusted partners (such as analytics and advertising providers) to measure performance and deliver targeted content, subject to your consent.
• Web Beacons and Similar Technologies: Used for aggregate analytics and communication optimization.

You can manage or disable cookies using your browser settings or via the internal privacy panel available on your account dashboard. Disabling certain cookies may affect site functionality. For more details, see the Cookies Policy on spin-galaxy-casino.com.

Data Security

spin-galaxy-casino-new-zealand implements comprehensive security measures to protect your personal data, including:

• Encryption: All data in transit is protected with TLS 1.2+ encryption; sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Multi-factor authentication and strict role-based access controls are enforced for all staff and system access points.
• Security Audits: Regular independent security audits and vulnerability assessments are conducted, with continuous monitoring for threats.
• Staff Training: All personnel receive mandatory data protection and security training tailored to their roles and responsibilities.
• Incident Response: A documented incident response plan is in place, with procedures for breach notification and mitigation in accordance with the NZ Privacy Act 2020.
• International Standards: Our operations are certified to ISO/IEC 27001:2013, and we adhere to best-practice frameworks such as SOC 2 where relevant.

We continually review and enhance our security posture to respond to evolving cyber threats and regulatory requirements.

Complaints & Contacts

If you have questions, concerns, or complaints about how your personal data is handled by spin-galaxy-casino.com, you may contact our Data Protection Officer:

• Email: [email protected]
• Phone: +64 9 123 4567
• Contact Form: https://spin-galaxy-casino.com/contact
• Postal Address: Data Protection Officer, Level 10, 21 Queen Street, Auckland 1010, New Zealand

1. Step 1: Submit your complaint or enquiry using any of the above channels, detailing your concerns and, if relevant, attaching supporting documents.
2. Step 2: The DPO will acknowledge receipt within 5 business days and provide a full response within 30 days of your request, in compliance with the Privacy Act 2020.
3. Step 3: If you are not satisfied with our response, you may escalate your complaint to the New Zealand Privacy Commissioner (https://privacy.org.nz, phone: +64 4 474 7590, email: [email protected]).

For unresolved matters with an international dimension, you may also contact the relevant data protection authority in your jurisdiction.

Updates

We may update this Privacy Policy to reflect changes in legal requirements, business practices, or technology. Users will be notified of material changes at least 30 days in advance via:

• Email notifications to registered users
• Website banners and notifications within the account dashboard

The current version is always available on spin-galaxy-casino.com. Users may object to material changes or close their accounts before the effective date of the update. All changes are documented in a changelog available on request.

Last updated: 6 November 2025

• Changelog: Updated data retention policy, expanded international transfer details, enhanced user rights section for 2025 compliance.