Privacy Policy
1
Who We Are
Spin Casino NZ (spin-casino-nz.org) is an affiliate website connected to Spin Casino, operated by Baytree Entertainment Limited, a company incorporated in Malta, licensed by the Malta Gaming Authority (MGA).
For this Privacy Policy, “we/us/our” refers to the operators of spin-casino-nz.org and, where applicable, the licensed casino platform. “You” refers to any visitor, registered player, or prospective player from New Zealand.
Regulator
Malta Gaming Authority (MGA)
Data Standards
NZ Privacy Act 2020 · GDPR
Security
eCOGRA · SSL 256-bit · PCI DSS
Updated
January 2026
2
What Personal Data We Collect
We collect different categories of data depending on your interaction with our services.
👤 Identity & Account Data
Full name
Date of birth
Gender
Nationality
Email address
Phone number
Residential address
Username and password
Date of birth
Gender
Nationality
Email address
Phone number
Residential address
Username and password
Source: Provided by you during registration. Required to open and maintain a player account.
🪪 Identity Verification Documents (KYC)
Passport or driver licence (photo ID)
Proof of address (utility bill / bank statement, max 3 months old)
Proof of payment method ownership
Source of funds documentation (high-value accounts)
Proof of address (utility bill / bank statement, max 3 months old)
Proof of payment method ownership
Source of funds documentation (high-value accounts)
Source: Requested before your first withdrawal and as required under the AML/CFT Act 2009. Stored on encrypted servers, accessed only by authorised compliance personnel.
💳 Financial & Transaction Data
Deposit and withdrawal amounts and dates
Payment method type and last-4 identifier
Transaction history
Currency preferences (NZD)
Payment method type and last-4 identifier
Transaction history
Currency preferences (NZD)
Important: We do not store full card numbers. Payment data is tokenised and processed by PCI DSS-compliant processors. We hold only a reference token.
🎮 Gaming & Behavioural Data
Betting history
Games played and session duration
Win/loss patterns
Bonus usage
Responsible gambling limit settings
Self-exclusion requests
Games played and session duration
Win/loss patterns
Bonus usage
Responsible gambling limit settings
Self-exclusion requests
Purpose: Used to monitor for problem gambling, personalise recommendations, calculate bonus eligibility, and fulfil MGA obligations. Not sold to third-party advertisers.
💻 Technical & Device Data
IP address
Browser type and version
Operating system
Device identifiers
Login timestamps
Pages visited and time on page
Approximate geolocation (from IP)
Browser type and version
Operating system
Device identifiers
Login timestamps
Pages visited and time on page
Approximate geolocation (from IP)
Source: Automatically collected on visit. Used for fraud prevention, security monitoring, geo-compliance, and service improvement.
3
Why We Use Your Data
We process your personal data only when we have a lawful basis to do so. The table sets out each purpose and legal basis.
| Purpose | Lawful Basis | Data Used |
|---|---|---|
| Register account and provide casino services | Contract | Identity, Contact, Account |
| Process deposits and withdrawals in NZD | Contract | Financial, Transaction |
| Verify identity and age (KYC) under AML/CFT Act 2009 | Legal Obligation | Identity, KYC Documents |
| Detect and prevent fraud, money laundering, and suspicious activity | Legal Obligation | All categories |
| Monitor for problem gambling and enforce responsible gambling limits | Legitimate Interest | Gaming, Behavioural |
| Provide customer support and resolve disputes | Contract | Identity, Contact, Gaming |
| Send promotional communications and bonuses | Consent | Identity, Contact, Gaming |
| Improve platform performance and personalise game recommendations | Legitimate Interest | Technical, Behavioural |
| Comply with MGA reporting and audit obligations | Legal Obligation | All categories |
You can withdraw consent for marketing at any time via Settings or by contacting support. This does not affect processing based on other lawful bases.
4
Who We Share Your Data With
We do not sell your personal data. We share it only where necessary to provide services, fulfil legal obligations, or prevent fraud. All third parties are contractually required to handle your data securely.
💳
Payment Processors
Visa, Mastercard, Skrill, NETELLER and others receive only the financial data necessary to process your transaction. All are PCI DSS Level 1 certified.
🪪
Identity Verification Services (KYC)
Third-party KYC providers verify identity documents as required under the AML/CFT Act 2009. They may only use data for verification — no other purpose permitted.
🏛️
Regulatory Authorities
We are legally required to share information with the Malta Gaming Authority, and may report to New Zealand’s Department of Internal Affairs Financial Intelligence Unit under AML/CFT obligations, and in response to valid court orders.
🎮
Game Software Providers
Providers such as Microgaming and Evolution receive only aggregated, anonymised gameplay data for RNG certification and performance auditing. They do not receive your personally identifiable information.
📊
Analytics Providers
We use third-party analytics tools which collect anonymised usage data. This does not include your name, email, or financial information.
📧
Marketing Partners (consent only)
If you have opted in to marketing, we may share your name and email with affiliated marketing partners. You can opt out at any time via Settings or by contacting support.
5
Cookies & Tracking Technologies
We use cookies and similar technologies to operate the platform, remember your preferences, and analyse usage. You can manage cookie preferences via your browser settings.
| Type | Purpose | Duration | Opt out? |
|---|---|---|---|
| Essential | Keep you logged in, enable core functionality | Session | No |
| Functional | Remember language, currency, and game preferences | Up to 12 months | Yes |
| Analytics | Anonymised usage data to improve the platform | Up to 24 months | Yes |
| Marketing | Track referrals from affiliates, deliver relevant offers | Up to 30 days | Yes |
| Security | Detect suspicious behaviour, prevent bot activity | Session | No |
To manage cookies: Chrome — Settings › Privacy and Security › Cookies; Safari — Settings › Privacy › Block All Cookies. Disabling essential cookies will prevent login.
6
How Long We Keep Your Data
We retain personal data only as long as necessary to fulfil the purpose collected, or as required by law.
7
Your Privacy Rights
Under the NZ Privacy Act 2020 and GDPR, you have the following rights. All are free to exercise. We respond within 20 working days (NZ) or 30 days (GDPR).
✅ Right of Access
Request a copy of all personal data we hold about you in a structured, portable format.
✏️ Right to Correction
Request correction of inaccurate or incomplete data. Some details can be updated directly in account settings.
🗑️ Right to Erasure
Request deletion where there is no legal reason to retain it. AML/CFT retention requirements (5 years) may prevent full erasure of some records.
📦 Right to Portability
Request your data in a portable electronic format to transfer to another provider. Available for data you provided directly.
🚫 Right to Object
Object to processing based on legitimate interest, including profiling for marketing. Withdraw marketing consent any time in settings.
⏸️ Right to Restriction
Request we restrict processing while a complaint is being resolved, without deleting data.
📋 How to exercise your rights
Email [email protected] or use live chat in your account. Include your registered email and a description of your request. We may ask you to verify your identity.
8
How We Protect Your Data
We implement technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
🔒
256-bit SSL Encryption
All data in transit is encrypted using TLS/SSL protocols.
💳
PCI DSS Compliance
Payment data processed by PCI DSS Level 1 certified providers. No full card numbers stored on our servers.
🛡️
eCOGRA Certified
Independent third-party auditors regularly test and certify our systems for security and data protection compliance.
👤
Access Controls
Role-based access limits which staff can view personal data. KYC documents accessible only to authorised compliance personnel.
⚠️ Data Breach Notification
In the event of a breach posing risk to your rights, we will notify the Office of the Privacy Commissioner (NZ) within 72 hours and inform affected players without undue delay, as required by the NZ Privacy Act 2020 and GDPR.
9
Contact Us & Complaints
For questions about this Privacy Policy, to exercise your data rights, or to make a complaint about how we handled your personal data, contact us below.
📧 Privacy Enquiries
💬Live chat in your account dashboard
⏱️Response within 20 working days (NZ) / 30 days (GDPR)
🏛️ Regulatory Complaints
If unsatisfied with our response, you may complain to:
▸Office of the Privacy Commissioner NZ — privacy.org.nz · 0800 803 909
▸Malta Gaming Authority — mga.org.mt
📝 Policy Updates
We may update this policy to reflect changes in our practices or legal requirements. When we make material changes, we will notify registered players via email and/or a prominent notice in your account. Continued use of the platform after notification constitutes acceptance of the updated policy.
Spin Casino NZ · spin-casino-nz.org · Privacy Policy effective January 2026
MGA Licensed · NZ Privacy Act 2020 · GDPR · AML/CFT Act 2009 (NZ)
18+ only · Gamble responsibly · Problem Gambling Foundation NZ: 0800 664 262
MGA Licensed · NZ Privacy Act 2020 · GDPR · AML/CFT Act 2009 (NZ)
18+ only · Gamble responsibly · Problem Gambling Foundation NZ: 0800 664 262
