Privacy Policy

Last updated: 24/02/2026

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use luckygreencasino-nz.com (the “Website”) and our related gambling services (the “Services”).

For the purposes of applicable data protection laws, including the New Zealand Privacy Act 2020 and the European Union General Data Protection Regulation (“GDPR”) where it applies, we act as the “data controller” of your personal information. This means we determine the purposes and means of processing your personal data.

We are legally required to process certain personal data in order to:

Provide and operate remote gambling services;
Comply with anti-money laundering and countering financing of terrorism (“AML/CFT”) obligations;
Comply with responsible gambling and other regulatory requirements.

By registering an account on luckygreencasino-nz.com, using the Website, or otherwise submitting personal information to us, you acknowledge and, where required, consent to the processing of your personal data in accordance with this Privacy Policy. Where we rely on consent as our legal basis, you may withdraw your consent at any time (see “Your Rights & Contacting Us” below), although this may affect our ability to provide you with some or all of the Services.

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us at: [email protected]

Information We Collect

We collect and process different categories of personal information to operate our Services and meet our legal and contractual obligations.

1. Identification and Contact Details

Full name
Date of birth and age verification data
Residential address and country of residence
Email address
Telephone number
Username and password
Account number and related identifiers

2. Account and Gaming Information

Registration details and account preferences
Login timestamps and login history
Game play history (e.g., games played, session duration, outcomes)
Betting and wagering records
Bonuses claimed and promotional participation
Responsible gambling settings (e.g., limits, self-exclusion)

3. Financial and Transaction Data

Payment method details (e.g., partial card number, e-wallet details; we do not store full card data where not required)
Deposit and withdrawal history
Currency and account balance
Records of chargebacks, refunds, and disputed transactions
Transaction identifiers from payment providers

4. Verification and KYC Documentation

To satisfy AML/CFT, age, and identity verification requirements, we may collect:

Copy of a government-issued identity document (e.g., passport, driver’s licence, national ID)
Proof of address (e.g., utility bill, bank statement)
Proof of source of funds or source of wealth documentation, where required by law or regulation
Sanctions and politically exposed person (“PEP”) screening results (where applicable)

5. Technical and Usage Data

When you access the Website, we automatically collect certain technical data, including:

IP address and approximate geolocation
Device identifiers (e.g., device ID, operating system, browser type and version)
Language settings
Access times, pages viewed, click-stream data, referral URLs
Cookies and similar tracking technologies (see “Cookie Policy” below)
Log files and system audit logs for security and compliance

6. Correspondence and Customer Support

Records of your communications with us (email, live chat, support tickets)
Call recordings (where applicable and permitted by law)
Internal notes created by our customer support or risk teams relating to your account

7. Marketing and Preference Data

Your subscription preferences (e.g., email, SMS, push notifications)
Information about your response to marketing communications (e.g., open rates, click-throughs)
Data collected from surveys, feedback forms, or promotions you participate in

How We Use Your Information

We process your personal information for the following purposes and on the following legal bases (contractual necessity, legal obligation, legitimate interests, or consent):

Account creation and management
To register your account, verify your eligibility, and maintain your profile.
Legal basis: Contract; Legal obligation.
Provision of gambling services
To process your bets, wagers, and game outcomes.
To manage deposits, withdrawals, and account balances.
Legal basis: Contract.
Customer support
To respond to your queries and requests.
To troubleshoot technical and account issues.
Legal basis: Contract; Legitimate interests (service quality).
Identity verification, AML/CFT, and regulatory compliance
To verify your identity, age, address, and location.
To conduct KYC checks, transaction monitoring, and risk assessments.
To comply with gambling, AML/CFT, sanctions, and other regulatory obligations.
Legal basis: Legal obligation; Public interest; Legitimate interests (fraud prevention).
Fraud prevention and security
To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities.
To secure our systems, prevent unauthorized access, and ensure network integrity.
Legal basis: Legal obligation; Legitimate interests (security and integrity).
Responsible gambling
To monitor gameplay patterns to identify potential problematic gambling behavior.
To implement self-exclusion, limits, and other responsible gambling tools.
Legal basis: Legal obligation; Public interest; Legitimate interests (player protection).
Marketing and promotions
To send you offers, bonuses, and promotional information about our products and services, where permitted by law.
To personalize marketing based on your preferences and usage.
Legal basis: Consent or Legitimate interests (where local law allows).
Analytics, research, and service improvement
To analyze Website usage and performance.
To develop new features, games, and services.
To conduct statistical analysis and reporting (in aggregated or pseudonymized form where possible).
Legal basis: Legitimate interests (service improvement; business intelligence).
Legal claims and enforcement
To establish, exercise, or defend legal claims.
To enforce our Terms and Conditions and other agreements.
Legal basis: Legitimate interests; Legal obligation.

Marketing Communication

We may use your contact details to send you marketing communications about:

New games, features, and services;
Bonuses, promotions, and loyalty programmes;
News and updates regarding the Website.

We will only send electronic marketing communications:

With your consent where required by law; or
Where you are an existing customer and local law allows marketing based on our legitimate interests.

How to Opt Out

You can opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email;
Adjusting your communication preferences in your account settings (where available);
Contacting us at [email protected].

Opting out of marketing does not affect service-related communications (e.g., account notices, transactional emails, regulatory notices).

Obtaining Personal Information

We collect personal information from the following sources:

Directly from you
When you register, log in, play games, make deposits or withdrawals.
When you communicate with us via email, chat, or support channels.
When you participate in surveys, promotions, or competitions.
Automatically through your use of the Website
Via cookies and tracking technologies.
Through server logs and analytics tools.
From third-party providers and public sources
Identity and verification service providers.
Payment service providers, banks, and financial institutions.
Fraud and risk management service providers.
Sanctions and PEP databases, credit reference agencies (where applicable).
Game and platform providers with whom we interact for the provision of Services.

We only obtain information from third parties in a manner consistent with applicable law and this Privacy Policy.

Data Recipients

Within our organisation and group entities (if any), access to your personal data is restricted to staff who need it to perform their duties, including:

Customer support teams;
Payments and finance staff;
Compliance, risk, and AML/CFT officers;
IT, security, and technical operations teams;
Marketing and CRM teams (subject to preferences and legal requirements);
Management and internal audit.

All such staff are subject to confidentiality obligations and trained in data protection and security where appropriate.

Releasing Data to Third Parties

We may share your personal information with third parties in the following circumstances:

Payment and financial service providers
To process deposits, withdrawals, and related financial transactions.
To detect and prevent fraud and verify payment details.
Game and software providers
To enable gameplay, process bets, display results, and ensure platform functionality.
Verification and AML/CFT service providers
To verify your identity, conduct KYC, sanctions, and PEP checks.
To perform transaction monitoring and risk analysis.
IT, hosting, and infrastructure providers
For website hosting, data storage, backup, and technical operations.
Analytics and marketing partners
To perform analytics and improve our services.
To deliver or manage marketing campaigns where permitted by law and in accordance with your preferences.
Professional advisors
Lawyers, auditors, consultants, and other professional service providers who require access for legitimate business or legal reasons.
Regulators, law enforcement, and other authorities
Where required or permitted by law, regulation, court order, or regulatory directive.
To report suspicious activities under AML/CFT obligations.
To cooperate with responsible gambling and other relevant authorities.
Business transfers
In the event of a merger, acquisition, sale of assets, restructuring, or insolvency, your data may be transferred to relevant third parties, subject to appropriate safeguards.

We do not sell your personal data to third parties for their independent marketing purposes.

Where personal data is transferred to recipients located outside New Zealand or the European Economic Area (EEA), we will ensure that such transfers comply with applicable data protection laws, for example, by using standard contractual clauses or equivalent safeguards.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with:

Legal and regulatory requirements (including AML/CFT and gambling regulations);
Our contractual obligations; and
Our legitimate business needs (e.g., bookkeeping, resolving disputes).

In many cases, this means we must retain certain records for a minimum of 5 years after the end of your relationship with us or from the date of the last transaction, in line with AML/CFT and regulatory obligations. Some information may be retained longer where required by law or necessary in connection with legal claims.

Once the mandatory retention period has expired and there is no longer a lawful basis to keep your data, we will either:

Securely delete or destroy the data; or
Irreversibly anonymise it so it can no longer be linked to you.

Right to Erasure After Retention Period

Subject to applicable legal and regulatory restrictions, you have the right to request the deletion of your personal data once we are no longer legally required to retain it. See “Your Rights & Contacting Us” below for more details.

Security of Your Data

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, as appropriate:

Secure login credentials (username and password) and access controls;
Encryption of data in transit (e.g., TLS/SSL) and, where applicable, at rest;
Firewalls, intrusion detection, and other network security measures;
Segregation of duties and role-based access to personal data;
Regular security assessments, monitoring, and system updates;
Secure data backup and disaster recovery procedures;
Staff training on data protection, confidentiality, and security.

Whilst we strive to protect your data, no system can be guaranteed as 100% secure. You are responsible for:

Keeping your password confidential;
Logging out of your account after use;
Not sharing your login details with any third party.

Your Rights & Contacting Us

Subject to applicable law (including the New Zealand Privacy Act and, where applicable, the GDPR), you may have the following rights regarding your personal information:

Right of access To obtain confirmation of whether we process your personal data and to receive a copy of that data.
Right to rectification To request correction of inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”) To request deletion of your personal data where:
It is no longer necessary for the purposes for which it was collected;
You withdraw consent (where processing is based on consent) and there is no other legal ground;
You object to processing and no overriding legitimate grounds exist; or
Deletion is required by law. This right is subject to legal and regulatory retention requirements (see “Data Retention”).
Right to restriction of processing To request that we limit the processing of your personal data under certain circumstances (e.g., while a dispute about accuracy is resolved).
Right to data portability (where applicable under GDPR) To receive certain personal data in a structured, commonly used, machine-readable format and to have that data transmitted to another controller where technically feasible.
Right to object To object to processing based on our legitimate interests, including profiling, and to object at any time to the use of your personal data for direct marketing.
Right to withdraw consent Where we rely on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

Exercising Your Rights

To exercise any of these rights or to ask questions about this Privacy Policy, please contact us at: [email protected]

We may need to verify your identity before responding to your request. We aim to respond within the timeframes required by applicable law.

Right to Lodge a Complaint

If you are located in New Zealand, you have the right to lodge a complaint with the Office of the Privacy Commissioner.

If you are located in the European Union/EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

We encourage you to contact us first so we can attempt to resolve any concerns directly.

Cookies are small text files stored on your device when you visit the Website. We use cookies and similar technologies to ensure the Website functions properly and to improve your experience.

Types of Cookies We Use

Essential (Strictly Necessary) Cookies
Required for the operation of the Website and Services.
Enable core features such as secure login, session management, and payment processing.
Without these cookies, the Website may not function correctly.
These cookies cannot generally be disabled via our systems.
Functional (Preference) Cookies
Remember your preferences (e.g., language, region).
Enhance your user experience and personalize content.
If you disable these cookies, some features or preferences may not be saved.
Analytics and Performance Cookies
Collect information about how visitors use the Website (e.g., pages visited, time spent).
Help us improve Website performance, usability, and content.
Data is usually aggregated and not used to identify you personally.
Advertising and Targeting Cookies
Used to deliver relevant advertisements based on your interests and activity.
Limit the number of times you see a particular ad and measure campaign effectiveness.
May be set by us or by our advertising partners.

Managing Cookies

You can manage or disable cookies through:

Your browser settings (e.g., blocking or deleting cookies); and/or
Any cookie consent tools we provide on the Website, where applicable.

Please note that if you block or delete certain cookies, some parts of the Website or Services may not function properly.

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices. Any changes will be posted on this page with an updated “Last updated” date. Your continued use of the Website after such changes constitutes your acknowledgement of the updated policy.