Full name, date of birth, email address, username, password (encrypted), country of residence, phone number, and preferred currency (NZD).

Payment method details (card type, last 4 digits, e-wallet account reference), transaction history, deposit and withdrawal amounts. We do not store full card numbers — these are processed by PCI-DSS compliant payment providers.

Government-issued photo ID (passport, driver’s licence), proof of address (utility bill, bank statement), and in some cases source of funds documentation. This is required by our licensing obligations.

IP address, browser type and version, device type, operating system, session duration, pages visited, games played, betting history, and login timestamps.

Records of live chat conversations, support emails, and any correspondence with our team. This helps us resolve disputes and improve our service.

Account management: Creating, maintaining, and securing your player account; processing deposits and withdrawals; providing customer support.

Legal & regulatory compliance: Verifying player identity (KYC/AML), confirming legal age (20+ in NZ), meeting anti-money laundering obligations, and complying with our Curaçao licence requirements.

Fraud prevention and security: Detecting suspicious activity, preventing unauthorised access, identifying multiple accounts, and protecting financial transactions.

Responsible gambling: Monitoring gameplay patterns, identifying signs of problem gambling, applying account limits, and communicating with players who may need support.

Marketing communications: Sending promotional offers, bonus notifications, and news — only where you have consented or where we have a legitimate interest. You may opt out at any time.

Service improvement: Analysing usage data to improve game offerings, user experience, and website performance.

Processing necessary to perform the contract you entered by registering an account and accepting our Terms of Service.

Processing required to comply with AML laws, KYC requirements, gaming licence obligations, and applicable financial regulations.

Fraud prevention, security monitoring, service improvement, and responsible gambling monitoring — where our interests do not override your rights.

Marketing communications and non-essential cookies — where we rely on your explicit consent, which you may withdraw at any time.

Payment processors: To facilitate deposits and withdrawals. All payment partners are PCI-DSS compliant and operate under their own privacy frameworks.

Identity verification providers: Third-party KYC services used to verify your identity and comply with anti-money laundering regulations.

Game providers: Software providers whose games are offered on our platform may receive anonymised game session data for technical and audit purposes.

Regulatory authorities: We may be legally required to disclose your data to gaming regulators, law enforcement, or financial intelligence units under applicable law.

Analytics & fraud prevention: Technology partners who help us detect fraud, protect the platform, and analyse site performance. These partners are contractually bound to data protection standards.

Session cookies required for login, security, and core site functions. Cannot be disabled.

Remember your language preference, currency, and display settings between visits.

Track page visits and user journeys to help us understand how the site is used and improve the experience.

Used by affiliate partners to track referrals. Only activated with your consent via the cookie banner.

Request a copy of all personal data we hold about you. We will respond within 30 days.

Request correction of any inaccurate or incomplete personal data we hold about you.

Request deletion of your data where there is no legal obligation to retain it (e.g., marketing data).

Request we stop processing your data in certain circumstances while a dispute is resolved.

Receive your personal data in a structured, machine-readable format to transfer to another service.

Object to processing based on legitimate interests, including direct marketing. Opt out of marketing emails at any time via the unsubscribe link.

256-bit SSL/TLS encryption on all data transmissions between your browser and our servers.

Password hashing — your password is never stored in plain text. We use bcrypt hashing with salt.

Access controls — employee access to personal data is limited on a strict need-to-know basis.

Regular audits — our security practices and data handling procedures are reviewed periodically.