Highroller Casino New Zealand Privacy Policy
Highroller processes personal data as required by New Zealand law, adhering to industry-standard security measures for protection.
This Privacy Policy outlines the data protection practices of Highroller Casino in relation to its services offered to players in New Zealand. The document exists to inform users about the collection, use, storage, and protection of their personal information. It explains the legal bases for processing data, including compliance with statutory obligations, the performance of contractual agreements for account management, and the pursuit of legitimate operational interests. The policy details the types of information processed, security measures implemented, and the rights available to individuals regarding their data. Transparency in data handling is a fundamental principle, and this policy serves as the formal disclosure of those procedures.
Data Collection and Categories of Personal Information Processed
Highroller Casino collects and processes personal data necessary for the provision of its services, regulatory compliance, and business operations. This information is obtained directly from the user during interactions with our platform, such as registration, financial transactions, and customer support communications, and indirectly through automated technical means.
The primary categories of personal data processed include, but are not limited to, the following types. Registration and identity verification details encompass full name, date of birth, contact information, and proof of identity and address documents. Financial and transactional data includes payment method details, deposit and withdrawal records, and game transaction history. Technical and usage data covers IP address, device identifiers, browser type, operating system, pages visited, and gameplay patterns. Compliance records consist of communications with customer support, responsible gambling interactions, and records maintained to meet legal duties under New Zealand law and the licensing authority.
Information may also be collected during the Highroller Casino download process for the desktop application, including system information to ensure software compatibility. Data related to promotional participation, such as the use of a Highroller Casino no deposit bonus code, is recorded to manage bonus terms and prevent abuse.
Legal Bases and Purposes for Processing Personal Data
The processing of personal data by Highroller Casino is conducted on defined lawful bases as required by applicable data protection principles. Each processing activity is linked to a specific purpose and legal justification.
The performance of a contract with the data subject is the basis for processing necessary to create and manage a user account, facilitate deposits and wagers, provide customer support, and award winnings. Compliance with a legal obligation mandates processing for age and identity verification, anti-money laundering checks, responsible gambling interventions, and tax reporting as required by New Zealand regulations. Legitimate interests pursued by the data controller form the basis for processing aimed at fraud prevention, network and information security, system administration, and direct marketing concerning similar services, where such interests are not overridden by the user's rights. Consent may be sought for specific optional processing activities, such as certain marketing communications, and can be withdrawn at any time.
Data is used to operate the Highroller Casino NZ platform, process transactions, maintain account security, and fulfill regulatory duties. Analysis of technical and gameplay data assists in system maintenance, fraud detection, and service improvement.
Data Storage Protocols, Security Safeguards, and Retention Periods
Highroller Casino implements technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Data is stored on secure servers located in jurisdictions with adequate data protection standards, as assessed by relevant authorities.
Security measures include encryption of data in transit and at rest, strict access controls limited to authorised personnel on a need-to-know basis, and regular security assessments. Network infrastructure is protected by firewalls and intrusion detection systems. Specific security protocols apply to financial data and sensitive identification documents.
Data retention periods are determined by the purpose for which the information is processed and relevant legal and regulatory requirements. A typical retention framework is outlined below.
| Data Category | General Retention Principle |
|---|---|
| Account and Identity Records | Retained for the duration of account activity and for a mandatory period post-account closure as required by licensing and financial regulations. |
| Financial Transaction Data | Retained for a minimum period as stipulated by anti-money laundering and financial reporting laws in New Zealand. |
| Technical Logs and Compliance Records | Retained for periods necessary for security, fraud investigation, and regulatory compliance purposes. |
| Marketing Preference Data | Retained until consent is withdrawn or the user opts out. |
Upon expiry of the applicable retention period, data is securely archived or permanently deleted using methods that prevent reconstruction. Data may be shared with affiliated entities, described as Highroller Casino sister sites, under common ownership for operational purposes, subject to the protections outlined in this policy.
Individual Rights and Procedures for Data Subject Requests
Individuals residing in New Zealand have certain rights regarding their personal data held by Highroller Casino. The exercise of these rights is subject to verification of the requester's identity and may be limited in specific circumstances where legal exceptions apply.
The rights afforded to data subjects include the following. The right of access allows individuals to request confirmation of whether their data is being processed and to obtain a copy of that data. The right to rectification permits the correction of inaccurate or incomplete personal data. The right to erasure enables a request for the deletion of personal data under specific conditions, such as where the data is no longer necessary for the purposes collected. The right to restriction of processing allows individuals to limit the way their data is used in certain scenarios. The right to object to processing based on legitimate interests, including direct marketing, is available. The right to data portability provides for receiving personal data in a structured, commonly used format for transfer to another controller, where processing is based on consent or contract.
To initiate a request pertaining to any of these rights, individuals must contact the Data Protection Officer using the designated contact method provided separately. All requests will be processed within the timeframes stipulated by law. A reasonable fee may be charged for manifestly unfounded or excessive requests. Highroller Casino will inform the individual of any reasons for denying a request, where applicable.