Kiwi Treasure Privacy Policy

What we collect

When you browse our site, we automatically gather technical data including your IP address, browser type, operating system, pages visited, visit duration and referring page. This data comes from standard server logs and analytics tools.

When you open an account, we collect the information required to operate it: your name, date of birth, address, email, phone number, payment details and identity verification documents required by our licence and anti-money-laundering obligations.

We also record your activity on the site: deposits, withdrawals, bets, game selections, bonus opt-ins and any limits or self-exclusion settings you configure.

Who we are

Kiwi Treasure is a licensed online casino. We are the data controller for personal information collected through the site and through your player account.

If you have a question about this policy, contact us at support@kiwistreasure.org.

How we use your data

Account data is used to operate your account, process deposits and withdrawals, settle bets, run promotions and meet our legal obligations including KYC and anti-money-laundering checks.

Technical data is used to operate the site, prevent abuse, troubleshoot issues and measure traffic. Analytics data is aggregated and anonymised, used to understand which pages are useful and where improvements can be made.

Cookies and tracking technologies

We use cookies to remember your preferences such as cookie consent, keep you signed in, secure the session and measure site usage through analytics. Our Cookie Policy lists every cookie in detail.

You can refuse non-essential cookies on your first visit through the consent banner. You can update your preferences at any time through the cookie settings link in the footer.

Where your data is stored

Our infrastructure runs across data centres that may be located in multiple regions, including the European Union, the United States, Australia and Singapore. We select providers that meet recognised privacy and security standards.

How we share your data

We do not sell your data. We share limited data with payment processors, identity verification providers, game studios, our hosting provider, analytics provider and email service. Each provider handles data under their own privacy policies, which we have reviewed for compliance.

We may disclose data if required by law, by court order, or to meet regulatory obligations. We will not disclose data to third parties for marketing purposes without your consent.

Security measures

All traffic between your browser and our servers is encrypted using TLS 1.2 or higher. Account passwords are stored using a one-way salted hash, meaning even our engineers cannot read them. Identity documents and KYC images are held on a segregated, access-controlled storage layer not reachable from public-facing services.

We monitor for unusual login activity and challenge suspicious sessions with additional verification steps. If we detect a potential breach affecting your data, we follow the notification timelines required by applicable privacy law.

How long we keep your data

Server logs are retained for 90 days. Analytics data is retained for up to 26 months in aggregated form. Account and transaction data is retained for the period required by our licence and applicable law, typically a minimum of 5 years after the account is closed.

Your rights

Under applicable privacy law, you have the right to ask what personal information we hold about you, to correct inaccurate information, and to ask us to delete it where we are not required to keep it for regulatory reasons. Email support@kiwistreasure.org to make a request. We will respond within 20 working days.

If you are not satisfied with how we handle a privacy concern, you can contact your local privacy regulator.

Players under the legal age

This site is intended for adults aged 20 and over, in line with the New Zealand legal age for our products. We do not knowingly collect data from anyone under 20. If you believe a minor has submitted personal data through our site or opened an account, contact us and we will close the account and delete the data within our regulatory obligations.

Marketing communications

We send promotional emails only to players who have opted in. Each email includes an unsubscribe link, and you can also disable marketing entirely from the communications screen in your account. Self-exclusion and account closure both stop marketing emails within five business days.

We do not pass your contact details to third parties for their own marketing. Where we run a campaign through an advertising network, the network sees only an anonymised audience identifier, never your name, email or playing activity.

Players in New Zealand and the Privacy Act 2020

Although our licence sits in Alderney, we treat our New Zealand players' personal information in line with the principles of the Privacy Act 2020. That means collecting only what we need, explaining why we collect it, keeping it accurate, holding it securely and providing a clear way to access or correct it. If you live in New Zealand and feel a privacy concern has not been resolved by us, you can also raise it with the Office of the Privacy Commissioner at privacy.org.nz.

Where we transfer NZ player data outside New Zealand for hosting, payment processing or KYC, we use providers that operate to comparable privacy standards. The destinations are typically Australia, the European Union and the United States.

Your marketing choices in New Zealand

If you are subscribed to our marketing emails or SMS and want to opt out, you can unsubscribe from any message we send or turn off marketing entirely from the communications screen in your account. We will action the change within five business days. Operational messages such as deposit confirmations, withdrawal updates and security alerts continue regardless of marketing settings because they are required for safe account operation.

We do not purchase player contact details from third parties or send unsolicited marketing to people who have not opened a Kiwi Treasure account. If you receive an email claiming to be from us that you did not expect, forward it to support@kiwistreasure.org so we can investigate.

Updates to this policy and how to contact us

We may update this policy from time to time. The current version is always shown at the top of this page along with the date last updated. Material changes will be highlighted in the cookie consent banner on your next visit. For any privacy-related question, email support@kiwistreasure.org or use the contact details on our Contact page.