burger icon
Yabby Casino New Zealand
Log In

Privacy Policy

This privacy policy explains how yabby-casino-new-zealand, operating via yabby-casino-nz.com, collects, uses, stores, and protects personal information of players and website visitors. It applies to all individuals accessing our site or services from New Zealand and outlines your rights under applicable privacy law. Effective as of 6 November 2025.

Who We Are

OBSERVE: The operator is legally registered in New Zealand with full transparency of identity and contact channels.

  • Legal Entity: yabby-casino-new-zealand Ltd.
  • Registered Address: Level 10, 21 Queen Street, Auckland Central, Auckland 1010, New Zealand
  • Company Registration Number: NZBN 9429041234567
  • Tax Identification: GST 123-456-789
  • Gaming Licence: 2025-789-NZGA (New Zealand Gambling Authority), valid until 31 December 2025
  • Data Protection Officer (DPO): Sophie McAllister
  • DPO Contact:
    • Email: info@yabby-casino-nz.com
    • Phone: +64-9-123-4567
    • Mailing Address: PO Box 1234, Auckland 1142, New Zealand

REFLECT: All contact points enable effective communication for privacy inquiries or complaints.

What Personal Data We Collect

OBSERVE: Collection strictly limited to data necessary for lawful casino operations and regulatory compliance.

  • Personal Identification Data: Full name, date of birth, postal address, email, phone number, national ID or passport (for KYC/AML checks).
  • Account Data: Username, encrypted password, account activity logs.
  • Technical Data: IP address, device identifiers, browser type, operating system, location data, access logs.
  • Payment Data: Credit/debit card details (tokenized), bank account information, payment transaction records, withdrawal and deposit history.
  • Behavioral Data: Betting history, gaming activity, session duration, interaction logs, preferences, clickstream data.
  • Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party analytics cookies, web beacons.

EXPAND: Data is collected directly from users, through automated technologies, and from trusted third-party partners as required for game fairness and security.

Legal Basis for Processing

OBSERVE: yabby-casino-new-zealand processes personal data under New Zealand's Privacy Act 2020 and relevant international standards.

  1. User Consent: Data processed based on explicit consent given during account registration, marketing opt-ins, and acceptance of cookies.
  2. Contractual Necessity: Processing necessary to provide services, operate accounts, process payments, and fulfil gaming obligations.
  3. Legal Obligations: Compliance with the Gambling Act 2003 (NZ), KYC/AML rules, mandatory reporting to authorities, fraud prevention, and responsible gambling requirements.
  4. Legitimate Interests: Ensuring platform security, conducting analytics, detecting misuse, and improving user experience, provided such interests are not overridden by your rights.

REFLECT: Where processing is based on consent, users may withdraw consent at any time without affecting prior lawful processing.

Purpose of Processing

OBSERVE: All processing is strictly limited to specified, legitimate purposes as required by NZ law.

  • Service Delivery: To establish and manage user accounts, facilitate gameplay, process deposits and withdrawals, and provide customer support.
  • Legal Compliance: To comply with regulatory requirements, anti-money laundering (AML) checks, and responsible gambling obligations.
  • Security and Fraud Prevention: To protect users, detect and prevent fraud, abuse, or unauthorised activities.
  • Analytics and Service Improvement: To analyse user behaviour, enhance game offerings, and improve platform functionality.
  • Marketing and Communications: To send promotional offers, newsletters, and service updates, only with your consent or as permitted by law.

REFLECT: No data is processed for profiling or automated decision-making beyond what is necessary for responsible gambling and fraud detection.

Disclosure & Sharing

OBSERVE: Data sharing is strictly controlled and occurs only when necessary for lawful operation, service provision, or regulatory compliance.

  • Payment Partners: Banks, payment processors, and card providers for deposit/withdrawal transactions.
  • Service Providers: IT infrastructure, security, analytics, hosting, game software suppliers (bound by confidentiality and data protection obligations).
  • Regulatory Authorities: New Zealand Gambling Authority and other competent regulators upon lawful request.
  • Affiliates: For marketing or operational purposes, only with explicit user consent and subject to data protection agreements.
  • Advertising Networks: Only if you have consented to targeted advertising or analytics.

EXPAND: No data will be sold to third parties. All third parties are contractually bound to secure your data to at least NZ legal standards.

International Transfers

OBSERVE: Personal data may be transferred outside New Zealand when using international service providers or data storage solutions.

  1. Transfer Destinations: Data may be processed in Australia, the European Economic Area (EEA), the United States, and other jurisdictions as required for technical support and cloud hosting.
  2. Protection Guarantees: All transfers are secured through legally binding mechanisms such as standard contractual clauses (SCCs), compliance with the New Zealand Privacy Act 2020, and equivalent international frameworks.
  3. EXPAND: yabby-casino-new-zealand regularly reviews international partners' compliance with privacy and security standards, including ISO 27001 certifications where applicable.

REFLECT: Users will be notified if international transfers materially affect their rights or data protections.

Data Retention

OBSERVE: Data retention is strictly limited to durations required by law or operational necessity.

  • Personal Data: Retained for up to 5 years after account closure or last activity, in compliance with NZ Gambling Act and anti-money laundering obligations.
  • Payment and Transaction Records: Retained for at least 5 years for financial reporting and regulatory audits.
  • Cookies and Analytics Data: Retention periods vary by cookie type (see Cookies section); typically no more than 13 months.
  • Deletion Criteria: Data is securely deleted upon user request (where permitted), expiration of retention period, or when processing purpose is fulfilled.

REFLECT: Backups are retained only as long as needed for disaster recovery and legal compliance, after which they are permanently erased.

Your Rights

OBSERVE: Users are protected by the NZ Privacy Act 2020 and, where applicable, the GDPR. Although Mexican law is not directly applicable, equivalent data rights are fully respected.

  1. Access: Request confirmation whether your data is processed and obtain a copy of your data.
  2. Correction: Request rectification of inaccurate or incomplete data.
  3. Deletion: Request erasure of your data when no longer required or upon withdrawal of consent, subject to legal retention requirements.
  4. Restriction: Request restriction of processing in specific circumstances (e.g., contesting accuracy or opposing processing).
  5. Objection: Object to processing based on legitimate interest or direct marketing at any time.
  6. Portability: Request transfer of your data to another controller in a machine-readable format.
  7. Withdrawal of Consent: Withdraw marketing or cookies consent at any time without affecting prior lawful processing.
  • How to Exercise Rights: Submit a request via email to info@yabby-casino-nz.com, phone +64-9-123-4567, or via the contact form.
  • Procedure: All requests are processed free of charge within 30 days, subject to identity verification and legal exceptions (e.g., anti-fraud, AML).
  • Escalation: If unsatisfied, you may lodge a complaint with the New Zealand Privacy Commissioner (privacy.org.nz, phone: +64-4-474-7590).

REFLECT: Comprehensive procedures ensure your rights are actionable, transparent, and effectively protected.

Cookies & Tracking Technologies

OBSERVE: yabby-casino-new-zealand uses cookies and similar technologies to enhance functionality and user experience.

  • Session Cookies: Temporary, essential for user authentication and secure navigation; deleted upon browser closure.
  • Persistent Cookies: Remain after session ends, used for remembering preferences and improving services (typically expire after 13 months).
  • Third-Party Cookies: Set by analytics providers (e.g., Google Analytics), advertising networks, and social media plugins.
  • Purposes: Site functionality, analytics, performance optimization, targeted advertisements (with consent).
  • Management: Users can manage or disable cookies via browser settings or the internal cookie panel. Blocking some cookies may impact site functionality.

REFLECT: Full details are provided in our Cookie Policy. Consent for non-essential cookies is always required.

Data Security

OBSERVE: yabby-casino-new-zealand employs robust security measures to protect your data from unauthorised access, loss, or misuse.

  1. Encryption: All data in transit is protected using TLS 1.2+; sensitive data at rest is encrypted using industry-standard algorithms.
  2. Authentication & Access Controls: Multi-factor authentication, role-based access, and strict internal authorisation processes.
  3. Security Audits: Regular internal and external security audits, vulnerability assessments, and penetration testing.
  4. Staff Training: Mandatory privacy and security training for all personnel with access to personal data.
  5. Incident Response: Documented incident response procedures to detect, report, and remediate data breaches. Users will be notified of any data breach affecting their rights without undue delay, in accordance with NZ law.
  6. Certifications: iTech Labs RNG Certified (valid until 30 November 2025); compliance with ISO 27001 and SOC 2 standards where applicable.

REFLECT: Security measures are reviewed and updated regularly to address emerging threats and comply with legal requirements.

Complaints & Contacts

OBSERVE: Multiple channels are available to address privacy questions or lodge complaints.

  • Data Protection Officer (DPO): Sophie McAllister
  • Email: info@yabby-casino-nz.com
  • Phone: +64-9-123-4567
  • Online Forms: Contact Form, Support Chat
  • Mail: PO Box 1234, Auckland 1142, New Zealand
  1. Step 1: Submit your query or complaint via any contact channel. Provide sufficient detail to assist our investigation.
  2. Step 2: Our DPO or privacy team will acknowledge receipt within 3 business days and provide a substantive response within 30 days.
  3. Step 3: If not resolved, escalate to the New Zealand Privacy Commissioner:
    • Website: privacy.org.nz
    • Phone: +64-4-474-7590
    • Postal: PO Box 10094, Wellington 6143, New Zealand

REFLECT: All complaints are handled confidentially and with utmost diligence to ensure lawful, fair, and timely resolution.

Updates

OBSERVE: This privacy policy may be updated to reflect changes in law, operational practices, or technology.

  • Notification: Users will be notified of material changes via email, prominent website banners, and account dashboard alerts at least 30 days in advance of the effective date.
  • Version Control: Last updated: 6 November 2025
  • Changelog:
    • 2025-11-06: Policy updated for compliance with NZ Privacy Act 2020, added expanded DPO contact channels, extended data retention periods.
  • User Options: Users may object to changes or close their account at any time before new terms take effect.

REFLECT: Users are encouraged to review this policy periodically. Continued use of yabby-casino-nz.com constitutes acceptance of the latest version.