burger icon
National Casino
Log In

Privacy Policy

This Privacy Policy explains how national-casino, operating exclusively via national-nz.com, collects, uses, and protects personal data of players and website visitors. It applies to all users accessing national-nz.com from New Zealand. Effective date: 6 November 2025.

Who We Are

OBSERVE: The operator of national-nz.com is TechSolutions Group N.V., a company registered in Curaçao with company number 144920 (0). The company holds a valid online gambling licence (8048/JAZ) issued by the Government of Curaçao. The legal address is Dr. H. Fergusonweg 1, Curaçao. Operations for payment processing and certain support functions may be managed by our subsidiary, TechSolutions (CY) Group Limited, Nicosia, Cyprus.

What Personal Data We Collect

OBSERVE: To provide secure and compliant casino services, we collect the following categories of data:

  • Personal Identification Data: Full name, date of birth, residential address, email address, phone number.
  • Technical Data: IP address, device information, browser type and version, operating system, connection logs, and geolocation data (as required for compliance).
  • Payment Information: Bank account details, card numbers (last four digits), transaction history, and payment provider identifiers. No full card data is stored beyond what is required for transaction verification.
  • Behavioral Data: Betting and gaming history, session times, site usage analytics, clickstream data, and game preferences.
  • Cookies and Tracking Technologies: Session cookies, persistent cookies, third-party analytics and advertising identifiers. For details see "Cookies & Tracking Technologies."

Legal Basis for Processing

OBSERVE: Processing of your personal data by national-casino at national-nz.com is conducted on the following legal grounds in accordance with the New Zealand Privacy Act 2020, the Gambling Act 2003, and international regulatory standards:

  • User Consent: Data processing for marketing, analytics, and non-essential cookies is based on your explicit consent, which you may withdraw at any time through your account settings or by contacting us.
  • Contractual Necessity: Processing is necessary for the performance of our contract with you, including account registration, provision of gaming services, processing deposits/withdrawals, and delivering customer support.
  • Legal Obligations: Compliance with regulatory requirements such as age verification, anti-money laundering (AML), counter-terrorism financing (CTF), responsible gambling, and reporting to authorities.
  • Legitimate Interests: Fraud prevention, risk analysis, service improvement, and network security, provided such interests are not overridden by your fundamental rights and freedoms.

Regional Compliance Note: Where required under the Privacy Act 2020 and the Gambling Act 2003 (NZ), we obtain additional consent and provide transparency regarding data use.

Purpose of Processing

OBSERVE: Your data is processed for the following clearly defined purposes:

  • Casino Service Provision: To create, maintain, and manage your user account; to enable participation in games, tournaments, and promotions; and to process financial transactions.
  • Regulatory Compliance: To fulfil obligations relating to player verification, responsible gambling, and reporting under New Zealand laws.
  • Fraud Prevention and Security: To detect, prevent, and investigate fraudulent or suspicious activities, enforce our Terms and Conditions, and protect the integrity of our systems.
  • Service Improvement and Analytics: To monitor website performance, understand user preferences, and enhance product offerings based on aggregated, anonymised analytics.
  • Marketing and Communications: With your consent, to send promotional emails, bonuses, and updates about new features or services.

Disclosure & Sharing

OBSERVE: We disclose your data only in circumstances where necessary and with appropriate safeguards:

  • Payment Partners: To process deposits and withdrawals, your details may be securely shared with authorised financial institutions and payment service providers.
  • Service Providers: Third-party IT and analytics vendors may access limited data solely to provide contracted services (e.g., hosting, technical support, anti-fraud solutions).
  • Regulatory Authorities: Required disclosures to gaming regulators, law enforcement agencies, or tax authorities as mandated by law.
  • Affiliates and Subsidiaries: Data may be shared with TechSolutions (CY) Group Limited for operational and payment processing purposes.
  • Advertising Networks: With your explicit consent, non-identifiable data may be shared with advertising partners for promotional purposes.

Legal Safeguards: All third parties are contractually required to process your data only for specified purposes and maintain industry-standard security measures.

International Transfers

OBSERVE: As part of providing services via national-nz.com, your data may be transferred to and processed in Curaçao (primary headquarters), Cyprus (subsidiary for payment operations), and other jurisdictions where our partners operate. New Zealand is recognised as having robust privacy protections; for transfers outside New Zealand and the EEA:

  • Standard Contractual Clauses (SCCs): We implement SCCs approved by the European Commission and recognised under NZ law for data transfers to third countries.
  • Additional Safeguards: Encryption of data in transit and at rest, strict access controls, and regular security assessments.
  • Regional Compliance: No data is transferred to countries without adequate legal protections unless contractual and technical safeguards are in place.

Data Retention

OBSERVE: We retain your personal data only for as long as is legally necessary and in accordance with the following criteria:

  • Account Data: Retained for the duration of your active account and up to 5 years after account closure, as required for regulatory and anti-fraud purposes.
  • Transaction and Payment Data: Maintained for a minimum of 5 years in compliance with AML and reporting requirements.
  • Marketing Data: Retained until you withdraw consent or unsubscribe from communications.
  • Cookies and Analytics Data: Retained in accordance with our Cookie Policy, typically no longer than 24 months.

Deletion Criteria: Data is securely deleted or anonymised upon expiration of the retention period, withdrawal of consent, or when processing purposes have been fulfilled, unless further retention is required by law.

Your Rights

OBSERVE: Under the New Zealand Privacy Act 2020 and aligned with international standards (including the EU GDPR), you are entitled to exercise the following rights in relation to your personal data:

  1. Access: Request a copy of your personal data held by national-casino via national-nz.com.
  2. Correction: Request correction of inaccurate or incomplete data.
  3. Deletion (Erasure): Request deletion of your data where processing is no longer necessary, subject to legal requirements.
  4. Restrict Processing: Request restrictions on how your data is processed under specific circumstances.
  5. Object to Processing: Object to the processing of your data for marketing or profiling purposes.
  6. Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and request its transfer to another controller, where technically feasible.
  7. Withdraw Consent: Withdraw consent for marketing communications at any time via your account dashboard or by contacting support@national-nz.com.
  • Exercise Procedures: Submit your request by email to support@national-nz.com or complaints@national-nz.com. We will respond within 30 days of receipt, free of charge, unless requests are manifestly unfounded or excessive.
  • Legal Reference: These rights are provided under the NZ Privacy Act 2020 and are consistent with international data protection frameworks.

Cookies & Tracking Technologies

OBSERVE: national-nz.com uses cookies and similar technologies to enhance user experience, monitor site performance, and support marketing activities.

  • Session Cookies: Temporary cookies essential for secure site operation, deleted after you close your browser.
  • Persistent Cookies: Remain on your device to remember preferences and speed up future visits, typically expiring after 12-24 months.
  • Third-Party Cookies: Used for analytics (e.g., Google Analytics) and advertising partners, subject to your consent.

Cookie Management: You may manage or disable cookies through your browser settings or by using the cookie preferences panel available on national-nz.com. Disabling non-essential cookies will not affect essential site functionality but may limit certain features.

Data Security

OBSERVE: We implement a comprehensive set of technical and organisational security measures to protect your personal data:

  • Encryption: All data transmissions are protected by TLS 1.2+ encryption; sensitive data is encrypted at rest in secure environments.
  • Multi-Factor Authentication (MFA): Access to administrative functions is restricted and secured with MFA.
  • Access Controls: Strict role-based access controls limit data exposure to authorised personnel only.
  • Regular Security Audits: Periodic assessments and penetration tests are conducted to identify and address vulnerabilities.
  • Staff Training: Ongoing security and privacy awareness training for all employees handling personal data.
  • Incident Response: Established procedures ensure prompt containment, investigation, and notification of any data breaches in accordance with legal requirements.
  • Compliance: Our security framework aligns with leading international standards, including ISO/IEC 27001 and SOC 2, where applicable.

Complaints & Contacts

OBSERVE: If you have concerns regarding your personal data or wish to submit a complaint, you may contact:

Complaint Procedure

  1. Submit your complaint via email, detailing your concern and including your account information.
  2. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
  3. If you are dissatisfied with our response, you may escalate your complaint to the New Zealand Office of the Privacy Commissioner:

Regional Compliance Note: For users outside New Zealand, you may also contact your local data protection authority for support.

Updates

OBSERVE: We may update this Privacy Policy to reflect legal, regulatory, or operational changes.

  • Notification Procedures: Material changes will be communicated via email, website banners, and/or account dashboard alerts.
  • Advance Notice: For significant changes, we provide a minimum 30-day notice period. Users may object or close their accounts if they disagree with material updates.
  • Version Control: Last updated: 6 November 2025.
  • Changelog: All material changes are logged and accessible on this page for your review.

To stay informed, please review this policy regularly.