burger icon

Privacy Policy

This Privacy Policy outlines how casigo-casino, operating exclusively through casigo-nz.com, collects, uses, and safeguards your personal information. It applies to all players and visitors of casigo-nz.com. Effective date: 6 November 2025.

Who We Are

OBSERVE: casigo-casino operates under the legal entity Two Shepherds Limited, registered in Malta and regulated for online gambling in New Zealand via the Malta Gaming Authority.

  • Legal Name & Registration: Two Shepherds Limited, Company Registration Number: C87367.
  • Legal Address: Level G, Office 1/029, Quantum House, 75 Abate Rigord Street, Ta' Xbiex, XBX1120, Malta.
  • Operational Domain: All privacy practices in this policy apply exclusively to casigo-nz.com.
  • Data Protection Contact: Data Protection Officer (DPO): Ruby Thompson
  • Contact Email: [email protected] (support), [email protected] (general)

REFLECT: All privacy inquiries and data protection requests for casigo-casino should be directed to the above contacts.

What Personal Data We Collect

OBSERVE: casigo-casino collects personal and technical data necessary for legal compliance, service provision, and player protection on casigo-nz.com.

  • Personal Identification Data: Full name, date of birth, contact address, email, mobile or phone number, government-issued identification, and proof of address.
  • Account and Transaction Data: Username, account history, payment methods, deposit and withdrawal records, and financial transaction logs.
  • Technical Data: IP address, browser type and version, device identifiers, operating system, log-in timestamps, and activity logs.
  • Behavioral Data: Game play history, bet amounts, wins and losses, site navigation, clickstream data, and communication records.
  • Cookies & Tracking Data: Session and persistent cookies, unique identifiers, web beacons, and similar tracking technologies.

REFLECT: Data is collected directly from you, via automated systems, or through third-party integrations to meet regulatory and operational requirements under NZ law.

Legal Basis for Processing

OBSERVE: All data processing by casigo-casino on casigo-nz.com is grounded in internationally recognized and NZ-specific legal bases.

  1. User Consent: Explicit consent is obtained for marketing communications and non-essential cookies. You may withdraw consent at any time via your account settings or by contacting the DPO.
  2. Contractual Necessity: Data processing is required to fulfill our contractual obligations to you, including account operation, game provision, payment processing, and customer support.
  3. Legitimate Interests: We process data to prevent fraud and abuse, ensure system security, enhance service quality, and conduct business analytics-always balancing these interests against your fundamental rights.
  4. Legal Obligations: Compliance with New Zealand's Gambling Act 2003, AML (Anti-Money Laundering) and CFT (Countering Financing of Terrorism) requirements, and reporting duties to relevant authorities.

REFLECT: Where legal basis changes, you will be informed in advance and provided with options to object or close your account in accordance with NZ privacy law.

Purpose of Processing

OBSERVE: Your data is processed for clearly defined purposes, all necessary for lawful and secure operation of casigo-casino on casigo-nz.com.

  • Account Management: Opening, maintaining, and closing player accounts.
  • Service Provision: Delivering online casino games, processing financial transactions, and providing customer support.
  • Compliance: Fulfilling KYC (Know Your Customer), AML, and age verification obligations under NZ law.
  • Fraud Prevention: Detecting and preventing fraud, abuse, and responsible gambling risks.
  • Analytics: Monitoring usage patterns and technical performance to improve our services.
  • Marketing: Sending promotional offers, newsletters, or updates (only with your explicit consent).

REFLECT: Data is never processed for incompatible or undisclosed purposes and all processing activities are in line with NZ and international data protection standards.

Disclosure & Sharing

OBSERVE: casigo-casino only shares your data with trusted third parties when strictly necessary and in compliance with legal requirements.

  • Payment Partners: For processing deposits, withdrawals, and anti-fraud checks.
  • Service Providers: IT hosting, customer support, game providers, analytics platforms, and marketing agencies operating under agreed data protection terms.
  • Regulatory Authorities: New Zealand Department of Internal Affairs and other regulators for compliance, audit, or legal investigations.
  • Affiliates: For marketing purposes, only if you provide explicit consent.
  • Advertising Networks: Limited to anonymized or pseudonymized data, and only with user consent.

Legal Obligation: All third-party data sharing is governed by data processing agreements ensuring confidentiality, integrity, and compliance with NZ and European data protection law.

REFLECT: Data will not be sold to third parties. Disclosure outside NZ only occurs under strict legal and contractual safeguards.

International Transfers

OBSERVE: Data collected by casigo-casino on casigo-nz.com may be transferred to and processed in countries outside New Zealand, notably Malta (where Two Shepherds Limited is registered) and the European Economic Area (EEA).

  1. Transfer Safeguards: All international transfers are protected by standard contractual clauses approved by the European Commission, and where relevant, compliance with the GDPR and NZ Privacy Act 2020 is ensured.
  2. Third-Party Providers: Only providers with demonstrable data protection standards (e.g., ISO 27001, SOC 2) are engaged for data processing outside NZ.
  3. Regional Restrictions: Data is not transferred to jurisdictions lacking adequate legal protection unless you provide explicit informed consent or another legal basis applies.

REFLECT: You may request further information on international data transfers or obtain a copy of relevant safeguards by contacting our DPO.

Data Retention

OBSERVE: casigo-casino retains your personal data on casigo-nz.com only as long as necessary to fulfil the purposes for which it was collected, meet legal obligations, and resolve disputes.

  • Personal Account Data: Retained no longer than five (5) years after account closure or final transaction, in line with NZ AML/CFT and regulatory requirements.
  • Transactional and Compliance Data: Retained for at least five (5) years as required by law, or longer if relevant to ongoing regulatory or legal proceedings.
  • Marketing Data: Retained until you withdraw your consent or opt out.
  • Cookies & Analytics: Retention periods vary by type (see Cookies section), but are limited to what is reasonably necessary.

REFLECT: Data is securely deleted or anonymized when retention is no longer justified. You may request early erasure subject to overriding legal obligations.

Your Rights

OBSERVE: Under the NZ Privacy Act 2020 and relevant international standards (including GDPR), you have comprehensive rights regarding your personal data processed by casigo-casino on casigo-nz.com.

  1. Access: You may request a copy of your personal data held by us.
  2. Correction: You may request corrections to inaccurate or incomplete data.
  3. Deletion: You may request deletion of your data, subject to legal retention requirements.
  4. Restriction: You may request restriction of processing in certain circumstances (e.g., pending verification of data accuracy).
  5. Objection: You may object to processing for direct marketing or on grounds relating to your specific situation.
  6. Data Portability: You have the right to receive your data in a structured, machine-readable format and transmit it to another controller.
  7. Withdrawal of Consent: You may withdraw consent for marketing or other non-essential processing at any time, with no effect on prior lawful processing.

Procedures for Exercising Rights

  • Submit your request via email to [email protected] or [email protected]. Please specify the right you wish to exercise and provide sufficient information for verification.
  • All valid requests are processed free of charge and responded to within 30 calendar days.
  • If your request is unusually complex or numerous, we may extend the response timeframe by a further 30 days and will notify you.
  • Where your rights are limited by overriding legal obligations (e.g., for AML compliance), we will inform you of the specific reasons.

REFLECT: These rights are guaranteed by NZ law and international standards, and cannot be contractually restricted. Our DPO is always available for rights-related queries or concerns.

Regional Compliance Note: While this policy aligns with global best practices, its primary legal basis is the New Zealand Privacy Act 2020.

Cookies & Tracking Technologies

OBSERVE: casigo-casino uses cookies and similar tracking technologies on casigo-nz.com to optimize your experience and ensure site security.

  • Session Cookies: Enable essential site functions and are deleted when you close your browser.
  • Persistent Cookies: Remain on your device for a set period to remember preferences and login status.
  • Third-Party Cookies: Set by analytics providers (e.g., Google Analytics) and advertising partners, subject to your consent.

Purposes of Cookies

  • Functional: Required for core website operations (login, account management, security).
  • Analytics: Monitor site usage and performance to improve services.
  • Advertising: Personalize marketing content (only with your consent).

Managing Cookies

  • You can manage or disable cookies via your browser settings. Instructions are available on major browser support sites.
  • For certain cookies, you may use our internal privacy panel (if available) to manage preferences.
  • Disabling cookies may affect the functionality of some site features.

REFLECT: By continuing to use casigo-nz.com, you consent to the use of cookies as outlined, unless you disable them.

Data Security

OBSERVE: casigo-casino implements robust technical and organizational measures to protect your data on casigo-nz.com.

  • Encryption: All data is encrypted in transit (TLS 1.2+) and at rest using industry-standard algorithms.
  • Access Controls: Strict authentication, multi-factor access for staff, and role-based permissions.
  • Security Audits: Regular internal and external audits; compliance with ISO 27001 and SOC 2 standards where applicable.
  • Incident Response: Documented incident response procedures, immediate breach notification to affected users and authorities within statutory deadlines.
  • Staff Training: Ongoing security and privacy training for all employees handling customer data.

REFLECT: While no system can guarantee absolute security, casigo-casino is committed to continuous improvement and prompt response to any identified threats or vulnerabilities.

Complaints & Contacts

OBSERVE: casigo-casino provides transparent, accessible channels for privacy complaints or inquiries related to casigo-nz.com.

How to Contact Us

Complaint Procedure

  1. Submit your complaint or inquiry by email or postal address above, providing details of your concern.
  2. We will acknowledge receipt of your complaint within five (5) business days.
  3. We aim to investigate and respond to all complaints within 30 calendar days.
  4. If you are unsatisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner (New Zealand):

REFLECT: Access to supervisory authorities is guaranteed. You may also contact relevant EU authorities if your data is processed in the EEA.

Updates

OBSERVE: This Privacy Policy is reviewed and updated as necessary to reflect regulatory changes, operational updates, or new data processing activities on casigo-nz.com.

  • Notification: Material changes are communicated via email, website banners, and/or account dashboard alerts at least 30 days in advance of taking effect.
  • Version Control: Last updated: 6 November 2025. All previous versions are archived and available upon request.
  • Changelog: Substantive amendments are summarized and provided with each update notice.
  • User Options: If you object to material changes, you may close your account at any time before the changes take effect.

REFLECT: Continued use of casigo-nz.com after updates constitutes acceptance of the revised policy. We encourage you to review this page regularly for the latest information on our privacy practices.