Privacy Policy
This Privacy Policy outlines how casigo-casino, operating exclusively through casigo-nz.com, collects, uses, and safeguards your personal information. It applies to all players and visitors of casigo-nz.com. Effective date: 6 November 2025.
Who We Are
OBSERVE: casigo-casino operates under the legal entity Two Shepherds Limited, registered in Malta and regulated for online gambling in New Zealand via the Malta Gaming Authority.
- Legal Name & Registration: Two Shepherds Limited, Company Registration Number: C87367.
- Legal Address: Level G, Office 1/029, Quantum House, 75 Abate Rigord Street, Ta' Xbiex, XBX1120, Malta.
- Operational Domain: All privacy practices in this policy apply exclusively to casigo-nz.com.
- Data Protection Contact: Data Protection Officer (DPO): Ruby Thompson
- Contact Email: [email protected] (support), [email protected] (general)
REFLECT: All privacy inquiries and data protection requests for casigo-casino should be directed to the above contacts.
What Personal Data We Collect
OBSERVE: casigo-casino collects personal and technical data necessary for legal compliance, service provision, and player protection on casigo-nz.com.
- Personal Identification Data: Full name, date of birth, contact address, email, mobile or phone number, government-issued identification, and proof of address.
- Account and Transaction Data: Username, account history, payment methods, deposit and withdrawal records, and financial transaction logs.
- Technical Data: IP address, browser type and version, device identifiers, operating system, log-in timestamps, and activity logs.
- Behavioral Data: Game play history, bet amounts, wins and losses, site navigation, clickstream data, and communication records.
- Cookies & Tracking Data: Session and persistent cookies, unique identifiers, web beacons, and similar tracking technologies.
REFLECT: Data is collected directly from you, via automated systems, or through third-party integrations to meet regulatory and operational requirements under NZ law.
Legal Basis for Processing
OBSERVE: All data processing by casigo-casino on casigo-nz.com is grounded in internationally recognized and NZ-specific legal bases.
- User Consent: Explicit consent is obtained for marketing communications and non-essential cookies. You may withdraw consent at any time via your account settings or by contacting the DPO.
- Contractual Necessity: Data processing is required to fulfill our contractual obligations to you, including account operation, game provision, payment processing, and customer support.
- Legitimate Interests: We process data to prevent fraud and abuse, ensure system security, enhance service quality, and conduct business analytics-always balancing these interests against your fundamental rights.
- Legal Obligations: Compliance with New Zealand's Gambling Act 2003, AML (Anti-Money Laundering) and CFT (Countering Financing of Terrorism) requirements, and reporting duties to relevant authorities.
REFLECT: Where legal basis changes, you will be informed in advance and provided with options to object or close your account in accordance with NZ privacy law.
Purpose of Processing
OBSERVE: Your data is processed for clearly defined purposes, all necessary for lawful and secure operation of casigo-casino on casigo-nz.com.
- Account Management: Opening, maintaining, and closing player accounts.
- Service Provision: Delivering online casino games, processing financial transactions, and providing customer support.
- Compliance: Fulfilling KYC (Know Your Customer), AML, and age verification obligations under NZ law.
- Fraud Prevention: Detecting and preventing fraud, abuse, and responsible gambling risks.
- Analytics: Monitoring usage patterns and technical performance to improve our services.
- Marketing: Sending promotional offers, newsletters, or updates (only with your explicit consent).
REFLECT: Data is never processed for incompatible or undisclosed purposes and all processing activities are in line with NZ and international data protection standards.
Disclosure & Sharing
OBSERVE: casigo-casino only shares your data with trusted third parties when strictly necessary and in compliance with legal requirements.
- Payment Partners: For processing deposits, withdrawals, and anti-fraud checks.
- Service Providers: IT hosting, customer support, game providers, analytics platforms, and marketing agencies operating under agreed data protection terms.
- Regulatory Authorities: New Zealand Department of Internal Affairs and other regulators for compliance, audit, or legal investigations.
- Affiliates: For marketing purposes, only if you provide explicit consent.
- Advertising Networks: Limited to anonymized or pseudonymized data, and only with user consent.
Legal Obligation: All third-party data sharing is governed by data processing agreements ensuring confidentiality, integrity, and compliance with NZ and European data protection law.
REFLECT: Data will not be sold to third parties. Disclosure outside NZ only occurs under strict legal and contractual safeguards.
International Transfers
OBSERVE: Data collected by casigo-casino on casigo-nz.com may be transferred to and processed in countries outside New Zealand, notably Malta (where Two Shepherds Limited is registered) and the European Economic Area (EEA).
- Transfer Safeguards: All international transfers are protected by standard contractual clauses approved by the European Commission, and where relevant, compliance with the GDPR and NZ Privacy Act 2020 is ensured.
- Third-Party Providers: Only providers with demonstrable data protection standards (e.g., ISO 27001, SOC 2) are engaged for data processing outside NZ.
- Regional Restrictions: Data is not transferred to jurisdictions lacking adequate legal protection unless you provide explicit informed consent or another legal basis applies.
REFLECT: You may request further information on international data transfers or obtain a copy of relevant safeguards by contacting our DPO.
Data Retention
OBSERVE: casigo-casino retains your personal data on casigo-nz.com only as long as necessary to fulfil the purposes for which it was collected, meet legal obligations, and resolve disputes.
- Personal Account Data: Retained no longer than five (5) years after account closure or final transaction, in line with NZ AML/CFT and regulatory requirements.
- Transactional and Compliance Data: Retained for at least five (5) years as required by law, or longer if relevant to ongoing regulatory or legal proceedings.
- Marketing Data: Retained until you withdraw your consent or opt out.
- Cookies & Analytics: Retention periods vary by type (see Cookies section), but are limited to what is reasonably necessary.
REFLECT: Data is securely deleted or anonymized when retention is no longer justified. You may request early erasure subject to overriding legal obligations.
Your Rights
OBSERVE: Under the NZ Privacy Act 2020 and relevant international standards (including GDPR), you have comprehensive rights regarding your personal data processed by casigo-casino on casigo-nz.com.
- Access: You may request a copy of your personal data held by us.
- Correction: You may request corrections to inaccurate or incomplete data.
- Deletion: You may request deletion of your data, subject to legal retention requirements.
- Restriction: You may request restriction of processing in certain circumstances (e.g., pending verification of data accuracy).
- Objection: You may object to processing for direct marketing or on grounds relating to your specific situation.
- Data Portability: You have the right to receive your data in a structured, machine-readable format and transmit it to another controller.
- Withdrawal of Consent: You may withdraw consent for marketing or other non-essential processing at any time, with no effect on prior lawful processing.
Procedures for Exercising Rights
- Submit your request via email to [email protected] or [email protected]. Please specify the right you wish to exercise and provide sufficient information for verification.
- All valid requests are processed free of charge and responded to within 30 calendar days.
- If your request is unusually complex or numerous, we may extend the response timeframe by a further 30 days and will notify you.
- Where your rights are limited by overriding legal obligations (e.g., for AML compliance), we will inform you of the specific reasons.
REFLECT: These rights are guaranteed by NZ law and international standards, and cannot be contractually restricted. Our DPO is always available for rights-related queries or concerns.
Regional Compliance Note: While this policy aligns with global best practices, its primary legal basis is the New Zealand Privacy Act 2020.
Cookies & Tracking Technologies
OBSERVE: casigo-casino uses cookies and similar tracking technologies on casigo-nz.com to optimize your experience and ensure site security.
- Session Cookies: Enable essential site functions and are deleted when you close your browser.
- Persistent Cookies: Remain on your device for a set period to remember preferences and login status.
- Third-Party Cookies: Set by analytics providers (e.g., Google Analytics) and advertising partners, subject to your consent.
Purposes of Cookies
- Functional: Required for core website operations (login, account management, security).
- Analytics: Monitor site usage and performance to improve services.
- Advertising: Personalize marketing content (only with your consent).
Managing Cookies
- You can manage or disable cookies via your browser settings. Instructions are available on major browser support sites.
- For certain cookies, you may use our internal privacy panel (if available) to manage preferences.
- Disabling cookies may affect the functionality of some site features.
REFLECT: By continuing to use casigo-nz.com, you consent to the use of cookies as outlined, unless you disable them.
Data Security
OBSERVE: casigo-casino implements robust technical and organizational measures to protect your data on casigo-nz.com.
- Encryption: All data is encrypted in transit (TLS 1.2+) and at rest using industry-standard algorithms.
- Access Controls: Strict authentication, multi-factor access for staff, and role-based permissions.
- Security Audits: Regular internal and external audits; compliance with ISO 27001 and SOC 2 standards where applicable.
- Incident Response: Documented incident response procedures, immediate breach notification to affected users and authorities within statutory deadlines.
- Staff Training: Ongoing security and privacy training for all employees handling customer data.
REFLECT: While no system can guarantee absolute security, casigo-casino is committed to continuous improvement and prompt response to any identified threats or vulnerabilities.
Complaints & Contacts
OBSERVE: casigo-casino provides transparent, accessible channels for privacy complaints or inquiries related to casigo-nz.com.
How to Contact Us
- Data Protection Officer (DPO): Ruby Thompson
- Email (Support): [email protected]
- Email (General): [email protected]
- Mailing Address: Level G, Office 1/029, Quantum House, 75 Abate Rigord Street, Ta' Xbiex, XBX1120, Malta
- Website: https://casigo-nz.com
Complaint Procedure
- Submit your complaint or inquiry by email or postal address above, providing details of your concern.
- We will acknowledge receipt of your complaint within five (5) business days.
- We aim to investigate and respond to all complaints within 30 calendar days.
- If you are unsatisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner (New Zealand):
- Office of the Privacy Commissioner (NZ): www.privacy.org.nz, Phone: 0800 803 909, Email: [email protected]
REFLECT: Access to supervisory authorities is guaranteed. You may also contact relevant EU authorities if your data is processed in the EEA.
Updates
OBSERVE: This Privacy Policy is reviewed and updated as necessary to reflect regulatory changes, operational updates, or new data processing activities on casigo-nz.com.
- Notification: Material changes are communicated via email, website banners, and/or account dashboard alerts at least 30 days in advance of taking effect.
- Version Control: Last updated: 6 November 2025. All previous versions are archived and available upon request.
- Changelog: Substantive amendments are summarized and provided with each update notice.
- User Options: If you object to material changes, you may close your account at any time before the changes take effect.
REFLECT: Continued use of casigo-nz.com after updates constitutes acceptance of the revised policy. We encourage you to review this page regularly for the latest information on our privacy practices.