VegaZone logo
Online: 3,088

Privacy Policy

VegaZone Casino > Privacy Policy
Last updated: 29/04/2026
Relevance verified: 09/06/2026

Who This Policy Covers and Why It Exists

This Privacy Policy applies to all individuals who interact with VegaZone Casino through the website https://vegazone-casino-nz.com/, including visitors who browse without registering, users who create an account, and anyone who contacts us through any channel. It sets out, in plain terms, what personal information we collect, the reasons we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over it.

VegaZone Casino operates under licence number OGL/2024/589/0556 and takes its obligations under the New Zealand Privacy Act 2020 seriously. That legislation, which replaced the Privacy Act 1993, introduced stronger obligations on organisations handling personal information about people in New Zealand, including mandatory breach notification, new enforcement powers for the Privacy Commissioner, and the right to complain directly to that office without first going through the organisation concerned. This policy is written to reflect those requirements and to give you enough information to make informed decisions about your data.

If you have questions about anything in this policy, you can reach us directly:

The Legal Framework Behind Our Privacy Obligations

VegaZone Casino is bound by several pieces of New Zealand legislation that shape how we handle your personal information. Understanding the framework gives context to many of the data practices described later in this policy.

Privacy Act 2020

This is the primary legislation governing how we collect, use, store, and disclose personal information. The Act establishes 13 Information Privacy Principles (IPPs) that dictate when collection is lawful, how information must be stored, the conditions under which it can be disclosed to third parties, and your rights to access and correct data held about you. The Act applies to any organisation that holds personal information about a New Zealand resident, regardless of where the organisation itself is based.

Gambling Act 2003

The Gambling Act 2003 imposes obligations on gambling operators relating to age verification, problem gambling harm minimisation, and record-keeping. Compliance with these obligations requires us to collect and retain certain personal information, including identity documents and betting history. We cannot operate lawfully without this data, and players who do not provide it cannot access real-money gaming services.

Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act)

New Zealand’s AML/CFT framework requires gambling operators to carry out customer due diligence (CDD) on players, monitor transactions for suspicious activity, and report certain transactions to the Financial Intelligence Unit (FIU). This means we are legally required to verify your identity, understand the source of your funds in higher-risk situations, and keep records of those processes for a minimum of five years. These are not discretionary practices; they are legal requirements that override any preference you may have for anonymity.

Electronic Transactions Act 2002

This Act governs how contracts and communications conducted electronically are treated under New Zealand law. It is relevant to how we handle your account agreement, the delivery of notices, and the validity of digital consent.

What Personal Information We Collect

We collect different categories of information depending on how you use our platform. Not all of it is collected from you directly.

Information You Provide to Us

  • Registration data: Full legal name, date of birth, email address, residential address, phone number, and account password when you create an account.
  • Identity verification documents: Copies of government-issued photo ID (such as a New Zealand passport or driver’s licence) and proof of address (such as a bank statement or utility bill), required for KYC and AML compliance.
  • Payment information: Card details, cryptocurrency wallet addresses, or e-wallet account identifiers used to make deposits or receive withdrawals. We do not store full card numbers; payment processing is handled through PCI-DSS compliant third-party processors.
  • Source of funds information: Documentation relating to the origin of funds, required in higher-risk situations under AML/CFT obligations. This may include payslips, bank statements, or other financial records.
  • Communications: Records of messages sent to our support team through live chat, email, or phone, including the content of those conversations and any attachments.
  • Responsible gambling information: Information you provide when setting deposit limits, session time limits, requesting a cooling-off period, or applying for self-exclusion.
  • Survey and feedback responses: If you choose to participate in any player surveys or provide feedback, we retain your responses.

Information Collected Automatically

  • Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers, and time zone.
  • Usage data: Pages visited, games played (including session duration, wager amounts, and outcomes), features accessed, links clicked, and timestamps of activity.
  • Connection data: Login timestamps, logout timestamps, session duration, and any error events encountered during a session.
  • Cookie and tracking data: Information collected through cookies and similar technologies as described in our Cookie Policy.
  • Geolocation data: General location information derived from your IP address, used to verify eligibility and apply appropriate regional settings.

Information from Third Parties

  • Identity verification services: Results from third-party identity verification and document authentication providers used during KYC processes.
  • Payment processors: Confirmation of payment status, chargeback notifications, and fraud screening flags from card networks and payment service providers.
  • AML screening providers: Results from politically exposed person (PEP) checks, sanctions list screening, and adverse media monitoring.
  • Fraud prevention services: Risk scores and flags relating to device fingerprinting, behavioural analytics, and known fraud patterns.

How and Why We Use Your Information

Every use we make of your personal information must have a lawful basis. Under the Privacy Act 2020, collection and use must be for a purpose that is directly related to our functions and activities, and that purpose must be one you would reasonably expect. We do not use your data for purposes unconnected to the services you have signed up for.

Account Creation and Management

We use your registration data to create and maintain your account, authenticate your identity each time you log in, apply account settings and preferences you have chosen, and communicate with you about your account status. Without this, we cannot provide you with a player account.

Identity Verification and KYC Compliance

New Zealand law requires us to verify that every player is who they say they are before releasing withdrawals and in connection with ongoing monitoring obligations. We use identity documents and the results of third-party verification services to satisfy these requirements. A player whose identity cannot be confirmed to the required standard cannot access withdrawal services, and in some circumstances, their account may be restricted pending verification.

AML/CFT Compliance and Transaction Monitoring

We are a reporting entity under the AML/CFT Act 2009. This means we are legally required to monitor transactions, flag unusual patterns, carry out enhanced due diligence in higher-risk situations, and file suspicious transaction reports (STRs) with the New Zealand Police Financial Intelligence Unit when required. This monitoring is mandatory and cannot be opted out of. If a player’s transaction activity triggers a reporting obligation, we are legally prohibited from telling that player that a report has been or may be filed.

Payment Processing

We process your payment details to receive deposits and issue withdrawals. This includes sharing necessary information with our payment processing partners (Visa, Mastercard, Apple Pay, Google Pay, and cryptocurrency networks) to execute transactions. We retain records of transaction history as required by law and for internal accounting purposes.

Game Fairness and Session Integrity

We record game session data, including wager amounts, game outcomes, and session duration, to resolve any disputes about game results, to audit the fairness of game outcomes, and to produce transaction histories that players can access on request.

Responsible Gambling Obligations

Under the Gambling Act 2003, we are required to take active steps to minimise gambling harm. We use your usage data, session history, and any information you provide through our responsible gambling tools to identify patterns that may indicate problem gambling behaviour and to apply or offer limits and interventions accordingly. We may use automated monitoring to flag accounts that show signs of harm, in which case a member of our responsible gambling team will follow up.

Customer Support

When you contact our support team, we use the information you provide to address your query. We retain records of support interactions for quality assurance purposes and because they may be relevant to any subsequent disputes or regulatory inquiries.

Security and Fraud Prevention

We use technical data, device information, and behavioural signals to detect unauthorised access attempts, multi-accounting, bonus abuse, payment fraud, and other activity that harms the integrity of the platform or the interests of other players.

Marketing Communications

If you have opted in to receive promotional communications from us, we will use your contact details and game preference history to send relevant offers, bonus notifications, and platform updates. You can withdraw your consent to marketing at any time through your account settings or by contacting us directly. Withdrawal of marketing consent does not affect the lawfulness of communications sent before that withdrawal.

Legal and Regulatory Obligations

We use and retain personal information to the extent required to comply with our legal obligations under the Privacy Act 2020, Gambling Act 2003, AML/CFT Act 2009, and any other applicable legislation, and to respond to lawful requests from courts, regulators, and law enforcement agencies.

Cookies and Tracking Technologies

VegaZone Casino uses cookies and similar tracking technologies on its website and platform. Cookies are small data files stored on your device when you visit a website. They serve a number of functions, from keeping you logged in during a session to helping us understand how players navigate the platform.

We use the following categories of cookies:

  • Strictly necessary cookies: Required for the website to function. These include session authentication tokens, security cookies, and cookies that remember your region and language settings. They cannot be disabled without breaking core functionality.
  • Functional cookies: Used to remember your preferences, such as game display settings and account layout choices.
  • Analytical cookies: Used to understand how players use the platform, which pages are visited most frequently, where players drop off, and how the user experience can be improved. This data is typically aggregated and does not identify individuals.
  • Marketing cookies: Used to track whether you have visited the site through a particular link and to measure the effectiveness of promotional campaigns. These may be placed by third-party advertising partners.

You can manage cookie preferences through your browser settings. Blocking all cookies will affect your ability to use the platform, as session authentication and security cookies are necessary for logged-in functionality. Our full Cookie Policy is available on the website and provides more detailed information about each cookie in use.

How We Share Your Information

We do not sell personal information. We do not share it with third parties for their own marketing purposes. The circumstances in which we disclose personal information are limited and, in most cases, legally required or operationally necessary.

Service Providers and Technology Partners

We engage third-party providers to deliver specific parts of our service. These include identity verification providers, payment processors, fraud prevention services, cloud infrastructure providers, customer support platform operators, and email delivery services. These providers process personal information only on our instructions and are contractually bound to protect it in line with applicable privacy standards. They may not use it for their own purposes.

Game Providers

Games on the VegaZone Casino platform are delivered by third-party software developers including Evolution, Play’n Go, PG Soft, Pragmatic Play, Spribe, BGAMING, and others. These providers may receive limited technical data necessary to deliver their games, such as session tokens or game round identifiers. We are responsible for ensuring these providers handle any such data appropriately.

Regulators and Law Enforcement

We will disclose personal information to regulators, government agencies, and law enforcement bodies when required by law or when we believe disclosure is necessary to prevent or investigate illegal activity. As noted above, this includes filing suspicious transaction reports with the New Zealand Police Financial Intelligence Unit under the AML/CFT Act, without notifying the affected player.

Legal Proceedings

We may disclose personal information in connection with actual or threatened legal proceedings, to protect our legal rights, or to establish, exercise, or defend claims.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, personal information held by VegaZone Casino may be transferred to the acquiring entity as part of that transaction. Any such transfer would be subject to confidentiality obligations and the acquiring entity would be required to honour the commitments set out in this policy.

International Data Transfers

Some of the third-party service providers we engage operate from jurisdictions outside New Zealand. Where personal information is transferred internationally, we take steps to ensure it receives an equivalent level of protection to that required under the New Zealand Privacy Act 2020. This may involve contractual protections with the recipient, using providers in countries assessed to have adequate privacy laws, or other appropriate safeguards.

Players who have questions about specific international transfers can contact us at support@vegazone-casino-nz.com.

How Long We Keep Your Information

We do not retain personal information longer than necessary for the purposes for which it was collected, subject to legal obligations that require us to keep it for specified minimum periods.

  • AML/CFT records: Identity verification documents, transaction records, and related due diligence records must be retained for a minimum of five years after the end of the business relationship under the AML/CFT Act 2009. We comply with this minimum and do not retain this category of information beyond what is required.
  • Account and game history: Retained for the duration of the account relationship and for a period afterwards sufficient to resolve any outstanding disputes and meet regulatory requirements. We typically retain this data for seven years following account closure.
  • Support communications: Retained for three years following resolution of the query, or longer if the communication is relevant to an ongoing dispute or regulatory matter.
  • Marketing data: Retained until you withdraw consent or for a period of three years from your last interaction with a marketing communication, whichever comes first.
  • Technical logs: Retained for twelve months for security and debugging purposes, after which they are deleted or anonymised.

When personal information is no longer required and no legal obligation requires its retention, we delete it securely or anonymise it so that it can no longer be attributed to an identifiable individual.

How We Protect Your Information

VegaZone Casino applies technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, and destruction. No online system can guarantee absolute security, but the protections we have in place reflect current industry standards for the type and volume of data we handle.

Technical Measures

  • Transport Layer Security (TLS) encryption on all data transmitted between your browser or app and our servers.
  • Encryption of sensitive data at rest, including stored identity documents and payment-related records.
  • Access controls that restrict access to personal data to staff and systems that have a legitimate operational need for it.
  • Multi-factor authentication requirements for administrative access to systems holding personal data.
  • Regular security assessments of our infrastructure and applications.
  • Intrusion detection and monitoring systems to identify and respond to unusual access patterns.

Organisational Measures

  • Privacy and security training for staff who handle personal information.
  • Contractual obligations on all third-party processors to maintain appropriate security standards.
  • Internal policies governing acceptable use of systems and access to player data.
  • A designated process for identifying and responding to potential personal data breaches.

Data Breach Notification

The Privacy Act 2020 introduced a mandatory breach notification scheme in New Zealand. Under this scheme, if we experience a privacy breach that it is reasonable to believe has caused, or is likely to cause, serious harm to any affected individual, we are required to notify both the affected individuals and the Privacy Commissioner as soon as practicable.

We maintain an internal breach response process to detect, assess, and respond to potential breaches promptly. If you believe you have identified a security vulnerability in our systems, or if you have reason to think your account has been accessed without your authorisation, contact us immediately at support@vegazone-casino-nz.com or call +64 9 671 2023.

Your Rights Under the Privacy Act 2020

The Privacy Act 2020 gives you specific rights in relation to personal information held about you. These rights are not absolute and are subject to limitations set out in the legislation, but they are substantive and we are obliged to take requests seriously.

Right of Access

You have the right to request confirmation of whether we hold personal information about you and, if so, to obtain a copy of that information. We will respond to access requests within twenty working days, as required by the Act. In some cases, we may need to verify your identity before releasing information. We will not charge a fee for access requests unless the request is for a large volume of information and the cost of retrieval is significant, in which case we will advise you of any fee before proceeding.

Right of Correction

If personal information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, you have the right to request that it be corrected. Where we agree the information is incorrect, we will correct it and, where reasonable, notify any third parties to whom the information was previously disclosed. Where we disagree with your correction request, we will attach a statement of your correction request to the relevant records.

Right to Complain

If you believe we have not handled your personal information in accordance with the Privacy Act 2020, you have the right to complain to us first. If we cannot resolve your complaint to your satisfaction, you may make a complaint directly to the New Zealand Privacy Commissioner at www.privacy.org.nz. The Privacy Commissioner has the power to investigate complaints and, in serious cases, refer matters to the Human Rights Review Tribunal.

Marketing Opt-Out

You have the right to withdraw consent to receive marketing communications at any time. You can do this by clicking the unsubscribe link in any marketing email we send, by adjusting your communication preferences in your account settings, or by contacting our support team directly. We will process your opt-out within a reasonable period, and you may receive one or two further communications while the change takes effect.

Age Verification and the Protection of Minors

VegaZone Casino does not knowingly collect personal information from anyone under the age of 18. Under the Gambling Act 2003, it is an offence to allow a person under 18 to gamble, and we are required to take reasonable steps to verify that players are of legal age.

Age verification is conducted at the point of registration and reinforced through our KYC process. If we discover that a player has provided false information about their age, or if we have reason to believe an account belongs to a minor, we will suspend the account, conduct a review, and take appropriate action including returning any deposits made and closing the account permanently. We do not retain personal information collected inadvertently from minors any longer than is necessary to complete that process.

If you are a parent or guardian and believe your child has registered at VegaZone Casino, contact us immediately at support@vegazone-casino-nz.com and we will act promptly.

Problem Gambling and Responsible Data Use

VegaZone Casino is required under the Gambling Act 2003 to take active steps to minimise gambling-related harm. Part of that obligation involves using player data to identify risk. This is one of the few instances where we use your information in a way that you may not have specifically requested, and we think it is important to be transparent about it.

We may analyse your session history, deposit frequency, wagering patterns, time of play, and use of responsible gambling tools to assess whether your gambling behaviour is consistent with harm. If our monitoring flags a concern, a member of our responsible gambling team may contact you to check in or to offer access to support resources. This is not punitive; it is a harm-reduction obligation we take seriously.

Player data related to responsible gambling interactions, including self-exclusion requests and limit-setting history, is retained for a minimum of five years and may be used to prevent re-registration within any applicable exclusion period.

External support resources available to New Zealand players include:

Links to External Websites

Our website and communications may contain links to third-party websites, including game providers, payment service websites, and responsible gambling organisations. We are not responsible for the privacy practices of those sites. Once you follow a link to an external site, that site’s own privacy policy applies. We recommend reading the privacy policy of any external site you visit before providing personal information to it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, our data practices, or applicable law. When we make material changes, we will notify registered players by email or by a notice on the platform. Continued use of VegaZone Casino after a notified change takes effect constitutes acceptance of the updated policy. If you do not agree with the changes, you should close your account before the changes take effect. You can do so by contacting our support team at support@vegazone-casino-nz.com.

How to Contact Us About Privacy

All privacy-related requests, including access requests, correction requests, and complaints, should be directed to our support team. We will acknowledge your request promptly and respond within the timeframes required by the Privacy Act 2020.

If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the New Zealand Privacy Commissioner. Information on making a complaint to the Commissioner is available at www.privacy.org.nz.

Bonus

for first deposit

$950 + 250 FS