Captain Cooks Casino New Zealand Privacy Policy

Captain Cooks Casino processes personal data to fulfill legal obligations and provide services. Data is handled in accordance with New Zealand privacy law and protected by industry-standard security measures.

This Privacy Policy outlines how Captain Cooks Casino collects, uses, stores, and discloses personal information in connection with its services in New Zealand. The policy exists to inform players about our data handling practices and to fulfil our transparency obligations under applicable privacy laws, including the Privacy Act 2020. It explains the lawful bases for processing personal data, which include the performance of a contract, compliance with legal obligations, legitimate interests, and where applicable, consent. The document details the categories of information processed, security measures implemented, data retention rules, and the procedures for individuals to exercise their legal rights regarding their personal information. This policy is an administrative document governing account management, transactional integrity, and regulatory compliance.

Data Collection & Types of Information Processed

Captain Cooks Casino processes personal information necessary to provide its services, operate accounts, and meet legal obligations. The collection occurs during interactions with our platforms, including website visits, account registration, and financial transactions. We categorize the personal data processed as follows.

Registration and identity data includes information provided during account creation or verification. This encompasses full name, date of birth, residential address, contact email, and telephone number. For verification purposes, we may process copies of government-issued identification, proof of address documents, and in some cases, visual likeness through secure methods.

Financial and transactional data relates to all payment activities. This includes deposit and withdrawal records, payment method details (such as card numbers, bank account information, or e-wallet identifiers), transaction amounts, dates, and IP addresses associated with transactions. We do not store full payment card numbers beyond the initial transaction processing.

Operational and technical data is generated automatically. This covers login history, IP address, device identifiers (like hardware model and operating system), browser type, pages visited, game play activity, and wagering history. We also collect data via cookies and similar technologies for site functionality, security, and analytical purposes.

Communication and compliance records include copies of correspondence via email, live chat, or other support channels. Furthermore, we maintain records required for regulatory compliance, such as source of funds inquiries, self-exclusion requests, and responsible gambling interactions. This comprehensive data collection supports core platform operations and regulatory duties.

Data Usage & Legal Basis for Processing

Personal information is processed for specific, explicit, and legitimate purposes. Each processing activity is conducted under a recognized lawful basis as required by New Zealand privacy law. The primary purposes and corresponding legal grounds are outlined below.

Account administration and service delivery form the core of our processing. We use registration and contact data to create and manage player accounts, facilitate deposits and withdrawals, and provide customer support. The lawful basis for this processing is the performance of the contract between the player and Captain Cooks Casino. This includes sending essential service communications.

Legal and regulatory compliance is a mandatory obligation. We process identity, transactional, and activity data to verify player identity under anti-money laundering laws, conduct age and identity verification, monitor for fraudulent activity, and fulfil reporting duties to the Department of Internal Affairs. The processing for these purposes is necessary for compliance with a legal obligation. This also encompasses the maintenance of responsible gambling tools and self-exclusion registers.

Legitimate interests are pursued where necessary and balanced against individual rights. This includes processing for network and information security, such as detecting and preventing cyber-attacks, fraud, or account misuse. It also covers certain direct marketing communications, for which players can opt-out at any time. Analytical processing to improve website functionality and user experience may also fall under this basis. For instance, technical data helps diagnose platform issues.

Consent may be sought for specific, additional purposes where no other lawful basis applies. This is separate from the terms of service agreement. Players have the right to withdraw consent at any time. An example is the use of certain non-essential cookies. It is noted that the captain cook casino sign up process involves contractual and legal obligation processing, not merely consent-based processing.

Data Storage, Security Measures & Retention Rules

Captain Cooks Casino implements technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Data is stored on secure servers located in jurisdictions with adequate data protection standards, as assessed by New Zealand law.

Security measures adhere to industry standards. These include encryption technologies for data in transit (using TLS protocols) and for sensitive data at rest. Access to personal information is restricted to authorized personnel on a need-to-know basis, protected by strong authentication protocols. Our systems undergo regular security assessments and monitoring to identify and address vulnerabilities.

Data retention periods are determined by the purpose for which the information was collected and relevant legal requirements. We do not retain personal data indefinitely. A retention schedule is followed, after which data is securely deleted or anonymized. Key retention drivers include ongoing account activity, legal hold requirements, and statutory obligations.

Financial and transactional records are retained for a minimum period as required by New Zealand financial and anti-money laundering legislation, typically for at least seven years after the account closure or last transaction. Account data for inactive accounts is archived and subsequently purged according to a defined schedule. Verification documents are retained only as long as necessary to fulfil identification obligations and for a defined period after account closure. Technical logs are retained for a shorter duration for security analysis. It is important to understand that data processed for different purposes may have varying retention timelines within a single player profile.

Player Rights & Data Access Procedures

Under the Privacy Act 2020, individuals in New Zealand have specific rights regarding their personal information. Captain Cooks Casino has established procedures to facilitate the exercise of these rights. To prevent unauthorized access, all requests are subject to a mandatory identity verification process.

Players have the right to request confirmation of whether we hold their personal information and to obtain access to that information. Upon a verified request, we will provide a copy of the personal data we process, typically within 20 working days. Furthermore, individuals have the right to request the correction of any inaccurate or incomplete personal data.

In certain circumstances, players may have the right to request the erasure of their personal data, to object to particular processing activities, or to request the restriction of processing. An individual may also have the right to data portability, which allows for the transfer of their provided personal data to another service provider in a structured, machine-readable format. These rights are not absolute and are subject to specific legal conditions and our overriding compliance obligations.

To exercise any of these rights, a player must submit a formal request via our designated privacy contact channel. The request must include sufficient detail to identify the individual and specify the right being exercised. We will respond within the timeframes stipulated by law. For example, a player who completed a captain cook casino mobile sign up may later request access to the technical data collected during that process. We reserve the right to decline requests that are frivolous, vexatious, or would compromise the privacy of others. A fee may be charged for administrative costs if a request is manifestly unfounded or excessive.