Privacy Policy for Boo Casino New Zealand

This Privacy Policy explains how Boo Casino collects, uses, stores and protects personal information, in line with New Zealand privacy law and in particular the Privacy Act 2020. It exists so that users know what happens to their data and so that we meet our transparency obligations. It sets out the lawful bases we rely on when processing personal data, which are the performance of our contract with you, compliance with legal and regulatory duties, and our legitimate business interests. Below are the categories of information processed, the security measures applied, how long data is kept, and how to exercise your privacy rights. The policy covers every interaction through the Boo casino NZ login portal and the services attached to it.

What We Collect, Grouped by Type

Boo Casino processes the personal data needed to run the service, meet regulatory requirements and operate as a business. Collection happens at registration, during financial transactions, through contact with support, and automatically by technical means. The categories break down as follows.

Registration and account data covers what you supply at sign-up and anything you change afterwards: full name, date of birth, contact details including email address and phone number, and the security information you choose.

Identification and verification data is collected to satisfy the anti-money-laundering and counter-terrorist-financing obligations that apply to us as a licensed operator. It includes copies of government-issued identity documents, proof of address, and anything further requested to establish source of funds or source of wealth.

Financial and transactional data covers every payment activity: deposit and withdrawal records, payment method identifiers such as masked card numbers or e-wallet references, transaction history, and gameplay activity including wagers, wins and losses.

Technical and usage data is generated automatically as you use the platform. It includes IP address, device type and identifiers, browser details, approximate geographical location, the pages you open, and cookie data. It is used for system administration, for security, and for analysis.

Communication and compliance records consist of correspondence by email, live chat or telephone, together with records of responsible gambling interactions, self-exclusion requests, and any investigation into a breach of the terms of service.

Why We Process It, and Under What Legal Basis

Personal information is processed only for purposes that are specified, explicit and legitimate, and each processing activity runs under a recognised lawful basis. The main ones are set out below.

The primary basis is performing our contract with you. That covers creating and running your player account, handling deposits and withdrawals, giving you access to games, and providing support. Identity verification sits here as well as under legal obligation, because a verified account is a precondition of the service we agreed to provide.

Compliance with legal obligations is not optional. As a licensed operator we carry regulatory duties under the terms of our gaming licence and the laws that apply to our operation. These cover age and identity verification, monitoring for fraud and money laundering, reporting suspicious transactions, keeping accurate transaction records, and meeting responsible gambling requirements.

Processing under legitimate interests happens where it is necessary for our business and where your rights and freedoms do not override it. That includes using technical data for network and information security, preventing fraud and criminal activity, managing business risk, running diagnostics and analysis to improve the service, and dealing with legal claims. Using IP addresses to spot multiple-account fraud is a straightforward example: it protects the business and the other players at the same time.

In limited cases processing rests on your consent, typically for optional communications such as marketing newsletters, where consent has been given explicitly, on an informed basis, and can be withdrawn at any time. Consent is never the basis for core service delivery or for mandatory compliance work. Players in other jurisdictions, including anyone arriving from Boo casino Canada coverage, should be aware that the applicable bases can differ under local law.

Storage, Protection and How Long Data Is Kept

Boo Casino applies technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. Data sits on secure servers in controlled-access environments. How long any given item is kept depends on why it was collected in the first place and on the legal or regulatory requirements attached to it.

Sensitive transmissions, financial transactions and account authentication among them, are protected with industry-standard encryption, in practice TLS. Access to personal data inside our systems is limited to authorised staff on a need-to-know basis, under internal policy and enforced access controls.

Retention runs to a schedule rather than case by case. Data belonging to an active account is held for as long as the account exists. After closure it is kept for a mandatory period to satisfy legal, tax and regulatory obligations, which usually means a minimum of seven years from the last transaction or interaction. That period can be extended where legal proceedings or an investigation are ongoing.

Once the applicable retention period expires, personal data is securely deleted or anonymised. Anonymising means altering it so that it can no longer be linked to an identifiable person, after which it may be used for statistical or analytical work. Technical logs and backups follow their own lifecycle policies, set so that deletion still happens in line with the principle of storage limitation.

Your Rights, and How to Use Them

The Privacy Act 2020 gives individuals in New Zealand specific rights over their personal information, and we have procedures in place to handle them. Every request goes through identity verification first, which is what stops someone else exercising your rights on your behalf. The rights below apply, subject to the exceptions the law allows.

You may ask whether we hold personal information about you and request access to it. You may also request correction of anything inaccurate, misleading or out of date. Where we agree a correction is needed, we will take reasonable steps to inform any other party we previously disclosed the uncorrected information to.

In defined circumstances you may request erasure of your personal data or restriction of its processing, and you may object to processing carried out under legitimate interests. Where processing rests on consent or on a contract and is carried out by automated means, you may also be entitled to data portability, meaning you receive the data you provided in a structured, commonly used and machine-readable form.

To exercise any of these, send a formal request through the contact channel named on the Boo Casino website. State which right you are exercising and give enough detail to identify your account and the information concerned. We respond to verified requests within the timeframe the law sets. Some rights are limited in practice, for instance where we are required to retain data by law, or where it is needed to establish, exercise or defend a legal claim. Questions about whether a particular processing activity is legitimate can go to our Privacy Officer, whose contact details are published separately. Keeping the Boo casino NZ login secure is part of the same commitment, since verifying identity is what makes any of these requests safe to act on.