Privacy Policy | Platinum Play Casino NZ
PP
Platinum Play Casino · New Zealand
Last Updated: January 2025
Privacy
Policy
Your privacy matters. This policy explains in plain language how Platinum Play Casino collects, uses, stores, and protects your personal data — and what rights you have as a New Zealand player.
Controller
Who Is Responsible
For Your Data
Data Controller
Baytree Ltd
Operating as Platinum Play Casino
Licence
Malta Gaming Authority
MGA/B2C/213/2011
Registered Address
Level G, Quantum House
75, Abate Rigord St.
Ta’ Xbiex XBX 1120, Malta
Platinum Play Casino operates the website platinumplaycasino-nz.com and is the data controller under the EU General Data Protection Regulation (GDPR) and applicable New Zealand privacy law (Privacy Act 2020). As a player, you are the data subject.
Section 1
What Data We Collect
👤
Identity Data
—Full legal name
—Date of birth
—Nationality
—Government-issued ID (KYC)
—Username and password (hashed)
Required for account creation and legal age verification (18+).
📬
Contact Data
—Email address
—Phone number
—Residential address
—Country of residence
—Communication preferences
Used for account communication, bonus notifications, and support.
💳
Financial Data
—Payment method details
—Transaction history
—Deposit and withdrawal records
—Account balance history
—Source of funds documentation
Required for payment processing and anti-money laundering (AML) compliance.
🎮
Gaming Activity Data
—Games played, bets placed
—Win and loss history
—Session duration and frequency
—Bonus usage and wagering
—Responsible gaming interactions
Used for regulatory reporting, responsible gambling monitoring, and service improvement.
🌐
Technical Data
—IP address
—Browser type and version
—Device type and OS
—Login timestamps and locations
—Cookie and tracking data
Used for fraud prevention, security monitoring, and geolocation verification.
We do NOT collect: Full card numbers (processed by PCI-compliant payment providers), biometric data, or sensitive personal data beyond what is strictly necessary for regulatory compliance and the provision of our gambling services.
Section 2
How We Use
Your Data
We only process your data when we have a lawful basis to do so. Below are all purposes for which your data is used, along with the legal basis for each.
🔑
Account Creation & Service Delivery
Creating your account, verifying your identity, processing deposits and withdrawals, delivering game outcomes, managing bonuses.
Legal basis: Contract performance
⚖️
Legal & Regulatory Compliance
Age verification (18+), Know Your Customer (KYC) checks, Anti-Money Laundering (AML) monitoring, regulatory reporting to the Malta Gaming Authority, responsible gambling monitoring.
Legal basis: Legal obligation
🛡️
Security & Fraud Prevention
Detecting and preventing fraudulent activity, collusion, account takeovers, and money laundering. Monitoring unusual betting patterns and login anomalies.
Legal basis: Legitimate interests
📧
Marketing & Promotions
Sending bonus offers, promotional emails, and personalised game recommendations. You can opt out at any time via your account settings or by clicking “unsubscribe” in any email.
Legal basis: Consent
📊
Analytics & Service Improvement
Understanding how players use our platform, which games are most popular, and where improvements can be made. All analytics data is aggregated and anonymised where possible.
Legal basis: Legitimate interests
🎯
Responsible Gambling Monitoring
Detecting signs of problem gambling, enforcing self-exclusion, applying deposit limits, and providing intervention where required by our MGA licence conditions.
Legal basis: Legal obligation & legitimate interests
Section 3
Who We Share
Your Data With
We do not sell your personal data to third parties. We only share it where necessary, with parties bound by strict confidentiality agreements.
🏛️
Regulatory Authorities
Malta Gaming Authority, financial intelligence units, and law enforcement when legally required. We have no discretion in these disclosures — they are mandatory.
💳
Payment Processors
Visa, Mastercard, Neteller, Skrill, and other payment providers — only transaction data necessary to process your deposits and withdrawals. All are PCI-DSS compliant.
🔍
Identity Verification
Third-party KYC providers who verify your identity documents. Data shared is the minimum necessary for verification and is processed under strict data protection agreements.
🎮
Game Providers
Microgaming and other software providers receive anonymised player IDs for game session management. They do not receive your name, email, or financial details.
📊
Analytics Providers
Google Analytics and similar services receive anonymised, aggregated data about how our site is used. No personally identifiable information is shared with analytics tools.
International transfers: Where data is transferred outside of the EEA (e.g. to payment processors or game providers), Platinum Play ensures appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission. New Zealand players’ data may be processed in Malta, the UK, or EU member states under these safeguards.
Section 4
Cookies &
Tracking
We use cookies to keep you logged in, remember your preferences, and understand how our site is used. You can manage cookie preferences at any time.
Manage Cookies
Update cookie preferences via your browser settings or our cookie banner. Note: disabling essential cookies will prevent you from logging in.
Session cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled — the site will not function without them.
Remember your language, game preferences, and responsible gambling settings. Disabling these means you’ll need to re-set preferences each visit.
Google Analytics cookies that help us understand which pages and games are most popular. All data sent is anonymised. We use this information only to improve the platform.
Affiliate tracking cookies that record how you arrived at our site. Required for our affiliate partners to receive commission. Does not track you across other websites beyond our referral tracking.
Section 5
How We Protect
Your Data
🔒
128-bit SSL Encryption
All data transmitted between your browser and our servers is encrypted using TLS 1.3 — the same standard used by global banks.
🗄️
Encrypted Storage
Personal data stored in our databases is encrypted at rest. Passwords are never stored in plain text — only cryptographic hashes are retained.
👁️
Access Controls
Only authorised Platinum Play staff with a legitimate business need can access your personal data. All access is logged and audited.
✅
eCOGRA Certified
Monthly independent audits by eCOGRA verify our data security practices alongside game fairness checks.
🚨
Breach Notification
In the unlikely event of a data breach affecting your rights, we will notify you and the relevant authorities within 72 hours as required by GDPR.
Data Retention: We retain your personal data for as long as your account is active, plus a minimum of 5 years after account closure as required by AML and MGA regulations. Gaming transaction records are retained for 10 years. After these periods, your data is securely deleted or anonymised. You may request early deletion subject to our legal retention obligations.
Section 6
Your Rights
Under Privacy Law
As a New Zealand player, you have rights under both the NZ Privacy Act 2020 and GDPR (which Platinum Play applies as our data controller is based in the EU). Here is what you can request — for free — at any time.
Request a copy of all personal data we hold about you, why we hold it, and who we share it with. We will respond within 30 days.
Request correction of inaccurate or incomplete personal data. Update most information directly in your account dashboard or contact our support team.
Request deletion of your personal data. Note: we may be unable to fulfil this where we have legal retention obligations (e.g. AML records must be kept for 5+ years).
Request that we stop processing your data while a dispute or complaint is being resolved, without deleting it. Processing will be suspended within 48 hours of your request.
Receive your personal data in a structured, machine-readable format (JSON or CSV) to transfer to another service provider. Applies to data processed by automated means.
Object to processing based on legitimate interests, or to direct marketing. Opt out of marketing via account settings or any email’s unsubscribe link — effective immediately.
How to Exercise Your Rights
Submit any privacy request by emailing [email protected] with your account email and the specific right you wish to exercise. We will acknowledge within 48 hours and respond fully within 30 days.
Or contact us via
Live Chat · Email · Post
Platinum Play Casino NZ
Privacy Policy v3.0 · Last Updated January 2025 · MGA Licensed
18+ | Gambling can be addictive. Play responsibly. | Problem Gambling Foundation NZ: 0800 664 262 | platinumplaycasino-nz.com is operated by Baytree Ltd under MGA licence MGA/B2C/213/2011. All rights reserved.
