RoyalistPlay Privacy Policy NZ
This Privacy Policy describes what RoyalistPlay collects, why we collect it, how long we keep it and what controls New Zealand players have over their own data. It applies to everyone who visits the site and to everyone who holds an account, and it is written under the Privacy Act 2020 and the thirteen Information Privacy Principles overseen by the Office of the Privacy Commissioner.
Privacy questions can be raised at any time without affecting anything else on the account. The team that handles them is separate from the cashier and from support, which means a question about data does not slow down a withdrawal and a withdrawal question does not get routed into a privacy queue.
What we collect
When you open an account we collect the information needed to verify your identity and to operate the account: your name, date of birth, address, email, phone number and chosen payment methods. We collect a proof of identity document and a proof of address during onboarding to satisfy NZ anti-money-laundering requirements.
When you use the site we also record the standard technical fingerprint that any modern website handles: device type, browser, IP address, language, time zone and the pages you visit. We collect game play history for every spin, hand and bet placed on the account, both for regulatory reporting and so that support can answer questions about specific outcomes.
Why we collect it
The legal basis for most processing is the contract we have with you when you hold an account: we cannot run a casino or a sports book without knowing who you are. A second basis is legitimate interest, which covers things like fraud detection, security monitoring and product improvement. Where consent is the right basis, for example marketing emails, you opt in explicitly and you can opt out at any time from the privacy section of your account settings.
A third basis is legal obligation. Anti-money-laundering legislation, responsible gambling reporting requirements and standard tax record retention all require us to keep certain records for set periods even if the account is later closed. We do not keep data longer than these obligations require.
How long we keep it
Account records are kept for the length of the relationship and then for the period that licensing rules require, which is typically five years from the date the account is closed. Some technical logs are kept for a shorter window measured in months, not years. Marketing preferences are kept until you change them or close the account, and your communications preferences can be reviewed at any time from your account settings.
Who we share data with
We share data with payment providers to process deposits and withdrawals, with game studios to render their products inside the site, and with our identity verification provider to confirm your identity at sign-up. We share data with regulators when we are legally required to do so. We do not sell personal data to third parties for marketing purposes under any circumstances.
Your rights
You can request a copy of the personal data we hold about you, correct anything that is wrong, ask us to delete data we are no longer required to keep, or limit how it is used. The fastest way to do any of this is through the privacy section in your account settings. If a request relates to a regulated retention period, we will explain what we can release now and when the rest becomes eligible.
You also have the right to complain to the Office of the Privacy Commissioner of New Zealand at privacy.org.nz if you believe we have mishandled your data. We would always prefer to fix a privacy issue directly with you first, but the regulator's complaint route is open at any time.
Cookies and tracking
Cookies and similar technologies are covered in detail on the cookie policy, including the categories used on the site and how to control them inside any modern browser. Non-essential categories are opt-in and the cookie banner that appears on first visit lets you accept, reject or customise the choice.
Security
Connections to the site are encrypted with TLS, passwords are stored using one-way hashing and access to personal data inside the business is logged and limited to staff who need it for their role. Two-factor authentication is available on every account from the security section of your settings and is strongly recommended.
Account closure and data
Closing the account does not automatically delete every record we hold. Some data is retained for the regulatory window described above. After that window ends, records are deleted in line with this policy. The close account page explains the full closure flow and how to ensure any remaining NZ$ balance is paid out before closure is finalised.
Contact
Privacy questions go to privacy@royalistplay. We aim to respond inside ten working days. General questions about the platform are handled by the help centre rather than the privacy mailbox.