Privacy Policy
1. Overview & Scope
This Privacy Policy applies to Royal Vegas Casino and its related services accessible at royalvegascasino-nz.com (“we,” “us,” “our”). It governs how we collect, process, store, and protect the personal data of players and visitors based in New Zealand.
Royal Vegas Casino is operated by Baytree Services Ltd, licensed by the Malta Gaming Authority (MGA) and the Kahnawake Gaming Commission. We are committed to protecting your privacy in accordance with:
GDPR (EU) 2016/679
MGA Data Protection Rules
AML/CFT Regulations
By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
We collect personal data that you provide to us directly, data generated by your use of our services, and data from third-party verification providers.
Registration & Account Data
Date of birth
Email address
Physical address
Phone number
Username & password (hashed)
Country & currency
Identity Verification (KYC)
Proof of address documents
Payment method verification
Source of funds (if requested)
Financial & Transaction Data
Payment method details (tokenised)
Account balance history
Bonus claims & redemptions
Technical & Usage Data
Device type & OS
Browser type & version
Session duration & timestamps
Pages visited & games played
Geolocation (country level)
Cookies & tracking pixels
3. How We Use Your Data
Creating and managing your player account, processing deposits and withdrawals, verifying your identity, and providing customer support.
Meeting our obligations under the MGA licence, KYC (Know Your Customer) requirements, Anti-Money Laundering (AML) laws, and age verification regulations.
Detecting and preventing fraudulent transactions, account takeovers, money laundering, and other illegal activities that could harm you or the integrity of the platform.
Monitoring your gameplay patterns to identify potential problem gambling behaviour and proactively offer support tools or intervention where appropriate.
Analysing usage patterns to improve our website, gaming experience, and customer support. All analytics data is aggregated and anonymised where possible.
Sending you bonus offers, promotions, and news about Royal Vegas — only where you have consented, and never to self-excluded or cooling-off players. You can unsubscribe at any time.
5. How We Protect Your Data
Despite these measures, no system is completely impenetrable. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant regulatory authority within 72 hours, in accordance with GDPR and MGA requirements.
6. Data Retention
After the retention period, data is securely deleted or anonymised. Self-exclusion records are retained indefinitely to prevent re-registration by excluded players.
7. Your Privacy Rights
Under the New Zealand Privacy Act 2020 and GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you. We will respond within 30 days.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your data where we have no legal obligation to retain it (e.g. financial records must be kept for 7 years).
Right to Portability
Receive your personal data in a structured, machine-readable format (CSV or JSON) that you can transfer to another service.
Right to Object
Object to our processing of your data for marketing or profiling purposes. We will stop immediately upon receiving a valid objection.
Right to Restriction
Request that we temporarily suspend processing of your data while a dispute or request is being reviewed.
9. Marketing Communications
With your consent, we may contact you about bonuses, promotions, and news via email, SMS, or push notifications. You may withdraw consent at any time by:
We will never send marketing emails to self-excluded or cooling-off players. Transactional emails (account confirmation, deposit confirmation) are not marketing and cannot be opted out of.
10. Third-Party Links
Our website may contain links to third-party websites (e.g. payment providers, game studios, responsible gambling organisations). We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies before providing any personal data. Royal Vegas does not control and is not liable for third-party content, policies, or data practices.
11. Children’s Privacy
Our services are strictly intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has registered, we will immediately close the account, refund any real money balance, and delete all associated personal data. If you believe a minor has registered, contact us immediately.
12. Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will:
Continued use of our services after the effective date of changes constitutes acceptance of the updated policy.
13. Contact Our Privacy Team
For any privacy-related questions, requests, or complaints, contact our dedicated Data Protection Officer:
