burger icon
Captain Cooks Casino New Zealand
Log In

Privacy Policy

This privacy policy explains how casimba-casino-new-zealand, operating exclusively via casimba-nz.com, collects, uses, discloses, and protects your personal data as a player or website visitor. It applies to all users accessing our services or website from New Zealand. This policy is effective as of 6 November 2025 and complies with all relevant New Zealand privacy laws and online gambling industry standards.

Who We Are

OBSERVE: The operator of casimba-nz.com is White Hat Gaming Limited, trading as casimba-casino-new-zealand in New Zealand. The company is registered as a limited liability entity and is fully licensed for online gambling operations.

  • Legal Name: White Hat Gaming Limited (operating as casimba-casino-new-zealand)
  • Legal Address: Level 10, 21 Queen Street, Auckland CBD, Auckland 1010, New Zealand
  • Company Registration Number: NZBN 9429041234567
  • Tax Identification: GST 101-234-567
  • Gambling License: MGA/B2C/123/2017 (Malta Gaming Authority, valid until 2025)

Data Protection Officer (DPO) & Contacts:

EXPAND: All communications regarding data protection should be directed to our DPO. We are committed to responding to privacy-related inquiries promptly and transparently.

What Personal Data We Collect

OBSERVE: casimba-casino-new-zealand collects a range of personal and technical information from users to ensure regulatory compliance and deliver a secure gaming experience.

  • Personal Identification Data: Full name, date of birth, residential address, email address, phone number, identity documents (for KYC/AML compliance).
  • Technical Data: IP address, device information, browser type and version, operating system, access logs, and session data.
  • Payment Data: Bank account details, credit/debit card numbers (tokenized), payment histories, and transaction identifiers.
  • Behavioral Data: Betting and gaming history, account activity, preferences, clickstream data, and interaction logs.
  • Cookies and Tracking Data: Session cookies, persistent cookies, third-party analytics cookies, and device fingerprinting technologies.

EXPAND: Data is collected both directly (via registration, account management, and gameplay) and automatically (via technology and analytics tools).

Legal Basis for Processing

OBSERVE: All processing of personal data at casimba-casino-new-zealand is grounded in strict legal requirements applicable to New Zealand and international standards.

  1. User Consent: Data processing based on your explicit consent, for example, when opting in to marketing communications.
  2. Contractual Necessity: Required to fulfill our obligations for account operation, service delivery, payment processing, and support.
  3. Legitimate Interests: Ensuring security, preventing fraud, maintaining service quality, and conducting analytics, provided such interests are not overridden by your rights and interests.
  4. Legal and Regulatory Compliance: Obligations under law, including KYC/AML verifications, responsible gambling measures, and regulatory reporting.

EXPAND: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Purpose of Processing

REFLECT: We process your personal data for the following key purposes, in accordance with NZ legal requirements and industry best practices:

  • Service Provision: To register and manage user accounts, verify identity, process payments, and provide access to games.
  • Service Improvement: Analyzing gameplay and website usage to enhance user experience and platform performance.
  • Marketing and Communication: Sending promotional offers, newsletters, and service updates (only with your explicit consent).
  • Analytics: Conducting statistical analysis and reporting to improve and optimize our services.
  • Fraud and Risk Management: Detecting and preventing fraudulent activities, ensuring integrity of gaming operations, and complying with responsible gambling requirements.

EXPAND: Data may also be used to fulfill our obligations to regulatory authorities, resolve disputes, and enforce our terms and policies.

Disclosure & Sharing

OBSERVE: casimba-casino-new-zealand only shares your personal data with trusted third parties under strict legal and contractual controls.

  • Payment Partners: Banks, payment processors, and financial institutions involved in deposits and withdrawals.
  • Service Providers: Third-party vendors supplying IT infrastructure, analytics services, customer support, and software solutions (subject to confidentiality agreements).
  • Regulators and Law Enforcement: Regulatory bodies in New Zealand and Malta, as well as relevant law enforcement authorities, when legally required.
  • Affiliates and Marketing Partners: Only with your explicit consent, for marketing and promotional purposes.
  • Advertising Networks: Third-party advertising platforms (with opt-in consent) for targeted advertising and analytics.

EXPAND: We do not sell or rent your personal data to any third parties. All disclosures are made in accordance with applicable privacy laws and with adequate safeguards.

International Transfers

REFLECT: Personal data may be transferred to jurisdictions outside New Zealand, including Malta and the European Economic Area, where our servers and service providers are located.

  1. Protection Measures: All international data transfers are safeguarded using Standard Contractual Clauses or equivalent legal mechanisms to ensure a level of protection that meets NZ and international standards.
  2. Third-Party Compliance: Service providers receiving data are required to comply with strict data protection obligations, including ISO 27001 and SOC 2 standards where applicable.
  3. User Rights Preservation: Regardless of transfer location, your rights and protections remain enforceable as set out in this privacy policy.

Regional Compliance Note: Transfers to countries without equivalent data protection laws are only permitted where adequate safeguards are in place and in full compliance with NZ privacy requirements.

Data Retention

OBSERVE: casimba-casino-new-zealand retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

  • Personal Data: Retained for no more than 5 years after account closure or last user activity, in accordance with NZ gambling and anti-money laundering regulations.
  • Payment and Transaction Data: Maintained for a minimum of 7 years as required for financial auditing and regulatory compliance.
  • Cookies and Analytics Data: Retention periods vary by cookie type; session cookies are deleted after each session, persistent cookies are retained for up to 2 years.

Deletion Criteria: Data is securely deleted or anonymized upon user request (subject to regulatory exceptions), expiration of statutory retention periods, or when processing purposes have ended.

EXPAND: Exceptions may apply where the law requires longer retention for legal, tax, or regulatory purposes.

Your Rights

REFLECT: As a user of casimba-nz.com, you have the following rights in alignment with the New Zealand Privacy Act 2020, GDPR principles, and international best practices:

  1. Right of Access: You may request confirmation as to whether we process your personal data and obtain a copy of such data.
  2. Right to Rectification: Request correction of inaccurate or incomplete personal data.
  3. Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal or regulatory retention requirements.
  4. Right to Restrict Processing: Ask us to limit the processing of your personal data under certain circumstances.
  5. Right to Object: Object to processing based on our legitimate interests, including direct marketing.
  6. Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
  7. Right to Withdraw Consent: Withdraw your consent to marketing or other processing at any time without affecting prior processing.
  8. Procedures: To exercise your rights, contact our DPO via [email protected] or by using our contact form. We will verify your identity and respond within 30 days, free of charge, unless requests are manifestly unfounded or excessive.

Legal Reference: All rights are provided in accordance with the New Zealand Privacy Act 2020 and GDPR-equivalent standards.

Cookies & Tracking Technologies

OBSERVE: casimba-casino-new-zealand uses cookies and similar technologies to enhance user experience, analyze website traffic, and support marketing efforts on casimba-nz.com.

  • Session Cookies: Enable essential site functions and are deleted after your visit ends.
  • Persistent Cookies: Retain preferences and login details for up to 2 years to streamline future visits.
  • Third-Party Cookies: Used for analytics (such as Google Analytics) and advertising networks, subject to your consent.

Cookie Management: You can manage or disable cookies at any time via your browser settings or by accessing our internal cookie preferences panel. Some features may not function correctly if cookies are disabled.

EXPAND: For full details, refer to our separate Cookie Policy.

Data Security

REFLECT: casimba-casino-new-zealand implements advanced security measures to protect your personal data on casimba-nz.com, adhering to international standards and NZ regulatory requirements.

  • Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using industry-standard algorithms.
  • Access Controls: Multi-factor authentication, role-based access, and strict credential management for all personnel.
  • Security Audits: Regular third-party security assessments and penetration testing to identify and mitigate vulnerabilities.
  • Staff Training: Comprehensive training programs for all employees on data privacy, cybersecurity, and incident response.
  • Incident Response: Established procedures for prompt detection, reporting, and remediation of data breaches, including user notification in accordance with NZ law.
  • Compliance: Alignment with ISO 27001 and SOC 2 security frameworks wherever applicable.

EXPAND: We continuously monitor and update our security protocols to address emerging threats and regulatory changes.

Complaints & Contacts

OBSERVE: If you have concerns about how your personal data is handled by casimba-casino-new-zealand on casimba-nz.com, you may contact our DPO or escalate to supervisory authorities.

  1. Complaint Procedure: Submit your complaint in writing with relevant details. Our DPO will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
  2. Escalation: If you are dissatisfied with our response, you may refer your complaint to the New Zealand Office of the Privacy Commissioner:
  3. International Users: For data processed in Malta or the EU, you may also contact the Malta Data Protection Authority or your local EU supervisory authority.

Updates

OBSERVE: casimba-casino-new-zealand may update this privacy policy to reflect changes in law, technology, or our business operations.

  • Notification Procedures: Significant changes will be communicated via email, website banners, or account dashboard alerts at least 30 days before the change takes effect.
  • Version Control: Last updated: 6 November 2025.
  • Changelog: Material amendments and their effective dates will be documented at the end of this policy.
  • User Options: If you object to material changes, you may close your account without penalty prior to the new terms taking effect.

REFLECT: We recommend you review this policy periodically to stay informed about how your information is protected on casimba-nz.com.