Kiwi's Treasure Privacy Policy

Who we are

Kiwi's Treasure is a licensed online casino. We are the data controller for personal information collected through the site and through your player account.

If you have a question about this policy, contact us at support@kiwistreasure.co.uk.

What we collect

When you visit the site, we automatically collect technical data such as your IP address, browser type, operating system, the pages you visit, the time of your visit and the referring page. This data is collected through standard web server logs and through analytics tools.

When you open an account, we collect the information needed to operate it: your name, date of birth, address, email, phone, payment details and identity verification documents required by our licence and anti-money-laundering rules.

We also collect information about your activity on the site: deposits, withdrawals, bets, game choices, bonus opt-ins and any limits or self-exclusion settings you apply.

Cookies and similar technologies

We use cookies to remember your preferences (such as cookie consent), keep you signed in, secure the session and measure how the site is used through analytics. Our Cookie Policy lists every cookie in detail.

You can refuse non-essential cookies on first visit through the consent banner. You can change your preferences at any time through the cookie settings link in the footer.

How we use your data

Account data is used to operate your account, process deposits and withdrawals, settle bets, run promotions and meet our legal obligations including KYC and anti-money-laundering checks.

Technical data is used to operate the site, prevent abuse, troubleshoot issues and measure traffic. Analytics data is aggregated and anonymised, used to understand which pages are useful and where the site can be improved.

How we share your data

We do not sell your data. We share limited data with payment processors, identity verification providers, game studios, our hosting provider, analytics provider and email service. Each of these providers handles data under their own privacy policies, which we have vetted for compliance.

We may disclose data if required by law, by court order, or to meet our regulatory obligations. We will not disclose data to third parties for marketing purposes without your consent.

Where your data is stored

Our infrastructure runs across data centres that may be located in multiple regions, including in the European Union, the United States, Australia and Singapore. We choose providers that meet recognised privacy and security standards.

How long we keep your data

Server logs are retained for 90 days. Analytics data is retained for up to 26 months in aggregated form. Account and transaction data is retained for the period required by our licence and applicable law, typically a minimum of 5 years after the account is closed.

Your rights

Under applicable privacy law, you have the right to ask us what personal information we hold about you, to correct inaccurate information, and to ask us to delete it where we are not required to keep it for regulatory reasons. Email support@kiwistreasure.co.uk to make a request. We will respond within 20 working days.

If you are not satisfied with how we handle a privacy concern, you can contact your local privacy regulator.

Players under the legal age

This site is intended for adults aged 20 and over, in line with the New Zealand legal age for our products. We do not knowingly collect data from anyone under 20. If you believe a minor has submitted personal data through our site or opened an account, contact us and we will close the account and delete the data within our regulatory obligations.

Security measures we use

All traffic between your browser and our servers is encrypted using TLS 1.2 or higher. Account passwords are stored using a one-way salted hash, which means even our engineers cannot read them. Identity documents and KYC images are held on a segregated, access-controlled storage layer that is not reachable from public-facing services.

We monitor for unusual login activity and challenge suspicious sessions with additional verification steps. If we detect a potential breach affecting your data, we follow the notification timelines required by the privacy law that applies to you.

Marketing communications

We send promotional emails only to players who have opted in. Each email includes an unsubscribe link, and you can also turn marketing off entirely from the communications screen in your account. Self-exclusion and account closure both stop marketing emails within five business days.

We do not pass your contact details to third parties for their own marketing. Where we run a campaign through an advertising network, the network sees only an anonymised audience identifier, never your name, email or playing activity.

Players in New Zealand and the Privacy Act 2020

Although our licence sits in Alderney, we treat our New Zealand players' personal information in line with the principles of the Privacy Act 2020. That means collecting only what we need, telling you why we collect it, keeping it accurate, holding it securely and giving you a clear way to access or correct it. If you live in New Zealand and feel a privacy concern has not been resolved by us, you can also raise it with the Office of the Privacy Commissioner at privacy.org.nz.

Where we transfer Kiwi player data outside New Zealand for hosting, payment processing or KYC, we use providers that operate to comparable privacy standards. The destinations are typically Australia, the European Union and the United States.

Your choices around marketing in New Zealand

If you are signed up to our marketing emails or SMS list and want to step back, you can unsubscribe from any message we send or turn off marketing entirely from the communications screen in your account. We will action the change within five business days. Operational messages such as deposit confirmations, withdrawal updates and security alerts continue regardless of marketing settings, because they are required for us to run your account safely.

We do not buy player contact details from third parties or send unsolicited marketing to people who have not opened a Kiwi's Treasure account. If you receive an email claiming to be from us that you did not expect, forward it to support@kiwistreasure.co.uk so we can investigate and warn other players.

Updates to this policy and how to contact us

We may update this policy from time to time. The current version is always shown at the top of this page along with the date last updated. Material changes will be highlighted in the cookie consent banner on your next visit. For any privacy-related question, email support@kiwistreasure.co.uk or use the contact details on our Contact page.