Privacy Policy

About This Privacy Policy

This Privacy Policy applies to all players and visitors who access VinciSpin Casino through the website vinci-spin-casino-nz.com. It sets out how we collect, use, store, and share your personal information, and it explains the rights you hold under New Zealand law.
VinciSpin Casino is operated in accordance with its licence (OGL/2024/1126/0521) and maintains compliance with the Privacy Act 2020 (New Zealand), the Gambling Act 2003, and the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act). Where those laws impose obligations on how we handle your data, this policy reflects those obligations in plain language.
By registering an account, making a deposit, or using any part of this website, you acknowledge that you have read this policy and understand how your information is processed. If any part of this policy is unclear, you are welcome to contact us before proceeding.

Who We Are

VinciSpin Casino operates the online gaming platform accessible at vinci-spin-casino-nz.com. Our registered contact address for New Zealand players is Level 15, 1 Willis Street, Wellington, New Zealand. You can reach us directly by email at support@vinci-spin-casino-nz.com or by phone on 64 4 114 9146.
For the purposes of the Privacy Act 2020, VinciSpin Casino is the agency responsible for the personal information collected through this platform. Any questions about how your data is handled should be directed to us using the contact details above.

Information We Collect

Information You Provide Directly

When you register an account, deposit funds, claim a bonus, or contact our support team, you provide us with personal information. The categories of information we collect at different stages include:

• Full legal name, date of birth, and residential address in New Zealand
• Email address and telephone number
• Username and account password (stored in encrypted form)
• Copies of government-issued identification documents, such as a New Zealand passport or driver licence
• Proof of address, such as a utility bill or bank statement dated within three months
• Payment details including card numbers (stored in tokenised form only), e-wallet account references, and cryptocurrency wallet addresses
• Source of funds documentation where required under AML/CFT obligations
• Correspondence you send to us, including live chat transcripts and email exchanges
• Information you provide when completing responsible gambling assessments or self-exclusion requests

Information Collected Automatically

When you access vinci-spin-casino-nz.com, certain technical information is collected automatically through the operation of the platform:

• IP address and general geolocation derived from it
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths through the site
• Game session data including titles played, bet amounts, session duration, and outcomes
• Login timestamps and frequency of access
• Referral source, if you arrived via a link from another website

Information from Third Parties

We may receive information about you from third parties in specific circumstances:

• Identity verification providers and document authentication services used to confirm your identity during the KYC process
• Financial institutions and payment processors, who may confirm or flag transaction details
• AML screening databases used to check against sanctions lists and politically exposed person (PEP) registers
• Fraud prevention agencies and shared industry blacklists
• Credit reference agencies, in limited circumstances where account activity warrants additional due diligence

Why We Collect and Use Your Information

Account Registration and Platform Access

We process your name, date of birth, email address, and contact details to create and maintain your player account. Without this information, we cannot provide you with access to the platform. This processing is necessary to perform our contract with you.

Age and Identity Verification

Under the Gambling Act 2003, we are prohibited from allowing persons under 18 years of age to gamble on our platform. We use the identity documents you provide, together with third-party verification services, to confirm that you meet the minimum age requirement before your account is activated for real-money play. This processing is a legal obligation.

Anti-Money Laundering and Countering Financing of Terrorism

VinciSpin Casino is subject to the AML/CFT Act 2009. Under this legislation, we are required to verify your identity, monitor your transactions, assess the risk profile of your account, and in certain circumstances report suspicious activity to the New Zealand Police Financial Intelligence Unit. This processing is mandatory and cannot be opted out of. Failure to provide the information required for AML/CFT compliance may result in account suspension or closure.

Processing Deposits and Withdrawals

Your payment details are used to process transactions to and from your account. We retain transaction records to reconcile your account balance, handle disputes, and comply with financial record-keeping obligations. This processing is necessary both for contract performance and legal compliance.

Responsible Gambling Obligations

The Gambling Act 2003 and our licensing conditions require us to take reasonable steps to identify and respond to problem gambling behaviour. We use your account activity data, session data, and any information you provide through responsible gambling tools to monitor for indicators of harm. This may include reviewing deposit frequency, loss patterns, self-imposed limits, and any communications you have sent to our support team. Where we identify a concern, we may contact you directly or take steps to restrict your account in your interest. This processing is carried out both as a legal obligation and in the legitimate interest of player welfare.

Bonus and Promotional Administration

If you claim a bonus or participate in a tournament at VinciSpin Casino, we use your account data to verify eligibility, calculate qualifying activity, and allocate rewards. We also use this information to detect bonus abuse or fraudulent patterns across multiple accounts. This processing is necessary for contract performance.

Customer Support

When you contact us through live chat, email, or phone, we use the information you provide and the account data available to us to resolve your query. We retain records of support interactions to maintain a clear history of your account and to improve the quality of our service. This processing is based on legitimate interest and, where applicable, legal obligation.

Security and Fraud Prevention

We monitor login activity, transaction patterns, device information, and IP addresses to detect and prevent unauthorised access, account takeovers, fraud, and cheating. This processing is based on our legitimate interest in protecting the integrity of the platform and the funds of our players.

Marketing Communications

If you have opted in to receive marketing communications, we will use your email address and, where applicable, your phone number to send you information about promotions, new games, and offers at VinciSpin Casino. You can withdraw this consent at any time by clicking the unsubscribe link in any marketing email, adjusting your account notification settings, or contacting us directly. Withdrawing marketing consent does not affect your ability to use your account.
We do not send marketing communications to players who have self-excluded or who have requested to be removed from promotional contact.

Platform Improvement and Analytics

Aggregated and anonymised data derived from user behaviour on the platform helps us understand how the site is used, which games are popular, where technical issues occur, and how the player journey can be improved. No individual player is identifiable in these analytics reports.

The Legal Bases for Processing Your Data

New Zealand’s Privacy Act 2020 operates through a set of Information Privacy Principles (IPPs) that govern how agencies collect, hold, use, and disclose personal information. Our processing activities are grounded in the following bases:

• Contract performance: processing necessary to provide you with a player account and gaming services
• Legal obligation: processing required under the AML/CFT Act 2009, the Gambling Act 2003, tax legislation, and our licensing conditions
• Legitimate interests: fraud prevention, platform security, responsible gambling monitoring, and customer support quality, where those interests do not override your privacy rights
• Consent: marketing communications and non-essential cookies, which you can withdraw at any time

Sharing Your Information

Service Providers and Data Processors

We work with carefully selected third parties who assist in operating the platform. These include:

• Identity verification and KYC providers
• Payment processors and financial institutions
• Game software providers, including Play’n GO, Evolution, PG Soft, Pragmatic Play, and others whose titles appear in the VinciSpin Casino library
• Cloud hosting and data storage providers
• Customer support platform operators
• Email delivery and marketing automation services
• Fraud detection and cybersecurity services
• Analytics and platform performance monitoring providers

These providers are contractually bound to process your data only for the purposes we specify and to maintain appropriate security standards. They are not permitted to use your information for their own purposes.

Regulatory and Law Enforcement Authorities

We are required by law to disclose personal information to regulatory bodies and law enforcement agencies in certain circumstances. This includes reporting to the New Zealand Police Financial Intelligence Unit under the AML/CFT Act 2009, responding to lawful requests from the Department of Internal Affairs, and complying with court orders. We do not disclose information to authorities voluntarily beyond what is legally required.

Licensing Authorities

As a licensed gaming operator, we may be required to provide player data to our licensing authority for the purposes of regulatory audit, compliance review, or investigation. Such disclosures are conducted under strict confidentiality arrangements.

Business Transfers

In the event of a merger, acquisition, or sale of assets, player data may form part of the transferred assets. If this occurs, the acquiring entity will be bound by the terms of this Privacy Policy, and you will be notified of any material changes to how your data is handled.

What We Do Not Do

We do not sell your personal information to third parties for their own marketing or commercial purposes. We do not share your data with unaffiliated advertisers. We do not use your information to build profiles for sale to data brokers.

Cookies and Tracking Technologies

What Cookies We Use

VinciSpin Casino uses cookies and similar tracking technologies on vinci-spin-casino-nz.com. Cookies are small text files placed on your device when you visit the site. They serve a range of functions:

• Essential cookies keep you logged in, maintain your session, and ensure the platform operates correctly. These cannot be disabled without affecting your ability to use the site.
• Functional cookies remember your preferences, such as language settings and display options, so you do not have to reset them each visit.
• Analytics cookies collect information about how visitors use the site. This data is aggregated and used to improve platform performance and navigation. These cookies do not identify you individually.
• Marketing cookies track your visits across sessions and may be used to show you relevant promotions within the platform. These require your consent.

Managing Your Cookie Preferences

When you first visit the site, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookies. You can update your cookie preferences at any time through the cookie settings link available in the site footer. You may also configure your browser to block or delete cookies, though doing so may affect the functionality of certain parts of the platform.

Data Retention

We retain your personal information for as long as your account remains active and for a period following account closure to meet our legal obligations. The AML/CFT Act 2009 requires us to retain identity verification records and transaction data for a minimum of five years from the date of the last transaction or account closure, whichever is later. This is not a discretionary period; it is a statutory requirement.
For records that are not subject to a statutory minimum retention period, we apply the following principles:

• Account registration data is retained for five years following account closure
• Customer support records are retained for three years
• Marketing preferences and opt-out records are retained for the duration of our relationship with you
• Technical log data is retained for up to 12 months unless required for an ongoing investigation

When the retention period for any category of data expires, we delete or anonymise that data in a secure manner.

Security of Your Information

VinciSpin Casino uses 256-bit SSL encryption across all pages of vinci-spin-casino-nz.com, not only at the point of payment. This means every communication between your device and our servers, including login, game play, and account management, is encrypted in transit.
Payment card details are tokenised through our payment processing partners. We do not store full card numbers on our systems at any point.
Access to player data within our organisation is restricted on a need-to-know basis. Staff who handle player information receive training on their obligations under the Privacy Act 2020 and our internal data protection policies. Access logs are maintained and reviewed.
Two-factor authentication is available for player accounts and provides an additional layer of protection against unauthorised access. We recommend enabling this feature through your account security settings.
In the event of a data breach that is likely to cause serious harm to any affected individual, we will notify the Privacy Commissioner and the affected individuals as required under Part 7 of the Privacy Act 2020. Notification will be made as soon as reasonably practicable after we become aware of the breach.

Your Rights Under the Privacy Act 2020

The Privacy Act 2020 gives you specific rights in relation to personal information held about you. These rights are set out in the Information Privacy Principles and, where applicable, in additional provisions of the Act.

Right of Access

You have the right to request access to the personal information we hold about you. We will respond to access requests within 20 working days of receiving a valid request. In most cases, we will provide the information free of charge, though we may charge a reasonable fee if a request is unusually large or complex. We may decline an access request only on grounds permitted by the Privacy Act 2020, such as where disclosure would prejudice an AML/CFT investigation or where the information relates to another individual.

Right to Correction

If you believe that personal information we hold about you is inaccurate, incomplete, or misleading, you have the right to request a correction. We will either make the correction or, if we decline to do so, attach a statement of the correction sought to the relevant record. Straightforward corrections to account details, such as a change of address, can be made directly through your account settings or by contacting our support team.

Right to Know

You have the right to be told whether we hold personal information about you and, if so, to be given access to that information. This is covered under your right of access described above.

Withdrawing Consent

Where we process your data based on consent, you can withdraw that consent at any time. This applies to marketing communications and to non-essential cookies. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal and does not restrict our ability to process your data on other legal bases.

Complaints to the Privacy Commissioner

If you believe your privacy rights have been breached, you can make a complaint to the Office of the Privacy Commissioner. Before doing so, we encourage you to contact us directly so that we have the opportunity to resolve your concern. Our contact details are set out at the end of this policy. The Privacy Commissioner’s office can be reached at www.privacy.org.nz.

Age Verification and Protection of Minors

VinciSpin Casino does not permit persons under 18 years of age to create an account, make a deposit, or participate in any real-money game. This is a legal requirement under the Gambling Act 2003 and a condition of our operating licence.
Age verification is conducted during the account registration process and may be supplemented by document verification at a later stage. Where we have reason to believe that an account holder may be underage, we will suspend the account pending verification and, where the suspicion is confirmed, close the account and return any funds.
If you are a parent or guardian and believe a minor has opened an account at VinciSpin Casino, please contact us immediately at support@vinci-spin-casino-nz.com so that we can investigate and take appropriate action.
We do not knowingly collect personal information from persons under 18 years of age. If we become aware that such information has been collected, we will delete it promptly.

Responsible Gambling and Data Use

The Gambling Act 2003 places specific obligations on gaming operators to minimise harm associated with gambling. VinciSpin Casino takes these obligations seriously, and the responsible gambling tools available on the platform are underpinned by data processing that is both lawful and proportionate.
Your account activity data, including your deposit history, session length, game selection, and any limits you have set, is used to:

• Display accurate account summaries so you have clear visibility of your activity
• Enforce deposit limits, loss limits, and session time limits you have chosen
• Generate reality check notifications at your chosen intervals
• Identify accounts that may be showing signs of harm, so that our responsible gambling team can make contact
• Process self-exclusion requests and maintain self-exclusion records for the duration you have specified

If you self-exclude from VinciSpin Casino, your account is locked for the period you have chosen. We retain a record of your self-exclusion to prevent re-registration during the exclusion period. This is done in your interest and forms part of our legal obligations.
We work with the Problem Gambling Foundation of New Zealand and encourage any player who is concerned about their gambling to contact them for confidential support. Their helpline is 0800 664 262.

Anti-Money Laundering Compliance

VinciSpin Casino is a reporting entity under the AML/CFT Act 2009. This legislation requires us to implement a risk-based AML/CFT programme that includes the following data processing activities:

• Customer due diligence (CDD) at account opening, involving collection and verification of identity and address information
• Enhanced due diligence (EDD) for higher-risk customers, politically exposed persons, or transactions above certain thresholds
• Ongoing monitoring of account activity to identify unusual or suspicious patterns
• Reporting of suspicious transaction reports (STRs) and prescribed transaction reports (PTRs) to the New Zealand Police Financial Intelligence Unit where required by law
• Record-keeping of all CDD and transaction records for a minimum of five years

We are required by law to carry out these activities regardless of your consent. Refusing to provide information required for AML/CFT purposes may result in us being unable to process your transactions or maintain your account.

International Transfers of Personal Data

VinciSpin Casino uses service providers who may be located outside New Zealand, including in Europe, North America, and Asia. When your personal information is transferred to service providers in other countries, we take steps to ensure that appropriate protections are in place, including:

• Contractual clauses that require overseas providers to protect your information to a standard equivalent to the Privacy Act 2020
• Using providers who operate in jurisdictions with privacy laws that the Privacy Commissioner has assessed as providing comparable protections
• Conducting due diligence on the security practices of third-party providers before engaging them

By using this platform, you acknowledge that your data may be processed in jurisdictions outside New Zealand in the circumstances described above.

Links to External Websites

The VinciSpin Casino website may contain links to third-party websites, including responsible gambling organisations, payment provider portals, and game provider information pages. This Privacy Policy applies only to vinci-spin-casino-nz.com. Once you navigate to an external site, the privacy practices of that site apply. We recommend reviewing the privacy policy of any third-party site you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or the services we offer. When material changes are made, we will notify registered players by email or by a prominent notice on the platform before the changes take effect. Continued use of the platform following notification of a material change constitutes acceptance of the updated policy.
We encourage you to review this page periodically so that you are aware of the current version.

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights under the Privacy Act 2020, or need to report a concern about how your data is being handled, please contact us through any of the following channels:

• Email: support@vinci-spin-casino-nz.com
• Phone: 64 4 114 9146
• Post: Level 15, 1 Willis Street, Wellington, New Zealand
• Live chat: available 24 hours a day, 7 days a week through vinci-spin-casino-nz.com

We aim to acknowledge all privacy-related queries within five working days and to provide a full response within 20 working days, in line with the timeframes set out in the Privacy Act 2020. If your request is complex or involves a large volume of information, we will inform you of the expected response time.