Privacy Policy

This Privacy Policy outlines how operator collects, uses, and manages your personal data on royalpanda-nz.com, in compliance with the New Zealand Privacy Act 2020. Your use of our services constitutes your acknowledgment and understanding of the terms laid out in this policy.

Data Controller and Contact Information

Our company registered in Malta, is the data controller responsible for your personal data. We are committed to protecting your information and have appointed a Data Protection Officer (DPO) to oversee our compliance. Should you have any questions about this policy or wish to exercise your privacy rights, you can contact us through the official channels provided. The contact details for privacy-related inquiries are:

  • General Privacy Inquiries: [email protected]
  • Data Protection Officer (DPO): [email protected]
  • Postal Address: Royal Panda, Level 7, The Plaza Business Centre, Bisazza Street, Sliema SLM 1640, Malta

Personal Data We Collect

To provide our services and meet our legal and regulatory obligations, we collect various types of personal data. This information is gathered directly from you during your interactions with our platform, such as during account registration or when you use our services, and may also be obtained from third-party sources for verification and compliance. We collect only the data necessary for the specified purposes, which are detailed in the following sections.

Data Provided Directly by You

When you register an account, make transactions, or communicate with us, you provide specific information essential for providing our services, such as managing your account, processing payments, and offering customer support. The information we collect directly from you includes:

  • Registration Data: Your first name, last name, username, date of birth, gender, and country of residence.
  • Contact Data: Your permanent address, email address, and telephone number.
  • Marketing Communications Data: Your preferences for receiving marketing materials from us, including opt-in and opt-out records.
  • Other Communication Data: Information you provide during communications with us via recorded calls, chats, emails, or SMS, including your intentions, complaints, and preferences.

Data Collected Through Your Use of Our Services

As you use our platform, we automatically generate and collect data related to your activity. This information is vital for delivering our services, ensuring the security of our platform, and fulfilling our regulatory duties, particularly concerning responsible gaming and anti-money laundering. The main types of data collected through your usage are:

  • Transaction and Usage Data: Details of your deposits, withdrawals, bets, wagers, wins, bonuses used, and account balances.
  • Payments Data: Information related to your payment methods, such as masked card details or bank account information, and transaction details including currency, location, and amount.
  • Log-in Data: Your IP address, login times, session durations, browser type, time zone setting, location, and the operating system of the device you use to access our services.
  • Analytics Data: Information about your interaction with our website and services, such as your player ID, language, device, and channels used.

Data from Third-Party Sources

To comply with our legal obligations, especially regarding Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) regulations, we collect information from third-party sources. These external checks help us verify your identity, assess risk, and prevent fraudulent activity on our platform. The data is sourced from reputable private companies and publicly available records. The categories of data obtained from third parties:

  • Identification and Verification Data: Information from identity verification services and public sources to confirm your name, address, and age, and to conduct due diligence checks, including information on your source of wealth and funds.
  • Responsible Gaming Data: We may receive self-exclusion data from national registers or other licensed operators within our corporate group to ensure compliance with responsible gaming requirements.
  • Fraud Prevention Data: Information from third-party fraud detection providers to identify and mitigate misuse of our systems, such as the use of VPNs or other masking technologies.

How and Why We Use Your Personal Data

We process your personal data only when we have a lawful basis to do so under the New Zealand Privacy Act 2020. Our primary purposes for using your data are to provide and manage the services you request, comply with our legal and regulatory obligations, protect our platform from fraud and abuse, and pursue legitimate business interests, such as improving our services and providing relevant marketing communications. The principal reasons we use your data are:

  1. Service Provision: To register and manage your account, process your transactions, and allow you to participate in our Games. This is necessary for the performance of the contract between you and us.
  2. Legal and Regulatory Compliance: To meet our obligations under laws related to anti-money laundering, responsible gaming, and other applicable regulations. This includes identity verification, due diligence checks, and monitoring for suspicious activity.
  3. Fraud and Risk Management: To protect our platform and our users from fraudulent, collusive, or illegal activities. This processing is based on our legitimate interest in maintaining a secure and fair gaming environment.
  4. Marketing and Promotions: To send you information about new services, promotions, and offers, based on your consent or our legitimate interest. You can opt out of marketing communications at any time.
  5. Service Improvement: To analyse user activity and feedback to understand how our services are used and how we can improve them. This is based on our legitimate interest in developing our business.

Data Sharing and Disclosure

We do not sell your personal data. However, we may share your information with trusted partners, suppliers, and regulatory bodies when necessary to provide our services or comply with legal obligations. We ensure all third parties respect the security of your data and process it only for specified purposes under our instruction. The entities with whom we may share your data include:

  • Game and Service Providers: Third-party providers who supply our casino games, sportsbook, and payment processing services.
  • Verification and Compliance Services: Companies that provide services for identity verification, fraud detection, and anti-money laundering checks.
  • Marketing and Analytics Partners: Suppliers who assist us with marketing campaigns, data analytics, and customer relationship management.
  • Government and Regulatory Authorities: We may disclose your data to law enforcement, government bodies, and regulatory authorities, such as the New Zealand Department of Internal Affairs, when required by law.
  • Other Companies in Our Corporate Group: We may share information with other brands and companies within the LeoVegas Mobile Gaming Group for compliance with responsible gaming and AML obligations.

Data Retention and Security

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally, we retain your data for a maximum period of ten years following the closure of your account to comply with AML and other legal obligations. If you have permanently self-excluded, we will retain this information indefinitely to prevent you from creating new accounts.

We have implemented appropriate technical and organisational security measures to protect your personal data from being accidentally lost, used, or accessed in an unauthorised way. This includes data encryption, strict access controls, and comprehensive internal security policies.

International Data Transfers

Some of our third-party service providers are based outside of New Zealand, meaning your personal data may be transferred internationally. When we transfer your data overseas, we ensure a similar degree of protection by confirming the recipient is subject to comparable privacy laws or by implementing contractual safeguards.

Your Privacy Rights

Under the New Zealand Privacy Act 2020, you have several rights concerning your personal data, which we are committed to upholding. To exercise your rights, please contact us using the details provided in this policy. We may need to request specific information to confirm your identity before processing your request. Your principal rights are:

  • Right to Access: You have the right to request access to the personal data we hold about you.
  • Right to Correction: You have the right to request the correction of any personal data we hold about you that you believe is inaccurate or incomplete.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the New Zealand Office of the Privacy Commissioner (OPC) if you believe we have breached our privacy obligations to you.

Cookies Policy

Our website uses cookies to enhance your user experience, provide functionality, and analyse site traffic. Cookies are small text files stored on your device that help us remember your preferences and improve our services. For detailed information on the cookies we use, why we use them, and how you can manage your cookie settings, please refer to our separate Cookies Policy document available on our platform.