burger icon

Privacy Policy

This Privacy Policy explains how novibet-casino-new-zealand, operating via novibet-nz.com, collects, uses, shares, and protects your personal data as required by New Zealand law and international standards. This policy applies to all players and visitors of novibet-nz.com, effective as of 6 November 2025.

Who We Are

OBSERVE: novibet-casino-new-zealand is operated by Logflex MT Limited, registered in Malta and licensed by the Malta Gaming Authority. Compliance responsibility is managed by our Data Protection Officer (DPO).

REFLECT: All privacy-related queries or concerns should be addressed to the DPO at the above contacts.

What Personal Data We Collect

OBSERVE: Data collection is essential for providing regulated gambling services, fulfilling legal obligations, and enhancing user experience.

  • Personal Identification Data: Full name, email address, phone number, date of birth, physical address.
  • Technical Data: IP address, device identifiers, browser type, access logs, session timestamps.
  • Payment and Transaction Data: Payment card details, bank account information, deposit/withdrawal records, transaction history.
  • Behavioral Data: Betting and gaming history, site navigation, preferences, clickstream data.
  • Cookies and Tracking Technologies: Session IDs, persistent cookies, analytics and advertising tags.

EXPAND: Data is collected through account registration, site usage, customer support interactions, payment processing, and marketing activities.

REFLECT: Collection complies with NZ privacy law and international standards.

Legal Basis for Processing

OBSERVE: novibet-casino-new-zealand processes personal data strictly on permitted legal grounds.

  1. User Consent: Data processed with your explicit consent, including marketing communications and optional features.
  2. Contract Fulfillment: Necessary data for account creation, provision of gambling services, processing payments, and supporting customer requests.
  3. Legitimate Interests: Fraud prevention, service analytics, and operational improvement, provided these interests do not override your fundamental rights.
  4. Legal Obligations: Compliance with anti-money laundering (AML), know-your-customer (KYC), tax reporting, and regulatory requirements.

REFLECT: All processing is documented and justified, with user rights protected at every stage.

Regional Compliance Note: NZ Privacy Act 2020 and EU GDPR principles observed where applicable.

Purpose of Processing

OBSERVE: Data is used to deliver and improve regulated gambling services.

  • Account Management: To set up, verify, and maintain your player account.
  • Service Delivery: To enable deposits, withdrawals, gameplay, and bonus features.
  • Customer Support: To respond to queries and manage feedback.
  • Marketing & Promotions: With consent, to send offers, newsletters, and updates.
  • Analytics & Service Improvement: To monitor usage trends, preferences, and optimize site features.
  • Fraud and Security: To prevent, detect, and investigate fraud, abuse, or security threats.
  • Legal Compliance: To meet regulatory and reporting obligations.

REFLECT: Each purpose is matched to a lawful processing ground and subject to regular review.

Disclosure & Sharing

OBSERVE: Data sharing is limited to essential, legally compliant scenarios.

  • Payment Partners: Banks, card processors, and payment gateways for transaction processing.
  • Service Providers: IT support, cloud hosting, analytics, email delivery, and security vendors, all subject to data processing agreements.
  • Regulatory Authorities: Disclosure to Malta Gaming Authority, NZ regulators, and financial crime agencies as required by law.
  • Affiliates & Marketing Networks: Limited sharing with trusted partners, only with your explicit consent.
  • Alternative Dispute Resolution (ADR): eCOGRA ADR registration for dispute resolution as needed.

EXPAND: Third parties are contractually obliged to uphold data confidentiality and security.

REFLECT: Data is never sold or disclosed for unrelated purposes.

International Transfers

OBSERVE: Some data may be processed or stored outside New Zealand, notably in Malta (company headquarters and server location).

  • Transfer Destinations: Malta, EU/EEA member states, and countries where service providers are located.
  • Protection Mechanisms: Data transfers rely on Standard Contractual Clauses (SCCs), contractual safeguards, and due diligence of service providers.
  • Compliance: All transfers comply with the NZ Privacy Act 2020 cross-border disclosure restrictions and align with EU GDPR where applicable.

REFLECT: Data is only transferred internationally when necessary and always with robust protective measures.

Data Retention

OBSERVE: Data is retained only for as long as required by law or operational necessity.

  1. Active Accounts: Personal and transaction data retained while your account remains open and active.
  2. Closed Accounts: Personal data retained for up to 5 years after account closure, as required by AML/KYC regulations and tax laws.
  3. Cookies & Analytics: Retained for durations defined in our cookie policy (see below), typically 1-2 years.
  4. Deletion Criteria: Data is deleted upon user request (where permitted), expiration of retention period, or once processing is no longer necessary.

REFLECT: Secure deletion methods are applied, and retention periods are regularly reviewed for compliance.

Your Rights

OBSERVE: novibet-casino-new-zealand upholds all user rights under NZ's Privacy Act 2020 and, where applicable, aligns with GDPR and Mexican privacy principles.

  1. Access: Request confirmation and a copy of your stored personal data.
  2. Correction: Request correction of inaccurate or incomplete data.
  3. Deletion: Request erasure of your data, subject to legal retention exceptions (e.g., AML/KYC).
  4. Restriction: Request temporary suspension of processing in certain circumstances.
  5. Objection: Object to processing for direct marketing or based on legitimate interests.
  6. Portability: Request data in a machine-readable format to transfer to another provider.
  7. Consent Withdrawal: Withdraw consent for marketing at any time without penalty.

Procedures for Exercising Rights

  • How to Apply: Contact our DPO via support@novibet-nz.com or online form at https://novibet-nz.com/contact-us.
  • Response Timeframe: All requests are processed within 30 days, free of charge.
  • Legal Reference: Rights and procedures are based on the NZ Privacy Act 2020, EU GDPR, and Mexican data protection laws (where relevant).

REFLECT: All user rights are respected and facilitated in a transparent, timely manner.

Cookies & Tracking Technologies

OBSERVE: novibet-casino-new-zealand uses cookies and trackers to enhance site operation and user experience.

  • Session Cookies: Temporary files for user authentication and navigation, deleted when you close your browser.
  • Persistent Cookies: Remain on your device for a defined period to remember preferences and login details.
  • Third-Party Cookies: Used by analytics (e.g., Google Analytics) and advertising partners, subject to your consent.
  • Purposes: Functional (essential site operation), analytics (usage statistics), advertising (personalized offers).
  • Management: You can manage or disable cookies via your browser settings or through our internal cookie consent panel.

REFLECT: Full details are provided in our Cookie Policy.

Data Security

OBSERVE: novibet-casino-new-zealand applies industry-leading security measures to protect your data.

  1. Encryption: All data is encrypted in transit (TLS 1.2+) and at rest using industry-standard protocols.
  2. Authentication & Access: Multi-factor authentication (MFA) for staff, strict access controls, and role-based permissions.
  3. Security Audits: Regular external and internal audits, vulnerability assessments, and penetration testing.
  4. Staff Training: Ongoing education in data protection, privacy laws, and cyber-security.
  5. Incident Response: Formal procedures for detecting, responding to, and reporting data breaches or security incidents.
  6. Compliance: Adherence to international standards, including ISO 27001 and SOC 2, where applicable.

REFLECT: Security is continuously monitored and enhanced to address evolving threats.

Complaints & Contacts

OBSERVE: novibet-casino-new-zealand provides multiple channels to address privacy concerns and complaints.

Complaint Procedure

  1. Submit your complaint via email, contact form, or post with details of your concern.
  2. Your complaint will be acknowledged within 5 business days.
  3. A full response and resolution will be provided within 30 days, or reasons for any delay explained.
  4. If unresolved, you may escalate to external authorities:

REFLECT: We are committed to resolving privacy issues promptly and transparently.

Updates

OBSERVE: This Privacy Policy is reviewed and updated regularly for legal and operational changes.

  • Notification: Material changes are communicated via email, website banners, and account dashboard alerts.
  • Advance Notice: Significant changes are announced at least 30 days before taking effect.
  • User Options: You may object to changes or request account closure before updates apply.
  • Version Control: Last updated: 6 November 2025
  • Changelog: Details of changes are available on request or via our website.

REFLECT: Continued use of novibet-nz.com after policy updates constitutes acceptance of the new terms.