Privacy Policy

This Privacy Policy explains how Conquestador Casino (“we”, “us”, “our”) collects, uses, stores, shares, and protects personal information when you use our website, products, and related services (together, the “Services”). The policy follows New Zealand privacy principles that emphasise transparency, lawful purpose, data minimisation, and user control.

If you access the Services from outside New Zealand, additional privacy rights may apply under your local laws. Where applicable, we respect those rights to the extent required.

What information we collect

We collect personal information only where it is necessary for the operation, security, and integrity of the Services. The categories of data collected depend on how you interact with the platform.

Information you provide directly

• Account details such as name, date of birth, email address, and contact information
• Identity and age-verification information where legally required
• Payment and transaction details related to deposits and withdrawals
• Communications with customer support, including emails and chat messages
• Responsible gambling settings you choose to activate, such as limits or exclusions

Information collected automatically

• Technical data such as IP address, browser type, operating system, and device identifiers
• Usage data including session duration, navigation paths, and interaction patterns
• Approximate location derived from IP address
• Cookie and similar tracking data required for functionality and security

Information from third parties

• Payment providers confirming transaction status and fraud indicators
• Verification services providing confirmation results
• Security and analytics providers supplying aggregated risk or performance signals

We do not intentionally collect information that is not relevant to these purposes.

Why we collect and use your information

Personal information is processed to ensure the lawful, secure, and reliable operation of the Services. This includes:

• Creating and managing user accounts
• Processing deposits and withdrawals
• Detecting and preventing fraud, misuse, and unauthorised access
• Meeting regulatory and audit obligations
• Providing customer support and resolving disputes
• Delivering responsible gambling tools and safeguards
• Improving service stability, usability, and performance
• Sending marketing communications where consent has been given

Where consent is required, you can withdraw it at any time using available controls.

Cookies and tracking technologies

Cookies and similar technologies are used to maintain core functionality, enhance security, and understand how the Services are used. Some cookies are essential for login sessions and fraud prevention, while others help us analyse performance and improve the user experience.

You can manage cookie preferences through your browser settings. Blocking certain cookies may affect how the Services function.

How long we keep your data

We retain personal information only for as long as it is needed for the purposes described in this policy. Retention periods vary depending on the type of data and the reason it was collected.

• Account and transaction records are kept for compliance and financial integrity
• Verification data is retained to demonstrate that required checks were performed
• Support communications are kept for quality assurance and dispute handling
• Technical logs are retained for limited periods to support security and diagnostics

When data is no longer required, it is securely deleted or anonymised.

How we protect your information

We apply organisational, technical, and administrative safeguards to protect personal information against unauthorised access, loss, or misuse. These measures include access controls, encrypted connections, system monitoring, and internal security policies.

While no system can guarantee absolute security, we regularly review our practices to reduce risk and respond promptly to potential incidents.

Responsible gambling and sensitive information

Information related to responsible gambling is treated with particular care. Such data is used only to deliver the tools and protections you choose to activate and to support harm-minimisation objectives.

We do not use responsible gambling information for promotional targeting or unrelated purposes.

This section explains how Conquestador Casino shares personal information, manages international data flows, respects user rights, and maintains accountability under New Zealand–aligned privacy principles.

How and when we share personal information

We do not sell personal information. We share data only where it is necessary to operate the Services, meet legal obligations, or protect users and the platform.

Personal information may be shared with:

• Service providers that support core operations, such as payment processing, identity verification, hosting, analytics, customer support tools, and security monitoring
• Compliance and audit partners where record-keeping, verification, or reporting is required
• Professional advisers such as legal, accounting, or risk consultants, bound by confidentiality
• Authorities or regulators where disclosure is required by law or in response to a lawful request

All third parties are required to use personal information only for the specified purpose and to apply appropriate safeguards. We limit the scope of shared data to what is strictly necessary.

International data transfers

Conquestador Casino operates in a digital environment where data may be processed or stored outside New Zealand. When personal information is transferred internationally, we take steps to ensure it remains protected.

These steps include:

• transferring data only to jurisdictions with comparable privacy standards, or
• using contractual protections that require overseas recipients to safeguard personal information and restrict its use

International transfers are carried out for operational efficiency, security, and service reliability, not to weaken user privacy protections.

Automated decision-making and profiling

Some systems used by Conquestador Casino rely on automated processes, particularly for fraud detection, security monitoring, and responsible gambling controls. These systems analyse behavioural and technical signals to identify unusual or risky activity.

Automated processes are used to:

• detect potential fraud or account misuse
• flag security risks
• support responsible gambling limits and interventions

Where automated processes affect access to features or trigger restrictions, they are designed to be proportionate and subject to review. Users can contact support to request clarification or human review where appropriate.

Your privacy rights

Users have rights in relation to their personal information. Depending on jurisdiction, these rights may include:

• the right to access personal information we hold
• the right to request correction of inaccurate or outdated information
• the right to request deletion or restriction of data where legally permitted
• the right to withdraw consent for certain processing activities
• the right to object to specific uses of personal information

Requests are handled within reasonable timeframes and in accordance with applicable laws. Identity verification may be required before fulfilling a request to protect account security.

Complaints and dispute resolution

If you believe your privacy has been mishandled, you can raise a concern with our support or privacy contact. We aim to resolve complaints fairly and promptly.

If an issue cannot be resolved directly, you may have the right to escalate the matter to an external authority in your jurisdiction. We treat complaints as an opportunity to improve our systems and practices.

Children and age-related data handling

Conquestador Casino is not intended for minors. We take age verification seriously and collect age-related information solely to confirm eligibility and meet legal requirements.

Age and identity data:

• is used only for verification and compliance
• is not used for marketing purposes
• is retained only as long as necessary to demonstrate checks were completed

Accounts identified as belonging to underage users are restricted or closed in line with applicable rules.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or how the Services operate. When updates are made, the revised version will be published on our website.

Material changes will be communicated clearly where required. Continued use of the Services after an update indicates acceptance of the revised policy.

How to contact us about privacy

Questions, requests, or concerns about privacy can be directed to our designated contact channel. This includes requests to access or correct information, withdraw consent, or raise a complaint.

We encourage users to contact us directly so concerns can be addressed efficiently and transparently.

End of Privacy Policy

This Privacy Policy is intended to explain our practices clearly and honestly. It reflects our commitment to protecting personal information, supporting responsible gambling, and maintaining trust with users through proportionate, well-governed data use.

This final section adapts the Privacy Policy specifically to the New Zealand context and explains how users can contact us, exercise their rights locally, and understand how privacy governance is maintained over time. It also includes a visual overview of how privacy-related requests are typically handled.

New Zealand privacy framework and local alignment

Conquestador Casino operates with explicit consideration of New Zealand’s privacy environment. This includes principles such as purpose limitation, transparency, proportionality, and accountability. We design our data practices so that personal information is collected only where it is reasonably necessary, used only for defined purposes, and protected throughout its lifecycle.

Where conflicts arise between different regulatory expectations, we prioritise safeguards that provide users with clear control, meaningful access to information, and practical remedies. Our approach is preventative rather than reactive: privacy risks are assessed as part of system design, not only after an incident occurs.

Privacy governance and internal accountability

Privacy compliance is treated as an ongoing operational responsibility rather than a one-time legal exercise. Internally, this means:

• defining clear responsibilities for data access and handling
• limiting access to personal information based on role and necessity
• reviewing data flows when new features or vendors are introduced
• monitoring systems for misuse, error, or unauthorised access
• updating procedures when regulatory expectations or risks change

This governance model is intended to keep privacy considerations embedded in daily operations, not isolated within legal documentation.

Data breach response and notification

If a privacy incident occurs that may pose a risk of harm, we act promptly to contain the issue, assess impact, and take corrective steps. This includes identifying what information was affected, how the incident occurred, and what actions reduce the risk of recurrence.

Where notification is required, affected users are informed in a clear and practical manner, focusing on what happened, what it means for them, and what steps they can take. We treat transparency during incidents as a core part of maintaining trust.

How to exercise your privacy rights in New Zealand

Users in New Zealand can exercise their privacy rights by contacting us directly. Requests may relate to access, correction, deletion where permitted, restriction of processing, or questions about how personal information is used.

To protect account security, we may need to verify your identity before responding. Requests are handled within reasonable timeframes and without unnecessary complexity.

Contact details for privacy-related matters

All privacy-related questions, requests, or concerns can be directed to us using the following contact details:

• Email: [email protected]
• Phone: +64 21 345 6789

These contact channels are intended specifically for administrative, privacy, and data-protection matters. Using them ensures that requests reach the appropriate team for handling.

Transparency about request handling

We aim to be clear about how privacy requests are processed in practice. While individual cases vary, most requests follow a similar lifecycle: receipt, verification, assessment, response, and closure. The interactive chart below illustrates this flow at a high level.

Interactive chart: Privacy request handling lifecycle