Privacy Policy

Who This Policy Applies To

This Privacy Policy applies to all users who access SpinShake Casino through the website https://spinshake-casino-nz.com/, including anyone who registers an account, makes a deposit, participates in promotions, or simply browses the site. SpinShake Casino is operated by a licensed entity holding casino licence number 39483, with a registered contact address at Level 12, 23/29 Albert Street, Auckland CBD, Auckland 1010, New Zealand.

This document sets out how SpinShake Casino collects, stores, uses, and protects your personal information. It also explains your rights under New Zealand law, specifically the Privacy Act 2020, and how to exercise them. If you use this website, you accept the practices described here. If you do not agree with any part of this policy, please do not continue using the platform.

Our Obligations Under New Zealand Law

SpinShake Casino takes its obligations under the Privacy Act 2020 seriously. That legislation governs how organisations collect, use, store, and disclose personal information about individuals in New Zealand. It is built around a set of Information Privacy Principles that we are required to follow, and this policy reflects those principles directly rather than treating them as background noise.

We also operate in compliance with the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act), which requires us to verify the identity of players before processing withdrawals. This verification process involves collecting identity documents and is a legal requirement, not a discretionary policy decision. Where applicable, we comply with the Gambling Act 2003 and any applicable guidance issued by the Department of Internal Affairs.

What Personal Information We Collect

Information You Provide Directly

When you register an account or interact with SpinShake Casino, you provide personal information that we collect and store. This includes:

• Your full legal name
• Date of birth
• Residential address
• Email address
• Phone number
• Preferred currency (including NZD selection)
• Username and account password
• Identity verification documents such as a passport, driver’s licence, or national identity card
• Proof of address documents such as a utility bill or bank statement dated within the last three months
• Payment method details including card numbers (last four digits only), e-wallet identifiers, or cryptocurrency wallet addresses
• Any information you include when contacting our support team by email, live chat, or phone

Information Collected Automatically

When you access the SpinShake Casino website, certain technical data is collected automatically by our systems. This includes:

• Your IP address and approximate geographic location
• Browser type and version
• Operating system
• Device type (desktop, tablet, mobile)
• Pages visited and time spent on each page
• Referring URLs and exit pages
• Session duration and login timestamps
• Game activity data including titles played, bet amounts, session frequency, and game outcomes

Information from Third Parties

We may receive personal information about you from third parties in certain circumstances. For example:

• Identity verification providers we use to cross-check your documents against authoritative databases
• Payment processors who confirm the outcome of a transaction and flag any fraud indicators
• AML/CFT screening services that check your details against sanctions lists or politically exposed persons registers
• Our software and platform partners where your gameplay data passes through their infrastructure

Where we receive information from third parties, we handle it with the same care as information you provide directly.

Why We Collect Your Information

SpinShake Casino collects personal information for specific, lawful purposes. We do not collect information speculatively or hold data we have no use for. The purposes for which we use your information include:

• Creating and managing your player account
• Verifying your identity in compliance with the AML/CFT Act 2009, which requires us to know who our customers are before processing financial transactions
• Confirming that you meet the minimum age requirement of 18 years, in accordance with New Zealand gambling law
• Processing deposits and withdrawals across all supported payment methods including Visa, Mastercard, Apple Pay, Google Pay, Bitcoin, Ethereum, and USDT
• Detecting and preventing fraud, money laundering, and other financial crime
• Providing customer support through live chat, email at support@spinshake-casino-nz.com, and phone at +64 9 441 0719
• Administering bonuses, promotions, and free spins, including verifying eligibility and applying wagering conditions correctly
• Monitoring gameplay patterns to fulfil our responsible gambling obligations
• Sending you communications related to your account, including security alerts and transaction confirmations
• Sending marketing communications where you have given consent, including promotional offers and bonus announcements
• Improving the website through analysis of aggregate usage data
• Resolving disputes and maintaining records for legal and regulatory compliance purposes

Legal Basis for Processing Your Personal Information

Under the Privacy Act 2020, we are required to collect personal information only where it is necessary for a lawful purpose connected to our functions and activities. The legal grounds on which we process your data are as follows:

• Contractual necessity: much of the data we collect is required to operate your account, process payments, and deliver the services you signed up for. Without it, we cannot provide the platform.
• Legal obligation: identity verification, AML/CFT screening, and record-keeping are mandated by New Zealand law. Compliance with these obligations requires collecting and retaining certain categories of personal data.
• Legitimate interests: we process some data, including technical logs and gameplay analytics, on the basis of our legitimate interest in operating a secure and well-functioning service. Where we rely on this ground, we have weighed our interests against your right to privacy and are satisfied the processing is proportionate.
• Consent: where we send marketing communications, we do so on the basis of your consent. You can withdraw that consent at any time.

Cookies and Tracking Technologies

What Cookies We Use

SpinShake Casino uses cookies and similar tracking technologies on the website. A cookie is a small text file placed on your device when you visit a website. It helps the site remember your preferences, keep your session active, and understand how visitors use the platform.

We use the following categories of cookies:

• Essential cookies: required for the website to function. These include session tokens that keep you logged in during a visit and security cookies that protect against cross-site request forgery. You cannot opt out of these without preventing the site from working.
• Analytics cookies: used to understand how players navigate the site, which pages are visited most frequently, and where users drop off. This data is aggregated and anonymised and helps us improve the platform experience.
• Preference cookies: used to remember settings such as your preferred language or currency so you do not have to re-enter them on each visit.
• Marketing cookies: placed where you have consented to receive personalised communications or where we work with advertising partners. These cookies track whether you arrived at SpinShake from a promotional link or affiliate referral.

Managing Your Cookie Preferences

You can manage cookie settings through your browser. Most browsers allow you to block all cookies, accept only certain types, or delete cookies after each session. Note that disabling essential cookies will affect how the website functions. Instructions for managing cookies vary by browser; check the help section of whichever browser you use for specific guidance.

For analytics and marketing cookies, you can also withdraw consent through our cookie preferences tool, accessible via the footer of the site.

Sharing Your Personal Information

Who We Share Data With

SpinShake Casino does not sell your personal information to third parties. We do, however, share it with certain categories of recipients where necessary to operate the service or comply with legal obligations.

• Payment processors: when you make a deposit or withdraw funds, your payment details are passed to the relevant processor. This applies to card providers, Apple Pay, Google Pay, and cryptocurrency transaction handlers. These parties receive only the information necessary to complete your transaction.
• Game software providers: providers including Evolution, Play’n GO, PG Soft, BGaming, Evoplay, Playtech Live, Ezugi, Spribe, and others may receive gameplay-relevant technical data to deliver their games through the platform. Game providers operate their own privacy practices, which we assess before onboarding them.
• Identity verification services: third-party KYC providers receive copies of your identity documents to verify them against authoritative records. These services are bound by confidentiality obligations and applicable privacy law.
• AML/CFT screening providers: your name, date of birth, and address may be checked against sanctions databases and politically exposed persons lists as required by the Anti-Money Laundering and Countering Financing of Terrorism Act 2009.
• Regulatory and law enforcement authorities: we disclose personal information to New Zealand authorities, including the Department of Internal Affairs and the Financial Intelligence Unit, where required by law or in response to a lawful request.
• Responsible gambling organisations: where you self-exclude or are flagged as a player at risk, we may share relevant information with our responsible gambling partners, including BeGambleAware and Gambling Therapy, where doing so is in your interest or required by our licence conditions.
• IT infrastructure and hosting providers: the platforms and servers that power the SpinShake website are operated by technical partners. These providers process personal data on our behalf and are bound by data processing agreements that require them to maintain appropriate security standards.

International Data Transfers

Some of our third-party partners, including game providers and infrastructure suppliers, operate outside New Zealand. When your personal information is transferred internationally, we take steps to ensure it receives equivalent protection to that required under the Privacy Act 2020. This may include contractual safeguards, standard clauses, or confirming that the recipient country has adequate privacy protections in place.

Data Retention

We keep your personal information for as long as is necessary for the purpose it was collected, and no longer than is required by law. In practice, this means:

• Account information is retained for the duration of your relationship with SpinShake Casino and for a minimum of seven years after account closure, as required by our AML/CFT obligations and for the resolution of potential disputes.
• Identity verification documents are retained for at least five years following the end of the business relationship, as required by the Anti-Money Laundering and Countering Financing of Terrorism Act 2009.
• Transaction records are retained for seven years in line with financial record-keeping requirements.
• Marketing consent records are retained for the period during which you receive marketing communications, plus a reasonable period thereafter in case of complaint.
• Support correspondence is retained for up to three years after the matter is resolved, unless there is a reason to keep it longer.

When data is no longer needed, it is deleted or anonymised in a manner that prevents reconstruction of your identity.

Security of Your Personal Information

Protecting your personal information is a practical commitment, not a statement for a policy page. SpinShake Casino uses the following measures to keep your data secure:

• SSL encryption across the entire website, ensuring that data transmitted between your browser and our servers is protected in transit
• Encrypted storage of sensitive account data including passwords, which are hashed and not held in plain text
• Access controls that limit internal access to personal data on a need-to-know basis
• Regular security reviews and monitoring for unusual access patterns or attempted intrusions
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access

No system is entirely immune to breach. In the event of a data breach that is likely to cause serious harm to one or more individuals, we will notify the Privacy Commissioner and affected individuals in accordance with the mandatory breach notification obligations under the Privacy Act 2020.

Your Rights Under the Privacy Act 2020

As a New Zealand resident, the Privacy Act 2020 gives you specific rights in relation to your personal information. SpinShake Casino respects those rights and provides a straightforward process for exercising them.

Right of Access

You have the right to ask whether we hold personal information about you and, if so, to request access to it. We will respond within 20 working days of receiving your request. In most cases, we will provide the information in full. Where we decline to provide access, we will tell you why.

Right of Correction

If you believe that personal information we hold about you is inaccurate, incomplete, or out of date, you can ask us to correct it. We will either make the correction or, if we disagree, attach a note to the record indicating that you consider it incorrect.

Right to Know

You have the right to be told what personal information we collect and why, at or before the time of collection. This policy fulfils that obligation, but if you want more specific information about a particular type of data we hold, contact us directly.

Right to Complain

If you believe we have interfered with your privacy, you can make a complaint to us directly in the first instance. If we are unable to resolve it to your satisfaction, you have the right to complain to the Privacy Commissioner of New Zealand. The Commissioner can investigate complaints and, where appropriate, refer matters to the Human Rights Review Tribunal. Contact information for the Privacy Commissioner is available at www.privacy.org.nz.

Withdrawing Consent

Where we rely on your consent to process personal information, including for marketing communications, you can withdraw that consent at any time. Withdrawal of consent will not affect any processing carried out before you withdrew it. To unsubscribe from marketing emails, use the unsubscribe link in any promotional message or contact us directly at support@spinshake-casino-nz.com.

Age Verification and Minors

SpinShake Casino does not knowingly collect personal information from anyone under the age of 18. Gambling services are not intended for minors, and we take our obligations in this area seriously. During registration, we require you to confirm your age. Before processing any withdrawal, we conduct identity verification that includes confirming your date of birth against official documents.

If we become aware that we have collected personal information from a person under 18, we will close the account and delete the associated data as soon as practically possible. If you are a parent or guardian and believe your child has registered with us, contact us immediately at support@spinshake-casino-nz.com or by phone at +64 9 441 0719.

Responsible Gambling and Your Data

SpinShake Casino uses certain account and gameplay data to support our responsible gambling programme. This is not surveillance for its own sake; it is part of our obligation to identify players who may be experiencing harm and to intervene appropriately.

Specifically, we may analyse session duration, deposit frequency, game activity patterns, and changes in behaviour that could indicate problem gambling. Where our systems flag a player as potentially at risk, our responsible gambling team may make contact to offer support or apply protective measures such as temporary account restrictions.

Players can also self-apply responsible gambling controls through their account settings at any time, including:

• Deposit limits (daily, weekly, or monthly)
• Session time reminders
• Cooling-off periods
• Self-exclusion from the platform

Self-exclusion requests are processed promptly. When a player self-excludes, their personal data is retained in restricted form to ensure they cannot re-register during the exclusion period. This data is not used for any other purpose during that time. For support outside our platform, Gambling Therapy and BeGambleAware offer confidential help at no cost.

Marketing Communications

SpinShake Casino may send you promotional emails, bonus notifications, and updates about new games or offers. We will only send these communications where you have given your consent at registration or have opted in at a later stage.

Every marketing communication includes a clear unsubscribe option. Opting out removes you from all marketing lists. It does not affect service-related communications such as account security alerts, transaction confirmations, and KYC requests, which we will continue to send regardless because they are necessary for operating your account.

We do not share your contact details with third parties for their own marketing purposes.

Links to External Websites

The SpinShake Casino website may contain links to external sites, including responsible gambling resources and payment provider pages. This Privacy Policy applies only to our website. Once you leave spinshake-casino-nz.com through an external link, the privacy practices of that destination site apply. We recommend reviewing the privacy policy of any third-party website before providing personal information to it.

Changes to This Privacy Policy

We review and update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the services we provide. Where a change is material, we will notify registered players by email before the change takes effect. Continuing to use the SpinShake Casino website after a notified change constitutes acceptance of the updated policy.

The current version of this policy is always available at https://spinshake-casino-nz.com/.

How to Contact Us

If you have questions about this Privacy Policy, want to exercise any of your rights under the Privacy Act 2020, or wish to make a complaint, you can reach us through the following channels:

• Email: support@spinshake-casino-nz.com
• Phone: +64 9 441 0719
• Post: SpinShake Casino, Level 12, 23/29 Albert Street, Auckland CBD, Auckland 1010, New Zealand
• Live chat: available 24 hours a day, 7 days a week through the website

We aim to acknowledge all privacy-related requests within five working days and to respond fully within 20 working days as required by the Privacy Act 2020. If a request is complex or involves a large volume of information, we will notify you within the initial period and provide an estimated completion date.

If you remain unsatisfied after raising a concern with us, you can contact the Office of the Privacy Commissioner of New Zealand at www.privacy.org.nz or by freephone at 0800 803 909.