burger icon
Rich Casino
Log In

Privacy Policy

This privacy policy explains how rich-casino, operating exclusively via rich-nz.com, manages and protects the personal information of all players and website visitors. Its purpose is to outline the ways in which your data is collected, used, stored, and shared, as required by New Zealand privacy law and applicable industry standards. This policy applies to all users of our services as of 6 November 2025.

Who We Are

OBSERVE: Operator identity and responsible contact information are required by NZ law.
EXPAND: Data gaps identified (e.g., legal address, registration number); policy reflects these transparently for legal accuracy.
REFLECT: The operator of rich-casino via rich-nz.com is disclosed to the fullest extent possible based on available data.

  • Operator: rich-casino, accessible exclusively through rich-nz.com.
  • Parent Company: Revenue Giants (associated with 5th Street casinos). Note: No current, reputable gaming license; historical mentions (Costa Rica, Curacao) are not valid as of 2025.
  • Legal Address & Registration: Not publicly specified. Users may request further information via the contact methods below.
  • Data Protection Contact:
    • Name: Sophie Williams (acting privacy lead)
    • Email: Not specified; please use the website contact form if available
    • Website: https://rich-nz.com

Regional Compliance Note: All operations and data processing are subject to New Zealand law, specifically the Privacy Act 2020.

What Personal Data We Collect

OBSERVE: NZ privacy law requires full disclosure of all data types collected.
EXPAND: Categories cover both direct and indirect identifiers, technical and behavioral data.
REFLECT: Only data necessary for gaming operations and regulatory compliance is collected.

  • Personal Information: Full name, date of birth, postal and residential address, email address, phone number(s), identification documents (for KYC/AML verification).
  • Technical Data: IP address, device identifiers, browser type, operating system, access logs, geolocation information (as permitted by NZ law).
  • Payment Data: Bank account numbers, credit/debit card details, e-wallet information, transaction history, payment confirmations.
  • Behavioral Data: Betting records, gaming activity, win/loss history, site navigation, user preferences, clickstream data.
  • Cookies & Tracking Technologies: Session and persistent cookies, third-party analytics, tracking pixels, and related technologies.

Legal Basis for Processing

OBSERVE: NZ Privacy Act 2020 requires explicit legal grounds for data processing.
EXPAND: Multiple bases apply depending on the data and processing purpose.
REFLECT: Each processing activity is mapped to one or more legal justifications.

  • User Consent: You consent to data collection and processing by registering, using the website, or accepting the privacy policy. You may withdraw consent at any time, though this may affect your ability to use certain services.
  • Contractual Necessity: Data processing is required to fulfill obligations under the user agreement (e.g., account creation, payment processing, customer support).
  • Legitimate Interests: Data is processed for legitimate business purposes such as fraud prevention, service analytics, and improvement, provided these interests do not override your fundamental rights.
  • Legal Obligations: Compliance with anti-money laundering (AML), know your customer (KYC), and reporting requirements as mandated by NZ and international law.

Purpose of Processing

OBSERVE: Specific purposes must be disclosed under NZ privacy law.
EXPAND: Purposes include both core gaming operations and ancillary functions.
REFLECT: Data is processed only for clear, legitimate, and lawful purposes.

  • Service Delivery: To provide, manage, and maintain your player account and access to casino games.
  • Transaction Processing: To process deposits, withdrawals, and other financial operations securely.
  • Compliance: To fulfill legal and regulatory obligations, including identity verification, AML/KYC checks, and responsible gambling monitoring.
  • Service Improvement: To analyze usage trends, optimize website functionality, and enhance user experience.
  • Marketing: To deliver promotional materials via email, SMS, or other channels, only with your explicit consent and always allowing opt-out.
  • Fraud Prevention & Security: To detect, investigate, and prevent fraudulent or unauthorized activity.
  • Analytics: To gather aggregated statistical data for business planning and reporting.

Disclosure & Sharing

OBSERVE: Data sharing partners and circumstances must be disclosed for transparency under NZ law.
EXPAND: Protective clauses ensure data is only shared with reputable, contractually-bound third parties.
REFLECT: Each recipient category is listed with conditions of disclosure.

  1. Payment and Financial Partners: Data is shared with banks, payment processors, and financial institutions to facilitate deposits, withdrawals, and transaction monitoring.
  2. Service Providers: Third-party vendors providing IT, hosting, analytics, marketing, and customer support services may access data only as necessary and under contract.
  3. Regulators and Legal Authorities: Information may be provided to NZ regulatory bodies or law enforcement where required by law or in response to official requests.
  4. Affiliates and Advertising Networks: With your explicit consent, data may be shared with affiliates and advertising partners for marketing purposes.
  5. Corporate Transactions: In the event of a merger, acquisition, or business restructuring, data may be transferred as part of business assets, subject to continued protection.

Legal Obligation: All third-party recipients are contractually required to protect your data in accordance with NZ privacy standards.

International Transfers

OBSERVE: International data transfers must comply with NZ Privacy Act 2020 and relevant safeguards.
EXPAND: Data may be processed outside NZ, including in Australia, historical jurisdictions (Curacao, Costa Rica), and other countries where service providers are located.
REFLECT: All international transfers are subject to protective measures.

  • Transfer Destinations: Data may be transferred to countries where our parent company, Revenue Giants, or service providers operate, including but not limited to Australia and historical jurisdictions.
  • Protection Measures: Standard contractual clauses, contractual safeguards, and compliance with international data protection principles are applied to transferred data.
  • User Rights: You may request information regarding the safeguards for any international data transfer or object to such transfers where permitted by law.

Regional Compliance Note: No data is transferred to jurisdictions without adequate data protection measures as defined by NZ law.

Data Retention

OBSERVE: NZ law requires that data is retained only as long as necessary.
EXPAND: Specific retention periods are assigned to each data category, with deletion criteria clearly established.
REFLECT: Rights to deletion and data minimization are enforced.

  • Personal and Transactional Data: Retained for no more than 5 years following account closure or end of business relationship, unless a longer period is required by law (e.g., for AML investigations).
  • Technical and Analytical Data: Retained for up to 2 years, unless aggregated or anonymized for statistical purposes.
  • Cookies and Tracking Data: Retention varies by type (session cookies deleted upon browser closure; persistent cookies up to 2 years).
  • Deletion Criteria: Data is deleted or anonymized upon user request (where permitted), expiration of legal or operational necessity, or termination of processing purposes.

Your Rights

OBSERVE: NZ Privacy Act 2020 and international standards (including GDPR) require clear articulation of user rights.
EXPAND: Although Mexican regulations are referenced, NZ law is primary; all rights are aligned to the highest applicable standard.
REFLECT: Procedures for exercising rights are made explicit, with robust protections and response timelines.

  1. Access: You may request a copy of your personal data held by rich-casino via rich-nz.com at any time, free of charge.
  2. Rectification: You may request correction or update of inaccurate, incomplete, or outdated personal information.
  3. Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to legal retention obligations (e.g., AML, dispute resolution).
  4. Restriction of Processing: You may request that processing of your data is limited in certain circumstances (e.g., while a correction request is pending).
  5. Objection: You can object to the processing of your data for direct marketing or on grounds relating to your particular situation.
  6. Data Portability: You may request your data in a structured, commonly used, and machine-readable format, and transfer it to another provider.
  7. Withdrawal of Consent: You may withdraw your consent for marketing communications or other non-essential processing at any time.
  • Procedure: Submit requests via the contact form on rich-nz.com or by contacting Sophie Williams, privacy lead.
  • Response Timeframe: All rights requests will be addressed within 30 days of receipt, in accordance with NZ law.
  • Free of Charge: All rights may be exercised free of charge unless requests are manifestly unfounded, excessive, or repetitive.

Legal Reference: NZ Privacy Act 2020, GDPR alignment, with reference to Mexican Federal Law on Protection of Personal Data Held by Private Parties where applicable.

Cookies & Tracking Technologies

OBSERVE: Full transparency on tracking and user control mechanisms is required.
EXPAND: Each cookie type and purpose is detailed, with control instructions for users.
REFLECT: User autonomy is prioritized, with opt-out and management options.

  • Session Cookies: Essential for basic site functionality and user authentication; expire when you close your browser.
  • Persistent Cookies: Remember user preferences and login information for a set period (up to 2 years).
  • Third-Party Cookies: Used for analytics (e.g., Google Analytics) and advertising; subject to third-party privacy policies.
  • Management: You may manage or disable cookies via your browser settings or, where available, through an internal privacy panel on rich-nz.com.

Legal Obligation: Consent banners and opt-out options are provided in compliance with NZ and international standards.

Data Security

OBSERVE: NZ law and international standards require robust security measures.
EXPAND: Both technical and organizational safeguards are described, including compliance with ISO and SOC standards where feasible.
REFLECT: All reasonable steps are taken to prevent unauthorized access, loss, or misuse.

  • Encryption: TLS 1.2+ protocols for all data transmission; data encrypted at rest and in transit.
  • Access Controls: Role-based access, multi-factor authentication, and restricted staff permissions.
  • Security Audits: Regular internal and external security assessments; periodic penetration testing.
  • Staff Training: Mandatory privacy and security training programs for all relevant personnel.
  • Incident Response: Documented breach response procedure, including user notification and cooperation with authorities.
  • Compliance: Security controls aligned with ISO 27001 and SOC 2 best practices where applicable.

Legal Obligation: While every effort is made to safeguard your data, users acknowledge that no system is completely immune to risks.

Complaints & Contacts

OBSERVE: Clear complaint channels and escalation procedures are required by law.
EXPAND: All available contact methods are listed, with stepwise complaint handling.
REFLECT: Escalation to supervisory authorities is provided for unresolved matters.

  • Contact Person: Sophie Williams, privacy lead for rich-casino at rich-nz.com
  • Contact Methods:
    • Email: Not specified; use website contact form at rich-nz.com
    • Online Feedback Form: Available via "Contact Us" on rich-nz.com
    • Mailing Address: Not specified; please request via online form if required
  • Complaint Procedure:
    1. Submit your complaint via the indicated contact methods, providing detailed information about your concern.
    2. rich-casino will acknowledge receipt within 5 business days and provide a full response within 30 days.
    3. If not satisfied, you may escalate the complaint to the NZ Office of the Privacy Commissioner:

Legal Obligation: You may also have the right to lodge a complaint with EU or Mexican authorities if applicable to your situation.

Updates

OBSERVE: Users must be clearly informed of all material changes to this policy.
EXPAND: Notification, version control, and user option clauses included.
REFLECT: Compliance with NZ transparency requirements.

  • Notification: You will be notified of significant policy updates via email (if provided), banners on rich-nz.com, and/or account dashboard alerts.
  • Version Control: This policy is effective from 6 November 2025. All material changes will be documented in a changelog at the end of this page.
  • Advance Notice: Any significant changes will be communicated at least 30 days in advance, allowing you to object or close your account if you do not accept the changes.

Last updated: 6 November 2025

Changelog:

  • 2025-11-06: Major update for NZ compliance, clarified operator details, expanded user rights, and updated security measures.