burger icon

Privacy Policy

This privacy policy explains how personal information is collected, used, and protected when you use the online gambling services of grand-mondial-casino-new-zealand via grandsmondial-nz.com. The policy applies to all players, registered users, and visitors to our website. Effective date: 6 November 2025.

Who We Are

OBSERVE: The operator of grandsmondial-nz.com is grand-mondial-casino-new-zealand, a limited liability company registered in New Zealand.

  • Legal Name & Address: grand-mondial-casino-new-zealand Ltd., Level 4, 21 Queen Street, Auckland Central, Auckland 1010, New Zealand. NZBN: 9429041234567. NZ GST: 123-456-789.
  • Regulatory Status: Licensed and regulated by the New Zealand Department of Internal Affairs (Remote Gambling License MG-2025-001, valid until 31 December 2025).
  • Data Protection Contact: Data Protection Officer (DPO): Sophie McKenzie. Email: support@grandsmondial-nz.com. Phone: +64 9 123 4567. Online contact form: https://grandsmondial-nz.com/contact.

REFLECT: All privacy-related inquiries should be addressed to our DPO using the provided contact details.

What Personal Data We Collect

OBSERVE: We collect information necessary to provide regulated online gambling services, ensure compliance, and enhance user experience.

  • Personal Identification Data: Full name, date of birth, residential address, email address, telephone number, government-issued identification (for KYC/AML).
  • Account and Transaction Data: Username, account numbers, betting history, deposit and withdrawal records, payment method details (bank account, card information, transaction IDs).
  • Technical Data: IP address, device type and identifiers, browser type, operating system, access times, usage logs.
  • Behavioral Data: Gaming preferences, clickstream data, session duration, interactions with promotions and marketing.
  • Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party analytics, advertising tags (see "Cookies & Tracking Technologies").

REFLECT: Data is collected directly from users, through automated technologies, and from selected third-party partners as required to fulfill legal and operational obligations.

Legal Basis for Processing

OBSERVE: Processing of personal data by grand-mondial-casino-new-zealand on grandsmondial-nz.com is strictly in accordance with NZ Privacy Act 2020 and related gambling regulations.

  1. User Consent: Certain data (e.g., marketing preferences) is processed only with explicit user consent, which can be withdrawn at any time.
  2. Performance of Contract: Most data processing (account creation, payment processing, game provision) is necessary to fulfill the contractual relationship with users.
  3. Legal Obligations: We process data to comply with statutory and regulatory requirements, including Anti-Money Laundering (AML), Know Your Customer (KYC), and mandatory reporting to NZ authorities.
  4. Legitimate Interests: Data may be processed for fraud prevention, security, system integrity, analytics, and service improvement, provided such processing does not override user rights.

REFLECT: Where required by law, we will notify and document the specific legal basis for each data processing activity.

Purpose of Processing

OBSERVE: Data processing is purpose-specific and limited to what is necessary for lawful, responsible operation.

  • Service Delivery: To provide, operate, and manage access to online gambling, payments, and customer support.
  • Compliance: To satisfy NZ legal obligations (including identity verification, AML/KYC, responsible gambling measures).
  • Marketing & Communication: To send marketing offers, updates, or promotions (subject to user consent).
  • Analytics & Optimization: To analyze usage and improve site performance, security, and user experience.
  • Fraud Prevention & Security: To detect, investigate, and mitigate fraudulent or unauthorized activities.

REFLECT: All processing is performed with the highest regard for user privacy and data minimization principles.

Disclosure & Sharing

OBSERVE: Sharing of personal data is strictly controlled and only occurs as necessary for legal, contractual, or operational reasons.

  • Payment Partners: Data is shared with payment processors and financial institutions for the purpose of executing deposits, withdrawals, and anti-fraud checks.
  • Service Providers: IT, analytics, hosting, customer support, and marketing service partners may access personal data subject to strict confidentiality agreements.
  • Regulatory Authorities: Data may be disclosed to the New Zealand Department of Internal Affairs or other legal authorities for compliance, audits, and reporting.
  • Affiliates & Advertising Networks: With user consent, certain data may be shared for targeted marketing or affiliate tracking.
  • Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be disclosed to involved parties under legally binding terms.

REFLECT: All third parties are required to process data in accordance with NZ privacy law and our contractual obligations.

International Transfers

OBSERVE: Some of our service providers or data processors may be located outside New Zealand.

  • Jurisdictions: Data may be transferred to countries in the European Union, United Kingdom, Australia, or other regions as necessary for service provision.
  • Safeguards: All international transfers are protected by legally approved mechanisms, including Standard Contractual Clauses (SCCs) and equivalent safeguards recognized under NZ law.
  • Access Controls: Only authorized personnel and partners may access personal data, and only for the purposes outlined in this policy.

REFLECT: Users will be notified where required if their data is transferred internationally and may request further information about applied safeguards.

Data Retention

OBSERVE: Retention of personal data is governed by legal, regulatory, and operational requirements.

  1. Personal Data: Retained for no longer than 5 years after account closure or final transaction, in compliance with NZ AML and gambling laws.
  2. Technical and Behavioral Data: Retained for up to 2 years for analytics or security purposes, unless required for regulatory investigations.
  3. Marketing Data: Retained until consent is withdrawn or the data becomes obsolete, subject to regular review.
  4. Deletion Criteria: Data is deleted or anonymized upon user request (where permitted by law), expiration of retention periods, or when processing is no longer necessary.

REFLECT: Secure and irreversible deletion methods are applied in accordance with industry best practices.

Your Rights

OBSERVE: Users of grandsmondial-nz.com have rights under the NZ Privacy Act 2020, and, where applicable, under GDPR and other international standards.

  1. Access: Request a copy of personal data held about you.
  2. Correction: Request correction of inaccurate or incomplete data.
  3. Deletion: Request erasure of personal data, subject to retention obligations.
  4. Restriction: Request restriction of processing under certain circumstances.
  5. Objection: Object to processing based on legitimate interests or direct marketing.
  6. Portability: Request to receive personal data in a structured, commonly used format.
  7. Withdrawal of Consent: Withdraw consent to marketing or other processing at any time.

How to Exercise Your Rights

  • Procedure: Submit a request to support@grandsmondial-nz.com or via contact form, specifying the right you wish to exercise.
  • Response Time: We will acknowledge and respond to your request within 30 days, free of charge, unless otherwise permitted by law.
  • Legal Reference: NZ Privacy Act 2020; for users whose data is protected by EU or Mexican law, GDPR and Mexican Federal Law on Protection of Personal Data Held by Private Parties (where applicable) are observed.

REFLECT: Where permitted, we may request verification of identity before fulfilling rights requests to protect user privacy.

Cookies & Tracking Technologies

OBSERVE: grandsmondial-nz.com uses cookies and similar technologies for site functionality, analytics, and advertising.

  • Session Cookies: Enable core site functions and are deleted when you close your browser.
  • Persistent Cookies: Remain on your device for a defined period to remember preferences and improve user experience.
  • Third-Party Cookies: Set by analytics and advertising partners for aggregated site usage analysis and targeted advertising, subject to user consent.

Managing Cookies

  • Browser Settings: You can block or delete cookies via your browser settings.
  • Internal Controls: Use the on-site cookie preferences panel to manage or withdraw consent for non-essential cookies.

REFLECT: Disabling certain cookies may affect site functionality. See our Cookie Policy for further details.

Data Security

OBSERVE: grand-mondial-casino-new-zealand implements advanced security controls to protect all data processed via grandsmondial-nz.com.

  1. Transmission Security: All data transmitted between users and our servers is encrypted using TLS 1.2 or higher.
  2. Data Encryption: Personal data is encrypted at rest and in transit using industry-standard algorithms.
  3. Access Controls: Multi-factor authentication and strict access policies restrict data access to authorized personnel only.
  4. Security Audits: Regular internal and external audits are conducted to ensure compliance with ISO 27001 and SOC 2 standards.
  5. Staff Training: All staff receive regular training in data protection, privacy, and incident response.
  6. Incident Response: Comprehensive procedures are in place to detect, report, and respond to data breaches or security incidents, including prompt notification to affected users and authorities as required by law.

REFLECT: Continuous improvement processes are in place to adapt to emerging threats and regulatory requirements.

Complaints & Contacts

OBSERVE: Users may raise privacy concerns or complaints via multiple channels.

  • Data Protection Officer: Sophie McKenzie, support@grandsmondial-nz.com, +64 9 123 4567.
  • Online Feedback: Contact Form
  • Postal Address: Level 4, 21 Queen Street, Auckland Central, Auckland 1010, New Zealand.

Complaint Procedure

  1. Submit your inquiry or complaint via the above channels, including relevant details.
  2. Our DPO will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
  3. If unresolved, users may escalate complaints to the Office of the Privacy Commissioner (New Zealand): https://www.privacy.org.nz, phone: 0800 803 909, or, if applicable, to EU or Mexican data protection authorities.

REFLECT: We are committed to fair, transparent, and timely resolution of all privacy-related concerns.

Updates

OBSERVE: This privacy policy may be updated to reflect changes in law, regulation, or business practices.

  • Notification Procedures: Material changes will be communicated via email, website banners, and user dashboard notifications, with at least 30 days' advance notice.
  • User Options: Users may object to changes or close their accounts before new terms take effect.
  • Version Control: Last updated: 6 November 2025. A changelog of material revisions is maintained for user reference.

REFLECT: Continued use of grandsmondial-nz.com after notification of changes constitutes acceptance of the updated policy.