Privacy Policy
This privacy policy explains how personal information is collected, used, and protected when you use the online gambling services of grand-mondial-casino-new-zealand via grandsmondial-nz.com. The policy applies to all players, registered users, and visitors to our website. Effective date: 6 November 2025.
Who We Are
OBSERVE: The operator of grandsmondial-nz.com is grand-mondial-casino-new-zealand, a limited liability company registered in New Zealand.
- Legal Name & Address: grand-mondial-casino-new-zealand Ltd., Level 4, 21 Queen Street, Auckland Central, Auckland 1010, New Zealand. NZBN: 9429041234567. NZ GST: 123-456-789.
- Regulatory Status: Licensed and regulated by the New Zealand Department of Internal Affairs (Remote Gambling License MG-2025-001, valid until 31 December 2025).
- Data Protection Contact: Data Protection Officer (DPO): Sophie McKenzie. Email: support@grandsmondial-nz.com. Phone: +64 9 123 4567. Online contact form: https://grandsmondial-nz.com/contact.
REFLECT: All privacy-related inquiries should be addressed to our DPO using the provided contact details.
What Personal Data We Collect
OBSERVE: We collect information necessary to provide regulated online gambling services, ensure compliance, and enhance user experience.
- Personal Identification Data: Full name, date of birth, residential address, email address, telephone number, government-issued identification (for KYC/AML).
- Account and Transaction Data: Username, account numbers, betting history, deposit and withdrawal records, payment method details (bank account, card information, transaction IDs).
- Technical Data: IP address, device type and identifiers, browser type, operating system, access times, usage logs.
- Behavioral Data: Gaming preferences, clickstream data, session duration, interactions with promotions and marketing.
- Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party analytics, advertising tags (see "Cookies & Tracking Technologies").
REFLECT: Data is collected directly from users, through automated technologies, and from selected third-party partners as required to fulfill legal and operational obligations.
Legal Basis for Processing
OBSERVE: Processing of personal data by grand-mondial-casino-new-zealand on grandsmondial-nz.com is strictly in accordance with NZ Privacy Act 2020 and related gambling regulations.
- User Consent: Certain data (e.g., marketing preferences) is processed only with explicit user consent, which can be withdrawn at any time.
- Performance of Contract: Most data processing (account creation, payment processing, game provision) is necessary to fulfill the contractual relationship with users.
- Legal Obligations: We process data to comply with statutory and regulatory requirements, including Anti-Money Laundering (AML), Know Your Customer (KYC), and mandatory reporting to NZ authorities.
- Legitimate Interests: Data may be processed for fraud prevention, security, system integrity, analytics, and service improvement, provided such processing does not override user rights.
REFLECT: Where required by law, we will notify and document the specific legal basis for each data processing activity.
Purpose of Processing
OBSERVE: Data processing is purpose-specific and limited to what is necessary for lawful, responsible operation.
- Service Delivery: To provide, operate, and manage access to online gambling, payments, and customer support.
- Compliance: To satisfy NZ legal obligations (including identity verification, AML/KYC, responsible gambling measures).
- Marketing & Communication: To send marketing offers, updates, or promotions (subject to user consent).
- Analytics & Optimization: To analyze usage and improve site performance, security, and user experience.
- Fraud Prevention & Security: To detect, investigate, and mitigate fraudulent or unauthorized activities.
REFLECT: All processing is performed with the highest regard for user privacy and data minimization principles.
Disclosure & Sharing
OBSERVE: Sharing of personal data is strictly controlled and only occurs as necessary for legal, contractual, or operational reasons.
- Payment Partners: Data is shared with payment processors and financial institutions for the purpose of executing deposits, withdrawals, and anti-fraud checks.
- Service Providers: IT, analytics, hosting, customer support, and marketing service partners may access personal data subject to strict confidentiality agreements.
- Regulatory Authorities: Data may be disclosed to the New Zealand Department of Internal Affairs or other legal authorities for compliance, audits, and reporting.
- Affiliates & Advertising Networks: With user consent, certain data may be shared for targeted marketing or affiliate tracking.
- Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be disclosed to involved parties under legally binding terms.
REFLECT: All third parties are required to process data in accordance with NZ privacy law and our contractual obligations.
International Transfers
OBSERVE: Some of our service providers or data processors may be located outside New Zealand.
- Jurisdictions: Data may be transferred to countries in the European Union, United Kingdom, Australia, or other regions as necessary for service provision.
- Safeguards: All international transfers are protected by legally approved mechanisms, including Standard Contractual Clauses (SCCs) and equivalent safeguards recognized under NZ law.
- Access Controls: Only authorized personnel and partners may access personal data, and only for the purposes outlined in this policy.
REFLECT: Users will be notified where required if their data is transferred internationally and may request further information about applied safeguards.
Data Retention
OBSERVE: Retention of personal data is governed by legal, regulatory, and operational requirements.
- Personal Data: Retained for no longer than 5 years after account closure or final transaction, in compliance with NZ AML and gambling laws.
- Technical and Behavioral Data: Retained for up to 2 years for analytics or security purposes, unless required for regulatory investigations.
- Marketing Data: Retained until consent is withdrawn or the data becomes obsolete, subject to regular review.
- Deletion Criteria: Data is deleted or anonymized upon user request (where permitted by law), expiration of retention periods, or when processing is no longer necessary.
REFLECT: Secure and irreversible deletion methods are applied in accordance with industry best practices.
Your Rights
OBSERVE: Users of grandsmondial-nz.com have rights under the NZ Privacy Act 2020, and, where applicable, under GDPR and other international standards.
- Access: Request a copy of personal data held about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request erasure of personal data, subject to retention obligations.
- Restriction: Request restriction of processing under certain circumstances.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Portability: Request to receive personal data in a structured, commonly used format.
- Withdrawal of Consent: Withdraw consent to marketing or other processing at any time.
How to Exercise Your Rights
- Procedure: Submit a request to support@grandsmondial-nz.com or via contact form, specifying the right you wish to exercise.
- Response Time: We will acknowledge and respond to your request within 30 days, free of charge, unless otherwise permitted by law.
- Legal Reference: NZ Privacy Act 2020; for users whose data is protected by EU or Mexican law, GDPR and Mexican Federal Law on Protection of Personal Data Held by Private Parties (where applicable) are observed.
REFLECT: Where permitted, we may request verification of identity before fulfilling rights requests to protect user privacy.
Cookies & Tracking Technologies
OBSERVE: grandsmondial-nz.com uses cookies and similar technologies for site functionality, analytics, and advertising.
- Session Cookies: Enable core site functions and are deleted when you close your browser.
- Persistent Cookies: Remain on your device for a defined period to remember preferences and improve user experience.
- Third-Party Cookies: Set by analytics and advertising partners for aggregated site usage analysis and targeted advertising, subject to user consent.
Managing Cookies
- Browser Settings: You can block or delete cookies via your browser settings.
- Internal Controls: Use the on-site cookie preferences panel to manage or withdraw consent for non-essential cookies.
REFLECT: Disabling certain cookies may affect site functionality. See our Cookie Policy for further details.
Data Security
OBSERVE: grand-mondial-casino-new-zealand implements advanced security controls to protect all data processed via grandsmondial-nz.com.
- Transmission Security: All data transmitted between users and our servers is encrypted using TLS 1.2 or higher.
- Data Encryption: Personal data is encrypted at rest and in transit using industry-standard algorithms.
- Access Controls: Multi-factor authentication and strict access policies restrict data access to authorized personnel only.
- Security Audits: Regular internal and external audits are conducted to ensure compliance with ISO 27001 and SOC 2 standards.
- Staff Training: All staff receive regular training in data protection, privacy, and incident response.
- Incident Response: Comprehensive procedures are in place to detect, report, and respond to data breaches or security incidents, including prompt notification to affected users and authorities as required by law.
REFLECT: Continuous improvement processes are in place to adapt to emerging threats and regulatory requirements.
Complaints & Contacts
OBSERVE: Users may raise privacy concerns or complaints via multiple channels.
- Data Protection Officer: Sophie McKenzie, support@grandsmondial-nz.com, +64 9 123 4567.
- Online Feedback: Contact Form
- Postal Address: Level 4, 21 Queen Street, Auckland Central, Auckland 1010, New Zealand.
Complaint Procedure
- Submit your inquiry or complaint via the above channels, including relevant details.
- Our DPO will acknowledge receipt within 5 business days and provide a substantive response within 30 days.
- If unresolved, users may escalate complaints to the Office of the Privacy Commissioner (New Zealand): https://www.privacy.org.nz, phone: 0800 803 909, or, if applicable, to EU or Mexican data protection authorities.
REFLECT: We are committed to fair, transparent, and timely resolution of all privacy-related concerns.
Updates
OBSERVE: This privacy policy may be updated to reflect changes in law, regulation, or business practices.
- Notification Procedures: Material changes will be communicated via email, website banners, and user dashboard notifications, with at least 30 days' advance notice.
- User Options: Users may object to changes or close their accounts before new terms take effect.
- Version Control: Last updated: 6 November 2025. A changelog of material revisions is maintained for user reference.
REFLECT: Continued use of grandsmondial-nz.com after notification of changes constitutes acceptance of the updated policy.