Skycity New Zealand Privacy Policy
Skycity processes personal data to fulfill legal obligations and operational requirements. Information is managed in accordance with New Zealand privacy law and protected by established security standards.
This Privacy Policy outlines how SKYCITY Casino Group and its related entities operating in New Zealand collect, use, store, and disclose your personal information. The policy is provided in accordance with New Zealand privacy laws, including the Privacy Act 2020. It explains our data handling practices to ensure transparency about the processing of your information. The document details the lawful bases for processing, which include the performance of our services, compliance with legal obligations, and our legitimate business interests. It also covers how we manage your account information and the security measures we employ. By engaging with our services, you acknowledge the practices described in this policy.
Data Collection and Categories of Personal Information
SKYCITY Casino collects personal information necessary to provide gaming, hospitality, and related services. This collection occurs through various interactions, including account registration, transaction processing, and your use of our physical and digital premises. The information is gathered directly from you, through automated technologies, and in some instances, from third parties such as identity verification services.
The primary categories of personal data processed include, but are not limited to, the following types. Registration and account details encompass your name, contact information, date of birth, and chosen security credentials. Identification data includes copies of government-issued documentation like a driver's licence or passport, required for regulatory verification. Transactional and financial information covers details of deposits, withdrawals, game play history, and methods of payment.
- Technical and usage data, such as IP address, device identifiers, browser type, and activity logs related to your use of our websites or apps, including your skycity online casino login patterns.
- Compliance and due diligence records, which may involve details of your interactions with our customer support, self-exclusion status, and records maintained to meet obligations under the Gambling Act 2003.
- Information related to ancillary services, which could include reservation details at a SKYCITY Casino restaurant or preferences linked to SKYCITY Casino entertainment offerings.
Purposes and Legal Grounds for Processing Personal Data
We process your personal information for specific, explicit, and legitimate purposes. Each processing activity is conducted under a recognised lawful basis as required by applicable privacy legislation. The primary purposes for processing are outlined below, with the corresponding legal grounds.
| Purpose of Processing | Legal Basis |
|---|---|
| Identity verification, age confirmation, and account setup. | Legal obligation and necessity for contract performance. |
| Processing financial transactions and managing your player account. | Performance of a contract and legitimate interest. |
| Maintaining security, preventing fraud, and ensuring system integrity. | Legitimate interests and legal obligation. |
| Fulfilling regulatory reporting and anti-money laundering duties. | Legal obligation. |
| Providing customer support and communicating service updates. | Performance of a contract and legitimate interest. |
| Managing operations at venues such as SKYCITY Auckland Casino. | Legitimate interests in facility management. |
Where we rely on legitimate interests, we have conducted assessments to ensure our interests are balanced against your privacy rights. For certain marketing communications, we may seek your explicit consent, which you can withdraw at any time. Processing for regulatory compliance is mandatory and a condition of our licence to operate.
Data Storage, Security Protocols, and Retention Periods
Personal information is stored on secure servers located in New Zealand and other jurisdictions with appropriate safeguards. We implement a range of technical and organisational measures designed to protect data against unauthorised access, disclosure, alteration, or destruction. These measures are regularly reviewed and updated in line with technological developments.
Our security framework includes encryption of data in transit and at rest, strict access controls based on the principle of least privilege, and robust network security systems. Physical access to our data centres and premises, including the SKYCITY Auckland Casino complex, is controlled and monitored. We mandate confidentiality agreements for all staff and contractors who handle personal information.
Data is retained only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods are determined by the type of information and the legal framework governing its use. For example, customer identification records and transaction histories are retained for a minimum period as stipulated by the Department of Internal Affairs. Upon expiry of the applicable retention period, data is securely deleted or anonymised so it can no longer be associated with an individual.
Individual Rights and Request Procedures
Under the Privacy Act 2020, you have specific rights regarding your personal information held by SKYCITY Casino. You have the right to request access to the personal data we hold about you. You may also request the correction of any information that is inaccurate, incomplete, or misleading. In certain circumstances, you have the right to request the erasure of your personal data, to object to particular processing activities, or to request restriction of processing.
You may also have the right to request the portability of your data in a structured, commonly used format. To exercise any of these rights, a formal request must be submitted. All requests are subject to a verification process to confirm the identity of the individual making the request. This is a security measure to prevent unauthorised disclosure of information.
- Submit a written request to our Privacy Officer via the contact details provided on our official website.
- Clearly specify the nature of your request and the personal information to which it relates.
- Provide sufficient information to allow us to verify your identity, which may include details associated with your skycity online casino login.
We will respond to your request in accordance with statutory timeframes. In some cases, we may be required by law to decline your request, such as where disclosure would interfere with legal or regulatory investigations. You have the right to lodge a complaint with the New Zealand Privacy Commissioner if you are not satisfied with our response.