Royal Panda New Zealand Privacy Policy

This Privacy Policy outlines the data protection practices of Royal Panda casino for players accessing services in New Zealand. The document explains how personal information is collected, used, stored, and disclosed. It serves to meet transparency obligations under applicable privacy laws, including the Privacy Act 2020. The policy details the lawful bases for processing personal data, which include contractual necessity, legal obligations, legitimate interests, and where applicable, consent. It further describes the purposes of processing, which encompass account management, transaction processing, regulatory compliance, and security. Players are advised to review this policy to understand their rights and the procedures for managing their personal information.

Data Collection and Categories of Personal Information

Royal Panda collects personal data necessary to provide its services, fulfil legal obligations, and protect its legitimate interests. This collection occurs during account registration, gameplay, financial transactions, and customer support interactions. The information processed falls into several distinct categories, each serving specific operational and compliance functions.

The primary categories of personal data processed include identification and contact details, financial and transactional information, technical and usage data, and records for regulatory compliance. The following table outlines these categories and specific examples of data within them.

Additional data may be collected when players engage with promotional activities. For instance, participation in a Royal panda 35 spins no deposit offer will generate data related to the offer's use and any resulting winnings. Information is also gathered through the use of the Royal panda app, including device-specific data and app performance metrics.

Purposes of Processing and Legal Bases

Personal data is processed for defined purposes, each supported by a lawful basis as required by privacy principles. The primary lawful bases are the performance of a contract, compliance with a legal obligation, the pursuit of legitimate interests, and, in specific circumstances, player consent.

The performance of the contract with the player is the basis for core account and transactional processing. This includes:

• Creating and managing your player account.
• Processing deposits, withdrawals, and other financial transactions.
• Providing customer support and communicating about account activity.
• Facilitating gameplay, including the crediting of winnings or bonuses such as a Royal panda free bonus.

Compliance with legal obligations forms the basis for processing required by New Zealand law and international regulatory standards. This encompasses:

• Verifying player identity and age under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009.
• Maintaining records for tax and auditing purposes.
• Reporting suspicious transactions to relevant authorities.
• Adhering to responsible gambling and consumer protection regulations.

Legitimate interests are relied upon for operations essential to service provision, security, and improvement. These include:

• Detecting and preventing fraud, money laundering, and other illegal activities.
• Ensuring network and information security, including monitoring for attacks.
• Analyzing service usage to improve website functionality and the Royal panda app experience.
• Managing legal claims and exercising legal rights.

Data Storage, Security Protocols, and Retention Periods

Royal Panda implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Data is stored on secure servers located in jurisdictions with adequate data protection standards, as determined by applicable law.

Security measures are designed to ensure the confidentiality, integrity, and availability of information. These measures include, but are not limited to, encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular security testing and assessments, and robust network security infrastructure. Access to personal data is restricted to authorised personnel who require it to perform their job functions.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods are determined based on the nature of the data and the purpose for its processing. For example:

• Account data is retained for the duration of the account's activity and for a statutory period following account closure to meet regulatory obligations.
• Financial transaction records are retained for a minimum period as required by financial and anti-money laundering legislation.
• Records related to responsible gambling interactions are retained as per the conditions of the operator's licence.
• Technical logs may be retained for a shorter period for security monitoring purposes.

Upon expiry of the applicable retention period, or upon a valid request for erasure where applicable, personal data is securely deleted or anonymised so it can no longer be associated with an individual.

Player Rights and Request Procedures

Under the Privacy Act 2020 and other applicable data protection principles, players have certain rights regarding their personal information. Royal Panda has established procedures to facilitate the exercise of these rights. To protect player privacy and security, all requests are subject to a verification process to confirm the identity of the requester.

Players have the right to request access to the personal data held about them. This includes the right to obtain confirmation of whether their data is being processed and to receive a copy of that data. Furthermore, players have the right to request the correction of any inaccurate or incomplete personal data.

In specific circumstances, players may have additional rights, which include:

• The right to request the erasure of personal data.
• The right to request restriction of processing concerning their data.
• The right to object to processing based on legitimate interests.
• The right to data portability, where applicable, to receive personal data in a structured, commonly used format.

To exercise any of these rights, players must submit a formal request via the designated contact method specified in the contact section of this policy. The request should clearly state the right being exercised and provide sufficient detail to identify the relevant data. Royal Panda will respond to all legitimate requests within the timeframes stipulated by law. In some cases, legal obligations or overriding legitimate interests may necessitate continued processing, which will be communicated to the player if a request is declined.