Privacy Policy for New Zealand Players

This policy explains what personal information LEON Bet collects, why each piece is needed, who can see it, how long it is kept and what rights you hold over it. The governing framework for players in New Zealand is the Privacy Act 2020, and this document is written to be acted on, not skimmed: every right listed below comes with the way to use it. The platform serves players aged 18 and over only.

Our Position on Your Data

You cannot run a real-money gambling account without handing over sensitive information, so the honest starting point is this: we collect what the law and the service require, we do not sell it, and everything optional is labelled as optional. Where a choice exists, such as marketing, it is yours and it is reversible. Where no choice exists, such as identity verification, this policy says so plainly instead of hiding the obligation behind soft wording.

What We Collect

The information falls into six specific groups:

• Identity data. Name, date of birth, and the documents you provide for verification, such as a passport or driver licence.
• Contact data. Email address, phone number and residential address.
• Financial data. Payment method details, deposits, withdrawals and account balance history. Card numbers are handled by payment processors; the casino does not store full card data itself.
• Verification (KYC) data. The results of identity, age and source-of-funds checks that anti-money-laundering rules require.
• Technical data. IP address, device type, browser and operating system, collected automatically when you connect.
• Usage data. Which games you open, the bets you place, session times and the pages you visit on the site.

Why Each Group Is Collected

Different data rests on different legal grounds, and the distinction matters because it defines what you can refuse:

• To run your account (contract). Identity, contact and financial data are needed to open the account, process payments and pay out winnings. Without them the service cannot function.
• To meet legal obligations. KYC and transaction records are collected because anti-money-laundering law demands it. This is mandatory, and no consent is involved.
• With your consent (marketing). Emails and promotions are sent only if you agree, and the agreement can be withdrawn at any time from your account settings or the unsubscribe link in any message. Refusing marketing has no effect on your account.
• Legitimate interest. Technical and usage data supports fraud prevention, security monitoring and improvement of the platform.

The line to remember: marketing is optional, verification is not, and this policy never trades one for the other.

Who Sees Your Data

Your data is not sold, rented or passed to third parties for their own marketing. It is shared only where the service or the law requires it:

• Payment processors, to move money in and out of your account.
• Verification agencies, to run the identity and age checks described above.
• Game providers, who receive the technical minimum needed to run their titles in your session, not your identity file.
• The licensing authority and law enforcement, where a lawful request or a licence obligation requires disclosure.

Each recipient gets what its role requires and nothing beyond that.

Where Your Data Travels

The operator of the platform is based outside New Zealand, so your data does leave the country: it is processed where the operator and its service providers run their systems. Under the cross-border rules of the Privacy Act 2020, information disclosed overseas must remain subject to comparable safeguards, and the contracts with processors named above carry the same confidentiality and security duties described in this policy regardless of where the processing happens.

Your Rights Under the Privacy Act 2020

Four rights, each with the way to exercise it:

• Access. You can request a copy of the personal information held about you. Send the request to the privacy contact below; expect confirmation and a response within the timeframe the Act sets.
• Correction. If something on file is wrong or outdated, you can have it corrected either directly in your account settings or by writing to the same contact.
• Deletion. You can ask for your data to be deleted when you close your account. Honesty requires a caveat here: deletion applies to everything the law does not force us to keep. KYC and transaction records sit under mandatory retention (see the next section) and are removed only after that period expires. "Delete my account" therefore means "delete what is legally deletable now, and the rest on schedule", and any answer that promised more would be false.
• Opt-out of marketing. One click on the unsubscribe link, or a toggle in account settings. It takes effect without conditions.

If you believe a request was mishandled, you can complain to the Office of the Privacy Commissioner of New Zealand, which oversees the Act.

How Long Data Is Kept

Retention is driven by law, not convenience, and the periods are concrete:

• KYC and transaction records: kept for at least five years after your account closes, because anti-money-laundering obligations set that minimum.
• Account and contact data: kept while the account is open, then removed once no legal ground for holding it remains.
• Marketing consents: kept only until you withdraw them.
• Technical logs: kept for the shorter periods security monitoring requires, then rotated out.

Cookies and Tracking

The site uses three kinds of cookies. Essential cookies keep you logged in and the session secure; the site does not work without them. Performance cookies measure how pages behave so faults can be found. Marketing cookies support promotional measurement and are the only category used for anything beyond running the site. You can refuse non-essential cookies in the cookie banner on first visit and change the choice later in your browser settings; blocking essential cookies will break login, which is a technical fact rather than a policy choice.

How Your Data Is Protected

Concrete measures, not adjectives: the connection between your device and the site is TLS-encrypted end to end, stored data sits on access-controlled systems, and payment details are tokenised by the processors that handle them. Two-factor authentication is available on your leon bet casino account, and enabling it is the single strongest step you can take yourself. Beyond that, use a password unique to this site and never share login codes with anyone, including people claiming to be support staff. Real support at leon bet will never ask for your password.

Under-18s

The platform is for adults only. Accounts cannot be opened by anyone under 18, age is checked during verification, and the operator does not knowingly hold data on minors. If verification or any later check shows an account holder is under 18, the account is closed, winnings are voided under the terms of service, and the personal data collected is removed subject only to the legal retention duties described above.

Privacy Requests and Contact

Privacy requests should not require detective work. For access, correction, deletion or any question about this policy, contact the privacy team at leon bet nz directly by email at support@leon-bet-nz.nz, or through live chat if you prefer; ask for the data protection officer and the request will be routed to them. Requests are acknowledged promptly and handled within the timeframes the Privacy Act 2020 sets. This policy is reviewed when the law or the platform changes, and the current version is always the one published on this page.