This privacy policy explains what happens to data when you read vegas-now-casinos.nz. The short version: this is a review site, not a gambling operator. There are no player accounts, balances or deposits on these pages, so the personal information involved is minimal — analytics, cookies, whatever you type into the contact form, and standard server logs. Below is what is collected, why, how long it is kept and what you can do about it.
The framework is New Zealand’s Privacy Act 2020 and its 13 Information Privacy Principles (IPPs), which govern how agencies collect, hold, use and disclose personal information, overseen by the Office of the Privacy Commissioner (OPC) at privacy.org.nz. Current as at August 2026. The site is intended for adults aged 18 and over; for editorial material rather than data handling, start with our Vegas Now coverage.
What this site collects
Data reaches us in four ways, and only the third involves you telling us anything deliberately.
- Analytics data. Aggregated statistics about how pages are used: which URLs are opened, time on page, scroll depth, entry page and referring source, approximate location at city or region level derived from IP address, plus device type, operating system and browser. This measures behaviour on the site, not the identity of a person.
- Cookies and similar storage. Small files that remember a preference, keep a session consistent, or let analytics tell a returning visitor from a new one. Categories, purposes and lifetimes are set out separately.
- Contact form submissions. If you write to us — a correction, a question, a complaint — we receive whatever you put in the form: usually a name or handle, an email address for the reply, and the message itself. Nothing more is required, and there is no reason to send financial or identity documents to a review site.
- Server logs. The web server automatically records IP address, timestamp, requested URL, status code, user agent and referrer — technical records used for security and diagnostics, generated whether or not you interact with anything.
What we do not collect
This distinction matters more on a gambling review site than almost anywhere else, so bluntly: we do not collect, request, store or process:
- payment details of any kind — no card numbers, no bank account or IBAN details, no e-wallet credentials, no crypto wallet addresses;
- passwords or login credentials for any casino, bank or wallet;
- identity documents — no passport, driver licence, birth certificate, proof of address, utility bill or selfie verification;
- gambling account balances, transaction history, deposit or withdrawal records;
- information about health, ethnicity, political views, religion or sexual orientation;
- data about children.
All of that belongs to the operator side. When you open an account with a casino, it collects identity and payment information under its own privacy policy, and its KYC and anti-money-laundering obligations are why it asks for documents. We are not a party to that process, cannot see it and cannot retrieve, amend or delete anything an operator holds. Requests about a casino account go to the casino.
Why the data is collected
Under IPP 1, personal information is collected only for a lawful purpose connected to a function of the agency, and only where it is necessary. The purposes here are narrow:
- Measuring and improving the material. Knowing which pages are read and where readers stop is how we decide what to rewrite, expand or remove. A page everyone abandons halfway is a page with a problem.
- Keeping the site working and secure. Logs are how errors, broken links and abusive traffic — scrapers, denial-of-service patterns — are identified and blocked.
- Answering you. Details in a message are used to reply and to fix whatever you raised, and for nothing else.
We do not sell personal information, rent or trade mailing lists, or build advertising profiles on identifiable individuals.
Cookies and analytics
Cookies get their own page, because there is more to say than fits here. In summary: a few are strictly necessary for the site to function, some remember preferences such as a consent choice, and the rest are analytics cookies that count visits and page views. Analytics cookies are optional — decline them and the site works exactly as before. Categories and retention periods are listed in the cookie policy, which also explains how to clear or block cookies in Chrome, Safari, Firefox and Edge.
Third parties
A handful of service providers process data on our behalf, and they are limited to what they need to deliver their service:
- The hosting provider — stores the site’s files and generates the server logs described above.
- A content delivery and security layer in front of the site, which speeds up delivery and filters malicious traffic; it necessarily sees request metadata including IP addresses.
- An analytics provider — processes the usage statistics described above.
- The email service used to receive and answer contact form messages.
Some providers operate servers outside New Zealand, so data may be processed overseas. IPP 12 governs disclosure to a foreign entity and requires comparable safeguards to those in the Privacy Act; providers are chosen on that basis and process data only as instructed.
Separately: outbound links lead to sites we do not control. Once you land on another domain, that site’s privacy policy applies, not this one — worth thirty seconds before you enter anything.
Your rights under the Privacy Act 2020
If we hold personal information about you — realistically, that means a message you sent us, or logs tied to your IP address — the Act gives you specific rights:
- Access (IPP 6). You can ask what personal information we hold about you and receive a copy. Requests are answered within 20 working days, the statutory deadline.
- Correction (IPP 7). If something is wrong, ask for it to be corrected. If we disagree, you can require a statement of the correction you sought to be attached to the record.
- Deletion. A message and the details attached to it can be deleted once the matter it raised is resolved.
- Withdrawing consent. Optional cookies can be declined or cleared at any time through the browser or the consent control.
- Complaint. If you are unhappy with how a request was handled, complain to the Office of the Privacy Commissioner at privacy.org.nz. The OPC investigates free of charge, and you need not go through us first — though raising it here is usually faster.
Requests cost nothing. We may need to confirm you are the person the information relates to before releasing anything — a safeguard, not an obstacle.
Data retention
Information is kept only as long as its purpose requires (IPP 9), then deleted or anonymised. Raw server logs are held for a short operational period — typically weeks to a few months — before being purged or reduced to aggregate statistics. Analytics data is retained in aggregated, non-identifying form. Contact form messages are kept while the matter is open and for a reasonable period afterwards, then removed. Cookie lifetimes are set individually and listed in the cookie policy. Nothing is kept indefinitely “just in case”.
Children
This site covers online gambling and is intended for adults aged 18 and over. It is not directed at children, we do not knowingly collect information from anyone under 18, and nothing here is designed to appeal to minors. If you believe a child has sent us information through the contact form, tell us and it will be deleted. Parents wanting a technical barrier should look at device-level content filtering and gambling-blocking software — more effective than any age statement on a web page.
Changes to this policy
This policy is updated when the site changes — a new analytics tool, a different host, a new form — or when the law does. Revisions appear here with a new date rather than being announced by email, since we keep no mailing list. The version on this page is always the current one. Last reviewed: August 2026.
Contact
Privacy questions, access requests, corrections and deletion requests all go through the contact page on this site — use the form and say clearly what you are asking for, so it can be handled without a round of clarifying emails. We do not publish a direct privacy email address; the form routes requests to the right place and creates a record of them. If your question concerns a casino account, its verification documents or money held by an operator, we cannot help — that goes to the operator’s own support and data protection contacts.