Your privacy matters. This policy explains what personal information Regal Rush collects from New Zealand players, why we collect it, where it is stored and how you can exercise your rights as a New Zealand resident under the Privacy Act 2020. It also covers how we work with payment, identity and game studio partners, and the choices you have at every step.
We treat personal information as something you trust us to look after, not as a commercial asset. Everything described in this policy is built around the thirteen Information Privacy Principles set out by the Office of the Privacy Commissioner of New Zealand, and most of it goes further than the legal minimum because it is the right thing to do for the people who play at Regal Rush.
What we collect
Account, identity, payment, device and gameplay data.
How we protect it
Encrypted in transit and at rest, with strict access controls.
Why we use it
To run your account, process payments, prevent fraud and meet regulatory duties.
Your rights
Access, correction, portability, deletion and complaints.
Information we collect
Account information
Name, date of birth, address, contact details and any documents you upload during verification. We use this to confirm you are eligible to play and to keep your funds safe.
Payment information
Card or wallet details, transaction history and source of funds documentation where required. Card numbers are tokenised and never stored in plain text.
Gameplay information
Bets, wins, sessions and bonus activity. This helps us improve the lobby, detect fraud and run the responsible gaming tools.
Device and technical information
IP address, device type, browser, operating system and time zone. We use this for security and to optimise the site for your device.
How we use your information
We use personal information to operate your account, process payments in NZD and other supported currencies, prevent fraud and money laundering, comply with our New Zealand and international legal obligations and continuously improve the service. We do not sell personal information to third parties under any circumstances, and we never use sensitive details such as identity documents for marketing.
Sharing
We share information only with carefully selected partners that help us run the service. Examples include payment processors, identity verification providers, game studios, anti-fraud platforms, customer support tooling and our licensing regulator. Each partner is bound by strict confidentiality and data protection terms, and we audit those terms on a recurring schedule. Where personal information leaves New Zealand, we make sure the receiving country offers comparable protection or that contractual safeguards are in place.
Storage and retention
Personal information is stored on secure servers operated by trusted hosting partners. We retain account information for the period required by law and our regulators, typically a number of years after the account closes for anti-fraud and tax compliance purposes, and we delete it once the retention period ends. Backups follow the same lifecycle, with encrypted snapshots that rotate out of storage on a strict schedule.
Security
All connections to Regal Rush use TLS encryption. Passwords are stored as hashes, never in plain text, and identity documents are stored in an encrypted vault accessed only by trained verification staff. We run regular penetration tests, monitor for suspicious activity around the clock and require two factor authentication for sensitive account actions such as withdrawals and limit changes.
Children
Regal Rush is for adults aged 20 and over only. We do not knowingly collect personal information from anyone under that age. If we learn that a minor has created an account, we close the account immediately, refund any deposits where appropriate and delete the data we hold beyond what we are legally required to keep.
Your rights as an NZ resident
Under the Privacy Act 2020 you have the right to access the personal information we hold about you, to ask us to correct it, to ask us to delete it where appropriate, and to lodge a complaint with the Office of the Privacy Commissioner if you are not satisfied with how we have handled your information. We aim to respond to every privacy request inside twenty working days and we never charge for the first request in any twelve month period.
Cookies
We use cookies and similar technologies for security, functionality and analytics. See the Cookie Policy for the full breakdown of categories, retention periods and the controls available to you at any time.
Marketing
You can opt in to marketing communications during sign up and adjust your preferences at any time from your account dashboard. Opting out is immediate and never affects service messages or transactional emails such as withdrawal confirmations or security notices. We follow the New Zealand Unsolicited Electronic Messages Act 2007, including clear sender identification and a working unsubscribe link in every email.
Responsible gaming and data
We use a small amount of behavioural data, such as session length, deposit frequency and balance trends, to power our responsible gaming systems. If those signals suggest a player may be at risk, our team can offer support, prompt limit reviews or, in serious cases, apply protective measures. This use of data is part of our duty of care, and it is one of the few areas where we use information for something other than direct service delivery.
Changes to this policy
We will update this policy from time to time to reflect changes in our service, our partners or the law. The most current version always lives on this page, and material changes will be notified to active accounts before they take effect, giving you a chance to review and respond.
Contact
To exercise your privacy rights or to ask a privacy question, contact our support team or write to our data protection officer through the support channel. New Zealand players may also contact the Office of the Privacy Commissioner directly if a complaint cannot be resolved with us.