Quatro Casino New Zealand Privacy Policy

This policy outlines our data processing activities, legal compliance obligations, and the security standards implemented to protect your personal information.

This Privacy Policy outlines the data protection practices of Quatro casino. The document exists to inform players in New Zealand about how their personal information is collected, used, stored, and protected. It explains our commitment to transparency and lawful processing under applicable privacy laws, including the Privacy Act 2020. The policy details the purposes for which data is processed, which include account management, transaction processing, regulatory compliance, and security operations. By setting out these procedures, we provide a clear framework for our data handling activities and define the rights available to individuals regarding their personal information.

Data Collection and Categories of Personal Information

Quatro casino collects personal data necessary to provide its services, operate accounts, and meet legal obligations. The collection occurs during registration, account activity, and through technical interactions with our platforms. We process several distinct categories of information.

Registration and identification data includes information provided directly by the player. This encompasses name, date of birth, contact details, and proof of identity documents for verification purposes. Financial and transactional data is collected to process deposits and withdrawals, including payment method details and full transaction history.

Technical and usage data is generated automatically. This includes IP address, device identifiers, browser type, and pages visited. Data related to player activity, such as game history, bet records, and login patterns for your Quatro casino connexion, is also recorded. Compliance records form a separate category, containing details of interactions with customer support, responsible gambling interactions, and records maintained to satisfy regulatory requirements.

Purposes of Data Processing and Legal Foundations

Personal data is processed for specific, explicit, and legitimate purposes. The primary legal bases for processing are the performance of a contract, compliance with a legal obligation, legitimate interests pursued by Quatro casino, and, where required, player consent.

Processing for account operations and service provision is conducted under the performance of a contract. This includes identity verification, facilitating deposits and withdrawals, and providing customer support. Compliance with legal obligations under New Zealand law and licensing conditions necessitates processing for age verification, anti-money laundering checks, fraud prevention, and responsible gambling duties.

Legitimate interests form the basis for certain security and operational processes. This includes network and information security, fraud detection, system administration, and business management. Marketing communications may be sent based on legitimate interest or explicit consent, as required by law. Players can manage communication preferences within their account. Processing related to promotional offers, such as a Quatro casino no deposit bonus codes 2026 offer, is conducted under the terms and conditions of the specific promotion and our contractual relationship.

Data Storage, Protection, and Retention Periods

Quatro casino implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Data is stored on secure servers located in jurisdictions with adequate data protection standards, as assessed by New Zealand authorities.

Security measures include encryption of data in transit and at rest, strict access controls limited to authorised personnel, and regular security assessments. Financial data is protected through adherence to Payment Card Industry Data Security Standards where applicable. Retention periods are determined by the purpose for which the data was collected and relevant legal requirements.

Data CategoryGeneral Retention Principle
Account DataRetained for the duration of the account plus a period mandated by financial and gaming regulations following account closure.
Financial Transaction RecordsRetained for a minimum of seven years as required by financial reporting and anti-money laundering laws.
Technical LogsRetained for a limited period necessary for security monitoring and troubleshooting.
Marketing Consent RecordsRetained while the account is active and for a short period after withdrawal of consent for audit purposes.

Data is securely deleted or anonymised at the end of the relevant retention period. Archiving may occur where data is required for ongoing legal proceedings or regulatory investigations.

Player Rights and Request Procedures

Individuals in New Zealand have rights regarding their personal data under the Privacy Act 2020. Quatro casino has established procedures to facilitate the exercise of these rights. All requests are subject to verification of the requester's identity to protect player information.

The right of access allows players to request confirmation that their data is being processed and to obtain a copy of that data. The right to correction enables players to request that inaccurate or incomplete personal data be rectified. In certain circumstances, players have the right to request the erasure of their personal data, the restriction of its processing, or to object to processing based on legitimate interests.

Players may also have the right to data portability, receiving their provided data in a structured, machine-readable format. To exercise any right, a verifiable request must be submitted to the Data Protection Officer using the contact details provided separately. Requests will be processed within the timeframes stipulated by law. For example, a request concerning data related to a Quatro casino rewards programme or a Quatro casino get 700 free spins promotion would be handled under these same procedures. We will inform the player of any reasons if a request cannot be fully actioned.