What is held, what obliges the operator to hold it, when it goes, and the exact route for making something happen.
Privacy Policy: How LEON Casino Handles Player Data in New Zealand
Four things decide whether a privacy notice is worth reading: it names the exact records held, it explains what obliges the company to hold them, it says when they go, and it tells you how to make something happen. This one does all four for LEON Casino players registered from New Zealand, under the Privacy Act 2020. Registration is limited to adults aged 18 and over.
The Short Version
- A real-money account cannot exist without identity and payment records. There is no anonymous version of this service.
- Nobody buys player information from this operator, and nobody rents it either. It is not a revenue line.
- Promotional consent can be given and taken back whenever you like. Verification records cannot, because statute rather than preference puts them on file.
- Closing an account starts a retention clock instead of wiping the slate, and the exact clock is set out below.
- Every request travels through one address: privacy@leon-casino-online.co.nz.
The sections that follow put detail behind each of those lines. Nothing that matters has been left for a footnote.
What Is Collected and Why
Six groups of records exist, and they rest on different footings. That distinction decides what you can decline.
| Category | Examples | Why it is held |
|---|---|---|
| Identity | Full name, date of birth, nationality | Creating the account and confirming adulthood |
| Contact | Email address, phone number, residential address | Service messages and account correspondence |
| Financial | Payment instrument details, deposits, withdrawals, balance movements | Processing transactions and paying winnings out |
| Verification | Screening documents and their outcomes, including checks on where funds originate | Duties attached to the operating permit and to money-laundering rules |
| Technical | IP address, handset model, browser, operating system | Security, fraud detection and correct rendering of the site |
| Usage | Games opened, bets struck, session duration, pages viewed | Service improvement and spotting patterns that suggest gambling harm |
Complete card numbers never reach LEON Casino's own storage. The processors that move the money hold those, and what remains on your account is a masked reference to the instrument you used.
Which Parts Are Optional
Everything in the table above rests on one of four grounds:
- Performance of a contract. Identity, contact and financial records exist because you asked for an account and an account cannot be operated without them. There is nothing here to consent to or withdraw.
- Statutory duty. Screening outcomes and transaction ledgers are kept because anti-money-laundering rules attached to the operating permit compel it. Refusal is not on the menu while an account is live.
- Consent. Promotional mail and messages reach you only where you have said yes. Say no later, in account settings or through the unsubscribe control at the bottom of a promotional email, and the change is absolute. Play, deposits and payouts are unaffected either way.
- Legitimate interests. Device and behavioural records underpin fraud screening, security alerting and the ordinary work of keeping the platform functional.
Stated bluntly: promotional contact is a choice, screening is not, and neither is ever offered as a bargaining chip for the other.
Who Receives What
Player records at leon casino nz are not merchandise. They are not sold, and they are not passed to anyone wanting to advertise their own products. Disclosure happens in four situations, and each recipient receives only the slice its job requires:
- Payment providers, meaning the banks and wallet operators standing behind Visa, Mastercard and Skrill, so that money can move in either direction.
- Screening providers, who confirm who you are, establish that you are of age, and review where your funds come from, as the rules demand.
- Game studios such as Pragmatic Play, NetEnt, Play'n GO and Evolution, which receive only what a session needs in order to run. Your document file is never among it.
- The permit authority, regulators and enforcement agencies, where a valid legal demand or a condition of the operating permit compels handover.
Contracts bind each of those recipients to confidentiality and to security obligations, and none may repurpose what it receives for its own ends.
Processing Beyond New Zealand's Borders
Jade Reef Ventures Corp. operates from outside the country, and so do the service providers it relies on. Your records therefore travel offshore as a routine part of running the account, and pretending otherwise would be dishonest.
The cross-border provisions of the Privacy Act 2020 require that anything disclosed overseas continues to enjoy protection comparable to the Act's own. The processing agreements behind the recipients listed above carry the confidentiality, access-control and encryption commitments described in this document, and the location of a server does not dilute them.
Your Rights and the Route to Each One
The Privacy Act 2020 gives you four practical powers, and each has a mechanism:
Access. Write to privacy@leon-casino-online.co.nz from the email address on the account, asking for the records held about you. Receipt is acknowledged, and the answer follows inside the statutory period.
Correction. Details that are wrong or out of date can be put right. Contact details are editable in account settings; anything locked to your verified identity, such as a legal surname, is corrected by emailing the same address with evidence of the change.
Erasure. You may ask for your records to be deleted after the account is closed. The honest scope of that: everything not pinned down by a retention duty goes, while screening and transaction records stay for the period set out in the next section and are destroyed when it expires. So "delete my data" means "erase what may lawfully be erased now, and the balance on schedule". Any operator promising instant and total erasure is either overlooking money-laundering law or describing something it does not actually do.
Ending promotional contact. Use the unsubscribe control in a promotional email or the toggle in account settings. It applies immediately, no reason required and no follow-up call.
Should a request be handled badly, the Office of the Privacy Commissioner is the independent body to escalate to.
Retention Periods
Duration is dictated by legal obligation rather than by preference:
- Screening and transaction records: five years minimum from the closure of the account, that being the floor set by anti-money-laundering rules.
- Account and contact details: live for as long as the account does, then deleted once nothing lawful requires their retention.
- Promotional preferences: held only until you revoke them.
- Technical logs: short-lived, rotated out once the security window they serve has passed.
The clock described here is not one the operator gets to reset or shorten on request, which is exactly why it is written down.
Cookies and the Choices You Have
Three categories operate on the site:
- Essential cookies hold your session together and keep sign-in secure. Block them and login stops working, which is mechanics rather than policy.
- Performance cookies record how pages behave so that faults surface and get fixed.
- Promotional cookies measure campaign response, and they are the only category doing anything beyond operating the site.
Both non-essential categories can be declined in the consent banner on a first visit, and the decision can be revisited later through the cookie settings link in the footer or through your own browser controls. Declining changes nothing about your account, your bonuses or the games you can open.
Security on Both Sides of the Screen
What the platform does: traffic between your handset and the site travels over TLS encryption, stored records sit behind access controls with staff permissions granted by role, and payment credentials are replaced by tokens held by the processors rather than by the casino. Verification before a first payout is a security control as much as a regulatory one, since it stops anyone who has obtained your password from redirecting money to a card of their own.
What you can do: switch on two-factor authentication in account settings, which is the strongest single measure available to a player. Pick a password used nowhere else. Keep one-time codes to yourself, including when the person requesting one claims to work here, because genuine staff have no use for your password or your codes.
No Accounts, and No Records, for Under-18s
This platform serves adults. Registration below the age of 18 is prohibited, age is established through the verification process rather than a tick box, and the operator holds no personal information about children knowingly. Where a check shows an account holder to be underage, the account is shut, any winnings are forfeited under the terms of service, and the records gathered are destroyed apart from those the retention duties above require to be kept. If you suspect a minor has registered using your device or your details, email the privacy address below and the case will be looked into.
Reaching the Privacy Team
Getting an answer should not require persistence. Email privacy@leon-casino-online.co.nz for access, correction, erasure, a complaint about promotional contact, or any point in this document that reads ambiguously to you, and say if you want the matter escalated to the data protection officer. Live chat inside the account can lodge a request as well, though written contact leaves a trail that protects both sides.
Requests are acknowledged when they arrive and answered inside the periods the Privacy Act 2020 prescribes. This document is revised whenever the platform or the law behind it moves, and the copy published on this page is the one in force.