Privacy Policy

This privacy policy explains the principles and practices river-belle-casino, operating exclusively via river-belle-nz.com, applies to the collection, use, protection, and disclosure of personal data. The policy is applicable to all players and visitors accessing river-belle-nz.com from New Zealand, and is effective as of 6 November 2025. The privacy of your information is of paramount importance and this document outlines your rights and our obligations under New Zealand law and relevant international standards.

Who We Are

OBSERVE: river-belle-casino is operated by a legally registered entity under international gaming regulations, running services for New Zealand clients exclusively through river-belle-nz.com.
EXPAND: Compliance with NZ data privacy laws and international gaming requirements mandates full disclosure of operator identity, legal address, and contact channels for data protection matters.
REFLECT: The following details identify the legal operator and provide direct contact information for all privacy-related inquiries.

Legal Entity: river-belle-casino Ltd
Legal Address: Villa Seminia, 8, Sir Temi Zammit Avenue, Ta' Xbiex XBX1011, Malta
Company Registration Number: Not specified (regulated under Malta Gaming Authority License MGA/B2C/145/2007 and Kahnawake Gaming Commission License 00892, both active as of 2025)
Contact Email (Data Protection): support@river-belle-nz.com (Data Protection Officer: Sophie Williams)
Websites: river-belle-nz.com, riverbellecasino.com

Regional Compliance Note: All personal data processing is subject to New Zealand's Privacy Act 2020 and applicable international standards.

What Personal Data We Collect

OBSERVE: river-belle-nz.com collects data necessary for account operation, regulatory compliance, and service improvement.
EXPAND: Categories of personal data cover all points of interaction, including account creation, gameplay, payments, device use, and behavioral tracking.
REFLECT: Data collection is limited to what is necessary for legal and operational purposes.

Personal Identification: Full name, date of birth, address, email, phone number, and government-issued identification.
Technical Data: IP address, browser/device type, operating system, login dates/times, device identifiers, and user logs.
Payment Data: Bank account numbers, card details, payment history, withdrawal and deposit records, and transaction logs (collected and processed via secure, PCI-compliant partners where applicable).
Behavioral Data: Betting and gaming history, clickstream data, session times, account activity, preferences, and marketing interactions.
Cookies & Tracking: Session cookies, persistent cookies, third-party analytics and advertising cookies, and similar technologies (see Cookies section).

Legal Obligation: Collection is governed by applicable NZ and international gambling and privacy regulations, including AML/KYC requirements.

Legal Basis for Processing

OBSERVE: river-belle-nz.com must process personal data only on valid legal grounds.
EXPAND: The lawful bases reflect requirements of NZ Privacy Act 2020, GDPR, and gaming regulations.
REFLECT: Processing is always justified by one or more of the following:

User Consent: Voluntary opt-in for marketing, cookies, and optional services; consent can be withdrawn at any time.
Contract Fulfillment: Data is processed to open, maintain, and operate your account, verify identity, process transactions, and provide requested gaming services.
Legitimate Interests: Processing for security, anti-fraud, service improvement, analytics, and risk management, balanced against user interests and rights.
Legal Obligations: Compliance with statutory requirements, including Anti-Money Laundering (AML), Know Your Customer (KYC), tax reporting, and regulatory audits.

Protective Clause: Where consent is relied upon, withdrawal does not affect the lawfulness of prior processing.

Purpose of Processing

OBSERVE: Data is processed to deliver and enhance services.
EXPAND: Processing objectives are mapped to user experience, security, and legal compliance.
REFLECT: The purposes for which your personal data may be used include:

Account Management: Creating, verifying, and managing user accounts, including KYC checks.
Service Provision: Facilitating participation in online casino games, processing wagers, and managing transactions.
Customer Support: Responding to inquiries, handling complaints, and providing technical support.
Service Improvement: Enhancing the functionality, performance, and security of river-belle-nz.com through analytics and user feedback.
Marketing & Personalization: Sending promotional messages (with consent), offering bonuses, and tailoring user experiences.
Fraud Prevention & Security: Detecting and mitigating fraudulent or suspicious activities, ensuring regulatory compliance.
Legal & Regulatory Compliance: Meeting obligations under NZ and international laws, including reporting and record-keeping.

Disclosure & Sharing

OBSERVE: Data may be disclosed to third parties only when legally required or operationally necessary.
EXPAND: Recipients include payment processors, service providers, regulators, affiliates, and advertising networks (with user consent).
REFLECT: All sharing is governed by contractual and legal safeguards.

Payment Partners: Banks, credit card processors, and other payment service providers (for transaction processing and anti-fraud).
Service Providers: IT, hosting, analytics, and customer support companies under strict confidentiality agreements.
Regulators & Authorities: Malta Gaming Authority, Kahnawake Gaming Commission, and NZ regulatory bodies as required by law.
Affiliates & Group Companies: Other brands under the same parent company (e.g., Jackpot City, Spin Casino, Ruby Fortune) for internal administrative purposes.
Advertising Networks: Third parties for marketing, only with explicit user consent and in accordance with NZ law.

Legal Protection: All third parties are contractually obligated to protect your data and use it solely for specified purposes.

International Transfers

OBSERVE: Some data may be processed or stored outside New Zealand.
EXPAND: Transfers include entities in Malta, Canada (Kahnawake), and other jurisdictions where service providers operate.
REFLECT: Transfers are protected by robust legal mechanisms.

Countries/Regions: Malta (EU), Canada (Kahnawake), and other countries as necessary for technical or operational reasons.
Protective Guarantees: Standard Contractual Clauses (SCCs), contractual safeguards, and compliance with international frameworks (GDPR, ISO 27001).
Access Controls: Only authorized personnel and partners may access your data, subject to strict confidentiality obligations.

Regional Compliance Note: All international transfers comply with New Zealand's Privacy Act 2020 and relevant international standards for cross-border data protection.

Data Retention

OBSERVE: Data is retained only as long as necessary for its intended purpose.
EXPAND: Retention periods are based on legal, regulatory, and operational requirements.
REFLECT: river-belle-nz.com applies the following retention practices:

Personal Data (Account Information): Retained for the duration of account activity plus no more than 5 years after account closure, or as required by law for AML/KYC purposes.
Payment & Transaction Data: Maintained for 7 years in line with financial and anti-fraud regulations.
Behavioral & Technical Data: Retained for up to 2 years for analytics and service improvement, unless otherwise required for security monitoring.
Cookies & Tracking Data: Retention varies by cookie type (see Cookies section); session cookies are deleted upon logout, persistent cookies retained up to 2 years.

Deletion Criteria: Data is securely deleted or anonymized upon user request, account closure, or expiration of the relevant retention period, unless retention is mandated by law.

Your Rights

OBSERVE: Users have robust rights under NZ's Privacy Act 2020 and aligned international frameworks (GDPR).
EXPAND: These include access, correction, deletion, restriction, objection, portability, and withdrawal of consent.
REFLECT: The following rights are available to all users of river-belle-nz.com:

Right to Access: You may request confirmation whether your personal data is processed and obtain a copy of your data at no charge.
Right to Correction: You may request correction of inaccurate or incomplete data relating to you.
Right to Deletion ("Right to be Forgotten"): You may request deletion of your personal data when it is no longer required, except where retention is mandated by law.
Right to Restrict Processing: Processing may be restricted upon request in cases of dispute, inaccuracy, or pending verification.
Right to Object: You may object to processing for direct marketing or where processing is based on legitimate interests.
Right to Data Portability: You may request your data in a machine-readable format for transfer to another provider, where technically feasible.
Right to Withdraw Consent: Consent for marketing or optional services can be withdrawn at any time without penalty.

Exercising Rights: Submit requests via support@river-belle-nz.com. Response time is within 30 days, free of charge, subject to identity verification and any applicable legal exceptions.
Complaints: If unsatisfied, you have the right to complain to the NZ Privacy Commissioner or relevant EU authority.

Protective Clause: All rights are exercised in accordance with applicable NZ law and international privacy standards.

Cookies & Tracking Technologies

OBSERVE: river-belle-nz.com uses cookies and similar technologies for functionality, analytics, and advertising.
EXPAND: Users must be informed of categories, purposes, and management options.
REFLECT: The following types of cookies are employed:

Session Cookies: Temporary, essential for website functionality, deleted when you log out or close your browser.
Persistent Cookies: Remain on your device for up to 2 years to remember preferences and login details.
Third-Party Cookies: Deployed by analytics and advertising partners (e.g., Google Analytics), only activated with consent.

Functional Purposes: Enabling gameplay, secure logins, and user preference storage.
Analytics Purposes: Monitoring site usage and performance for service improvement.
Advertising Purposes: Delivering relevant promotions and campaigns, subject to user consent.

Cookie Management: You can manage or disable cookies via browser settings or internal account dashboard. Disabling essential cookies may impact site functionality.

Data Security

OBSERVE: Protecting personal data is a legal and operational priority for river-belle-nz.com.
EXPAND: NZ law and international standards require robust security measures for all personal and financial data.
REFLECT: The following security safeguards are implemented:

Encryption: TLS 1.2+ encryption for all data in transit; strong encryption protocols for data at rest.
Authentication & Access Controls: Multi-factor authentication required for staff and critical systems access; strict role-based permissions.
Physical & Logical Security: Secure server facilities, intrusion detection, and firewalls.
Audits & Monitoring: Regular third-party security audits, penetration testing, and continuous monitoring of systems for vulnerabilities.
Staff Training: Mandatory training on data protection, privacy, and incident response for all relevant personnel.
Incident Response: Documented procedures for responding to data breaches, including user notification and regulatory reporting within statutory timeframes.
International Standards: Alignment with ISO 27001 and SOC 2 certification requirements where applicable.

Protective Clause: Despite best efforts, no system is immune to risk; river-belle-nz.com maintains comprehensive insurance and response plans for incident mitigation.

Complaints & Contacts

OBSERVE: Users must have clear channels for raising privacy concerns.
EXPAND: Complaint procedures include direct contact, escalation options, and regulatory recourse.
REFLECT: The following steps apply:

Initial Contact: Email our Data Protection Officer at support@river-belle-nz.com (Attention: Sophie Williams). Please outline your concern and provide identifying details.
Submission Methods: Use the supplied email address. If a contact form is available on river-belle-nz.com, you may also submit there.
Response Timeframe: All complaints will be acknowledged within 5 business days, with a substantive response provided within 30 days.
Escalation: If unsatisfied, escalate your complaint to the New Zealand Privacy Commissioner (privacy.org.nz, Phone: +64 4 474 7590) or, if applicable, to the Malta Data Protection Authority or Kahnawake regulatory body.

Mailing Address: Villa Seminia, 8, Sir Temi Zammit Avenue, Ta' Xbiex XBX1011, Malta

Protective Clause: All complaints are handled confidentially and in accordance with NZ and international legal standards.

Updates

OBSERVE: Policy changes must be communicated transparently.
EXPAND: Notification methods must ensure users are informed and can exercise their rights.
REFLECT: river-belle-nz.com will ensure all users are promptly notified of material changes.

Notification Methods: Email notifications, website banners, and account dashboard alerts will be used to inform users of material policy updates.
Advance Notice: For significant changes, at least 30 days' advance notice will be provided before changes take effect.
User Options: Users may object to changes or close their account if they disagree with updated terms.
Version Control: This policy is versioned; "Last updated: 6 November 2025". Material changes will be summarized in a changelog at the end of this document or on the website.

Changelog: Material updates since previous version include expanded data rights explanations, updates to security standards, and additional NZ regulatory references.