burger icon
Action Casino
Log In

Privacy Policy

This privacy policy explains how action-casino, operated exclusively via action-nz.com, collects, uses, shares, and protects your personal information. It applies to all players and visitors accessing services on action-nz.com. The effective date of this policy is November 6, 2025. Protecting your privacy and ensuring compliance with New Zealand law and international industry standards are core commitments of action-casino.

Who We Are

OBSERVE: action-casino operates through action-nz.com, under the parent company Fresh Horizons Limited, with regulatory oversight by the Kahnawake Gaming Commission (KGC).
EXPAND: Although the legal address and company registration number are not publicly specified, all legal, compliance, and privacy matters are managed through the main support channels and the responsible Data Protection Officer (DPO).
REFLECT: This ensures clear identification of the operator and easy access to privacy contacts.

  • Operator: Fresh Horizons Limited (trading as "action-casino" for the NZ market via action-nz.com)
  • Licensing: Kahnawake Gaming Commission (KGC) online gaming license, valid as of 2025
  • eCOGRA Certification: Valid as of 2025 for fairness and operational compliance
  • Contact Person (DPO): Matiu Rangi
    Email: [email protected]
    Website: https://action-nz.com
    Live Chat: https://action-nz.com/livechat
  • Registered Address & Company Number: Not publicly specified; available upon written request to the DPO.

What Personal Data We Collect

OBSERVE: To provide regulated gambling services, action-casino collects a range of personal and technical data.
EXPAND: Data is collected directly from users during registration, gameplay, transactions, and through automated tracking technologies.
REFLECT: Comprehensive data categories enable legal compliance, service delivery, and player protection.

  • Personal Identification Data: Full name, date of birth, residential address, email address, phone number, and identity documentation for Know Your Customer (KYC) verification.
  • Technical Data: IP address, browser/device information, session logs, access times, geolocation data, and device identifiers.
  • Payment Data: Bank account details, credit/debit card information, e-wallet identifiers, transaction history, and withdrawal/deposit records.
  • Behavioral Data: Betting and gaming history, transaction patterns, clickstream data, and site usage analytics.
  • Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party cookies, beacons, and similar technologies (detailed below).

Legal Basis for Processing

OBSERVE: All data processing by action-casino complies with applicable New Zealand privacy laws, KGC requirements, and international best practices.
EXPAND: Legal bases are determined by the purpose and context of the processing activity.
REFLECT: These legal grounds ensure lawful, fair, and transparent data processing.

  1. User Consent: Explicit consent is obtained for direct marketing communications and optional data processing activities. Users may withdraw consent at any time.
  2. Contract Fulfillment: Processing is necessary to establish, manage, and operate user accounts, process payments, and provide gaming services in accordance with the Terms and Conditions.
  3. Legitimate Interests: Data is processed for legitimate business needs such as fraud prevention, security monitoring, service improvement, and analytics, provided these interests do not override user rights.
  4. Legal Obligations: Compliance with statutory duties including anti-money laundering (AML), KYC, responsible gambling measures, and regulatory reporting as required by NZ law and KGC licensing.

Purpose of Processing

OBSERVE: The use of personal data is strictly limited to purposes necessary for lawful operation and enhanced user experience.
EXPAND: Each processing activity is aligned with clear, legitimate objectives.
REFLECT: Purposes are communicated transparently for user awareness and trust.

  • Service Provision: To create, manage, and operate gaming accounts on action-nz.com, and deliver online gambling services.
  • Customer Support: To address player inquiries, resolve complaints, and provide technical assistance.
  • Regulatory Compliance: To fulfill KYC, AML, and responsible gambling obligations.
  • Marketing & Promotions: To send marketing communications and promotional offers, subject to user consent.
  • Analytics & Service Improvement: To analyze player behavior, improve site functionality, and enhance user experience.
  • Fraud Prevention & Security: To monitor for suspicious activity, enforce security protocols, and protect user accounts.

Disclosure & Sharing

OBSERVE: action-casino discloses personal data only where necessary for lawful business operations and regulatory compliance.
EXPAND: Data sharing is strictly controlled, with protective measures in place.
REFLECT: Users are informed of all potential recipients and disclosure scenarios.

  • Payment Processors & Banking Partners: For processing deposits, withdrawals, and payment verification.
  • Technical Service Providers: IT hosting, customer support, analytics, and security solution providers under strict confidentiality agreements.
  • Regulatory Authorities: Kahnawake Gaming Commission, NZ authorities, and other regulators as required by law.
  • Affiliates & Advertising Networks: Only with explicit user consent, for marketing and promotional activities.
  • Professional Advisors: Auditors, legal counsel, and consultants for compliance and dispute resolution.
  • Legal & Safety Obligations: Where disclosure is required to protect legal rights, prevent harm, or comply with judicial proceedings.

International Transfers

OBSERVE: Personal data may be transferred to jurisdictions outside New Zealand, including Canada (Kahnawake), and possibly other countries where service providers are located.
EXPAND: All cross-border data transfers are subject to stringent safeguards.
REFLECT: action-casino applies industry-standard protection mechanisms to ensure adequate data protection.

  • Destination Regions: Canada (Kahnawake for regulatory oversight), European Union (EU), and other countries as necessary for technical operations.
  • Protection Measures: Standard Contractual Clauses (SCCs), binding corporate rules, and contractual obligations to maintain data confidentiality and security.
  • Third-Party Compliance: All external partners must adhere to equivalent data protection standards and undergo regular compliance checks.
  • User Rights: Users may request further information about international data transfers and safeguards by contacting the DPO.

Regional Compliance Note: All transfers comply with New Zealand Privacy Act 2020 and KGC guidance, providing protections equivalent to NZ standards.

Data Retention

OBSERVE: action-casino retains personal data only as long as necessary for legal, business, or regulatory purposes.
EXPAND: Retention periods are determined by category and statutory obligations.
REFLECT: Data is securely deleted or anonymized upon expiry of retention periods or upon valid user request.

  • Account Data: Retained for the duration of the user's active account and up to 5 years after account closure for legal and regulatory compliance.
  • KYC & AML Records: Retained for a minimum of 5 years post-account closure, as mandated by law.
  • Transaction Data: Retained for 7 years to fulfill tax, audit, and anti-fraud requirements.
  • Marketing Preferences: Retained until consent is withdrawn or the data is no longer necessary.
  • Deletion Criteria: Data is deleted upon user request (subject to legal exceptions), expiry of statutory retention periods, or end of processing purpose.

Your Rights

OBSERVE: Users of action-nz.com are entitled to robust privacy rights under the NZ Privacy Act 2020 and aligned with international standards such as the GDPR.
EXPAND: All rights are supported by clear procedures and protective clauses.
REFLECT: These rights are exercised free of charge, typically within 30 days.

  1. Right of Access: You may request confirmation of whether your personal data is held and obtain a copy of that data in a structured format.
  2. Right to Correction: You may request correction of inaccurate or incomplete personal data held by action-casino.
  3. Right to Deletion ("Right to be Forgotten"): You may request deletion of your data when it is no longer required or if processing is unlawful, subject to legal retention requirements.
  4. Right to Restrict Processing: You may request suspension of processing in specific circumstances (e.g., contesting accuracy or objecting to processing).
  5. Right to Object: You may object to processing based on legitimate interests, including direct marketing.
  6. Right to Data Portability: You may receive your personal data in a portable format and request transfer to another provider.
  7. Right to Withdraw Consent: You may withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.
  8. Exercising Your Rights: Submit requests via [email protected] or the live chat form. Written requests are processed within 30 days.
  9. Complaints: If unsatisfied with our response, you may complain to the NZ Office of the Privacy Commissioner: www.privacy.org.nz.

Legal Obligation: action-casino guarantees no charges for exercising these rights and will provide a written response within the statutory period.

Regional Compliance Note: This section is aligned with the NZ Privacy Act 2020 and incorporates relevant GDPR principles for enhanced user protection.

Cookies & Tracking Technologies

OBSERVE: action-casino uses cookies and similar technologies to ensure secure, efficient, and user-friendly operation of action-nz.com.
EXPAND: Each cookie type serves a distinct purpose and is managed according to best practices.
REFLECT: Users are empowered to manage cookie preferences at any time.

  • Session Cookies: Essential for authentication and maintaining secure sessions during your visit; deleted upon browser closure.
  • Persistent Cookies: Remain on your device to remember preferences and enhance repeat visits.
  • Third-Party Cookies: Set by analytics and advertising partners to measure performance and deliver targeted ads (only with consent).
  • Cookie Management: You can manage or disable cookies via your browser settings or through the internal cookie management panel on action-nz.com.

Data Security

OBSERVE: Protecting your personal information is a paramount obligation of action-casino.
EXPAND: Multiple, state-of-the-art measures are implemented to safeguard data confidentiality, integrity, and availability.
REFLECT: Ongoing assessments and compliance with international standards underpin our security framework.

  • Encryption: All data in transit is protected using TLS 1.2+ encryption; sensitive data at rest is securely encrypted using industry-standard algorithms.
  • Access Controls: Strict authentication and multi-factor authentication (MFA) protocols limit data access to authorized personnel only.
  • Security Audits: Regular internal and external audits, including eCOGRA certification and compliance with ISO 27001 and SOC 2 standards.
  • Staff Training: Mandatory privacy and security training for all staff, with regular refreshers and role-based access reviews.
  • Incident Response: Documented procedures to detect, respond to, and notify affected users of any data breaches in accordance with NZ law.

Legal Obligation: action-casino reviews and updates its security measures at least annually or following any significant regulatory or technological change.

Complaints & Contacts

OBSERVE: action-casino provides multiple channels for privacy complaints and inquiries.
EXPAND: Clear procedures and escalation paths facilitate prompt, transparent resolution.
REFLECT: Users are empowered to seek redress both internally and through independent authorities.

  1. Initial Contact: Submit complaints or inquiries regarding privacy via email ([email protected]), live chat (https://action-nz.com/livechat), or the online feedback forms on action-nz.com.
  2. Complaint Procedure:
    • Submit your complaint, including relevant details and supporting documentation.
    • Receive written acknowledgment within 5 business days.
    • Formal investigation and resolution within 30 days.
    • Receive a detailed written response with outcomes and, where applicable, remedial actions.
  3. Escalation to Supervisory Authorities:
    • If unsatisfied, escalate to the NZ Office of the Privacy Commissioner: Contact Form
    • International players may also contact the Kahnawake Gaming Commission or other relevant regulators as appropriate.

Legal Obligation: action-casino is committed to resolving all complaints transparently and in accordance with NZ privacy law.

Updates

OBSERVE: action-casino periodically reviews this privacy policy to reflect legal, regulatory, or operational changes.
EXPAND: Users are notified in advance of any material changes.
REFLECT: Transparent update procedures promote user trust and ongoing compliance.

  • Notification Methods: Significant updates are communicated via email, website banners, and account dashboard alerts at least 30 days in advance.
  • Version Control: This privacy policy is versioned and dated ("Last updated: November 6, 2025"). A changelog of material changes is maintained for user reference.
  • User Options: Users may object to changes or request account closure without penalty before updated terms take effect.

Legal Obligation: Continued use of action-nz.com after updates constitutes acceptance of the revised policy.

Last updated: November 6, 2025