Privacy Policy with Clear Rules on Data Collection and Player Rights

Overview

Wishmaker Casino collects only the personal information needed to open an account, process payments, meet Curaçao eGaming licensing obligations and keep the site secure. This policy sets out what is collected, how it's used, and the choices available to New Zealand players over their own data.

What Data We Collect

The table below groups the categories of personal data collected during registration, play and payment, along with how long each is retained.

Cookies and Tracking Technologies

Cookies keep a player logged in between page loads, remember display preferences and help measure which pages are actually useful. Essential cookies can't be disabled without breaking core site functions, while analytics and marketing cookies can be limited through a browser's own privacy settings; doing so may affect how well the site personalises content.

Affiliate and Marketing Attribution

When a player arrives via a marketing partner's link, a short-lived tracking cookie records which partner referred the sign-up so commission can be calculated correctly. This tracking identifies the referral source only, not the individual beyond what's already collected during registration, and no personal data is sold to third parties for their own marketing use.

How Data Is Shared

Personal data is shared only with parties directly involved in running the service: payment processors handling a transaction, identity verification providers confirming an age or address check, and regulators where the Curaçao eGaming licence requires disclosure. No data is sold to unrelated third parties for independent marketing purposes.

Your Rights Over Your Data

Players can request access to, correction of, or deletion of their personal data at any time, subject to information Wishmaker Casino is legally required to retain for licensing or anti-money-laundering purposes.

• Right to access: Request a copy of the personal data held on your account.
• Right to correction: Ask for inaccurate registration details to be updated.
• Right to deletion: Request account data be erased once legal retention periods have passed.
• Right to opt out: Unsubscribe from marketing emails at any time without affecting account access.

Data Storage and Security

Personal and payment data is encrypted both in transit and at rest, and access within Wishmaker Casino is limited to staff who need it to perform a specific task such as processing a withdrawal or reviewing a verification document. Servers are hosted with providers that maintain independent security certifications, and access logs are reviewed periodically to catch unusual activity early.

In the event of a data breach affecting personal information, affected players are notified without undue delay once the scope of the incident is understood, alongside any regulator notification required under the Curaçao eGaming licence.

International Data Transfers

Because payment processors and identity verification providers operate internationally, personal data may be processed outside New Zealand. Any such transfer is covered by a data processing agreement requiring the receiving party to apply protections equivalent to those described in this policy, regardless of which country actually stores the data.

Changes to This Policy

This policy is updated whenever a payment provider, marketing partner or legal requirement changes in a way that affects how data is handled. The "Last updated" date at the top of this page reflects the most recent revision, and material changes affecting how personal data is used are communicated to registered players by email ahead of taking effect.

Contact Us About Privacy

Questions about this policy or a specific data request can be sent directly to the address below, and the team will confirm receipt within a few business days.