Privacy Policy

Your personal information deserves careful handling, and this Privacy Policy sets out precisely how Lego Win Casino approaches the collection, storage, use, and protection of data belonging to visitors from New Zealand and beyond. As an independent publisher of casino reviews, pokie guides, bonus breakdowns, and payment method comparisons, we operate an informational resource rather than a gambling venue, and the data practices described here reflect that editorial character.

Everything in this document is written with the Privacy Act 2020 in mind, alongside the thirteen Information Privacy Principles that shape responsible data governance across Aotearoa. By continuing to browse our platform, you acknowledge that you have read this policy and understand the ways in which technical data, cookie identifiers, and any details you voluntarily submit may be processed. Should any section leave you with questions, the closing part of this page explains how to reach our privacy team directly.

The Scope of This Document and the Nature of Our Platform

This Privacy Policy applies to every page hosted on our domain, including editorial articles, comparison tables, bonus guides, and any interactive features we may introduce over time. It does not extend to third-party casino operators, payment providers, or software studios whose services we describe or link to. Those businesses maintain their own privacy documentation, and we encourage readers to review it before registering an account or transferring funds anywhere.

It is important to stress that we are a review and information portal only. We do not accept wagers, hold player balances, process deposits, or issue winnings. No gambling transactions occur on our servers, which means we never request banking credentials, card numbers, or wallet details from our readers. The financial relationship between you and any licensed operator you choose to join sits entirely outside our control and outside the reach of this policy.

Because our revenue model relies partly on affiliate partnerships, certain outbound links carry tracking parameters that allow partner casinos to recognise traffic originating from our content. This commercial arrangement is explained in greater depth further down the page, and it never involves the sale of your identifiable personal information to advertisers or brokers.

Categories of Data We Gather From Visitors

The overwhelming majority of information generated during a typical visit is technical and anonymous. Our hosting infrastructure automatically records server log entries containing your IP address, browser type and version, operating system, screen resolution, referring URL, the pages you viewed, and timestamps for each request. These records help us diagnose faults, defend against malicious traffic, and understand which guides resonate with New Zealand readers.

Personal information enters our systems only when you deliberately provide it. That typically happens when you email our support address, complete a form on our enquiry page, or subscribe to any newsletter feature we may offer. In those situations we receive whatever you choose to share, most commonly a name, an email address, and the substance of your message.

To keep the distinction between data types transparent, the table below summarises what we collect, why we collect it, and how long we ordinarily keep it:

We deliberately avoid collecting sensitive categories of information such as health records, financial account numbers, or government identifiers. If a reader inadvertently includes such material in a message to us, we delete it once the enquiry has been dealt with.

Cookies, Pixels, and Similar Browser Technologies

Like virtually every modern website, our platform places small text files known as cookies on your device. These files serve several distinct roles: session cookies keep the site functioning smoothly as you move between articles, analytics cookies help us measure which pokie reviews and banking guides attract the most attention, performance cookies flag slow-loading elements so we can fix them, and affiliate cookies record when a reader clicks through to a partner operator so that referrals are correctly attributed.

You retain full authority over these technologies. Every mainstream browser, whether on desktop or mobile, offers settings that let you inspect stored cookies, delete them individually or in bulk, and block future placement altogether. Independent educational resources such as All About Cookies provide step-by-step instructions for managing preferences across different browsers and devices.

A word of caution is warranted, however. Disabling all cookies may interfere with the ordinary operation of our pages, cause certain comparison tools to behave unpredictably, and prevent affiliate attribution from functioning. None of this stops you from reading our content, but the browsing experience may feel less polished. Readers who wish to limit interest-based advertising more broadly can also explore the opt-out mechanisms curated by the Digital Advertising Alliance, an industry body offering consumer choice tools.

We may additionally use tracking pixels or lightweight scripts supplied by analytics vendors. These operate under the same principles as cookies and are covered by the same browser-level controls described above.

How Collected Information Is Put to Work

Data that reaches us is applied to a narrow and predictable set of purposes. In practical terms, we use it to:

• Publish, maintain, and improve our casino reviews, slot guides, and payment method comparisons;
• Analyse aggregate traffic patterns so editorial resources are directed toward topics Kiwi readers actually search for;
• Detect, investigate, and block bots, scrapers, and other forms of abusive or fraudulent activity;
• Answer questions, feedback, and privacy-related requests submitted by our audience;
• Track affiliate referrals so partner operators can verify the origin of new sign-ups;
• Meet any record-keeping or disclosure obligations imposed on us by New Zealand law.

We do not build behavioural profiles of individual visitors, we do not engage in automated decision-making that produces legal effects, and we do not trade mailing lists or reader databases with outside marketers. Where statistics are shared with commercial partners, they appear only in aggregated, de-identified form that cannot reasonably be traced back to a single person.

Affiliate Relationships and Editorial Independence

Transparency about how this platform earns revenue is central to reader trust. When you click certain links leading to online casinos or related services, a tracking reference travels with you, and if you subsequently register or deposit with that operator, we may receive a commission. This arrangement costs you nothing extra and is standard practice across the international iGaming publishing sector.

Crucially, commission arrangements never dictate our editorial conclusions. Ratings, bonus assessments, and payout observations are produced by our review team according to consistent evaluation criteria, and an operator cannot purchase a favourable score or suppress criticism. Where a partnership exists, the presence of affiliate links does not alter the informational character of the surrounding content, and we remain free to highlight weaknesses in any brand we cover.

From a privacy standpoint, affiliate tracking involves pseudonymous click identifiers rather than your name or contact details. The operator receiving your visit learns only that the traffic came from our platform, not who you are, until you voluntarily create an account with them under their own terms.

Third Parties, Outbound Links, and What Lies Beyond Our Control

Our guides necessarily reference external destinations: licensed casino sites, e-wallet providers, game developers, regulatory bodies, and responsible gambling organisations. Once you leave our domain, this Privacy Policy ceases to apply. Each external website governs its own data collection, and their practices may differ substantially from ours. We accept no responsibility for the privacy standards, security measures, or content accuracy of any third-party resource, and we strongly recommend reviewing the relevant policies before submitting personal details anywhere else online.

We also rely on a small number of service providers to keep our platform running, including hosting companies, content delivery networks, and analytics processors. These vendors handle technical data strictly on our instructions and are contractually restrained from using it for their own independent purposes. Where a provider stores information outside New Zealand, we take reasonable steps to ensure the data enjoys protection comparable to that required under domestic legislation.

Your Entitlements Under New Zealand Privacy Law

The Privacy Act 2020 grants individuals meaningful control over information held about them, and we honour those entitlements without obstruction. As a reader of our platform, you may at any time:

1. Request confirmation of whether we hold personal information about you;
2. Ask for access to a copy of that information in a readily usable format;
3. Seek correction of details that are inaccurate, incomplete, or misleading;
4. Withdraw any consent previously given, for example by unsubscribing from communications;
5. Request deletion of correspondence records where no legal reason compels us to retain them;
6. Lodge a complaint about our handling of your data.

We aim to respond to access and correction requests promptly, and in any event within the timeframes contemplated by the Act. If you believe our response falls short, you are entitled to escalate the matter to the Office of the Privacy Commissioner, the independent authority that oversees privacy compliance throughout New Zealand and provides free guidance to individuals and agencies alike.

Our processing rests on lawful footings recognised by the Information Privacy Principles: your voluntary submission of details when contacting us, our legitimate interest in securing and improving the platform, and compliance with statutory duties where they arise. We collect nothing beyond what these purposes genuinely require.

Safeguards, Storage Periods, and Data Hygiene

Reasonable technical and organisational measures protect the information in our care. These include encrypted transmission via HTTPS across the entire site, firewall protection at the server level, access restrictions limiting internal data visibility to personnel who genuinely need it, and routine software patching to close known vulnerabilities. While no online system can promise absolute immunity from attack, we review our defences periodically and adjust them as threats evolve.

Retention follows the principle of necessity. Server logs are rotated and purged on a rolling schedule, analytics data expires according to the configuration noted in the table above, and enquiry correspondence is kept only as long as needed to resolve the matter and maintain a short reference archive. Once a retention period lapses, records are securely erased or irreversibly anonymised rather than left dormant on our systems.

In the unlikely event of a privacy breach creating a risk of serious harm, we will follow the notification procedures established under New Zealand law, informing affected individuals and the regulator as required.

Age Restrictions and Our Commitment to Responsible Content

Everything published on our platform concerns gambling, and gambling in New Zealand is an adults-only activity. Under the Gambling Act 2003 and the regulatory framework administered by the Department of Internal Affairs, the government body responsible for gambling oversight, most forms of wagering are restricted to persons aged 18 or over. Our reviews, bonus explanations, and pokie guides are written exclusively for readers who have reached that legal threshold.

We do not knowingly collect personal information from anyone under 18, and we do not direct any content, marketing, or design choices toward minors. As an informational publisher, we do not operate identity verification systems; that responsibility belongs to the licensed operators where accounts are actually opened. If a parent or guardian becomes aware that a minor has submitted details through our enquiry channels, we ask to be notified immediately so the information can be removed without delay.

Beyond age matters, we support New Zealand’s responsible gambling environment by encouraging readers to treat wagering as entertainment, set firm budgets, and seek help from local support services if play stops being enjoyable.

Revisions to This Policy

Privacy practices cannot stand still. Changes in legislation, new analytics tools, fresh affiliate arrangements, or feedback from our audience may all prompt amendments to this document. When revisions occur, the updated version will be published on this page together with a refreshed effective date, and materially significant changes may additionally be highlighted through a notice on the homepage.

Continued use of the platform after an update takes effect constitutes acceptance of the revised terms. We therefore suggest revisiting this page from time to time, particularly before submitting personal information through any of our communication channels.

Reaching Our Privacy Team

Questions about this Privacy Policy, requests to access or correct personal information, and any concerns about how your data has been handled are always welcome. The quickest route is usually an email to [email protected], where our team monitors privacy correspondence and aims to reply within a reasonable working timeframe. Alternatively, you can submit your query through our Contact page, which routes messages to the same team.

Readers who prefer to speak with someone directly can phone us on +64 9 887 4621 during ordinary New Zealand business hours. Written correspondence may be posted to Level 8, 139 Quay Street, Auckland 1010, New Zealand, and letters marked for the attention of the privacy officer will be prioritised accordingly. Whichever channel you choose, please include enough detail for us to identify the relevant records and verify that the request genuinely comes from you.