Privacy Policy

Categories of information we collect

When you register we gather identification details such as your full name, date of birth, residential address, email, telephone number, and a copy of a government-issued document used for the Know Your Customer review.

Throughout your activity we record gameplay logs, deposit and withdrawal history, login timestamps, device fingerprints, IP addresses, and browser characteristics to maintain account integrity.

Correspondence exchanged with our support team, including live chat transcripts and email threads, is stored to assist future enquiries and to demonstrate compliance with regulatory obligations.

Purposes for which we process your data

Personal information enables us to open and maintain your account, validate eligibility under AGCC licence 155 C1, process payments, and deliver the games and bonuses you have selected.

Behavioural data feeds our anti-fraud engine, supports anti-money-laundering checks, and helps us detect collusion or bot activity that could undermine fair play for the wider community.

Where you have given explicit consent, we may send you tailored promotional material, newsletters, or invitations to loyalty programmes. Consent can be withdrawn at any moment in your account preferences.

Sharing with third parties

Selected service providers — including payment processors, identity verification bureaus, and cloud infrastructure vendors — may receive the minimum data required to fulfil their function under written contractual safeguards.

We disclose information to the Alderney Gambling Control Commission, tax authorities, or law enforcement bodies when a binding legal request is received or when disclosure is necessary to prevent serious harm.

Kiwi Treasure Casino does not sell or rent personal information to advertising networks or data brokers, and we never trade your details for commercial gain.

Storage, retention, and security measures

Records are kept for the duration of the customer relationship and for a further period of up to seven years after closure, in line with anti-money-laundering legislation and accounting standards applicable to licensed operators.

Our servers are hosted in certified European data centres protected by 256-bit TLS transmission encryption, encrypted databases at rest, role-based access controls, and continuous intrusion monitoring.

Your rights and how to exercise them

You may at any time request a copy of the data we hold about you, ask for inaccuracies to be corrected, restrict certain processing operations, or demand erasure where no overriding legal obligation applies.

To exercise these rights please contact our Data Protection Officer using the channels listed below. We will respond within 30 calendar days and may request additional proof of identity before disclosing any record.