1. Introduction

At Thrillmoments, we are committed to safeguarding the privacy of our guests and website visitors. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data. By accessing our website or using our services, you consent to the practices described in this policy.

2. Information We Collect

We collect information to provide better entertainment experiences and to ensure the security of our casino and hotel operations. The categories of data include:

  • Personal identification: name, date of birth, government-issued ID, passport number.
  • Contact details: email address, phone number, postal address.
  • Financial data: payment card details, bank account information, transaction history.
  • Technical data: IP address, browser type, device identifiers, cookies.
  • Usage data: pages visited, time spent, gaming preferences, event bookings.

3. How We Use Your Data

Your personal data is used for the following purposes:

  • To process your hotel reservations, event bookings, and gaming transactions.
  • To verify your identity and comply with legal and regulatory obligations, including age verification (18+).
  • To personalise your experience and improve our website, suites, and entertainment offerings.
  • To communicate with you about promotions, news, and upcoming events, if you have opted in.
  • To detect, prevent, and investigate fraud, money laundering, or illegal activities.

4. Legal Basis for Processing (GDPR)

We rely on several legal bases to process your personal data, including your consent, the performance of a contract, compliance with a legal obligation, and our legitimate interests in managing and growing our business. We always ensure that your rights are respected and that any processing is proportionate and transparent. You may withdraw your consent at any time by contacting us.

5. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable New Zealand privacy laws, you have the right to:

  • Access a copy of the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data where there is no compelling legal basis for retention.
  • Object to processing based on legitimate interests or direct marketing.
  • Request portability of your data to another service provider.
  • Lodge a complaint with a supervisory authority if you believe your rights have been infringed.

To exercise any of these rights, please write to our Data Protection Officer at {{ EMAIL }}. We will respond within 30 days.

6. Data Retention & Security

We retain your personal data only for as long as necessary to fulfil the purposes outlined above, comply with legal obligations, and protect our legal interests. For example, financial records are kept for 7 years as required by New Zealand tax law. We implement industry-standard security measures, including encryption, access controls, and continuous monitoring, to protect your data from unauthorised access, alteration, disclosure, or destruction. Third-party partners who process data on our behalf are subject to strict contractual agreements.