Privacy Policy

Mr Fortune Casino — mrfortune-casino-nz.org.

Effective Date: 27 May 2025.

Last Updated: 27 May 2025.

1. Introduction

Welcome to Mr Fortune Casino. We are committed to protecting the privacy and personal information of every player who visits or uses our platform. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access our website, create an account, or engage with any of our services — including pokies, table games, live casino, and promotions.

This policy applies to all users located in New Zealand and is written in compliance with the Privacy Act 2020 (New Zealand), which is the primary data protection legislation governing the collection and use of personal information in New Zealand. Where applicable, we also align our practices with international standards, including principles consistent with the General Data Protection Regulation (GDPR) of the European Union, as a benchmark for global best practice.

By registering an account or continuing to use our platform, you confirm that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the website immediately.

For any questions or concerns regarding your personal data, you may contact us at:

Email: [email protected].

2. Who We Are

Mr Fortune Casino operates the website mrfortune-casino-nz.org and provides online gaming services to players in New Zealand. We act as the data controller in respect of the personal information we collect from you — meaning we determine the purposes and means by which your data is processed.

Our operations are subject to oversight by relevant gambling authorities, including guidance consistent with the Department of Internal Affairs (DIA) and the Gambling Commission New Zealand, which set standards for responsible, lawful, and transparent operation of gambling services.

3. Information We Collect

We collect personal information from you in several ways, including directly from you, automatically through your use of our website, and from third parties where permitted by law.

3.1 Information You Provide Directly

Account registration details: Full name, date of birth, residential address, email address, phone number, and.
Identity verification documents: Passport, driver's licence, or other government-issued photo ID required under New Zealand's Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act).
Financial information: Payment details including bank account references for POLi transfers, Visa/Mastercard card details (partial, tokenised), Neosurf voucher codes, cryptocurrency wallet addresses, and bank transfer.
Responsible gambling declarations: Self-assessment answers, deposit limits you set, cooling-off requests, or self-exclusion.
Communications: Messages you send to our customer support team, feedback, complaints, and survey.

3.2 Information Collected Automatically

When you use our platform, we automatically collect certain technical and behavioural data, including:

IP address and approximate geographic.
Device type, operating system, and browser type.
Session data: login timestamps, pages visited, games played (including pokies sessions), bet amounts, and duration of play.
Cookie identifiers and similar tracking technologies (see Section 9).
Referral source — how you arrived at our.

3.3 Information from Third Parties

We may receive personal information about you from:

Payment processors who facilitate your NZD deposits and.
Identity verification providers who perform document and biometric.
Fraud detection and AML screening.
Responsible gambling registers such as self-exclusion databases maintained under New Zealand law.

4. How We Use Your Information

We use your personal information for the following purposes, each of which has a lawful basis under the Privacy Act 2020 and aligned international standards:

Purpose	Lawful Basis
Creating and managing your player account	Contract performance
Processing deposits and withdrawals in NZD	Contract performance
Verifying your identity and age (18+)	Legal obligation (AML/CFT Act)
Detecting and preventing fraud, money laundering, and cheating	Legal obligation / Legitimate interest
Providing customer support	Contract performance / Legitimate interest
Sending account-related communications (e.g. transaction confirmations)	Contract performance
Sending promotional offers and bonus communications (with consent)	Consent
Monitoring gameplay for responsible gambling indicators	Legal obligation / Legitimate interest
Improving our platform and personalising your experience	Legitimate interest
Complying with regulatory reporting requirements	Legal obligation
Enforcing our Terms and Conditions	Legitimate interest

We will not use your personal information for any purpose incompatible with those listed above without first notifying you and, where required, obtaining your consent.

5. Legal Obligations and Compliance

As an operator serving New Zealand players, we are required by law to collect and retain certain personal information. These obligations include:

Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act): We must verify the identity of all players, monitor transactions, and report suspicious activity to the relevant authorities.
Gambling Act 2003: We support the objectives of this Act in promoting responsible gambling and preventing harm.
Privacy Act 2020: We adhere to the thirteen Information Privacy Principles (IPPs) that govern how personal information must be collected, stored, used, and disclosed in New Zealand.

Your data may be disclosed to New Zealand government bodies, law enforcement agencies, or the courts where we are legally compelled to do so.

6. Sharing Your Information

We do not sell your personal information to third parties. We may share your data only in the following circumstances:

Service providers: Trusted third-party vendors who process payments (including POLi, Visa/Mastercard, Neosurf, crypto, and bank transfer providers), verify identities, host our platform, or provide analytics — all bound by strict data processing.
Regulatory authorities: The Department of Internal Affairs, the Gambling Commission New Zealand, financial intelligence units, or law enforcement, where required by law.
Responsible gambling organisations: Where a player has been flagged for problem gambling indicators, relevant information may be shared with services such as the Problem Gambling Foundation in accordance with applicable law.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy.
With your consent: In any other circumstance where you have explicitly agreed to the.

All third parties with whom we share data are contractually required to protect it in accordance with applicable privacy law.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy or as required by law. Specifically:

Account data is retained for the duration of your account plus seven (7) years after closure, in line with AML/CFT.
Financial transaction records are retained for a minimum of seven (7) years as required under New Zealand law.
Responsible gambling records are retained as required by regulatory.
Marketing preferences are retained until you withdraw consent or request.

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights Under the Privacy Act 2026

The Privacy Act 2020 grants you significant rights over your personal information. You have the right to:

Access your data: Request a copy of the personal information we hold about you.
Correct your data: Ask us to correct any information that is inaccurate, incomplete, or.
Complain: Lodge a complaint with us, and if unresolved, escalate to the Office of the Privacy Commissioner (OPC) of New.
Withdraw consent: Where processing is based on your consent (e.g. marketing emails), you may withdraw that consent at any time.
Object to processing: In certain circumstances, request that we restrict or cease processing your.

To exercise any of these rights, please contact us at [email protected]. We will respond within 20 working days, consistent with the timeframes specified in the Privacy Act 2020. We may ask you to verify your identity before fulfilling your request.

If you believe we have breached the Privacy Act 2020, you have the right to make a complaint to the Office of the Privacy Commissioner at privacy.org.nz.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyse site performance, and support responsible gambling monitoring.

Types of cookies we use:

Essential cookies: Necessary for the website to function, including maintaining your session while you play pokies or navigate account.
Analytical cookies: Help us understand how players use our platform, which features are most popular, and where improvements can be made.
Marketing cookies: Used (with your consent) to deliver relevant promotional offers and measure the effectiveness of our.
Fraud prevention cookies: Support our security systems in identifying suspicious.

You can manage your cookie preferences through our cookie consent tool or by adjusting your browser settings. Please note that disabling essential cookies may affect your ability to use core features of the platform.

10. Data Security

We take the security of your personal and financial information seriously. We implement a range of technical and organisational measures to protect your data, including:

SSL/TLS encryption for all data transmitted between your device and our.
Secure storage of payment information using tokenisation — we do not store full card.
Access controls ensuring only authorised staff can access personal data.
Regular security assessments and penetration.
Incident response procedures in the event of a data.

In the event of a data breach that poses a risk of serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required under the Privacy Act 2020.

11. International Data Transfers

Some of our third-party service providers may be located outside New Zealand. Where personal information is transferred internationally, we ensure that appropriate safeguards are in place, consistent with Information Privacy Principle 12 of the Privacy Act 2020. These safeguards may include contractual clauses requiring overseas recipients to apply equivalent privacy protections.

12. Responsible Gambling and Your Data

We are committed to promoting safe gambling for all New Zealand punters. As part of our responsible gambling programme, we may use your gameplay data — including pokies session frequency, deposit patterns, and time spent on the platform — to identify signs of problem gambling behaviour.

Where indicators of harm are detected, we may:

Display responsible gambling messages or prompts within your.
Temporarily restrict access to certain.
Contact you directly to offer support.

We encourage any player who feels their gambling may be causing harm to reach out to the Problem Gambling Foundation of New Zealand on 0800 664 262. This service is free, confidential, and available 24/7.

You may also set voluntary deposit limits, session time limits, or apply for self-exclusion at any time through your account settings or by contacting our support team.

13. Children and Minors

Our platform is strictly for players aged 18 years and over. We do not knowingly collect personal information from anyone under the age of 18. If we discover that we have inadvertently collected data from a minor, we will delete that information immediately and close the relevant account.

If you believe a minor has registered on our platform, please notify us at [email protected] without delay.

14. Marketing Communications

With your consent, we may send you promotional emails, bonus offers, and updates about new pokies and games. You can opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any marketing.
Updating your communication preferences in your account.
Contacting us at [email protected].

Opting out of marketing will not affect transactional communications necessary for the operation of your account.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will:

Post the updated policy on this page with a revised "Last Updated" date.
Notify registered players via email where the changes are.

We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal information, please contact us:

Email: [email protected].

Website: mrfortune-casino-nz.org.

We aim to respond to all privacy-related enquiries within 20 working days in accordance with the Privacy Act 2020.