Privacy Policy
Who Is
Responsible for Your Data?
Wildz Casino NZ is operated by Rootz Limited, a company incorporated in Malta and licensed by the Malta Gaming Authority (MGA/B2C/394/2017). Rootz Limited acts as the data controller for all personal information collected through wildz-casinonz.com.
While Wildz operates under a Maltese licence and is subject to EU GDPR regulations, it also applies these privacy protections to all New Zealand players in line with the NZ Privacy Act 2020.
Rootz Limited
Malta
MGA/B2C/394/2017
EU GDPR + NZ Privacy Act 2020
Five Things
We Promise You
What Data
Do We Collect?
We collect data across four categories. Click each tab to see exactly what is collected and why.
Identity data is collected under two legal bases: contractual necessity (we cannot operate your account without it) and legal obligation (MGA licence conditions and AML regulations require us to verify who you are).
Legal obligation
AML compliance
How We Use
Cookies
Cookies are small text files stored on your device. Wildz NZ uses four types. You can manage non-essential cookies at any time via your browser settings or the cookie preferences panel on site.
Always On
Required for the site to function. Manages your login session, security tokens, and language preference. Cannot be disabled without breaking basic site functionality.
Optional
Remembers your preferences such as last game played, preferred currency display, and responsible gambling settings. Improves your experience without tracking across sites.
Optional
Aggregated, anonymised data about how players use the site — page load times, error rates, popular game categories. Used to improve performance and user experience. No individual identification.
Consent Only
Used only if you have given explicit consent. Tracks affiliate referral source to correctly attribute your registration for commission purposes. No cross-site behavioural advertising.
Six Rights
Every NZ Player Has
Under GDPR and the NZ Privacy Act 2020, you have the following rights regarding your personal data. To exercise any of them, email [email protected] — we respond within 30 days.
Request a complete copy of all personal data held about you. Delivered within 30 days in a readable format, free of charge.
Request correction of any inaccurate or incomplete personal data held in your account. Most profile data can be updated directly in Account Settings.
Request deletion of your personal data. Note that some data must be retained for up to 5–10 years due to legal obligations (AML, gambling regulations) — we will explain any exceptions clearly.
Request that we stop processing your data in certain ways while a dispute or investigation is ongoing, without requiring full deletion.
Receive your data in a structured, machine-readable format (CSV or JSON) so you can transfer it to another service. Available for data you have actively provided to us.
Object to processing based on legitimate interests or for direct marketing. Marketing objections are always honoured; other objections will be assessed case by case.
Send a request to [email protected] with your full name, registered email address, and a description of your request. We will acknowledge within 5 business days and respond fully within 30 days. Identity verification may be required before we action certain requests.
Who Else Sees
Your Data?
We share data only where legally required or where it is essential to operate the service. We never sell or rent data. Every third party is bound by data processing agreements.
| Recipient | Purpose | Data Shared | Legal Basis |
|---|---|---|---|
| Payment processors | Process deposits & withdrawals | Name, amount, payment method | Contract |
| KYC verification provider | Identity & age verification | Name, DOB, document images | Legal obligation |
| Malta Gaming Authority | Regulatory compliance audits | Transaction records, KYC files | Legal obligation |
| Game software providers | Deliver licensed game content | Session token (no personal data) | Contract |
| Fraud prevention services | Detect multi-accounting & fraud | IP address, device fingerprint | Legitimate interest |
| Email marketing platform | Send promotional emails | Email address, name, preferences | Consent (opt-in only) |
Privacy Questions
Answered
Can I request a copy of all data Wildz holds about me? +
Yes. Email [email protected] with your full name and registered email address, and request a Subject Access Request (SAR). We will verify your identity and provide a complete data export within 30 days. The export includes your account details, transaction history, game history, communications, and any KYC documents stored. There is no charge for this request.
Does Wildz sell my data to advertisers? +
No. Wildz does not sell, rent, or trade your personal data to any third party for advertising or commercial purposes. The only marketing-related sharing is passing your email address to our email platform so we can send you offers — and only if you have opted into marketing communications. You can withdraw this consent at any time.
How long does Wildz keep my data after I close my account? +
Retention periods depend on the type of data. Transaction records and KYC documents are retained for a minimum of 5 years post-closure as required by MGA licence conditions and EU AML regulations. AML suspicious activity reports are kept for 10 years. Gameplay data and preferences are deleted within 12 months of account closure. Marketing data is deleted within 30 days of account closure or opt-out, whichever comes first.
Is my data protected under New Zealand law? +
Wildz is incorporated in Malta and primarily operates under EU GDPR, which is one of the world’s strictest data protection frameworks. For NZ players, Wildz also applies the principles of the NZ Privacy Act 2020 — including the right to access and correct personal information. If you believe your privacy rights have been breached, you can contact the NZ Office of the Privacy Commissioner at privacy.org.nz or call 0800 803 909.
How do I stop receiving marketing emails from Wildz? +
Every Wildz marketing email contains an unsubscribe link in the footer — click it and you will be removed from all marketing lists within 5 business days. Alternatively, log in to your account, go to Settings, and turn off Marketing Communications. You can also email [email protected] to request immediate removal. Note that transactional emails (withdrawal confirmations, security alerts, KYC notices) cannot be disabled as they are required to operate your account.
What happens if Wildz has a data breach? +
In the event of a data breach that poses a risk to your rights, Wildz is obligated under GDPR to notify the Malta Data Protection Authority within 72 hours of discovery. If the breach is likely to result in a high risk to you personally, we will also notify you directly by email without undue delay. Notification will include: what data was affected, what we are doing to contain the breach, and what steps you can take to protect yourself.
