Privacy Policy
This Privacy Policy outlines how Rootz LTD, acting as the data controller, collects, uses, stores, and protects your personal information. We are committed to protecting your privacy and processing your data in full compliance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). This document explains our practices for all our applications, software, websites, APIs, products, and services (collectively, the “Services”)..
Why We Collect Personal Information
We process your personal information strictly for lawful purposes and only collect what is necessary to deliver our Services to you effectively and securely. The collection of your data is based on contractual necessity, legal obligations, legitimate business interests, and your consent for specific activities like marketing.
- To Fulfill Our Contract with You: When you create an account, you enter into a contract with us as defined in our Terms and Conditions. To honour this contract, we must process your personal information to create and manage your account, process your transactions and bets, manage rewards, and provide you with access to our games.
- To Comply with Legal and Regulatory Obligations: As a gaming operator, we are subject to strict legal frameworks, including the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act) and responsible gaming regulations. This requires us to perform age and identity verification, conduct due diligence, monitor transactions to prevent fraud, and manage self-exclusion registers.
- For Our Legitimate Interests: We collect a limited amount of technical data from all website visitors to understand user trends, improve our website functionality, diagnose technical problems, and ensure the security and integrity of our platform. This helps us protect our Services from abuse and provide a smooth, secure user experience for everyone.
The Information We Collect and Its Sources
The majority of the information we hold is provided directly by you. However, to fulfill our legal obligations and ensure the security of our platform, we also collect information automatically and from trusted third-party sources. This comprehensive approach allows us to maintain a safe and compliant gaming environment.
Information You Provide Directly
This category includes data you actively submit when you register for an account, use our Services, or communicate with us.
- Account and Identity Information: To create an account, you must provide essential details such as your full name, address, email, date of birth, gender, and phone number. To comply with our legal obligations, we also require information about your occupation and may ask for documentary evidence, such as a government-issued ID or proof of address, to verify your identity.
- Financial Information: To process deposits and withdrawals, you must provide payment details, such as credit or debit card numbers or information for other online payment methods. This data is encrypted and handled by secure payment processors.
- Communications: If you contact our customer support team or participate in a survey or promotion, we collect the information you submit, including your name, contact details, and the content of your message.
Information We Collect Automatically
When you access our Services, we receive certain data from your devices to ensure our platform is functioning correctly and securely.
- Usage and Device Data: We collect information about your interactions with the Services, such as games played, bonuses claimed, login times, and account activity. We also log technical data, including your IP address, browser type, operating system, and cookie information, to troubleshoot issues and protect against fraudulent activity.
- Location Information: We may derive your approximate location from your IP address. This helps us ensure we are providing services in compliance with jurisdictional regulations and allows us to personalise certain aspects of the Service.
How We Use Your Information
The information we collect is used to deliver, maintain, and enhance the Services you use. This includes personalising your experience, ensuring the security of your account, and fulfilling our strict regulatory duties.
- Service Delivery and Maintenance: We use your information to operate your account, process payments, provide customer support, and deliver the core functionalities of our platform, such as game access and loyalty programs.
- Service Improvement and Personalisation: By analysing usage data, we can troubleshoot errors, conduct testing, develop new features, and personalise your experience. For example, we may recommend games based on your previous activity or tailor promotions that are relevant to you.
- Regulatory Compliance: We employ automated systems to monitor player behaviour and transactions. This is essential for detecting and preventing fraud, money laundering, and other illicit activities, as well as for identifying patterns that may indicate problem gambling, allowing our responsible gaming team to intervene when necessary.
- Communications: We use your contact information to send important service notifications and to respond to your inquiries. As mentioned, marketing communications are sent only with your consent, and you can opt out at any time via your account settings or the “Unsubscribe” link in our emails.
How Information Is Shared
We do not sell your personal information to third parties. We only share your data in specific circumstances with trusted partners who help us operate our Services or when legally required to do so. All sharing is conducted securely and in compliance with strict data protection standards.
With Third-Party Service Providers
We engage various third-party companies to perform essential functions on our behalf. These partners are contractually bound to protect your data and only process it according to our instructions.
- Game and Payment Providers: To offer a full suite of games and payment options, we must share necessary data with our game suppliers and payment processors.
- Analytics and Security Partners: We work with partners who provide analytics, advertising, and security services. This helps us understand user interaction, measure marketing performance, and protect our platform from threats.
- Identity Verification Services: We share information with external firms to conduct the necessary AML and fraud prevention checks.
For Legal Reasons and to Prevent Harm
We are obliged to disclose personal data to third parties if such disclosure is necessary for legal or security purposes. This includes preventing or detecting criminal offences, complying with court orders or other legal processes, protecting our rights and property, and ensuring the personal safety of our users. Our policy is to notify you of any legal process seeking access to your information unless we are legally prohibited from doing so.
Your Rights and Control Over Your Information
Under the New Zealand Privacy Act 2020, you have rights to access and control your personal data. We provide tools within your account settings to manage your information and are committed to facilitating your requests to exercise these rights.
- Right to Access Information: You have the right to request access to the personal information we hold about you. You can access much of this data directly by logging into your account. For a comprehensive copy, please contact our support team.
- Right to Request Correction: If you believe any information we hold about you is incorrect, you have the right to request its correction. You can update most of your profile details directly in your account settings. For other corrections, please contact us.
- Right to Request Deletion: You may request the deletion of your account and personal information. Please note that while we recognise this right, we are legally required by AML/CFT regulations to retain certain data for a minimum of five years after the closure of an account. This retention period is necessary for the prevention, detection, and investigation of financial crimes.
Data Security and Retention
We are dedicated to keeping your data safe and have implemented robust technical, physical, and administrative procedures to protect your personal information from unauthorised access, improper use, or accidental loss. We also adhere to strict data retention policies to ensure we do not hold your information for longer than necessary.
Information Security Measures
Our security policies and technical measures are designed to protect the personal information under our control. All our employees and third-party processors are obliged to respect the confidentiality of your data. We use encryption, access controls, firewalls, and regular security audits to safeguard our systems.
Data Retention Periods
We retain your account information for as long as your account is active. Upon account closure, we are required by law to retain transactional and customer due diligence data for a period of at least five years. This period may be extended if required by law enforcement or regulatory bodies for investigative purposes. All other information that is no longer needed is securely deleted.
International Data Transfers
The Wildz brand is operated by Rootz LTD, a company based in Malta. As such, your information is processed primarily within the European Economic Area (EEA). When we transfer data to service providers located outside of the EEA or New Zealand, we ensure that the transfer is lawful and that your information is protected by appropriate safeguards, such as EU Commission-approved model contractual clauses.