Privacy policy for New Zealand

Who is responsible for the data

JackBit is responsible for personal data gathered through this website and through JackBit accounts. We handle data in line with the conditions of our Curaçao Gaming Authority licence and with the data protection laws that apply to the players we serve, which for people living here can include New Zealand privacy law. Privacy questions can go to the support email in our site footer with the subject "Privacy", and the request is passed to the team that looks after data protection.

What data we collect

We only collect what we need to run accounts, process payments, meet our legal obligations and keep the platform secure. Depending on how the site is used, that may include:

• Account data: username, email address, mobile number, password (stored hashed), preferred language and account settings, or your Google account details if you sign up through Google.
• Verification data: when we ask for it, name, date of birth, address, identity documents, proof of address and details of the source of funds.
• Transaction data: deposits, withdrawals, wallet addresses, transaction hashes, the coins and networks used, and card purchases of crypto made through the cashier, including the NZD amount charged.
• Gaming data: bets, game rounds, outcomes, bonuses, rakeback points and VIP tier.
• Technical data: IP address, device and browser type, operating system, an approximate location based on the IP address, and log data about visits.
• Communication data: messages sent through live chat, email and other support channels.

We never ask for wallet private keys or seed phrases, and our staff will not request them under any circumstances.

Why we use the data

Purpose	Examples
Running the account	Setting up the account, signing in, showing balance and history, applying bonuses and rakeback
Handling payments	Crediting deposits, sending withdrawals, linking transactions to the right account
Legal and licence obligations	Age checks, anti-money laundering checks, fraud prevention, record keeping, checks on restricted territories
Responsible gambling	Applying limits, breaks and self-exclusion, spotting signs of harm
Security	Picking up unusual logins, guarding against account takeover and abuse
Support	Answering questions and resolving complaints
Improving the service	Learning how features are used so the site can be quicker and clearer
Marketing	Sending promotion news to players who have agreed to receive it

We rely on these grounds for processing: performing our contract with the player, meeting legal and licence obligations, our legitimate interest in running a safe and efficient service, and consent where it is required, for example for marketing messages.

Cookies and similar technology

This website only uses the storage it needs to function, such as remembering that you closed the offer bar at the bottom of the page during your visit. That choice is held in the browser's session storage and is cleared when the tab closes. The casino platform itself uses cookies to keep players signed in, remember language settings and protect accounts from fraud. Cookies can be blocked or deleted in the browser at any time, although blocking essential cookies may stop the account area working properly.

Who we share data with

We do not sell personal data. It is shared only where needed to deliver the service or where the law demands it:

• Game studios and sportsbook providers, which receive the data needed to run games and settle bets, such as an account identifier and bet details.
• Payment and on-ramp providers, which process card purchases of crypto and may carry out their own checks.
• Verification and fraud prevention services, which help confirm identity and flag suspicious activity.
• Hosting, support and communication providers, which run our infrastructure, live chat and email under contracts that protect the data.
• Regulators, law enforcement and courts, where disclosure is required by law or by our licence.

Some of these providers are based outside New Zealand. When data travels across borders, we use contractual and technical safeguards to protect it.

A note on blockchain data

Crypto deposits and withdrawals are written to public blockchains. Wallet addresses and transaction amounts on a blockchain can be seen by anyone, and neither JackBit nor anyone else can change or erase them. We never publish a link between a wallet address and a player's identity, but players should know that blockchain records are public by design.

How long we keep data

We keep personal data while the account is open and for a period after it closes so we can meet legal, licence and anti-money laundering requirements, which commonly mean holding transaction and verification records for several years after an account ends. Self-exclusion records are kept for as long as they are needed to enforce the exclusion. Marketing preferences are kept until they are changed. When data is no longer required, it is deleted or anonymised.

How we protect data

Data moves over encrypted SSL connections. Passwords are stored hashed, access to personal data is limited to staff whose role requires it, and verification documents are stored separately with tight access controls. No system is entirely safe from attack, so we also ask players to use a strong, unique password and to keep their email account secure.

Rights over personal data

Depending on the law that applies where the player lives, these rights may be available:

• The right to see a copy of the personal data we hold.
• The right to have wrong or incomplete data corrected.
• The right to ask for data to be deleted, where we are not obliged to keep it.
• The right to limit or object to some processing, including direct marketing.
• The right to receive data in a portable format.
• The right to withdraw consent at any time where processing relies on consent.
• The right to complain to a data protection authority, which for New Zealand residents is the Privacy Commissioner.

Requests can be sent to the support email in our site footer. We may ask for proof of identity before acting, so that data is only released to the account holder. We aim to reply within one month.

Marketing messages

Promotional emails and messages only go to players who have agreed to receive them. Each one includes a way to unsubscribe, and marketing preferences can also be changed through support. Self-excluded players receive no marketing of any kind.

Children

JackBit is for adults aged 18 and over. We do not knowingly collect data from anyone younger than 18. If we find that an account belongs to a minor, it is closed and the related data is handled in line with our legal obligations.

Changes to this policy

We may update this policy to reflect changes to our services or to the law. The current version is always published on this page, and significant changes are announced on the site or by email. More on the rules of the casino is in our terms and conditions, and other ways to contact us are on the contact page.