Privacy Policy
This privacy policy explains how rizk-casino, accessed exclusively via rizk-review.com, collects, uses, and protects your personal information. It applies to all players and visitors of our websites and online services provided to residents of New Zealand. The effective date of this policy is 6 November 2025.
Who We Are
OBSERVE: rizk-casino operates under the Betsson Group umbrella, with regulatory oversight from the Malta Gaming Authority (MGA) and the UK Gambling Commission. For New Zealand, services are provided exclusively via rizk-review.com.
- Operator: Zecure Gaming Limited, registered address: Betsson Experience Centre, Ta' Xbiex Seafront, XBX 1027, Malta. Company registration number: C69036. For Oceania (excluding Australia), Netplay Malta Limited (C 81115) may serve as operator, subject to jurisdictional clarification for NZ.
- Licensing: MGA B2C Corporate Gaming Licence (MGA/CRP/108/2004-05; valid until 2025), issued by Malta Gaming Authority. UK Gambling Commission Operating Licence (56427), valid until 2025.
- Parent Company: Betsson Group.
- Contact for Privacy Matters (DPO): support-en@rizk-review.com
- Online Contact Forms: rizk.com/nz/contact, rizk.com/nz/livechat
- Websites: rizk-review.com, rizk.com/nz
REFLECT: All privacy-related queries for NZ players must reference rizk-casino exclusively via rizk-review.com and use the contact avenues above.
What Personal Data We Collect
OBSERVE: We collect personal, technical, financial, and behavioral data to deliver, secure, and enhance our services in compliance with NZ and international regulations.
- Personal Data: Full name, date of birth, residential address, email address, phone number, identification documents (for KYC/AML), and account credentials.
- Technical Data: IP address, device identifiers, browser type, operating system, access times, and server logs.
- Payment Data: Bank account details, credit/debit card information, e-wallet identifiers, transaction history.
- Behavioral Data: Betting and gaming history, deposit and withdrawal records, session duration, navigation paths, clickstream data, and responsible gambling interactions.
- Cookies & Tracking: Session cookies, persistent cookies, third-party analytics and marketing cookies, tracking pixels, and similar technologies.
EXPAND: Some data may be collected automatically or via third-party integrations, and data is linked to regulatory and anti-fraud obligations.
REFLECT: The collection of these categories ensures regulatory compliance, operational integrity, and an enhanced user experience for NZ players.
Legal Basis for Processing
OBSERVE: rizk-casino, via rizk-review.com, processes personal data under strict legal bases as required by NZ and international standards.
- User Consent: Data processed based on your explicit consent, such as for marketing communications or certain cookies.
- Contract Fulfillment: Processing necessary for account creation, verification, gameplay, transactions, and customer support.
- Legitimate Interests: Data processed to improve services, prevent fraud, ensure network security, and conduct analytics, balanced against your privacy rights.
- Legal Obligations: Compliance with KYC (Know Your Customer), AML (Anti-Money Laundering), responsible gambling, and statutory reporting requirements under NZ and EU laws.
EXPAND: Multiple legal bases may apply simultaneously. Withdrawal of consent may impact service availability, but does not affect processing for legal or contractual reasons.
REFLECT: All data processing is limited to what is necessary, with legal justifications recorded and available on request.
Purpose of Processing
OBSERVE: Personal data is processed for clearly defined, lawful purposes to serve the interests of both users and regulatory authorities.
- Service Provision: To register accounts, verify identity, enable deposits and withdrawals, and facilitate gaming activities.
- Service Improvement: To analyze user behavior, personalize content, test new features, and optimize website performance.
- Marketing Communications: To send newsletters, promotional offers, and notifications (with user consent and opt-out options).
- Analytics & Reporting: To perform statistical analysis, monitor service usage, and meet regulatory reporting requirements.
- Fraud & Abuse Prevention: To detect, investigate, and prevent fraudulent activities, account misuse, and violations of gaming regulations.
EXPAND: All processing purposes are documented and reviewed regularly to ensure continued compliance and relevance.
REFLECT: NZ regulatory requirements are fully integrated, with special emphasis on responsible gambling and anti-money laundering controls.
Disclosure & Sharing
OBSERVE: Data sharing is performed in strict accordance with legal, contractual, and privacy obligations, with full transparency for users.
- Payment Processors: Data shared with banks and financial institutions to complete payment transactions, subject to secure and compliant processing agreements.
- Service Providers: Third-party IT, analytics, verification, and marketing vendors, bound by confidentiality and data processing agreements.
- Regulators & Authorities: Data disclosed to the Malta Gaming Authority, UK Gambling Commission, and New Zealand authorities as legally required.
- Affiliates & Advertising Networks: Shared with affiliates and advertising partners only with your explicit consent for targeted marketing.
EXPAND: Data is never sold to third parties. All disclosures are logged, and partners are vetted for compliance with international data protection standards.
REFLECT: Users are notified of material disclosures and may withdraw consent for marketing-based sharing at any time.
International Transfers
OBSERVE: As rizk-casino, via rizk-review.com, is operated by entities based in Malta, your data may be transferred outside New Zealand, including to the EU and UK.
- Transfer Destinations: Data may be stored or processed in Malta, the United Kingdom, and other jurisdictions where our partners or service providers are located.
- Protection Measures: All international transfers are governed by:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding corporate rules and data processing agreements
- Technical safeguards such as end-to-end encryption and access controls
- User Rights: You may request further information about international transfers and the specific safeguards in place.
EXPAND: No transfers occur to jurisdictions lacking adequate data protection without appropriate legal safeguards.
REFLECT: NZ data is always subject to the highest standards of international protection and transparency.
Data Retention
OBSERVE: Data is retained only as long as necessary for the purposes for which it was collected, subject to applicable legal requirements.
- Personal Data: Retained for up to 5 years after account closure or last activity, in compliance with KYC/AML obligations and regulatory retention periods.
- Payment Data: Retained for up to 7 years to comply with anti-money laundering and financial reporting requirements.
- Behavioral & Technical Data: Retained for as long as necessary for analytics, security, or dispute resolution, typically no longer than 2 years post-termination.
- Deletion Criteria: Data will be deleted or anonymized upon user request, expiration of statutory periods, or when no longer needed for its original purpose.
EXPAND: Some data may be retained longer if required for ongoing legal proceedings, regulatory investigations, or to enforce our terms.
REFLECT: All retention practices are reviewed annually to ensure compliance with NZ and international standards.
Your Rights
OBSERVE: rizk-casino, via rizk-review.com, fully aligns with GDPR and NZ Privacy Act 2020, granting you comprehensive control over your data.
- Access: You may request a copy of your personal data held by us at any time, free of charge, within 30 days.
- Correction: You have the right to correct or update inaccurate or incomplete data.
- Deletion ("Right to be Forgotten"): You may request deletion of your data when it is no longer necessary or if you withdraw consent, subject to legal retention obligations.
- Restriction: You may request limitation of processing under certain circumstances (e.g., pending verification of data accuracy).
- Objection: You may object to processing based on legitimate interests or direct marketing at any time.
- Data Portability: You may receive your data in a structured, commonly used, machine-readable format and transfer it to another provider.
- Marketing Consent Withdrawal: You may opt out of marketing communications at any time via account settings or direct request.
- Procedures: To exercise your rights, contact support-en@rizk-review.com or use the online forms at rizk.com/nz/contact. We will respond within 30 days and provide information free of charge, except for manifestly unfounded or excessive requests.
EXPAND: If you believe your rights have been infringed, you may escalate complaints to the NZ Office of the Privacy Commissioner or relevant EU supervisory authority.
REFLECT: Our processes ensure transparency, timely responses, and full compliance with all applicable privacy laws for NZ users.
Cookies & Tracking Technologies
OBSERVE: rizk-casino, via rizk-review.com, employs cookies and similar technologies to enhance user experience, analyze usage, and deliver targeted advertising.
- Session Cookies: Essential for user authentication and navigation, removed when you close your browser.
- Persistent Cookies: Remain on your device for up to 2 years, enabling preferences, analytics, and personalized offers.
- Third-Party Cookies: Set by analytics and advertising partners (e.g., Google Analytics) for usage statistics and targeted advertisements.
Managing Cookies: You can adjust cookie preferences via your browser settings or through the internal control panel accessible via your rizk-casino account dashboard. Disabling certain cookies may impact website functionality.
EXPAND: Comprehensive cookie details and opt-out instructions are provided in our Cookie Policy.
REFLECT: All cookie use is compliant with NZ law and international privacy standards, with clear user controls and transparency.
Data Security
OBSERVE: rizk-casino, via rizk-review.com, employs state-of-the-art security measures to safeguard your data against unauthorized access, loss, or misuse.
- Encryption: All data in transit is protected with TLS 1.2+ encryption protocols; data at rest is encrypted using industry-standard algorithms.
- Access Controls: Strict role-based access and multi-factor authentication for all staff and system administrators.
- Security Audits: Regular internal and external audits, including vulnerability assessments and penetration testing.
- Staff Training: Ongoing training for all employees on data protection and incident response protocols.
- Incident Response: Documented procedures for responding to and reporting data breaches, with notification to affected users and authorities as required by law.
- Compliance: Adherence to ISO 27001 and SOC 2 standards where applicable, with continuous improvement based on industry best practices.
EXPAND: Security measures are reviewed and upgraded annually or in response to emerging threats.
REFLECT: NZ users benefit from robust, internationally recognized security frameworks and full transparency regarding data protection.
Complaints & Contacts
OBSERVE: We provide multiple avenues for users to raise privacy concerns or complaints, with clear escalation procedures.
- Contact the DPO: Email support-en@rizk-review.com or use the online forms at rizk.com/nz/contact and rizk.com/nz/livechat.
- Complaint Procedure:
- Submit your complaint via email or online form, providing relevant details and supporting documentation.
- We will acknowledge receipt within 5 business days.
- A substantive response will be provided within 30 days, detailing findings and proposed resolutions.
- Escalation: If unsatisfied, you may contact the New Zealand Office of the Privacy Commissioner: www.privacy.org.nz, phone: +64 4 474 7590, or relevant EU supervisory authority (e.g., Malta: idpc.org.mt).
EXPAND: All complaints are handled confidentially and free of charge, with escalation options clearly communicated in each response.
REFLECT: Our process ensures prompt, thorough, and fair resolution of all privacy concerns in line with NZ and international best practices.
Updates
OBSERVE: This privacy policy is reviewed and updated regularly to reflect changes in law, technology, or our business operations.
- Notification Procedures: We will notify users of material changes via email, website banners, and account dashboard alerts at least 30 days in advance.
- Version Control: Last updated: 6 November 2025. A changelog of significant amendments is maintained for user reference.
- User Options: You have the right to object to changes by contacting our DPO or closing your account prior to the effective date of amendments.
EXPAND: Minor editorial changes may be implemented without advance notice, but material changes affecting user rights or data processing will always be communicated in advance.
REFLECT: Ongoing user notifications and transparent change management ensure continued trust and compliance with all NZ legal requirements.