burger icon
Galactic Wins Casino
Log In

Privacy Policy

This privacy policy explains how galactic-wins-casino, accessible exclusively via galactics-win.com and associated domains, handles your personal data when you use our online gambling services. This policy applies to all players and website visitors from New Zealand and any other permitted jurisdictions. The policy is effective as of 6 November 2025 and is designed to ensure compliance with New Zealand privacy law and all relevant industry standards.

Who We Are

galactic-wins-casino is operated by a limited company registered under Malta law:

  • Legal Name: galactic-wins-casino Ltd.
  • Registered Address: Elite Business Centre, TREJQA TA' BOX BOX, MSIDA MSD 1840, Malta
  • Company Registration Number: C80735
  • Gaming License: MGA/B2C/445/2017 (Type 1 Gaming Services), issued by the Malta Gaming Authority (active, since 16 January 2019). View license details

For all privacy-related matters, please contact our Data Protection Officer (DPO) or the data protection department:

What Personal Data We Collect

galactic-wins-casino, via galactics-win.com, collects and processes a range of personal and technical data to provide and enhance gaming services while maintaining legal compliance in New Zealand and Malta. Data collected includes:

  • Personal Data: Full name, date of birth, residential address, email address, telephone number, identification documents, and age verification data.
  • Technical Data: IP address, device information, operating system, browser type, unique device identifiers, server logs, and connection timestamps.
  • Payment Data: Credit/debit card details, bank account numbers, e-wallet details, payment transaction history, and withdrawal/deposit logs.
  • Behavioral Data: Account activity, betting and gaming history, bonuses claimed, preferences, clicks, navigation paths, and communication records.
  • Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party cookies, web beacons, pixel tags, analytics scripts, and advertising identifiers.

Legal Basis for Processing

galactic-wins-casino processes your personal data via galactics-win.com in accordance with applicable New Zealand privacy law, the Malta Data Protection Act, and international standards. Processing is grounded on the following legal bases:

  • User Consent: Consent is obtained for marketing communications, non-essential cookies, and certain data sharing activities. Consent may be withdrawn at any time without affecting the legality of prior processing.
  • Contract Fulfillment: Data processing is necessary to establish, manage, and fulfill your gaming account, process transactions, provide customer support, and deliver services as described in our Terms and Conditions.
  • Legal Obligations: Compliance with anti-money laundering (AML), know-your-customer (KYC), responsible gambling, tax, and regulatory reporting obligations under New Zealand and Malta law.
  • Legitimate Interests: Processing for fraud detection, security monitoring, service improvement, analytics, and internal reporting, provided such interests do not override your fundamental rights and freedoms.

Where required, additional legal bases may be relied upon as stipulated by applicable regulations.

Purpose of Processing

Your personal data is processed for clearly defined and legitimate purposes, including:

  • Service Provision: Account creation, identity verification, facilitating deposits and withdrawals, game participation, and customer support.
  • Compliance: Meeting legal and regulatory obligations, including KYC and AML requirements, responsible gambling monitoring, and reporting to authorities.
  • Marketing: Sending promotional offers, newsletters, and event information, subject to your consent and communication preferences.
  • Analytics: Analyzing website usage, enhancing functionality, personalizing user experience, and improving product offerings.
  • Fraud Prevention & Security: Identifying and mitigating fraudulent or suspicious activity, maintaining the security of our systems, and protecting users and company assets.

Disclosure & Sharing

galactic-wins-casino may share your personal data in the following circumstances, ensuring all disclosures are necessary, proportionate, and subject to strict safeguards:

  • Payment Partners: Banks, payment processors, and financial institutions to process deposits, withdrawals, and verify transactions.
  • Service Providers: IT support, hosting services, customer support platforms, marketing agencies, and data analytics providers, all bound by confidentiality and data protection agreements.
  • Regulatory Authorities: New Zealand and Malta gambling regulators, tax authorities, law enforcement, and other competent authorities as required by law.
  • Affiliates & Group Companies: Subsidiaries (including Boo Casino, bCasino, Mr Fortune Casino) and business partners, where necessary for integrated service delivery and with appropriate privacy safeguarding.
  • Advertising Networks: Third-party marketing partners, only with your explicit consent for targeted advertising or promotional campaigns.

We do not sell your personal data to any third parties. All disclosures comply with applicable privacy laws and contractual protections.

International Transfers

Your data may be transferred to, and processed in, countries outside New Zealand, primarily Malta (where our headquarters are located), the European Economic Area (EEA), or other jurisdictions where our service providers operate. To ensure your data remains protected:

  • Standard Contractual Clauses (SCCs): Where required, we implement SCCs or equivalent legal mechanisms approved by relevant authorities for cross-border data transfers.
  • Data Protection Safeguards: All service providers and partners are contractually obligated to implement adequate security measures and comply with privacy standards equivalent to those mandated under New Zealand law.
  • Regulatory Compliance: Transfers are conducted in accordance with the New Zealand Privacy Act 2020, the EU General Data Protection Regulation (GDPR) where applicable, and Malta data protection law.

You may contact our DPO for further details of applicable data transfer safeguards.

Data Retention

galactic-wins-casino retains personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods are as follows:

  • Account Data: Retained for the duration of your account's activity and up to 5 years after account closure, in compliance with AML and regulatory requirements.
  • Financial and Transaction Data: Stored for a minimum of 7 years from the date of last transaction to meet financial and tax reporting obligations.
  • Marketing Data: Maintained until you withdraw consent or unsubscribe from communications.
  • Cookies and Technical Data: Retention periods vary based on type (see Cookies & Tracking Technologies section below).

Data is securely deleted or anonymized when retention periods expire or upon valid user request, unless further retention is required for legal, regulatory, or legitimate business purposes.

Your Rights

You have comprehensive rights under New Zealand privacy law, the EU GDPR, and, where applicable, Mexican privacy regulations. You may exercise the following rights free of charge:

  1. Right of Access: Obtain a copy of your personal data held by galactic-wins-casino via galactics-win.com, including processing purposes and categories of recipients.
  2. Right to Rectification: Request correction of inaccurate or incomplete data concerning you.
  3. Right to Erasure: Request deletion of your personal data, subject to legal retention exceptions (e.g., AML regulations).
  4. Right to Restrict Processing: Request temporary suspension of data processing under specific circumstances.
  5. Right to Object: Object to processing based on legitimate interests, direct marketing, or profiling, unless overriding legal grounds exist.
  6. Right to Data Portability: Receive your data in a machine-readable format and transmit it to another provider, where technically feasible.
  7. Right to Withdraw Consent: Withdraw marketing or non-mandatory processing consent at any time, without affecting prior lawful processing.

To exercise your rights, contact our DPO (see Complaints & Contacts below). We will respond within 30 days of receipt of your request. If you are dissatisfied with our response, you may escalate your complaint to the New Zealand Privacy Commissioner or the relevant EU/Mexican data protection authority, as applicable.

Regional Compliance Note: This section aligns fully with the New Zealand Privacy Act 2020, EU GDPR, and the Federal Law on Protection of Personal Data Held by Private Parties (Mexico), where applicable.

Cookies & Tracking Technologies

galactic-wins-casino uses cookies and similar technologies on galactics-win.com for essential and optional purposes:

  • Session Cookies: Temporary cookies necessary for secure user authentication and uninterrupted gameplay during your visit. Expire upon browser closure.
  • Persistent Cookies: Remain on your device for a set period (up to 2 years) to remember preferences, facilitate login, and improve user experience.
  • Third-Party Cookies: Set by analytics (e.g., Google Analytics), advertising networks, or social media integrations to track website usage and deliver personalized ads (used only with your consent).

You can manage or disable cookies at any time via your browser settings or through our internal cookie management panel. Note that disabling certain cookies may impact site functionality or gaming experience.

Data Security

galactic-wins-casino employs robust, industry-standard security practices to protect your data on galactics-win.com, in compliance with ISO 27001 and SOC 2 standards:

  • TLS 1.2+ Encryption: All data transmitted between your browser and our servers is protected by advanced encryption protocols (TLS 1.2 or higher).
  • Data Encryption at Rest: Sensitive data stored on our servers is secured via strong encryption algorithms, limiting access to authorized personnel only.
  • Multi-Factor Authentication (MFA): Enabled for all staff access to critical systems and administrative functions.
  • Access Controls: Role-based access management ensures data is only accessible to authorized staff with legitimate business need.
  • Regular Security Audits: Internal and third-party audits are conducted to identify and remediate vulnerabilities.
  • Staff Training: Ongoing data protection and security awareness programs for all personnel handling user data.
  • Incident Response: Documented procedures for prompt detection, containment, and notification in the event of a data breach, including regulatory reporting obligations.

Our security framework is regularly reviewed and updated to address emerging threats and maintain compliance with international best practices.

Complaints & Contacts

If you have questions, concerns, or wish to file a privacy complaint regarding galactic-wins-casino data processing on galactics-win.com, you may contact us via:

Complaint Procedure

  1. Submission: Submit your complaint using any of the contact channels above, providing sufficient detail for us to investigate.
  2. Acknowledgment: We will acknowledge receipt of your complaint within 3 business days.
  3. Investigation: A member of our data protection team will review your complaint and may request additional information if necessary.
  4. Resolution: We aim to provide a substantive response or resolution within 30 days of receiving your complaint.
  5. Escalation: If you are not satisfied with our response, you may escalate the matter to the New Zealand Privacy Commissioner (privacy.org.nz, phone: +64 4 474 7590), or the relevant EU or Mexican data protection authority as appropriate.

All complaints are handled confidentially and without prejudice to your statutory rights.

Updates

galactic-wins-casino may update this privacy policy to reflect changes in legal requirements, operational practices, or technology. Update procedures are as follows:

  • Notification: Material changes will be communicated to users by email (where available), via website banners, and through your account dashboard at least 30 days prior to taking effect.
  • Version Control: The latest version of this policy, including a changelog summarizing material amendments, will always be available on galactics-win.com. Current version: Last updated 6 November 2025.
  • User Options: If you object to any material change, you may close your account or contact us for clarification before the changes take effect.

We encourage users to review this policy regularly to remain informed about our data management practices.