Privacy Policy

Big Boost | bigboost-nz.org.

Effective Date: 28 May 2026.

Last Updated: 28 May 2026.

1. Introduction

Welcome to Big Boost. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and use our platform at bigboost-nz.org, including when you register an account, make deposits, play pokies or other games, or contact our support team.

Please read this policy carefully. If you do not agree with the terms set out here, please discontinue use of our platform.

Big Boost operates in compliance with New Zealand's Privacy Act 2020, which replaced the Privacy Act 1993 and brought New Zealand's data protection framework in line with modern international standards. Where applicable, we also align our practices with the OECD Privacy Guidelines and other relevant frameworks to ensure your data is handled responsibly and transparently.

By using our platform, you consent to the data practices described in this Privacy Policy.

2. Who We Are

Big Boost is an online gaming platform serving New Zealand punters. We provide access to pokies, table games, and other betting entertainment in New Zealand dollars (NZ$). For any questions regarding your personal data, you can reach our team at:

Email: [email protected].

We are the data controller in respect of the personal information we collect from you through our platform.

3. Legal Framework

Our handling of personal information is governed primarily by the New Zealand Privacy Act 2020. This legislation sets out 13 Information Privacy Principles (IPPs) that govern how agencies collect, store, use, and disclose personal information. Key principles we adhere to include:

IPP 1 – We only collect personal information that is necessary for a lawful purpose connected with our functions.
IPP 2 – We collect information directly from you wherever reasonably practicable.
IPP 3 – We are transparent about why we are collecting your information.
IPP 4 – We do not collect information by unlawful means or in a way that is unfair.
IPP 5 – We store your information securely and protect it from loss or unauthorised access.
IPP 6 – You have the right to request access to your personal information.
IPP 7 – You have the right to request correction of your personal information.
IPP 10 – We only use your information for the purpose for which it was collected.
IPP 11 – We only disclose your information in limited, lawful circumstances.

We are also mindful of our obligations under the Gambling Act 2003, which governs online gambling in New Zealand and requires us to maintain certain player records and cooperate with regulatory authorities, including the Department of Internal Affairs and the Gambling Commission NZ.

4. Information We Collect

We collect several types of personal information depending on how you interact with our platform.

4.1 Information You Provide Directly

Account registration details: Full name, date of birth, residential address, email address, phone number, and username.
Identity verification documents: Copies of government-issued photo ID (such as a New Zealand driver's licence or passport), proof of address, and any additional documents required to meet our Know Your Customer (KYC) obligations.
Payment information: Details relating to your chosen payment method. We accept POLi, Visa, Mastercard, Neosurf, cryptocurrency, and bank transfers. We do not store full card numbers on our servers; this information is handled by our PCI-DSS compliant payment processors.
Communications: Any messages, emails, or live chat records you send to our support team at [email protected].
Responsible gambling information: Self-imposed limits, cooling-off period requests, or self-exclusion elections you make on the platform.

4.2 Information Collected Automatically

Usage data: Pages visited, games played (including pokies sessions), time spent on the platform, clicks, and navigation paths.
Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
Transaction data: Deposit and withdrawal amounts in NZ$, timestamps, payment method used, and transaction status.
Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies (see Section 9 for full details).

4.3 Information from Third Parties

Identity verification providers: We may receive confirmation of your identity from third-party KYC and anti-money laundering (AML) verification services.
Payment processors: We receive transaction confirmation and status updates from our payment partners.
Fraud prevention services: We may receive risk scores or flagging information from fraud detection providers.

5. How We Use Your Information

We use the personal information we collect for the following purposes:

Purpose	Legal Basis
Creating and managing your account	Contractual necessity
Processing deposits and withdrawals (NZ$)	Contractual necessity
Verifying your identity (KYC/AML compliance)	Legal obligation
Providing customer support	Contractual necessity
Sending transactional communications (receipts, security alerts)	Contractual necessity
Sending promotional offers and bonuses (with your consent)	Consent
Analysing platform usage to improve our services	Legitimate interest
Preventing fraud, cheating, and money laundering	Legal obligation / Legitimate interest
Complying with gambling regulations and reporting to authorities	Legal obligation
Enforcing our Terms and Conditions	Legitimate interest
Facilitating responsible gambling tools and self-exclusion	Legal obligation / Legitimate interest

We will never sell your personal information to third parties for their own marketing purposes.

6. Sharing Your Information

We may share your personal information with the following categories of third parties, strictly as necessary:

Regulatory authorities: The Department of Internal Affairs and the Gambling Commission NZ may request access to player records in accordance with the Gambling Act 2003. We are legally required to cooperate with such requests.
Payment processors: To facilitate your deposits and withdrawals via POLi, Visa, Mastercard, Neosurf, cryptocurrency networks, or bank transfer.
Identity verification providers: To confirm your identity and meet our AML obligations under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act).
Fraud prevention and security providers: To detect and prevent fraudulent activity on the platform.
IT and hosting providers: Who store and maintain our platform infrastructure, bound by strict data processing agreements.
Legal and professional advisers: Lawyers, accountants, or auditors who may need access to your information to provide professional services to us.
Law enforcement agencies: Where we are required or permitted by law to do so, including where there is a serious threat to public safety.

All third parties with whom we share your data are required to handle it in accordance with applicable privacy laws and are prohibited from using it for any purpose beyond what we specify.

7. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law.

Account information: Retained for the duration of your account and for a minimum of seven (7) years after account closure, in accordance with our AML/CFT obligations and gambling regulatory requirements.
Transaction records: Retained for a minimum of seven (7) years from the date of the transaction.
KYC documents: Retained for the period required by law, typically five (5) to seven (7) years.
Communications and support records: Retained for up to three (3) years after the last interaction.
Cookie data: As described in Section 9.

When retention periods expire, we securely delete or anonymise your personal information.

8. Your Privacy Rights

Under the Privacy Act 2020, you have the following rights in relation to your personal information:

Right of access: You may request a copy of the personal information we hold about you.
Right to correction: If you believe information we hold is incorrect, incomplete, or misleading, you may ask us to correct it.
Right to complain: If you believe we have breached the Privacy Act 2020, you may make a complaint to us or directly to the Office of the Privacy Commissioner (OPC), which is New Zealand's independent privacy regulator.

To exercise your rights, contact us at [email protected]. We will respond to verified requests within 20 working days, as required by the Privacy Act 2020. In complex cases, we may extend this timeframe and will notify you accordingly.

If you are not satisfied with our response, you have the right to escalate your complaint to the Office of the Privacy Commissioner.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our platform. Cookies are small text files placed on your device that help us recognise you and remember your preferences.

Types of Cookies We Use

Strictly necessary cookies: Essential for the platform to function. These enable secure login, session management, and account access. You cannot opt out of these without affecting platform functionality.
Performance and analytics cookies: Help us understand how punters use our platform, which games (including pokies) are most popular, and where improvements can be made. This data is aggregated and anonymised where possible.
Functionality cookies: Remember your preferences, such as language or currency (NZ$), to personalise your experience.
Marketing cookies: Used to show you relevant promotional content. These are only placed with your consent.

You may manage or withdraw your cookie consent at any time through your browser settings or our cookie preference centre. Please note that disabling certain cookies may impact the functionality of the platform.

10. Security of Your Information

We take the security of your personal information seriously. We implement a range of technical and organisational measures to protect your data, including:

SSL/TLS encryption for all data transmitted between your device and our servers.
Secure storage with access controls limited to authorised personnel only.
Regular security assessments and monitoring for unusual or suspicious activity.
Two-factor authentication options for your account.
PCI-DSS compliant payment processing for card transactions.

Despite our best efforts, no method of electronic transmission or storage is completely secure. If you become aware of any security breach affecting your account, please contact us immediately at [email protected].

In the event of a privacy breach that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required under the Privacy Act 2020.

11. International Data Transfers

Our primary operations and data storage are focused on serving New Zealand customers. However, some of our third-party service providers (such as cloud infrastructure or verification partners) may be based outside of New Zealand. Where this occurs, we take steps to ensure that your personal information receives an equivalent level of protection, including through contractual safeguards and, where available, relying on countries recognised by the Privacy Commissioner as providing comparable privacy protections.

12. Responsible Gambling and Data

We are committed to promoting responsible gambling on our platform. The personal information you provide when setting deposit limits, requesting cooling-off periods, or self-excluding is used solely to give effect to your responsible gambling elections and to protect your wellbeing. This information is treated with the highest level of confidentiality.

If you or someone you know is experiencing difficulties with gambling, we strongly encourage you to seek support. The Problem Gambling Foundation provides free, confidential help across New Zealand:

Helpline: 0800 664 262 (available 24/7).

13. Children's Privacy

Our platform is strictly intended for adults aged 18 years and over. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has provided us with personal information, we will take immediate steps to delete that information and close the account. If you believe a minor has accessed our platform, please contact us at [email protected].

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or platform features. When we make material changes, we will notify you by email to your registered address and by posting a prominent notice on the platform. The "Last Updated" date at the top of this policy will always reflect the most recent revision.

We encourage you to review this policy periodically. Your continued use of the platform following notification of changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please do not hesitate to get in touch:

Big Boost Support Team.

Email: [email protected].

We aim to respond to all privacy-related enquiries within 5 working days.

If you wish to make a formal complaint about our privacy practices and are not satisfied with our response, you may contact the Office of the Privacy Commissioner directly. The OPC is the independent authority responsible for overseeing compliance with the Privacy Act 2020 in New Zealand.