Last updated 20 September 2026
Privacy Policy [September 2026]: How We Use Your Data Under the Privacy Act 2020
What personal information we collect, why, who we share it with, and the rights you have under the New Zealand Privacy Act 2020.
By Aroha Tainui, Regulation & Compliance Editor·
Fact-checked by Jordan Whitcombe·Updated 21 September 2026·Next review 20 October 20261. Introduction
Casino Edge Media Limited (“we”) operates outofthewoods.co.nz. This policy explains what personal information we collect, why, what we do with it and what rights you have. We handle personal information in accordance with the Privacy Act 2020 and the thirteen Information Privacy Principles.
Our privacy contact is [email protected]. Postal enquiries to PO Box 106-172, Auckland 1143, New Zealand.
2. What we collect
We collect as little as we can. Specifically:
| Category | What it is | How it is collected | Why |
|---|---|---|---|
| Contact details | Name, email address and the content of your message | Only when you email us or submit the contact form | To reply to you and to process corrections, complaints and privacy requests |
| Technical data | IP address, browser type and version, device type, operating system, screen size, referring URL | Automatically, in server logs and analytics | Security, fraud prevention, and understanding which pages are useful |
| Usage data | Pages viewed, time on page, links clicked, approximate region | Analytics cookies, only with your consent | To improve the site |
| Affiliate click data | That a click occurred on an operator link, with a campaign identifier | A tracking parameter or cookie set when you click an operator link | So the operator can attribute the referral and pay us |
We do not collect or store payment details, gambling account credentials, deposit or withdrawal amounts, or any information about your gambling activity. We never see your casino account.
3. Legal basis and purpose
Under the Privacy Act 2020 we collect personal information only for a lawful purpose connected with our function as a publisher, and only where collection is necessary for that purpose. We use it to respond to you, to operate and secure the website, to measure which content is useful, and to receive attribution for referrals.
We do not use your information to make automated decisions with legal or similarly significant effects, and we do not profile individuals.
4. Cookies and similar technologies
We use a small number of cookies. Strictly necessary cookies are set without consent because the site cannot work without them; analytics and affiliate attribution cookies are set only where you have consented or where you have clicked an operator link. Full detail, including names, purposes and durations, is in our cookie policy, where you can also change your choices.
5. Who we share information with
We do not sell personal information, and we do not share your contact details with gambling operators. Limited sharing occurs with:
- Our hosting and infrastructure providers, who process server logs on our behalf under contract.
- Our analytics provider, where you have consented to analytics cookies, in a configuration that does not identify you by name.
- Affiliate networks and operators, but only the fact of a click and a campaign identifier — never your name, email address or message.
- Law enforcement or regulators, where we are legally required to disclose.
Some of these providers are located outside New Zealand. Where personal information is transferred overseas we take reasonable steps to ensure it is subject to comparable safeguards, as required by Information Privacy Principle 12.
6. How long we keep it
- Email correspondence: 24 months from the last contact, then deleted, unless it relates to an unresolved complaint.
- Server logs: 90 days.
- Analytics data: 14 months, in aggregated form.
- Affiliate attribution cookies: up to 30 days on your device, depending on the operator’s programme.
7. Security
The site is served over HTTPS. Access to the email inbox and to analytics is restricted to members of the editorial team and protected by multi-factor authentication. We keep no database of user accounts because the site has no user accounts. If we become aware of a privacy breach that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.
8. Your rights
Under the Privacy Act 2020 you have the right to:
- Access the personal information we hold about you.
- Correct information that is wrong, and to have a statement of correction attached if we disagree.
- Request deletion of information we no longer need.
- Withdraw consent to analytics cookies at any time through our cookie policy.
- Complain to us and, if you are not satisfied, to the Office of the Privacy Commissioner.
To exercise any of these, email [email protected]. We will respond within 20 working days, which is the period the Privacy Act allows.
9. Complaints
If you are unhappy with how we have handled your personal information, contact us first at [email protected] so we can try to resolve it. If you remain dissatisfied you may complain to the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909.
10. Children
This site is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we hold information about a person under 18, contact [email protected] and we will delete it.
11. Changes to this policy
We may update this policy. The current version is always on this page with the date it was last updated. Material changes will be noted at the top of the page for at least 30 days.
Last updated 20 September 2026.