Dunedin Casino Privacy Policy

This privacy policy sets out how Grand Casino Dunedin (formerly Dunedin Casino) collects, stores, uses, discloses and protects personal information relating to patrons and members. The policy is intended to comply with the Privacy Act 2020 and the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act).

This policy applies to all individuals who visit the premises at The Exchange, corner of Princes Street and High Street, Dunedin, and to individuals who register for the Grand Rewards membership program.

1. Information Collected

Personal information is collected as required by law and for the provision and administration of services. The type and extent of information collected depends on each individual’s interaction with the casino.

1.1. Mandatory Information Under AML/CFT Act

Under the AML/CFT Act 2009, customer due diligence is required in specified circumstances. For this purpose, the following information may be collected:

• Full legal name
• Date of birth
• Residential address
• Occupation
• Purpose of visit or transaction

This information is collected when you:

• Apply for Grand Rewards membership
• Conduct a single transaction of NZD $6,000 or more
• Conduct a series of transactions totaling NZD $6,000 or more
• Engage in other activities specified under the AML/CFT Act

1.2. Additional Information

Additional information may also be collected, including:

• Proof of age documentation (required for all patrons, minimum age 20)
• Contact details, including email address and mobile phone number
• Transaction history and gaming activity
• Surveillance footage and facial recognition data
• Marketing preferences

2. Use of Personal Information

Personal information may be used for the following purposes:

• Identity verification and age confirmation
• Compliance with AML/CFT Act requirements and ongoing customer due diligence
• Fraud prevention, detection and investigation
• Monitoring and analysis for responsible gambling purposes
• Marketing communications, including newsletters and promotional offers (where consent has been provided)
• Improving customer service and casino operations
• Compliance with legal, regulatory and law enforcement requirements
• Handling and resolution of disputes

Information may be analysed to identify patterns relevant to responsible gambling and to support the responsible gambling framework.

3. Information Storage and Security

3.1. Storage Systems

Personal information may be stored in the following systems and formats:

• Casino Management System (CMS) hosted on secure Amazon Web Services (AWS) infrastructure located in Australia
• Physical records maintained in locked, access-controlled rooms on the premises
• SMS messaging systems used for mobile communications
• Off-site disaster recovery backup systems

3.2. Retention Period

Personal information is retained for a minimum of seven years where required by the AML/CFT Act. Certain information may be retained for longer periods, including indefinitely, unless deletion is requested and there is no legal requirement or legitimate business reason to retain it.

3.3. Security Measures

Access to personal information is restricted to authorised staff who require access for the performance of their duties. The premises are monitored by surveillance cameras, including facial recognition technology in gaming areas. Electronic systems are protected by industry-standard security measures and protocols.

4. Information Sharing and Disclosure

Personal information is not sold to third parties for marketing purposes. Personal information may be disclosed to:

• Casino staff members for service delivery and operational purposes
• Department of Internal Affairs, for regulatory and AML/CFT compliance
• New Zealand Police, when required or permitted by law
• Problem Gambling Service providers, upon request or where responsible gambling concerns arise
• Other licensed casinos in New Zealand, for patron exclusion enforcement
• Courts, tribunals, regulators or other legal authorities, when required or permitted by law or court order
• Third-party service providers engaged to support operations, subject to appropriate confidentiality and data protection obligations

5. Rights Under the Privacy Act

Individuals have the following rights under the Privacy Act 2020:

• The right to request access to personal information held by Grand Casino Dunedin
• The right to request correction of inaccurate or incomplete personal information
• The right to request deletion of personal information where legally permissible
• The right to withdraw consent to receive marketing communications at any time
• The right to lodge a complaint with the Office of the Privacy Commissioner if privacy rights are believed to have been breached

5.1. Access and Correction Requests

To request access to, or correction of, personal information:

1. Present yourself at the casino cash desk with valid proof of identity.
2. Submit a written request specifying the personal information you wish to access or correct.
3. A reasonable fee may be charged to process access requests, where permitted by law.
4. Electronic information can be provided to a specified email address or mobile number.

Requests will be handled within a reasonable timeframe, in accordance with the Privacy Act 2020.

6. Surveillance and Monitoring

Casino premises are monitored by surveillance cameras for security, regulatory compliance and patron safety. Facial recognition technology operates in gaming areas. By entering the premises, patrons acknowledge and consent to being recorded.

Use of electronic devices, including computers and video equipment, is prohibited in gaming areas. Mobile phones are permitted in bar and cafe areas but must be switched off in gaming zones. Cameras and large bags must be stored in the cloakroom.

7. Marketing Communications

If consent has been provided to receive marketing communications, contact may be made via email, SMS or post in relation to promotions, events and offers. You may opt out of marketing communications at any time by:

• Selecting the unsubscribe option in email communications
• Replying STOP to SMS messages
• Calling 0800 477 4545
• Updating marketing preferences at the casino cash desk

Marketing communications will cease after an account is closed or consent is withdrawn.

8. Responsible Gambling

Information collected may be used to identify patrons who may be experiencing gambling-related harm and to support responsible gambling initiatives. Relevant information may be shared with Problem Gambling Service providers to facilitate support and intervention, where appropriate.

For assistance, contact the Gambling Helpline on 0800 654 655.

9. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in legal requirements or operational practices. The current version dated 12.12.2024 is available at grandcasino.co.nz/privacy-policy/ and at the casino premises.

10. Contact Information

For privacy-related inquiries or to exercise rights under this policy:

Casino enquiries: 0800 477 4545
Hotel enquiries: 0800 50 1616

Address: The Exchange, corner of Princes Street and High Street, Dunedin, New Zealand

Operating hours: Daily 11am - 3am

This privacy policy is effective from the date of publication and applies to all personal information collected by Grand Casino Dunedin.