Privacy policy – Nzbankbets
Running an information site about bank-funded betting for New Zealand readers requires little personal information, and Nzbankbets collects no more than that. The Privacy Act 2020 and its information privacy principles (section 22) set the rules.
Responsibility
The body that operates Nzbankbets is the agency responsible for the personal information collected through it. Its name, address and e-mail address are available at bankbetsnz.com, which is also where every question about personal information is directed.
Collected information
A server log entry is written whenever a page is opened: IP address, date and time, the address requested, amount of data sent, referring page and browser type. Logs serve security and the detection of abuse, and after 90 days they are deleted or shortened until they no longer identify anyone. Writing to the editors adds a name, an e-mail address and the message text, used only to reply. The site has no reader accounts, no deposits and no bets, which is why payment details and identity documents are not collected.
Purposes
Lawful purposes tied to the site apply: keeping it running securely, replying to messages and, after a choice in the cookie banner, measuring the audience (IPP 1). People are told what is collected and why (IPP 3), and use stays inside those purposes (IPP 10). Automated decision-making and profiling are not carried out.
Providers and transfers abroad
Selling information is not done. Providers of hosting, content delivery and e-mail receive it, as do public authorities where the law demands. A provider can keep information outside New Zealand; passing it abroad happens only if the recipient is under comparable safeguards or the person has been informed and agrees, as IPP 12 requires.
Security and retention
Loss and misuse are guarded against by reasonable safeguards (IPP 5). Information is kept for the time its purpose needs (IPP 9): server logs for 90 days at most, correspondence until the matter closes and for as long as potential claims require. If a privacy breach has caused or is likely to cause serious harm (a notifiable breach), the Privacy Commissioner and the people affected are told.
Access and correction
Every person can ask what information is held about them (IPP 6) and ask for it to be corrected (IPP 7). The reply is due as soon as reasonably practicable and no later than 20 working days after the request is received (section 40).
Complaints
Anyone who believes their privacy has been breached can complain to the Office of the Privacy Commissioner.
Last updated: 30 October 2026.