Privacy Policy

This Privacy Policy explains how Ruby Fortune Casino on rubyfortunewinnz.com collects, uses, stores, shares, and protects personal information relating to players, prospective players, and website visitors in New Zealand. It is intended to provide a clear explanation of our data handling practices, the lawful reasons for processing information, and the rights available to individuals whose data is processed through the website and related customer support functions. This Privacy Policy applies whenever you browse the website, register an account, communicate with support, participate in promotions, complete identity checks, make deposits or withdrawals, or otherwise interact with services made available through rubyfortunewinnz.com. Effective date: 6 November 2026.

Who We Are

For the purposes of this Privacy Policy, Ruby Fortune Casino on rubyfortunewinnz.com is the brand through which casino-related services are presented to New Zealand users. Based on the information currently available for this website profile, the full operator company name, legal entity type, legal address, company registration number, and tax registration details are not specified in the public source materials reviewed for this page.

References to Malta Gaming Authority-related compliance and AML/KYC protocols have been identified in connection with verification processes; however, no definitive active licence number, operator registration details, or formal corporate registration particulars have been specified in the available source information for rubyfortunewinnz.com.

Website operator brand: Ruby Fortune Casino
Website: https://rubyfortunewinnz.com
Legal address: not specified
Company registration number: not specified
Responsible privacy contact / DPO: not specified
General support email: not specified
Support form / live chat: not specified in the available profile data

Where a dedicated Data Protection Officer is not publicly named, privacy requests may be directed through the website contact pathways made available on rubyfortunewinnz.com. The phone number 0800 654 655 is identified in the profile materials as the Gambling Helpline NZ and not as Ruby Fortune Casino's direct internal privacy or customer support line.

What Personal Data We Collect

Ruby Fortune Casino on rubyfortunewinnz.com may collect personal information that is necessary to operate accounts, provide gambling services, comply with legal obligations, secure the platform, and communicate with users. The categories of personal data may include the following:

Identity and contact data: full name, date of birth, residential address, e-mail address, telephone number, username, and account-related identifiers.
Verification and compliance data: copies of identification documents, proof of address, source-of-funds or source-of-wealth information, age verification records, sanctions and politically exposed person screening results, and other KYC/AML materials required to meet compliance obligations.
Financial and transaction data: deposit and withdrawal records, payment method details, masked card or account information, billing details, transaction references, and payment verification results processed through payment partners.
Technical data: IP address, browser type, operating system, device identifiers, language settings, cookie identifiers, geolocation indicators derived from IP, access times, login records, error logs, and fraud-monitoring signals.
Gaming and behavioural data: betting history, wagering activity, game preferences, stake sizes, session duration, clicks, navigation patterns, bonus use, promotion participation, and responsible gambling indicators.
Communications data: messages sent through support channels, complaint correspondence, survey responses, call or chat records where used, and notes created by support or compliance staff.
Marketing and preference data: opt-in and opt-out records, preferred channels, campaign interaction data, and consent settings for cookies and promotional communications.
Cookies and similar technologies: data collected through session cookies, persistent cookies, pixels, tags, software development kits, and comparable tracking tools used for site operation, analytics, personalization, and consent management.

Legal Basis for Processing

For New Zealand users of rubyfortunewinnz.com, personal information is processed only where there is a lawful and legitimate basis to do so. Depending on the processing activity, one or more of the following legal grounds may apply:

Performance of a contract: processing is necessary to create and manage your account, authenticate logins, process deposits and withdrawals, deliver game access, administer bonuses where applicable, respond to service requests, and maintain the contractual relationship between you and Ruby Fortune Casino.
Compliance with legal obligations: processing is required to meet regulatory and statutory duties, including age verification, know-your-customer checks, anti-money laundering controls, fraud reporting, complaint handling, recordkeeping, lawful disclosure obligations, and cooperation with competent authorities or regulators where required.
Legitimate interests: processing may be necessary to protect the security, integrity, and commercial operation of rubyfortunewinnz.com, including fraud detection, account security, platform diagnostics, service improvement, internal reporting, dispute management, risk analysis, and prevention of misuse, provided those interests are not overridden by the rights and interests of the individual.
Consent: where required, processing is based on your consent, including for non-essential cookies, certain analytics tools, and direct marketing communications. Consent may be withdrawn at any time, although withdrawal does not affect processing already carried out lawfully before withdrawal.

NZ compliance note: Ruby Fortune Casino on rubyfortunewinnz.com is expected to handle personal information consistently with the Privacy Act 2020, including the information privacy principles relating to collection purpose, transparency, storage, access, correction, and overseas disclosure. Where other international standards are referenced in operational practice, they are applied as supplementary safeguards and not as a substitute for applicable New Zealand legal requirements.

Purpose of Processing

Personal data collected through rubyfortunewinnz.com may be used for the following purposes:

Service delivery: to register accounts, verify identity, enable gameplay, administer user profiles, process payments, settle withdrawals, and provide customer support.
Regulatory compliance: to carry out KYC and AML checks, prevent underage access, monitor suspicious transactions, maintain required records, and respond to lawful requests from competent authorities.
Security and fraud prevention: to detect suspicious behaviour, prevent account takeover, investigate abuse, manage chargeback risk, secure systems, and preserve evidence in disputes or investigations.
Platform improvement: to analyse website performance, identify technical problems, improve usability, optimize user journeys, and maintain service reliability.
Marketing and promotions: to send promotional e-mails, bonus offers, and service updates where permitted by law or based on valid consent or existing customer relationship rules, subject to available unsubscribe controls.
Analytics and reporting: to generate aggregated insights, measure campaign performance, understand user engagement, and support commercial planning.
Responsible gambling measures: to identify indicators of harmful play, apply account restrictions or interventions where required, and maintain records relating to safer gambling support.
Complaint handling and dispute management: to investigate concerns, communicate outcomes, maintain internal records, and demonstrate compliance with legal or contractual duties.

Disclosure & Sharing

Ruby Fortune Casino on rubyfortunewinnz.com may disclose personal data only where there is a valid operational, legal, compliance, or consent-based reason to do so. Data may be shared with the following categories of recipients:

Payment service providers and banking partners: to process deposits, withdrawals, payment authentication, anti-fraud screening, chargeback management, and financial reconciliation.
Identity verification and compliance providers: to conduct age checks, identity verification, sanctions screening, source-of-funds checks, AML monitoring, and related regulatory controls.
Technology and hosting providers: for cloud services, infrastructure support, cybersecurity monitoring, customer relationship management, communications tools, and website maintenance.
Game providers, analytics vendors, and support contractors: where necessary to provide game content, troubleshoot issues, analyse usage patterns, or support platform operations under confidentiality restrictions.
Regulators, law enforcement agencies, courts, and competent authorities: where disclosure is required by law, legal process, regulatory obligation, or to establish, exercise, or defend legal claims.
Corporate advisers and professional service firms: including auditors, legal advisers, compliance consultants, and insurers, where access is necessary and appropriately restricted.
Affiliates and advertising networks: only to the extent necessary for attribution, campaign measurement, or marketing activity, and for advertising cookies or comparable tracking tools only where the user has provided the required consent.

All third parties receiving personal information are expected to process it only for authorized purposes, maintain appropriate confidentiality, and implement suitable technical and organizational safeguards.

International Transfers

Your personal information may be processed or accessed outside New Zealand where service infrastructure, compliance vendors, payment partners, analytics providers, or support functions operate in other jurisdictions. Based on the available profile information, Malta-related compliance references have been identified, and transfers may therefore involve service relationships connected with Malta or other countries in which relevant vendors or business partners are established.

Where personal information is transferred internationally, Ruby Fortune Casino on rubyfortunewinnz.com will seek to implement appropriate safeguards, which may include:

Contractual protections requiring overseas recipients to protect information to standards comparable to those required under applicable privacy laws;
Due diligence assessments of recipient security, confidentiality, and legal environment;
Data processing agreements limiting use, retention, onward sharing, and requiring incident notification;
Transfer mechanisms recognized in international practice, such as standard contractual clauses or equivalent contractual commitments where appropriate.

References to legacy transfer tools such as the former EU-US Privacy Shield should not be read as a sole current transfer mechanism unless expressly stated by the relevant provider. For New Zealand users, overseas disclosure is intended to be managed in line with the Privacy Act 2020 requirements relating to disclosure of personal information to foreign persons or entities.

Data Retention

Personal data is retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, to enforce contractual terms, and to maintain security and audit records. Retention periods may vary by category:

Account and identity data: generally retained during the life of the account and for up to 5 years after account closure in 2026 and thereafter, unless a longer period is required by law, regulatory expectation, fraud investigation, or dispute preservation needs.
KYC/AML and verification records: typically retained for at least 5 years after the end of the business relationship or longer where legal obligations, regulator requests, or ongoing investigations require extended storage.
Transaction and payment records: retained for accounting, fraud prevention, auditing, and legal compliance purposes, generally for 5 to 7 years depending on applicable obligations and risk factors.
Gaming and behavioural records: retained for account administration, dispute resolution, responsible gambling monitoring, and compliance reporting for a period reasonably necessary for those purposes.
Marketing data: retained until consent is withdrawn, objection is received, the account becomes inactive for a sustained period, or the data is no longer needed for legitimate campaign administration.
Technical logs and security records: retained for a shorter period where possible, but may be kept longer when required for cybersecurity investigations, fraud controls, or evidence preservation.
Complaint and legal case files: retained until the complaint, dispute, or legal matter is fully resolved and for an additional period needed to comply with limitation periods and recordkeeping duties.

Deletion, anonymization, or irreversible aggregation may occur when retention periods expire, where a valid deletion request can be honoured, or when the relevant processing purpose has ended and no overriding legal basis for continued retention remains.

Your Rights

If your personal information is processed through rubyfortunewinnz.com, you may have privacy rights under New Zealand law and, where relevant to the processing context, under international privacy standards applied operationally by the business or its service providers. The primary rights framework for New Zealand users is the Privacy Act 2020. Where services or vendors also align with GDPR-style practices, or where references to Mexican privacy standards have been requested for alignment purposes, those references are supplementary and do not reduce any protections available under applicable law.

Right to access: you may request confirmation of whether your personal information is held and ask for access to that information, subject to lawful withholding grounds.
Right to correction: you may ask for inaccurate, incomplete, or outdated personal information to be corrected. If a correction is not made, you may request that a statement of correction be attached where required by law.
Right to deletion: you may request deletion of personal data where it is no longer necessary, where consent is withdrawn and no other lawful basis applies, or where retention is not otherwise required. This right is not absolute and may be limited by AML, fraud, accounting, dispute, or legal retention obligations.
Right to restrict or object: you may object to certain processing based on legitimate interests, especially for direct marketing, or ask for processing to be restricted while a complaint or accuracy challenge is assessed.
Right to data portability: where technically feasible and legally applicable, you may ask for certain data you provided to be supplied in a structured, commonly used format.
Right to withdraw consent: if processing is based on consent, including some marketing and non-essential cookie activities, you may withdraw that consent at any time.
Right to opt out of marketing: promotional e-mails may be stopped by using the unsubscribe mechanism or by contacting support through the website.

To exercise your rights, submit a request through the contact channels available on rubyfortunewinnz.com and provide enough information for identity verification. Requests are generally handled free of charge, unless they are manifestly unfounded, repetitive, or excessive, in which case a lawful administrative response may apply. Ruby Fortune Casino will aim to respond within 30 days in 2026, although a shorter or longer period may apply where local law permits, the request is complex, or identity verification is incomplete.

For alignment purposes, requests involving Mexican data-protection concepts may also be understood in the spirit of ARCO-style rights (access, rectification, cancellation, and opposition), but such references are included only as supplementary comparative terminology where relevant to cross-border service standards.

Cookies & Tracking Technologies

rubyfortunewinnz.com may use cookies and similar technologies to operate the website, remember preferences, measure traffic, improve functionality, and, where permitted, support marketing activities. These technologies may include browser cookies, local storage objects, web beacons, tags, and pixels.

Session cookies: temporary cookies that expire when you close your browser. They are used for essential functions such as navigation, secure login continuity, load balancing, and form handling.
Persistent cookies: cookies stored for a defined period after your session ends. They may remember preferences, language settings, consent choices, and repeated visit information.
First-party functional cookies: used by rubyfortunewinnz.com to keep the site operational, store selected settings, and support account features.
Analytics cookies: used to understand user interaction, traffic sources, page performance, and technical issues. These help improve the website and services.
Advertising or targeting cookies: may be used by advertising networks, affiliates, or campaign partners to measure the effectiveness of promotions and show more relevant advertising, subject to consent where required.
Third-party cookies: set by external providers such as analytics, embedded content, fraud-prevention, or marketing partners, acting under their own privacy notices or contractual restrictions.

You can manage cookies through your browser settings, device settings, and any consent-management tool or internal cookie panel made available on rubyfortunewinnz.com. Disabling essential cookies may affect site performance, login reliability, or the availability of some services. Users should review browser help documentation for instructions on blocking, deleting, or limiting cookie storage.

Data Security

Ruby Fortune Casino on rubyfortunewinnz.com is expected to apply technical and organizational measures designed to protect personal information against unauthorized access, misuse, loss, alteration, and unlawful disclosure. While no internet transmission or storage environment can be guaranteed to be completely secure, reasonable safeguards should include layered controls proportionate to the sensitivity of gambling, payment, and identity-verification data.

Encryption in transit: use of TLS 1.2 or higher for account access, payment pages, and sensitive data transmission across the website and connected systems.
Encryption at rest: protection of stored personal or sensitive records through encryption, tokenization, hashing, or comparable security controls where appropriate to the data type.
Access controls: role-based access limitation, account permissions, authentication safeguards, logging of privileged actions, and access reviews intended to ensure that staff and contractors only access data on a need-to-know basis.
Account security measures: password controls, suspicious-login monitoring, device or session verification, and multi-factor authentication where implemented for administrative or sensitive functions.
Monitoring and testing: vulnerability management, system monitoring, anti-malware protections, penetration testing, periodic security audits, and incident detection capabilities.
Organizational governance: confidentiality obligations, staff training, data handling procedures, vendor due diligence, and documented incident response and escalation procedures.
Standards alignment: where applicable, security governance may be informed by recognized international standards such as ISO 27001, SOC 2, or equivalent control frameworks, although no formal certification status is specified in the currently available profile data.

If a personal data incident occurs, the business may investigate, contain, document, and notify affected parties or authorities where required by applicable law, including notifiable privacy breach standards relevant in New Zealand.

Complaints & Contacts

If you have a privacy question, wish to exercise your rights, or believe your personal information has been mishandled by Ruby Fortune Casino on rubyfortunewinnz.com, you should first contact the business using the support or contact channels made available on the website. Based on the currently available profile information, a named DPO, direct privacy e-mail address, internal privacy phone number, postal address, and dedicated online privacy form are not specified.

Official website: https://rubyfortunewinnz.com
DPO / privacy e-mail: not specified
Support e-mail: not specified
Contact form: not specified
Postal address: not specified
External support resource shown in profile: Gambling Helpline NZ - 0800 654 655 (this is not stated as Ruby Fortune Casino's direct privacy contact)

Submit your complaint: provide your full name, username if applicable, contact details, a description of the issue, relevant dates, and any supporting documents.
Identity verification: you may be asked to verify your identity before account-specific data is discussed or changed.
Initial acknowledgement: an acknowledgement should ordinarily be issued within a reasonable period after receipt.
Investigation: the complaint will be reviewed by support, compliance, or the responsible privacy function as appropriate.
Response: a substantive reply should generally be provided within 30 days in 2026, unless the matter is unusually complex or requires additional verification.
Escalation: if you are not satisfied with the outcome, you may escalate the matter to an applicable supervisory or dispute-handling authority.

New Zealand escalation: Office of the Privacy Commissioner, New Zealand - website: https://www.privacy.org.nz. This authority handles privacy complaints and guidance under the Privacy Act 2020.

Mexico alignment reference: where relevant to cross-border processing expectations, the Mexican data protection authority is the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) - website: https://home.inai.org.mx.

EU-related escalation reference: if data is processed in an EU-related context or through an establishment or processor subject to EU privacy law, users may also contact the competent data protection authority in the relevant EEA member state.

Updates

Ruby Fortune Casino may amend this Privacy Policy from time to time to reflect legal developments, operational changes, technical updates, security improvements, cookie changes, new service providers, or revised data-handling practices relating to rubyfortunewinnz.com.

Last updated: November 2026
Notification methods: updates may be communicated by website banner, account dashboard notice, revised on-page publication date, and e-mail notification where appropriate or legally required.
Material changes: where changes substantially affect how personal data is used, shared, transferred, or user rights are exercised, Ruby Fortune Casino should aim to provide at least 30 days' advance notice in 2026, unless a shorter period is required for urgent legal, security, or fraud-prevention reasons.
User options: if you object to a material change, you may stop using the website, update your privacy settings where available, withdraw marketing consent, or request account closure subject to outstanding legal and contractual obligations.

Changelog summary:

November 2026: policy date updated; New Zealand privacy-rights language clarified; international transfer wording updated; complaint escalation references clarified; retention and security descriptions refined.

Your continued use of rubyfortunewinnz.com after the effective date of a revised Privacy Policy may indicate acknowledgement of the updated terms, except where applicable law requires express consent for a particular change or processing activity.