Jelly Bean logo
Online: 1,891

Privacy Policy

Jelly Bean Casino > Privacy Policy
Last updated: 01/05/2026
Relevance verified: 09/06/2026

About This Privacy Policy

This Privacy Policy applies to all personal information collected and processed by Jelly Bean Casino when you use our website at https://jelly-bean-casino-nz.com/, our iOS and Android applications, and any related services we provide to players based in New Zealand.

Jelly Bean Casino is operated by a company registered at Level 17, 11/19 Customs Street West, Auckland CBD, Auckland 1010, New Zealand, under casino licence number OGL/2023/174/0082. As a business operating in New Zealand and serving New Zealand residents, we are bound by the Privacy Act 2020 (NZ), the Gambling Act 2003, and the Anti-Money Laundering and Countering Financing of Terrorism Act 2009 (AML/CFT Act).

Reading this policy before you register will give you a clear picture of what information we hold, why we hold it, who we share it with, and what rights you have over it. If anything here is unclear, our support team is available around the clock at support@jelly-bean-casino-nz.com or by phone on +64 9 868 1504.

1. Who We Are

For the purposes of the Privacy Act 2020, Jelly Bean Casino is the agency that holds and controls your personal information. Our registered contact details are:

2. Information We Collect

We only collect information that is necessary for a specific, legitimate purpose connected to our services. Collecting personal data for its own sake is not something we do.

2.1 Account Registration Data

When you create an account at Jelly Bean Casino, we collect:

  • Full legal name
  • Date of birth
  • Email address
  • Residential address in New Zealand
  • Username and password (stored in encrypted form)
  • Phone number (where provided)
  • Account currency preference (NZD)

2.2 Identity Verification Documents

Before processing your first withdrawal, and as required under the AML/CFT Act 2009, we collect copies of documents that confirm your identity and address. These typically include:

  • A government-issued photo ID such as a New Zealand passport, driver licence, or Kirikiriroa (New Zealand) identity card
  • A recent proof of New Zealand residential address, such as a utility bill or bank statement dated within the past three months
  • In some cases, additional documentation such as source of funds evidence, as required by our AML/CFT compliance obligations

2.3 Financial and Transaction Data

When you make deposits or withdrawals through accepted payment methods including Visa, Mastercard, Apple Pay, Google Pay, Bitcoin, Ethereum, and USDT, we record:

  • Payment method type and partial card or wallet identifiers
  • Transaction amounts and timestamps
  • Deposit and withdrawal history
  • Bonus credits applied and wagering activity

We do not store full card numbers or CVV codes. Card payment processing is handled by PCI DSS-compliant third-party payment processors.

2.4 Gameplay and Activity Data

  • Game sessions played, including titles, stakes, duration, and outcomes
  • Bonus offers claimed and wagering progress
  • Session login and logout times
  • Device type and operating system (mobile app or browser)
  • IP address at the time of login

2.5 Communications Data

  • Support chat transcripts and email correspondence with our team
  • Complaints and dispute records
  • Feedback and survey responses where you choose to provide them

2.6 Responsible Gambling Data

Where you use our responsible gambling tools, such as deposit limits, session time limits, cool-off periods, or self-exclusion requests, we record those settings and the dates on which they were applied or modified. This data is treated with particular sensitivity and is not used for marketing purposes.

2.7 Technical and Device Data

  • Browser type and version
  • Device identifiers (for the Jelly Bean Casino app on iOS and Android)
  • Pages visited and navigation paths through the site or app
  • Referral source (how you arrived at our website)
  • Crash reports and error logs from the mobile application

3. How We Collect Your Information

Most of the personal information we hold is provided directly by you at the point of registration, during KYC verification, or through your ongoing use of the platform. We also collect information through the following means:

  • Automatically via the website and app: session cookies, server logs, and analytics tools record technical and behavioural data each time you use our services
  • From payment processors: transaction confirmations and payment status updates are passed to us by the third-party processors who handle card and wallet payments
  • From identity verification services: where we use third-party KYC providers to assist with document checks, they return verification outcomes and flagged results to us
  • From fraud and AML screening tools: automated systems check account activity against risk indicators and sanctions lists as required by the AML/CFT Act 2009
  • From publicly available sources: in limited circumstances, such as investigating a complaint or fulfilling a regulatory obligation, we may cross-reference information from public registers or court records

4. Why We Use Your Information

Every use of your personal information at Jelly Bean Casino is connected to one or more of the following purposes. We do not use personal data for purposes unrelated to the operation of our gaming services, our legal obligations, or the security of player accounts.

4.1 Operating Your Account

  • Creating and maintaining your player account
  • Processing deposits, applying bonus credits, and paying out withdrawals
  • Providing access to over 10,000 games including slots, live casino, and crash game titles
  • Delivering push notifications through the iOS and Android apps (where you have enabled these)
  • Applying and tracking your responsible gambling settings

4.2 Legal and Regulatory Compliance

A significant portion of what we collect is collected because the law requires it. Our obligations under New Zealand law include:

  • Identity verification: under the AML/CFT Act 2009, we are a reporting entity required to verify the identity of customers before providing services and to monitor transactions for suspicious activity
  • Age verification: the Gambling Act 2003 prohibits gambling services being provided to persons under 18 years of age; verifying your age is a legal requirement, not a formality
  • Record keeping: the AML/CFT Act 2009 requires us to retain certain transaction and identity records for a minimum of five years from the end of the business relationship
  • Suspicious Transaction Reports (STRs): where activity meets the reporting threshold under the AML/CFT Act, we are required to report this to the New Zealand Police Financial Intelligence Unit regardless of your consent
  • Regulatory licence conditions: our licence OGL/2023/174/0082 carries specific obligations around player protection, including responsible gambling controls and self-exclusion management

4.3 Fraud Prevention and Security

  • Detecting and blocking account takeover attempts
  • Identifying and preventing bonus abuse, chip dumping, and collusion
  • Screening against sanctions lists and politically exposed persons (PEP) databases
  • Monitoring for unusual transaction patterns that may indicate money laundering

4.4 Customer Support

  • Responding to your enquiries via live chat, email, or phone
  • Investigating and resolving complaints
  • Verifying your identity when you contact support about sensitive account matters

4.5 Improving Our Services

  • Analysing which games and features players use most, to inform decisions about the game library and lobby layout
  • Testing and improving the performance of the Jelly Bean Casino mobile app on iOS and Android
  • Understanding player flow through the registration and deposit process to remove unnecessary friction

4.6 Marketing Communications

Where you have opted in to receive promotional communications, we use your email address and account preferences to send information about reload bonuses, new game releases, and seasonal promotions. You can withdraw this consent at any time by using the unsubscribe link in any marketing email or by contacting us directly at support@jelly-bean-casino-nz.com. Withdrawing marketing consent does not affect your ability to use the platform.

5. AML/CFT Obligations and What They Mean for You

Jelly Bean Casino is a reporting entity under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009. This has specific practical implications for how we handle your data.

When you register, you are entering into a business relationship with us as defined under AML/CFT legislation. Before we can process a withdrawal, we are legally required to verify your identity to a standard that satisfies our obligations under the Act. This means that even if you have been playing with us and your account shows a positive balance, we cannot release funds to you until identity verification is complete.

Ongoing transaction monitoring is a continuous requirement, not a one-time check. If your account activity triggers our automated risk controls, we may request additional documentation about the source of funds deposited into your account. Declining to provide this information may result in account restrictions as required by law.

In circumstances where we form a reasonable suspicion that a transaction may relate to money laundering or the financing of terrorism, we are required by law to file a Suspicious Transaction Report with the New Zealand Police Financial Intelligence Unit. We cannot notify you that such a report has been made, as doing so is itself a criminal offence under the Act (known as “tipping off”).

Records collected for AML/CFT purposes are retained for a minimum of five years after the end of the business relationship, in accordance with section 49 of the AML/CFT Act 2009.

6. Sharing Your Personal Information

We do not sell personal information. We do not share it with advertisers. The following are the categories of third parties with whom we share your data, and why.

6.1 Payment Processors

To process deposits and withdrawals through Visa, Mastercard, Apple Pay, Google Pay, Bitcoin, Ethereum, and USDT, we share the minimum necessary information with the payment processors who handle each transaction type. These providers process your payment data in accordance with their own privacy policies and applicable financial regulation.

6.2 Identity Verification Providers

Where we use a third-party service to assist with KYC document checks, your identity documents and the verification outcome are processed by that provider under a data processing agreement. We select providers that meet appropriate security standards for the handling of identity documents.

6.3 Game Software Providers

Our game library is supplied by studios including Play’n Go, Evolution, Playtech Live, PG Soft, BGAMING, Evoplay, Ezugi, Spribe, and others. When you play a game, your session data (bets placed, game outcomes, RNG seed data) is processed by the relevant studio’s servers to run the game. The data shared is limited to what is technically required to operate the game session; personal account details are not passed to game providers.

6.4 Regulatory and Law Enforcement Authorities

We share information with New Zealand regulatory bodies and law enforcement agencies where we are legally required to do so. This includes, but is not limited to:

  • Disclosures to the New Zealand Police Financial Intelligence Unit under the AML/CFT Act 2009
  • Responses to lawful requests from the Department of Internal Affairs in its capacity as gambling regulator
  • Responses to court orders, subpoenas, or other legally binding demands for information

6.5 Responsible Gambling Organisations

We partner with Gambling Therapy and BeGambleAware to support players who need help managing their gambling. If you are enrolled in our self-exclusion programme, limited information may be shared with these organisations to support your exclusion across affiliated platforms. Where this occurs, it is done with your knowledge and is explained at the time of enrolment.

6.6 Technology and Infrastructure Providers

Our website and mobile applications are supported by hosting, analytics, and security infrastructure providers. These providers act under our instruction and under data processing agreements that restrict them from using your data for their own purposes.

7. Cookies and Tracking Technologies

Jelly Bean Casino uses cookies and similar technologies on our website and app. A separate Cookie Policy covers this in full detail, but the key points are as follows.

7.1 Types of Cookies We Use

  • Strictly necessary cookies: these keep you logged in between pages, maintain your session when you are playing a game, and remember your language and currency settings. These cookies cannot be disabled without breaking core site functionality
  • Analytics cookies: these track which pages you visit, how long you spend on them, and how you move through the site, helping us understand how the platform is being used. We use aggregated and anonymised data from these cookies for internal improvement purposes
  • Functional cookies: these remember your preferences, such as whether you prefer the mobile browser experience or the app, and which game categories you browse most often
  • Marketing cookies: where you have consented, these track conversions from promotional campaigns and help us understand which bonus offers are bringing new registrations. You can withdraw this consent via your browser cookie settings or through our cookie preference centre

7.2 Managing Cookies

Most browsers allow you to block or delete cookies through their settings. Blocking strictly necessary cookies will affect your ability to use the Jelly Bean Casino platform. Blocking analytics or marketing cookies will not affect your ability to play games or make transactions. Instructions for managing cookies on the most common browsers are available through the settings or help section of each browser.

8. Data Retention

We keep your personal information for as long as it is needed for the purpose it was collected. The following retention periods apply to different categories of data.

  • Account and identity verification data: retained for a minimum of five years from the date your account is closed or becomes inactive, as required by the AML/CFT Act 2009. After this period, data is securely deleted unless a longer retention period is required by law or regulatory guidance
  • Transaction records: retained for five years from the date of each transaction, in line with AML/CFT record-keeping requirements
  • Gameplay and session data: retained for the duration of your account and for three years following account closure, for purposes of dispute resolution and audit
  • Support communications: retained for three years from the date of the last interaction, in case of follow-up enquiries or complaints
  • Responsible gambling records (deposit limits, self-exclusion): retained indefinitely where self-exclusion is in place, and for five years following the end of any other responsible gambling measure, to prevent accidental reinstatement
  • Marketing preferences: retained until you withdraw consent, after which we delete your marketing profile within 30 days

9. Security of Your Personal Information

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or disclosure. These include:

  • SSL/TLS encryption across all connections between your browser or app and our servers
  • Encryption of sensitive data fields at rest, including identity document copies and payment references
  • Access controls that restrict employee access to personal data on a need-to-know basis
  • Session security controls, including automatic timeout after periods of inactivity
  • Regular security assessments and penetration testing of our infrastructure
  • Separation of player funds from operational accounts, which protects your balance from business-side financial issues

No system connected to the internet can guarantee absolute security. If you suspect that your Jelly Bean Casino account has been accessed without your authorisation, contact us immediately at support@jelly-bean-casino-nz.com or call +64 9 868 1504.

10. Your Rights Under the Privacy Act 2020

The Privacy Act 2020 gives you specific rights over your personal information held by New Zealand agencies. The following rights apply to information we hold about you.

10.1 Right to Access Your Information

You have the right to request access to the personal information we hold about you. We will respond to access requests within 20 working days of receiving a valid request, as required by the Privacy Act 2020. We may ask you to verify your identity before releasing information, to ensure we are disclosing it to the right person.

10.2 Right to Correct Your Information

If you believe that personal information we hold about you is inaccurate, out of date, or incomplete, you have the right to request a correction. We will take reasonable steps to correct the information if we agree the correction is warranted, or we will attach a notation to the record indicating that you have requested a correction we declined to make.

10.3 Right to Complain

If you believe we have handled your personal information in a way that breaches the Privacy Act 2020, you can raise a complaint with us first by contacting our support team. If you are not satisfied with our response, you can escalate the complaint to the Office of the Privacy Commissioner at www.privacy.org.nz.

10.4 Limitations on Your Rights

Some requests to access or delete personal information cannot be fulfilled where we are legally required to retain it. In particular, identity verification records and transaction history kept under the AML/CFT Act 2009 cannot be deleted early at a player’s request, as deletion would put us in breach of our legal obligations. Where a request cannot be fulfilled, we will explain why in writing.

10.5 How to Exercise Your Rights

To make an access request, correction request, or privacy complaint, contact us through any of the following:

11. Age Verification and the 18+ Requirement

Jelly Bean Casino is strictly an 18+ service. The Gambling Act 2003 makes it a criminal offence for a person under 18 to gamble, and for a gambling operator to knowingly permit gambling by a person under 18.

We collect date of birth at registration and verify it against government-issued identification during the KYC process. Where we have reasonable grounds to suspect that an account holder may be under 18, we will suspend the account and request age verification documentation immediately. Any account found to be held by a person under 18 will be closed and any funds returned, subject to the outcome of our investigation.

If you are aware of a minor accessing gambling services through our platform, please report this to us at support@jelly-bean-casino-nz.com as a matter of urgency.

12. Responsible Gambling and How We Use Your Data to Protect You

Our responsible gambling tools sit inside your account settings and are available without needing to contact support. These include deposit limits, session time limits, cool-off periods, and self-exclusion. The data associated with these settings is handled as follows:

  • Deposit and session limit settings are applied immediately and can only be reduced without a cooling-off period. Increases to limits require a waiting period before taking effect, to prevent impulsive decisions from overriding protections you have put in place
  • Self-exclusion records are retained indefinitely to prevent reinstatement and to support any future exclusion across affiliated services
  • Your responsible gambling activity is not shared with advertisers or used to target you with promotional content
  • Where our automated monitoring systems identify patterns that may suggest problem gambling behaviour, our responsible gambling team may make contact proactively. This use of your data is expressly permitted under our licence conditions and does not require your prior consent

If you need support with your gambling, you can reach Gambling Therapy at gamblingtherapy.org or BeGambleAware at gambleaware.org, both of which provide free, confidential support.

13. International Data Transfers

Some of the third-party services we use to operate Jelly Bean Casino are based outside New Zealand. This includes certain game software providers, cloud hosting infrastructure, and payment processing partners. Where personal information is transferred outside New Zealand, we take steps to ensure it receives a comparable level of protection to that required under the Privacy Act 2020.

These steps may include entering into standard contractual clauses with recipients, confirming that the receiving country has comparable privacy laws, or ensuring the recipient is subject to binding corporate rules or equivalent safeguards. If you wish to find out more about the specific countries to which your data may be transferred, contact us at support@jelly-bean-casino-nz.com.

14. Changes to This Policy

We update this Privacy Policy from time to time to reflect changes in our services, changes in applicable law, or improvements in how we explain our practices. When we make material changes, we will notify registered players by email to the address on your account, or by displaying a prominent notice on the Jelly Bean Casino website and app before the changes take effect.

Continuing to use your account after a policy change takes effect constitutes acceptance of the updated terms. If you do not agree with a material change, you may close your account by contacting our support team before the new policy takes effect.

15. Contact Us

All privacy-related enquiries, access requests, and complaints should be directed to our team. We aim to respond to all written enquiries within five working days, and to access requests within 20 working days as required by the Privacy Act 2020.

If you are not satisfied with our response to a privacy complaint, you can refer the matter to the Office of the Privacy Commissioner of New Zealand at www.privacy.org.nz. The Commissioner can investigate complaints about breaches of the Privacy Act 2020 and, where appropriate, make recommendations or refer matters to the Human Rights Review Tribunal.

Bonus

for first deposit

$1,100 + 250 FS