Privacy Policy

1) What we collect

• Account data: name/username, email, password hash, date of birth (to help verify eligibility), preferences, support messages.
• Gameplay & transactions: virtual currency balances, game events, rewards/redemptions, purchases (if available), fraud/safety signals. Virtual items have no cash value unless we state otherwise.
• Device/analytics data: IP address, device identifiers, browser/app details, approximate location (from IP), cookies/local storage, log files, referral/usage metrics.
• Marketing preferences: consent/opt-in status and communication choices.

2) How we use information

• Provide and maintain the service, create/secure accounts, deliver gameplay features.
• Operate payments (where applicable), prevent fraud, enforce rules, and keep the platform safe.
• Analytics to understand performance and improve games, content, and user experience.
• Customer support and responding to requests.
• Marketing only where permitted: product updates, offers, and surveys. You can opt out anytime.

3) Cookies & similar technologies

We use cookies/local storage for essential functions (sign-in, security), preferences, and analytics. You can control cookies in your browser/device settings; some features may not work without essential cookies.

4) Sharing and disclosures

We do not sell personal information. We may share it with trusted service providers that help us run the service (hosting, analytics, email/SMS delivery, customer support tools, payment processing where applicable), under contracts requiring appropriate safeguards. We may also disclose information to comply with law, respond to lawful requests, protect users, investigate misuse, or protect our rights.

5) Storage, security, and retention

We store information using reasonable security safeguards (access controls, encryption where appropriate, monitoring). No system is completely secure. We keep information only as long as needed for the purposes above, to meet legal/accounting requirements, and to resolve disputes; then we delete or de-identify it where practicable.

6) International transfers

Some providers may process or store information outside New Zealand. When we do this, we take steps to ensure comparable privacy protections (for example, contractual requirements and provider due diligence), consistent with the Privacy Act 2020.

7) Your rights (NZ Privacy Act 2020)

• You can request access to, or correction of, your personal information.
• We may ask to verify your identity. We aim to respond within 20 working days (or explain any extension permitted by law).
• You can opt out of marketing via account settings (if available) or the unsubscribe instructions in messages.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (OPC): privacy.org.nz.

8) Children

Our service is not intended for children. If you believe a child has provided personal information, contact us to request deletion.

9) Changes

We may update this policy from time to time. We will post the updated version on pounamuluck.com with a new effective date.