burger icon
Royal Panda
Log In

Privacy Policy

This privacy policy explains how royals-panda.com, operated by royal-panda, collects, uses, discloses, and protects your personal information. It applies to all players and visitors accessing royals-panda.com or utilizing our services from New Zealand. Effective date: 6 November 2025.

Who We Are

OBSERVE: royal-panda operates royals-panda.com, providing online gambling services in compliance with international and NZ privacy regulations.
EXPAND: The company is registered under Malta law and holds an active Malta Gaming Authority license (MGA/CRP/237/2013), with headquarters at Level 7, The Plaza Business Centre, Bisazza Street, Sliema SLM 1640, Malta.
REFLECT: For privacy matters, our Data Protection Officer (DPO) or dedicated data protection department can be reached as follows:

  • Operator: royal-panda (LeoVegas AB, subsidiary of MGM Resorts International)
  • Legal Address: Level 7, The Plaza Business Centre, Bisazza Street, Sliema SLM 1640, Malta
  • Company Registration Number: not specified
  • Gaming Licence: B2C Gaming Service Licence (Type 1, 2, 3) No. MGA/CRP/237/2013 (Malta Gaming Authority, valid through 31 December 2025)
  • DPO/Privacy Contact: support@royals-panda.com
  • Online Contact Form: Live Chat

All privacy-related enquiries or complaints will be handled by our DPO or designated privacy officers, ensuring compliance with NZ and international standards.

What Personal Data We Collect

OBSERVE: royals-panda.com collects data essential for account operation, regulatory compliance, and service enhancement.
EXPAND: Data is gathered directly from users or through technical means during site usage.
REFLECT: Categories of personal data collected include:

  • Personal Identification Data: Full name, date of birth, residential address, nationality, email address, phone number, identity documents (for KYC/AML compliance).
  • Technical Data: IP address, device identifiers, browser type/version, operating system, log files, access times, session data.
  • Payment Data: Bank account details, payment card information, e-wallet identifiers, transaction records.
  • Behavioral Data: Betting history, account activity logs, game interactions, site navigation (clickstream), preferences.
  • Cookies and Tracking Technologies: Session and persistent cookies, third-party analytics and advertising cookies, device fingerprinting (see Cookies section for details).

Without provision of essential information, registration and participation in gambling activities may not be possible.

Legal Basis for Processing

OBSERVE: royals-panda.com processes personal data in accordance with applicable laws, including NZ Privacy Act 2020 and international standards.
EXPAND: Multiple legal grounds are applied, depending on processing purpose.
REFLECT: Legal bases include:

  1. User Consent: Data processed based on user consent for marketing communications, cookies, and certain optional features. Consent can be withdrawn at any time.
  2. Contract Fulfillment: Data needed to create and operate your account, process payments, deliver services, and provide customer support.
  3. Legitimate Interests: Processing for fraud prevention, IT security, service analytics, and direct marketing (subject to opt-out rights), provided such interests do not override user rights.
  4. Legal Obligations: Compliance with applicable laws and regulations (e.g., KYC/AML, anti-fraud, anti-money laundering, statutory reporting, regulatory audits, responsible gambling obligations).

Where legally required, we will request your explicit consent before processing sensitive personal information.

Regional Compliance Note: NZ Privacy Act 2020 and Maltese/EU GDPR standards are jointly observed for all NZ clients.

Purpose of Processing

OBSERVE: Data is processed for clearly defined, legitimate purposes.
EXPAND: Each processing activity is directly linked to operational or legal requirements.
REFLECT: Your personal data is used for:

  • Account Registration and Management: Allowing you to create, verify, and maintain your player account.
  • Service Provision: Enabling access to gaming services, processing bets, managing deposits and withdrawals.
  • Compliance and Security: Satisfying legal obligations (KYC/AML, fraud detection), ensuring regulatory compliance, and safeguarding the integrity of the platform.
  • Customer Support: Responding to queries, resolving complaints, and providing assistance via email or live chat.
  • Service Improvement and Analytics: Analyzing usage patterns to optimize features, enhance user experience, and improve platform security.
  • Marketing and Promotions: Sending promotional materials or personalized offers, subject to your marketing preferences and applicable consent requirements.

Disclosure & Sharing

OBSERVE: Disclosure occurs only where necessary, in accordance with legal and contractual obligations.
EXPAND: Data may be shared with regulated partners, authorities, and third parties under stringent safeguards.
REFLECT: Your personal data may be disclosed to:

  • Payment Partners: Banks, card processors, and e-wallet providers for transaction processing and verification.
  • Service Providers: IT services, hosting, analytics, customer support, and security vendors operating under strict confidentiality agreements.
  • Regulatory Authorities: New Zealand and Malta gambling regulators (including the Malta Gaming Authority), financial crime authorities, or other competent bodies as required by law.
  • Affiliates and Group Companies: Within the LeoVegas/MGM Resorts International group for internal administrative and compliance purposes.
  • Advertising Networks (with Consent): Third-party partners for marketing and advertising, subject to your explicit consent and applicable opt-out rights.

We do not sell or rent your personal data to unaffiliated third parties. Where required by law, you will be notified of any such disclosures and given the opportunity to object.

International Transfers

OBSERVE: Data may be transferred outside New Zealand, including to Malta and other jurisdictions involved in service provision.
EXPAND: All transfers are subject to robust legal protections and international standards.
REFLECT:

  • Destinations: Personal data may be transferred to Malta (head office jurisdiction), EU/EEA countries, and other regions where our service providers operate.
  • Protection Measures: We implement standard contractual clauses (SCCs), binding corporate rules, and rely on adequacy decisions as applicable to ensure continued protection of your information.
  • Compliance: All transfers meet the requirements of the NZ Privacy Act 2020 and the GDPR, ensuring your rights remain protected regardless of processing location.

For more information on cross-border data transfer safeguards, please contact our DPO at support@royals-panda.com.

Data Retention

OBSERVE: Data is retained only as long as necessary for the purposes stated and to meet legal/regulatory obligations.
EXPAND: Retention periods vary by data type and applicable laws.
REFLECT:

  • Personal Data: Retained for the duration of your account activity and up to 5 years after account closure or last transaction, as required for regulatory compliance (e.g., AML/KYC).
  • Transaction Data: Retained for 7 years to comply with financial and anti-money laundering regulations.
  • Marketing Data: Retained until consent is withdrawn or up to 2 years after last interaction.
  • Cookies and Technical Data: Retention periods vary by cookie type (see Cookies section below).

Data will be securely deleted or anonymized once retention periods expire or upon verified user request, unless further retention is required by law.

Your Rights

OBSERVE: You have comprehensive rights under the NZ Privacy Act 2020, the EU GDPR, and applicable Mexican data protection regulations (where relevant).
EXPAND: These rights ensure transparency, control, and legal remedies concerning your personal data.
REFLECT: Your rights include:

  1. Access: Request a copy of the personal data we hold about you.
  2. Correction: Request correction of inaccurate or incomplete information.
  3. Deletion: Request deletion of your personal data where permitted by law.
  4. Restriction: Request restricted processing under specified circumstances (e.g., contesting accuracy, objecting to processing).
  5. Objection: Object to processing for direct marketing or based on legitimate interests.
  6. Data Portability: Request transfer of your personal data to another service provider in a structured, commonly used, and machine-readable format.
  7. Withdraw Consent: Withdraw previously given consent for marketing or other optional processing at any time.

Procedures for Exercising Rights

  • Submit requests via email to support@royals-panda.com or through our live chat portal.
  • We will acknowledge and process your request within 30 days, free of charge, unless requests are manifestly unfounded or excessive (in which case a reasonable fee may apply).
  • If unsatisfied with our response, you may escalate your complaint to the NZ Office of the Privacy Commissioner or relevant EU/Mexican authorities.

Regional Compliance Note: This section is aligned with the NZ Privacy Act 2020, EU GDPR, and Mexican privacy regulations (where applicable to NZ users), ensuring maximum protection of your data rights.

Cookies & Tracking Technologies

OBSERVE: royals-panda.com uses cookies and tracking technologies to optimize your experience and ensure security.
EXPAND: Users are informed of cookie usage and provided with management options.
REFLECT:

  • Session Cookies: Temporary cookies that enable core site functionality and expire when you close your browser.
  • Persistent Cookies: Remain on your device for a set period to remember preferences and facilitate faster access on subsequent visits.
  • Third-Party Cookies: Used for analytics (e.g., Google Analytics), advertising, and social media integrations; subject to third-party privacy policies.

Cookie Purposes

  • Functional: Essential for navigation, security, and site operation.
  • Analytics: Collect anonymized usage data to improve services and detect technical issues.
  • Advertising: Deliver relevant promotions and measure campaign effectiveness, only with your consent.

Managing Cookies

  • Manage or disable cookies via your browser settings at any time.
  • Adjust cookie preferences through our internal cookie management panel, accessible on the first visit or via Cookie Policy.
  • Refusing certain cookies may impact site functionality or user experience.

Data Security

OBSERVE: royals-panda.com implements advanced security measures to protect your data.
EXPAND: All personal information is safeguarded in compliance with international security standards.
REFLECT:

  • Encryption: Data is encrypted in transit using TLS 1.2+ and at rest with industry-standard algorithms.
  • Access Controls: Strict user authentication, multi-factor authentication (MFA), and role-based access limit data exposure to authorized personnel only.
  • Security Audits: Regular internal and third-party audits, vulnerability assessments, and penetration testing are performed.
  • Staff Training: Employees undergo ongoing data protection and security training to ensure awareness of privacy obligations.
  • Incident Response: Documented procedures for detecting, reporting, and mitigating data breaches, including notification to affected users and authorities within legally mandated timeframes.
  • International Standards: Compliance with ISO 27001 and SOC 2 where applicable.

Regional Compliance Note: All security measures are adapted to meet NZ regulatory requirements and global best practices.

Complaints & Contacts

OBSERVE: royals-panda.com provides clear, accessible complaint channels.
EXPAND: Multiple contact options are available for privacy concerns, escalation, and regulatory recourse.
REFLECT:

Contact Channels

Complaint Procedure

  1. Submit your complaint using one of the above channels, providing a detailed description of your concern.
  2. Our DPO or privacy team will acknowledge receipt within 5 business days and provide an initial response within 30 days.
  3. If you are dissatisfied with our resolution, you have the right to escalate your complaint to the relevant supervisory authority:

We are committed to resolving all privacy complaints promptly and transparently.

Updates

OBSERVE: This privacy policy is reviewed and updated regularly.
EXPAND: Users are notified of any material changes in advance, with clear communication channels for queries or objections.
REFLECT:

  • Notification Procedures: We will notify you of significant policy updates by email, prominent website banners, and account dashboard alerts.
  • Advance Notice: For material changes, at least 30 days' advance notice will be provided before the updated policy takes effect.
  • User Options: If you disagree with the changes, you may object or close your account without penalty prior to the new policy's effective date.
  • Version Control: This policy is versioned as "Last updated: 6 November 2025". A changelog of material changes will be made available upon request.

Continued use of royals-panda.com after updates constitutes acceptance of the revised policy.