We collect only what we need to run the draw, do not request payment information, do not sell entry data and do not place entrants on a marketing list. You may ask to access or correct your information at any time.
1. Who is responsible
Galenori Promotions, trading for this campaign as Aurum Crest Casino, is responsible for the personal information described in this notice. In New Zealand privacy terminology, we are the “agency” collecting that information.
Privacy Officer: privacy@galenori.com
General enquiries: hello@galenori.com
Location: Auckland, New Zealand
2. Information we collect
When you enter
- your full name and email address;
- your confirmation that you are aged 18+ and ordinarily resident in New Zealand;
- your acceptance of the Official Rules and this notice;
- submission time and basic technical delivery information used for security, troubleshooting and duplicate detection.
If you are a provisional winner
- your chosen shirt design and size;
- your delivery name, New Zealand street address and, if needed by the courier, a contact phone number;
- reasonable evidence of age, identity and residency where verification is required;
- correspondence about verification, selection and delivery.
When you contact us
We collect the information in your message, your contact details and the records needed to respond. Please do not send identity documents unless we specifically request them through an official @galenori.com address.
We do not request or intentionally collect card numbers, banking passwords, gambling account details, payment information or special-category information for entry.
3. Why and how we use information
| Administer entries | Record valid submissions, apply the one-entry rule and maintain an eligible draw list. |
|---|---|
| Conduct the draw | Assign entry identifiers, select winners and reserves at random, and retain a limited audit record. |
| Contact and verify | Notify provisional winners and confirm age, residency and identity where reasonably necessary. |
| Deliver prizes | Confirm design and size, prepare the winner pack and arrange tracked New Zealand delivery. |
| Protect the promotion | Detect duplicate, automated, fraudulent or malicious submissions and investigate security incidents. |
| Respond and comply | Answer enquiries, manage complaints and meet applicable legal obligations. |
Providing entry information is voluntary, but we cannot accept or administer an entry without the required fields and confirmations. Entering the promotion does not give us consent to send general marketing. If we introduce a newsletter in future, it will require a separate, optional choice.
5. Overseas processing
Some website, form-delivery, email or cloud providers may process or store information outside New Zealand. Privacy protections in another country may differ from those in New Zealand. Before using a provider, we take reasonable steps appropriate to the service and information involved, such as reviewing privacy and security commitments and limiting the data shared.
Where an overseas disclosure is subject to Information Privacy Principle 12 of the Privacy Act 2020, we will use an available lawful basis and take reasonable steps to ensure comparable safeguards, or seek express authorisation after explaining the possible consequences.
6. How long we keep information
- Unsuccessful and unclaimed entry records: deleted or de-identified within 90 days after all prizes are awarded and delivery issues are resolved, unless needed for a live complaint or legal requirement.
- Winner and draw audit records: retained for up to 12 months after final delivery to document fair administration and answer promotion-related queries.
- Identity evidence: reviewed only if needed and deleted as soon as verification is complete, normally within 30 days.
- Enquiry and complaint records: kept only as long as reasonably necessary to resolve the matter and meet applicable obligations.
When information is no longer required, we delete it or remove identifiers so it can no longer reasonably be linked to an individual.
7. How we protect information
We use safeguards appropriate to a small promotional campaign, including encrypted HTTPS transmission, access-controlled accounts, limited staff access, strong authentication, duplicate and spam controls, and secure deletion practices. Delivery details are shared only with people and providers who need them.
No internet service can promise absolute security. If a privacy breach occurs, we will contain and assess it promptly. Where the Privacy Act 2020 requires notification, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable.
8. Access, correction and other requests
You may ask us to confirm whether we hold personal information about you, access that information or correct it. You may also ask a question about use or retention, or withdraw an entry before the draw closes.
Email privacy@galenori.com with “Privacy request” in the subject line. Tell us the email address used to enter so we can locate the correct record. We may ask for proportionate identity verification before releasing or changing information.
We aim to acknowledge requests within two business days and respond within the period required by New Zealand law. If you are not satisfied, you may contact the Office of the Privacy Commissioner.
9. Browser storage and technical data
This website does not use advertising cookies, behavioural tracking pixels or third-party analytics. JavaScript uses temporary session storage for two essential interface functions:
- remembering your 18+ confirmation while the browser tab remains open; and
- keeping the displayed campaign entry counter consistent during the same session.
Session storage is normally cleared when you close the browser tab. You can block it in your browser; the site will still display, but the age prompt or counter may reset between page views. Our host may keep ordinary server logs such as IP address, request time, browser type and requested URL for short-term security, reliability and abuse prevention.
10. Updates and contact
We may update this notice if the promotion, providers or law changes. A material change will be dated clearly and, where practical, highlighted on this page. Changes will not be used to introduce unrelated marketing uses for information already collected without an appropriate lawful basis.
Privacy Officer
Galenori Promotions · Auckland, New Zealand
privacy@galenori.com