Payments at a licensed NZ online casino
The Minimum Standards, made by the Secretary for Internal Affairs under section 80 of the Act, ask four things of the payment side:
- Payment service providers used to process transactions must meet the card industry data security standard, PCI DSS version 4.0.1.
- Every transaction must be traceable to one customer account.
- Customers may switch on multi-factor authentication for sensitive actions, including adding a new deposit or withdrawal method.
- A customer who sets deposit limits can only raise or remove them after waiting at least 24 hours.
Credit
DIA's guidance says providers must not offer credit to people in New Zealand for gambling. It tells exiting providers to discontinue any gambling-related credit facilities.
What DIA says about money when a casino leaves
A provider that stops serving New Zealand customers on 1 December 2026 is expected to return all money owing to them, balances and winnings included. Customers keep access to the account for contacting the provider, withdrawing funds and closing the account.
DIA's advice to providers is to tell customers early so they can withdraw uncommitted funds in good time.