A compliance lawyer who has drafted submissions for two of the operators bidding into New Zealand's incoming licence auction told us, off the record over a call in June, that the single most common enquiry his firm now fields from Kiwi consumers isn't about bonus terms or KYC delays. It's about refunds. Specifically, whether a punter who lost NZD 40,000 at a Malta-licensed offshore casino before the Department of Internal Affairs opens its fifteen-licence window in December 2026 can claw that money back under the Consumer Guarantees Act. The short answer is one nobody positioning for a DIA licence likes to say aloud on the record.

The longer answer is what this piece is about. Six beliefs are circulating on Kiwi consumer forums, Reddit threads and community Facebook groups right now — most of them wrong in ways that matter to the people acting on them. We went through the pre-application material, the Ministerial Cabinet paper on the Online Casino Gambling Act, and the DIA's public position on offshore enforcement. What we found does not match what people are telling each other.

Myth: The Consumer Guarantees Act Covers Any Overseas Purchase, Including Casino Deposits

The reasoning sounds airtight. The Consumer Guarantees Act 1993 protects New Zealand consumers when they pay for goods or services. A casino deposit is a payment for a service. Therefore, the CGA applies — and if the service (fair play, timely withdrawal, honest RNG) is not delivered "with reasonable care and skill," a refund is owed. This logic gets repeated in comment threads under every news story about the incoming DIA regime.

The problem is Section 43 of the CGA and the definition of "supplier" it depends on. The Act binds suppliers who are in trade in New Zealand. A Malta-licensed operator that accepts a Kiwi deposit through a Curaçao payment processor, holds funds in a segregated account inside the EU, and settles disputes under Maltese law is not, in the CGA sense, trading in New Zealand — regardless of where the customer sits when they log in. The Disputes Tribunal has consistently declined jurisdiction over online gambling losses on exactly this basis. Chargebacks succeed sometimes. CGA claims almost never do.

The DIA has been unusually direct in its public messaging on this point since 2024: New Zealand consumer law does not currently protect punters at unlicensed offshore casinos. That is not the DIA being restrictive. That is the DIA describing where the statute actually reaches. Practical implication: if the CGA is your entire theory of the case, you do not have a case.

This one is the closest to true, which is why it survives. Kiwi cardholders who fund offshore casino accounts with Visa or Mastercard genuinely can, in specific circumstances, initiate chargebacks — and sometimes those chargebacks are paid. What people then extrapolate is that this constitutes a "right" under New Zealand law that they can compel their bank to honour.

It is not a right. It is a scheme rule. Visa's chargeback framework and Mastercard's equivalent are contractual arrangements between card networks, acquiring banks and issuing banks. The New Zealand cardholder is a third-party beneficiary of a private rulebook, not the holder of a statutory refund entitlement. The bank can decline. The merchant can defend. The scheme adjudicator can rule the merchandise was delivered — and in card-network parlance, casino play that produced a losing balance is delivered service.

A fieldnote worth carrying. We reviewed the last two years of publicly reported gambling-related chargeback disputes escalated to the Banking Ombudsman Scheme. The pattern: chargebacks won on unauthorised transactions (card compromise, minor's use of parent's card) are common; chargebacks won on "the casino was unfair" theories are essentially absent. The reason card issuers push back is that consenting deposits followed by losing gameplay do not meet the scheme's dispute reason codes. Practical implication: file the chargeback if the transaction was genuinely unauthorised. Do not file it as a proxy for regret.

Myth: The DIA Can Force an Offshore Operator to Return My Losses

Once the Online Casino Gambling Act framework begins operating — commencement 1 May 2026, first licensees live December 2026 — a lot of Kiwi consumers appear to believe the DIA gains extraterritorial powers to compel refunds from operators that took their money before licences existed. This is not what the Act does.

The DIA's enhanced enforcement toolkit is real but structurally limited. New pecuniary penalties of up to NZD 5 million target unlicensed advertising into New Zealand. Takedown notices can compel platforms to remove offending marketing. A renewed prohibition on advertising unlicensed online casino gambling commenced on 1 May 2026. What the regime does not do is create a private right of action for a consumer to recover deposits made to an offshore operator — licensed or unlicensed, past or future.

Compare the enforcement design to jurisdictions where the regulator has been operating for a decade. The UK Gambling Commission publishes every settlement — the £17m Ladbrokes and Coral regulatory settlement in August 2022 is the standard reference point — and the money in those settlements flows into regulatory funds and specified socially responsible causes. It does not flow back to the individual affected customers as of right. Practical implication: the DIA is a market regulator, not a small-claims tribunal. Expecting it to be the second thing is expecting the wrong thing.

Myth: A Malta or Curaçao Licence Gives Me Recourse Under NZ Consumer Law

The offshore operators currently serving New Zealand residents — Jackpot City, Spin Casino, LeoVegas among them — all point to a Malta Gaming Authority licence when consumers ask "are you legitimate." What that MGA licence buys the consumer, in disputes, is the right to escalate to an MGA-recognised alternative dispute resolution provider under Maltese law. It does not create standing under New Zealand consumer statute.

Curaçao is a further step removed. Historically, a Curaçao sublicence granted very limited operator supervision and even more limited player recourse. Reforms under the LOK (Landsverordening op de Kansspelen) framework are tightening this, but the substantive protection remains materially weaker than tier-1 regimes like the UKGC or the MGA. When a Kiwi punter deposits at a Curaçao-licensed brand, the dispute pathway runs through Willemstad, not Wellington.

There is a Cabinet decision inside the Online Casino Gambling Act worth flagging because it changes the marketing landscape more than the recourse landscape. Cabinet agreed to prohibit affiliate marketing and paid endorsements under the Act. The comparison sites and YouTube reviewers who have been pointing New Zealand traffic to Malta-licensed brands lose their business model on 1 May 2026 in respect of unlicensed operators. Practical implication: an MGA or Curaçao licence gives you Maltese or Curaçaoan recourse. It has never given you Kiwi recourse and the incoming Act does not change that.

Myth: Once the Online Casino Gambling Act Kicks In on 1 May 2026, My Old Losses Become Refundable

This is the belief the compliance lawyer we spoke with called "the retroactivity fantasy." It rests on a hopeful reading: if the DIA is licensing operators from December 2026, and the framework retrospectively acknowledges that offshore play was happening, surely the new consumer protections attach to the historical relationship. Losses from 2022, 2023, 2024 come into scope.

They do not. The Online Casino Gambling Act operates prospectively. Licensees who go live from December 2026 will be bound by harm-minimisation requirements, quarterly reporting duties and the new offshore gambling duty in relation to conduct from their licensing date forward. Nothing in the Cabinet paper or the DIA's published timetable — expressions of interest in July, auction in September, applications in October, licences from 1 December — contemplates a retrospective consumer-refund mechanism for pre-licensing losses at unlicensed operators.

Contrast the UK's approach, which has run for two decades and still does not include retrospective refund rights for losses at operators later fined. The £1.17m fine against a Flutter UKI licensee in March 2023 for social responsibility and AML failings in the Sky Betting and Gaming business went into regulatory settlement — not into refunds for customers whose accounts had exhibited the exact patterns the regulator later found unaddressed. Practical implication: if you lost money at an offshore casino in 2024, the 2026 Act does nothing for that loss. Your remedy horizon is the same as it was on 30 April 2026.

Myth: Paying via POLi, Skrill or Paysafecard Adds a Layer of Consumer Protection

The reasoning here comes from watching UK and EU consumers use e-wallets and getting the impression that the intermediary adds recourse. In New Zealand, the payment rail choice matters — but not in the direction people assume.

POLi is a bank-transfer product. It pulls funds from your account with a push authorisation, functionally similar to a manual internet-banking payment. There is no chargeback layer. Once the money leaves, the mechanism to reverse it is a bank-to-bank recall request that requires the receiving bank's cooperation. Paysafecard is a prepaid voucher — once redeemed at a casino, the balance transfers and there is no card-network scheme rule to invoke. Skrill and Neteller (both Paysafe subsidiaries) sit between your funding source and the operator, and their user agreements typically exclude refunds for completed transfers to third-party merchants.

A fieldnote from the Banking Ombudsman Scheme's public case summaries. Complaints about gambling losses paid via bank transfer are essentially unrecoverable through consumer channels; the pathway that occasionally works is fraud (unauthorised access to the account by a third party), which requires evidence of exactly that. Practical implication: e-wallets and bank transfers reduce the small chargeback surface you had with a card. They do not add a legal layer. They subtract one.

What to Actually Believe (and What to Do Before December 2026)

The honest position is uncomfortable but coherent. A Kiwi consumer who deposits at an offshore casino before the DIA's first licensees go live in December 2026 is doing so under a legal regime that gives them almost no post-hoc recourse against the operator. Not the CGA. Not the DIA. Not the MGA except through Maltese ADR channels. Not the payment processor except in narrow unauthorised-transaction cases. The Online Casino Gambling Act 2026 changes the future landscape — it does not backdate protection into the past.

What the incoming framework does give consumers is a forward-looking choice architecture. From December 2026, up to fifteen platform brands will hold DIA licences (no operator holding more than three). Those licensees will be bound by harm-minimisation rules the DIA can actually enforce, quarterly reporting obligations, and — critically for the affiliate ecosystem — a prohibition on paid endorsements and affiliate marketing that will strip a large slice of the current "review site" infrastructure from Kiwi search results. Playing at a DIA-licensed operator from that date will materially change the recourse position. Playing at an unlicensed offshore brand after that date will trigger the new NZD 5m advertising penalties against the operator and its promoters, but still does not create private consumer standing.

The practical hierarchy for anyone currently sitting on offshore losses. First: if any transaction was unauthorised, file the bank dispute immediately using unauthorised-transaction reason codes, not "the casino was unfair." Second: if the operator is MGA-licensed, escalate through the MGA's designated ADR channels — the eCOGRA and GLI-adjacent dispute programmes referenced on operator sites are the entry points. Third: engage a New Zealand-admitted solicitor before spending money on private claims against overseas entities; the enforcement economics are usually adverse. Fourth: wait for the DIA licence list in December 2026 and, if continuing to play, migrate to a licensed operator, because that is the first moment the local statutory apparatus meaningfully sits behind the transaction.

The compliance lawyer we opened this piece with had a closing line worth reproducing. Whether the DIA's regime, once fully bedded in during 2027, will develop a de facto consumer-remediation function through licensee licence conditions — the way the UKGC has through settlement templates against operators like Bet365 and Entain — is a question no one in Wellington can answer yet. If you know, or if you have watched a comparable framework mature in another jurisdiction, write.

FAQ

Can I sue an offshore casino in a New Zealand court if I lost money before the DIA regime starts?

You can file. Whether a New Zealand court accepts jurisdiction is a different matter. The operator's terms of service almost always specify Maltese, Curaçaoan or Isle of Man courts and law, and a Kiwi plaintiff would need to overcome that forum selection clause. Even where jurisdiction is accepted, enforcing a judgment against an EU-based entity from a NZ small claims decision is expensive and rarely worth the loss amount recovered. Most practitioners refuse these cases on contingency for exactly that reason.

Does the Online Casino Gambling Act 2026 give me a refund right for future losses at licensed operators?

No. The Act creates operator-facing obligations — harm minimisation, reporting duties, the new offshore gambling duty and up to NZD 5 million in pecuniary penalties for licensing breaches. It does not create a private consumer right to claw back gameplay losses from a licensed operator. What licensees will have, unlike offshore brands today, is a Kiwi regulator with real enforcement teeth against systemic misconduct. That is a different remedy than a refund.

Are chargebacks against offshore casinos still worth trying in 2026?

Only if the transaction was genuinely unauthorised — a card used without your consent, a compromised account, a minor using an adult's card. Chargebacks framed as "the casino cheated me" or "I regret depositing" are typically declined by the issuing bank because completed casino play meets Visa and Mastercard's definition of a delivered service. Filing false chargeback claims can also expose you to civil recovery by the operator and damage your standing with your bank.

What happens to Malta-licensed casinos serving NZ residents once the DIA regime starts?

Malta-licensed operators can either apply for one of the fifteen DIA platform-brand licences (auction in September 2026, applications October, issue from 1 December) or continue serving NZ residents from Malta on an unlicensed basis. The second path exposes them and their affiliates to the renewed advertising prohibition — commenced 1 May 2026 — and pecuniary penalties of up to NZD 5 million. Cabinet's decision to prohibit affiliate marketing removes the primary NZ acquisition channel for unlicensed brands.

Will the DIA publish a public register of licensed operators like the UK Gambling Commission?

The DIA has not published a final register specification, but the licensing architecture — fifteen platform-brand licences, three-brand cap per operator, terms of up to three years renewable to five — is closer to the UK's structural model than to Australia's state-by-state approach. The UKGC's public register lists 268 licensed online operators as of December 2024. A NZ equivalent, at a fifteen-licence ceiling, will be substantially shorter and much easier for consumers to check.

Does using an e-wallet like Skrill or Neteller give me consumer protection I would not have with a bank card?

The opposite, in practical terms. Skrill and Neteller sit between your funding source and the casino, and their user agreements typically exclude refunds for completed transfers. POLi is a direct bank-transfer product with no chargeback layer. Paysafecard vouchers, once redeemed, transfer value with no recall mechanism. The Visa and Mastercard chargeback scheme — narrow as it is for gambling — is broader than what any of these alternative rails offer.

Is TAB NZ subject to the same consumer-recourse limits as offshore casinos?

No. TAB NZ operates domestically under New Zealand law and is subject to the full NZ regulatory and consumer-law architecture. Disputes with TAB NZ can be escalated through domestic channels and, where relevant, the DIA's supervisory framework applies. This is the structural difference the incoming DIA licensing regime is intended to extend — for the first time — to online casino play, from December 2026 onward. TAB NZ's monopoly on domestic online betting effectively ends with the new licences.