Privacy Policy – Rainbow Riches Casino UK

Data We Collect

When you register and play at rainbow-riches-casino.uk, we collect the following categories of personal data:

• Identity data – full name, date of birth, username
• Contact data – email address, postal address, phone number
• Financial data – payment method details, transaction history
• Verification data – copies of ID documents (passport, driving licence, utility bills)
• Technical data – IP address, device type, browser, login timestamps
• Usage data – games played, session duration, betting history
• Communications data – records of messages sent to our support team

How & Why We Use Your Data

We use your personal data only for the purposes listed below, each supported by a lawful legal basis under UK GDPR:

Cookies

rainbow-riches-casino.uk uses cookies and similar tracking technologies to keep you logged in, remember preferences, and analyse site usage. Essential cookies are always active as they are necessary for the site to function. Analytics and marketing cookies are only placed with your consent, which you can manage via the cookie banner or your browser settings at any time.

Data Retention

We retain your personal data for as long as your account is active and for a minimum of 5 years after closure, in line with UKGC licence requirements and UK financial crime regulations. Transaction and identity records may be kept for up to 7 years to comply with anti-money-laundering obligations. When retention periods expire, data is securely deleted or anonymised.

Sharing Your Data

We do not sell your personal data. We share it only where necessary with:

• Payment processors – to handle deposits and withdrawals securely
• Identity verification providers – to perform KYC and age checks
• UKGC and regulatory bodies – when required by law or licence conditions
• Fraud prevention agencies – to protect against financial crime
• IT infrastructure providers – who process data on our behalf under strict data processing agreements

All third-party processors are contractually bound to handle your data in compliance with UK GDPR.

Your Rights

As a UK resident, you have the following rights regarding your personal data:

• Right of access – request a copy of all data we hold about you
• Right to rectification – ask us to correct inaccurate or incomplete data
• Right to erasure – request deletion of your data (subject to legal retention obligations)
• Right to restrict processing – limit how we use your data in certain circumstances
• Right to data portability – receive your data in a structured, machine-readable format
• Right to object – object to processing based on legitimate interest
• Right to withdraw consent – for any processing based on your consent (e.g. marketing)

To exercise any of these rights, contact our Data Protection team via the Help Centre at rainbow-riches-casino.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Security

rainbow-riches-casino.uk protects your data using 128-bit SSL encryption — the same standard used by major UK banks. Player funds are held in segregated accounts, separate from operational finances. Access to personal data is restricted to authorised personnel only and all staff handling player data undergo regular training. We conduct periodic security audits to identify and address any vulnerabilities.

Contact & Data Controller

The data controller for rainbow-riches-casino.uk is the brand operating under UKGC licence 38905. For any data protection queries, subject access requests, or complaints, please contact us via the Help Centre on the site. For independent advice or to report a concern about how your data is handled, you may contact the ICO at ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.