Rainbow Riches Casino Privacy Policy

Rainbow Riches Casino is operated by Gamesys Operations Limited, the data controller responsible for the personal information described on this page. We are licensed by the UK Gambling Commission under licence number 38905. Being a regulated operator brings obligations. We take them seriously.

This policy explains what we gather, why we need it, and how long we keep it. It also sets out the rights you hold over your own data and how to use them. If anything here is unclear, please get in touch through our contact page.

Retention is not open-ended. We hold your data for as long as your account is active and then for the periods that gambling, financial and tax law demand after closure. Verification and transaction records are generally kept for several years to satisfy anti-money-laundering rules. Once no legal purpose remains, we delete or anonymise what we hold.

We only ask for information that helps us run a safe, lawful service. Broadly, this falls into a few groups.

• Identity and contact details — your name, date of birth, address, email and phone number. These confirm you are 18 or over and let us reach you.
• Verification documents — ID, proof of address and proof of payment, used to meet our Know Your Customer and anti-money-laundering duties.
• Financial data — deposits, withdrawals and the payment method you choose, so transactions clear and payouts reach you.
• Gameplay and account activity — bets placed, sessions, limits set and bonuses claimed.
• Technical data — device type, IP address and browser information, collected partly through cookies.

Why so much? Regulation, fraud prevention and your own protection all require it.

We do not sell your data. We do share it, carefully, with trusted parties who help us operate.

Payment providers — including Visa, Mastercard, PayPal and Apple Pay — process your deposits and withdrawals. Identity-verification partners confirm your age and address. Game studios such as NetEnt, Pragmatic Play, Evolution and Light & Wonder power the titles you play, and some receive limited technical data. Analytics and fraud-prevention services help us keep the platform secure. Where the law or a regulator requires disclosure, we comply. Every partner is bound by contract to protect your information and use it only as instructed.

We never process data without a reason recognised in law. Different activities call for different bases.

Contract covers running your account and paying out winnings. Legal obligation covers age verification, KYC and anti-money-laundering checks that the UK Gambling Commission expects of us. Legitimate interests let us detect fraud, improve the service and keep play fair, provided those interests do not override your rights. Consent applies to optional marketing and non-essential cookies; you can withdraw it whenever you wish.

UK data-protection law gives you strong rights over your information. You may:

• Request access to the data we hold about you;
• Ask us to correct anything inaccurate (rectification);
• Request erasure, where no legal duty obliges us to keep it;
• Ask us to restrict or object to certain processing;
• Request portability — a copy in a reusable format.

To exercise any of these, write to us via the support channels and we will respond within the statutory timeframe. Unhappy with our answer? You may complain to the Information Commissioner's Office, the supervisory authority for data protection in the UK.

This policy works alongside our terms and conditions. For a full breakdown of the cookie categories we use and how to manage them, see the cookies section within those terms. If gambling stops being fun, support is free and confidential through GamCare on 0808 8020 133 or at gamcare.org.uk.