Rainbet Casino Privacy & Data Protection

How We Handle Your Personal Data

We collect personal data at registration and during account verification: name, date of birth, nationality, gender and a photo ID, processed through our verification provider Sumsub. Proof of address is checked electronically against two databases, and if that fails we request a utility bill, government letter or bank statement dated within the last three months. For certain transactions we may also ask for source-of-funds documents such as employment records, business ownership proof or inheritance records.

Screening and Monitoring

We run PEP, adverse media and sanctions screening against UN, OFAC and EU lists via Sumsub, and crypto deposits and withdrawals pass through Elliptic blockchain analytics. Transaction monitoring operates in three tiers: automated AI checks, employee review and manual audits. Our wider anti-money-laundering framework follows the EU 6AMLD, Regulation (EU) 2015/847, FATF recommendations, GDPR and Anjouan AML law, with an annual enterprise-wide risk assessment and annual staff training, under AML policy version 1.2, updated 8 April 2026.

We keep KYC documents and transaction records for 10 years from collection, as required under our AML framework.

Data We Collect and Why

The table below sets out the main categories of personal data we process, the purpose behind each, and how long we keep it.

These retention periods reflect our obligations under the EU 6AMLD, GDPR and Anjouan AML law, and apply equally whether you fund your account through Pix, Interac or one of the supported cryptocurrencies.

Your Rights and Account Security

Registration takes under two minutes and asks only for an email address, a unique username and a password, with age and terms confirmed before an email verification link activates the account. Because verification and transaction data feed directly into our AML screening, we cannot delete records tied to an active or recently closed account before the 10-year retention period lapses, even where self-exclusion has been applied.

If you choose a cool-off period or self-exclusion through our account tools, the restriction cannot be reversed early, and after self-exclusion an account stays closed for a mandatory 90 days before permanent closure can be requested. Security on our side includes 128-bit SSL encryption across the platform, and for our in-house Originals we publish SHA-256 provably fair data so round outcomes can be independently verified.

Queries about how your data is used, including complaints, can be raised through our dedicated complaints email or contact form, with full name, contact details and a description of the request; we acknowledge within 2 business days and reply within 10 business days, escalating unresolved cases to our Compliance Manager for a final determination within 30 days.