Privacy Policy of Rainbet Casino

1. Scope and responsible entity

This Privacy Policy explains how Rainbet Casino collects, uses, discloses, stores, and protects personal information relating to individuals in Canada who access or use its online casino services. It applies to account registration, gameplay, payment activity, customer support communications, identity verification, fraud prevention, and all other processing connected with the operation of the service.

Rainbet Casino is the responsible entity for the processing described in this document. For data protection matters, including questions about privacy rights or complaints regarding personal information handling, users may contact [email protected]. The casino operates under a Curaçao eGaming licence framework, and certain compliance processing may be required to satisfy licence conditions, anti-money laundering obligations, and responsible gambling requirements.

2. Categories of personal information collected

Rainbet Casino may collect personal information directly from users, automatically through technical systems, and from trusted third parties such as payment processors, fraud prevention providers, and identity verification services. The information collected depends on the user’s activity, the legal obligations applicable to the service, and the operational need to maintain a secure gambling environment.

Categories of personal information may include:

Account and master data, such as full name, date of birth, residential address, province or territory, email address, telephone number, username, and account identifiers.
Identity verification data, including copies or extracts of government-issued identification, proof of address, selfie verification, age verification results, and source-of-funds information where required.
Financial and transaction data, such as deposit and withdrawal records, payment method details, transaction references, chargeback information, and payment risk indicators.
Technical data, including IP address, device identifiers, browser type, operating system, approximate geolocation, login timestamps, session duration, and security logs.
Usage and gameplay data, including game selections, betting history, bonuses accepted, responsible gambling limits, self-exclusion status, customer support messages, and complaint records.

3. Purposes for which personal information is processed

Personal information is processed only for defined and legitimate purposes connected with the provision, security, and legal operation of the casino service. Rainbet Casino does not request identity documents or financial information unless such processing is necessary for registration, verification, payment administration, compliance, or risk control.

The main purposes of processing include:

Creating and managing user accounts, including authentication, account recovery, profile maintenance, and customer support.
Verifying age, identity, address, eligibility, and jurisdictional access, including Know Your Customer and anti-money laundering checks.
Processing deposits, withdrawals, refunds, payment disputes, reconciliation, and transaction monitoring.
Detecting, preventing, and investigating fraud, collusion, bonus abuse, account takeovers, money laundering, and other prohibited activity.
Maintaining responsible gambling controls, including deposit limits, time-outs, self-exclusion, affordability reviews, and intervention records.
Meeting legal, regulatory, tax, accounting, record-keeping, licence, and law enforcement obligations.
Improving technical performance, platform stability, security monitoring, analytics, error diagnostics, and user interface functionality.

4. Lawful bases for processing personal information

Rainbet Casino processes personal information in accordance with applicable Canadian privacy legislation, including principles comparable to those under the Personal Information Protection and Electronic Documents Act, and where relevant, substantially similar provincial privacy laws. Where the General Data Protection Regulation or equivalent international rules apply to a particular user or processing activity, the casino applies corresponding principles of transparency, data minimisation, purpose limitation, and accountability.

The lawful bases for processing may include:

Performance of a contract, where processing is necessary to create an account, provide gaming services, process payments, or respond to service requests.
Compliance with legal obligations, including age verification, anti-money laundering controls, gambling licence requirements, tax and accounting duties, and lawful requests from competent authorities.
Legitimate interests, including fraud prevention, network security, platform integrity, complaint handling, internal record keeping, and the protection of users and the business from unlawful conduct.
Consent, where required for optional communications, certain cookies, or other processing activities that are not necessary for the core service.

5. Data security and protection measures

Rainbet Casino uses technical and organisational safeguards designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction. These safeguards include 128-bit or stronger SSL/TLS encryption for data transmission, firewalls, intrusion monitoring, malware protection, controlled administrative access, logging, and password security measures.

Access to personal information is limited to personnel and service providers who require it for a defined business, legal, security, or compliance purpose. Internal measures may include role-based access permissions, 2-factor authentication for administrative systems, staff confidentiality obligations, periodic access reviews, and regular security testing. Security procedures are reviewed on an ongoing basis, and audits or vulnerability assessments may be conducted to evaluate compliance with technical and organisational requirements.

No method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials, using strong passwords, avoiding credential reuse, and promptly notifying the casino if they suspect unauthorized account access.

6. Disclosure of personal information to third parties

Rainbet Casino may share personal information with third parties only where there is a valid operational, legal, security, or compliance reason. Third parties are expected to process information under appropriate confidentiality, security, and data protection obligations, and only for the purposes for which the information was disclosed.

Recipients may include:

Payment service providers, banks, card processors, e-wallet operators, and payment fraud prevention services.
Identity verification, age verification, sanctions screening, politically exposed person screening, and anti-money laundering service providers.
Hosting providers, cloud infrastructure providers, content delivery networks, cybersecurity vendors, analytics tools, and customer support platforms.
Game suppliers, platform operators, responsible gambling tools, and risk management service providers where necessary for service operation.
Regulators, licence authorities, law enforcement agencies, courts, tax authorities, auditors, and professional advisers where disclosure is required or legally justified.

Personal information is not sold to third parties for marketing purposes. If information is transferred outside Canada, Rainbet Casino will take reasonable steps to ensure that appropriate contractual, technical, and organisational safeguards apply, while noting that foreign authorities may have lawful access to information under applicable laws in their jurisdictions.

7. Use of cookies and similar technologies

Rainbet Casino uses cookies and similar technologies, such as pixels, tags, local storage, and device identifiers, to operate the website, maintain sessions, secure logins, remember preferences, measure performance, and support fraud prevention. Some cookies are essential for core functionality, including authentication, payment flow, account security, and language or display settings.

Cookies may include:

Strictly necessary cookies, which are required for login, account security, navigation, and transaction processing.
Functional cookies, which remember selected preferences and improve usability.
Analytics cookies, which help measure site performance, detect errors, and understand aggregated usage patterns.
Security cookies, which assist with fraud detection, bot prevention, account protection, and abuse monitoring.

Users may manage or disable cookies through their browser settings. Disabling certain cookies may prevent login, interrupt payment processing, reduce security checks, or make parts of the casino service unavailable. Where applicable law requires consent for non-essential cookies, users may be offered a cookie preference tool or similar mechanism.

8. Rights of users regarding personal information

Subject to applicable law, users may have rights in relation to their personal information. This Privacy Policy recognizes that such rights may vary depending on the user’s province or territory, the location of processing, and the specific legal basis relied upon.

Users may request to exercise the following rights:

The right of access to obtain confirmation of processing and a copy of personal information held about them.
The right to rectification of inaccurate, incomplete, or outdated personal information.
The right to erasure, where continued retention is not required by law, contract, regulatory duties, fraud prevention, dispute resolution, or responsible gambling obligations.
The right to restriction of processing in certain circumstances, such as when accuracy or legality is contested.
The right to object to processing based on legitimate interests, where permitted by law.
The right to data portability, where technically feasible and legally applicable.
The right to withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal.

Requests may be submitted to [email protected]. Rainbet Casino may require reasonable identity verification before responding to a request, particularly where the request concerns account data, payment history, identification documents, or self-exclusion records. Responses will be provided within the time limits required by applicable law, and in many cases within 30 days unless an extension is permitted.

9. Retention of personal information

Rainbet Casino retains personal information only for as long as necessary to fulfil the purposes described in this document, comply with legal and regulatory obligations, resolve disputes, enforce terms, maintain security, and support responsible gambling measures. Retention periods may differ depending on the category of information and the reason for processing.

For example, account and transaction records may be retained for up to 5 years after account closure where anti-money laundering, tax, accounting, or gambling licence obligations require continued storage. Responsible gambling records, including self-exclusion and limit history, may be retained for longer where necessary to prevent re-registration or circumvention of protection measures. Security logs may be retained for shorter periods, such as 12 to 24 months, unless needed for an investigation, dispute, or legal proceeding.

When retention is no longer necessary, personal information will be deleted, anonymized, or securely archived in accordance with internal retention schedules and applicable legal requirements. Backup copies may persist for a limited period in secure systems until routine deletion cycles are completed.

10. Links to external websites and third-party services

The casino website may contain links to external websites, payment portals, identity verification interfaces, game provider pages, regulatory resources, or other third-party services. These external websites and services are not operated or controlled by Rainbet Casino, and their privacy, security, cookie, and data retention practices may differ from those described here.

Rainbet Casino is not responsible for the content, policies, or practices of third-party websites or services. Users should review the privacy notices and terms of any external website before submitting personal information, identification documents, payment details, or other sensitive data. This is particularly important where a third party independently determines the purposes and means of processing personal information.

11. Updates to this Privacy Policy

Rainbet Casino may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, technical systems, service providers, security practices, or operational procedures. Material changes may be communicated through the website, account notices, email, or other appropriate means, depending on the nature of the change and applicable legal requirements.

Users are advised to review this document periodically to remain informed about how personal information is handled. The continued use of the service after an updated version becomes effective may be treated as acknowledgement of the revised terms, where permitted by law. If a change requires consent under applicable legislation, Rainbet Casino will seek such consent before applying the relevant processing activity.