At Rich Royal Casino, we take privacy seriously. This Rich Royal Casino privacy policy explains exactly how we collect, process, store, and safeguard your personal data when you visit our website at richroyalcasino-au.com or use any of our gaming services. We are committed to full compliance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and — where applicable — the General Data Protection Regulation (GDPR). Whether you are browsing our game catalogue, making a deposit, or contacting our support team, your personal information is handled with the highest standards of data security and confidentiality. We encourage all players to read this document carefully to understand your privacy rights and how Rich Royal Casino fulfils its obligations as a responsible data controller.
1. Identity of the Data Controller
Rich Royal Casino is operated by a company registered in Curaçao and licensed by the Government of Curaçao. As the entity that determines the purposes and means of data processing, this operator acts as the data controller responsible for all user data collected through richroyalcasino-au.com. If you have any questions about this privacy policy or wish to exercise your rights, you may contact our dedicated Data Protection Officer (DPO) at:
- Email: [email protected]
- General Support: [email protected]
- Live Chat: available 24/7 via the website
We aim to respond to all privacy-related enquiries within 30 days of receipt, in accordance with our obligations under the Australian Privacy Act 1988.
2. Personal Data We Collect
Rich Royal Casino engages in responsible data collection limited strictly to information that is necessary to provide our services, meet legal requirements, and ensure a safe gaming environment. Below is a comprehensive overview of the categories of personal information we may collect.
2.1 Identification Data
- Full legal name
- Date of birth (for age verification)
- Nationality and country of residence
- Government-issued ID details (passport, driver's licence) collected during KYC verification
2.2 Contact Information
- Email address
- Phone number
- Residential and billing address
2.3 Financial Data
- Payment method details (card numbers masked, e-wallet IDs, cryptocurrency wallet addresses)
- Transaction history — deposits, withdrawals, and bonus redemptions
- Bank account information where required for bank transfer payments
2.4 Gaming Activity Data
- Game sessions, bets placed, wins, losses, and bonus usage
- Responsible gambling settings (deposit limits, session limits, self-exclusion status)
- Wagering history used for bonus eligibility checks
2.5 Technical Data
- IP address and geolocation data
- Device type, operating system, and browser version
- Log files, access timestamps, and session identifiers
2.6 Communication Data
- Content of messages sent to our support team via live chat or email
- Records of promotional emails opened or clicked
- Responses to surveys and feedback forms
2.7 Sensitive Personal Data
In limited circumstances, Rich Royal Casino may collect sensitive personal data — for example, health-related information voluntarily disclosed by a player in the context of a responsible gambling self-exclusion request. We handle such data with additional safeguards and only process it where strictly necessary.
2.8 Data Received from Third Parties
- Identity verification results from KYC/AML service providers
- Fraud risk scores from payment processors
- Affiliate tracking data where you arrived at our site via a referral link
3. How We Collect Your Data
We collect user data through several methods designed to be transparent and proportionate to our operational needs:
- Direct provision: when you register an account, complete KYC verification, make a deposit, contact support, or fill out any form on richroyalcasino-au.com.
- Automated collection: through cookies, web beacons, pixels, and server log files as you browse our website — described in detail in our cookie policy section below.
- Third-party sources: identity verification bureaux, payment gateways, fraud prevention agencies, and publicly available databases used to comply with KYC and AML obligations.
- Device and browser data: automatically gathered when you load our website or mobile app (Android APK / iOS PWA).
4. Purposes and Legal Basis for Data Processing
The Rich Royal Casino approach to data processing is grounded in clear, lawful bases. We do not process personal information unless we have a legitimate reason to do so. The table below summarises our primary processing purposes and the corresponding legal bases.
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating and maintaining your player account, verifying your identity, managing login credentials. | Contract performance |
| Service Provision | Processing deposits and withdrawals, providing access to 4,000+ games across 50+ providers. | Contract performance |
| KYC / AML Compliance | Verifying age, identity, and source of funds as required by anti-money laundering regulations. | Legal obligation |
| Fraud Prevention & Security | Detecting suspicious activity, protecting accounts, maintaining platform integrity and data security. | Legitimate interests |
| Responsible Gambling | Implementing deposit, bet, loss, and session limits; managing cooling-off periods and self-exclusions. | Legal obligation / Legitimate interests |
| Marketing & Communications | Sending promotional offers, newsletters, and bonus notifications where you have opted in. | Consent |
| Service Improvement | Analysing player behaviour, running A/B tests, improving website performance and user experience. | Legitimate interests |
| Legal & Regulatory Reporting | Meeting obligations to regulators, responding to lawful requests from authorities. | Legal obligation |
5. Cookie Policy
The Rich Royal Casino cookie policy forms an integral part of this privacy policy. Cookies are small text files stored on your device when you visit richroyalcasino-au.com. We use cookies to make the website function correctly, remember your preferences, measure performance, and — where you have consented — deliver relevant marketing content.
5.1 Types of Cookies We Use
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Essential Cookies | Necessary for the website to function — session management, security tokens, login state. Cannot be disabled. | No |
| Analytical Cookies | Collect anonymised usage statistics (page views, bounce rate, session duration) to help us improve our site. | Yes |
| Functional Cookies | Remember your preferences such as language, currency, and responsible gambling settings. | Yes |
| Marketing Cookies | Track visits across sites to deliver personalised advertising and measure campaign effectiveness. | Yes |
5.2 Managing Your Cookie Preferences
When you first visit richroyalcasino-au.com, a cookie consent banner will appear. You may accept all cookies, reject non-essential cookies, or customise your preferences at any time via the Cookie Settings link in our website footer. You can also manage cookies through your browser settings; however, disabling essential cookies may impair website functionality. Withdrawing cookie consent does not affect the lawfulness of processing carried out before withdrawal.
6. Sharing Personal Data with Third Parties
Rich Royal Casino does not sell or rent your personal data to third parties for their own commercial purposes. We share user data only in the following circumstances, always under strict data protection agreements:
6.1 Payment Providers
When you make a deposit or request a withdrawal, your financial details are shared with our payment partners — including processors handling PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer transactions. These providers are contractually bound to handle your personal information securely and only for the purpose of processing your transaction.
6.2 Regulatory Authorities
We may disclose personal data to government bodies, law enforcement agencies, or regulators where required by law — including our obligations to the Curaçao licensing authority and, where relevant, Australian regulatory bodies. Such disclosures are made strictly within the bounds of applicable law.
6.3 KYC / AML Service Providers
To fulfil our legal KYC and AML obligations, we share identification documents and verification data with accredited identity verification partners. These parties process your data solely for compliance purposes and under binding data protection agreements.
6.4 Technology and Hosting Partners
Our platform relies on third-party infrastructure providers for hosting, cloud storage, cybersecurity, and customer support software. All such partners are vetted for information security compliance and operate under data processing agreements that restrict their use of your user data.
6.5 Affiliate Partners
If you registered via an affiliate link, we may share limited personal data (such as account status and wagering activity relevant to commission calculations) with the referring affiliate partner under strict confidentiality obligations.
7. International Data Transfers
Because Rich Royal Casino is operated by a Curaçao-registered entity and uses global technology providers, your personal data may be transferred to and stored in countries outside Australia. Whenever we transfer personal information internationally, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) under the GDPR, contractual commitments to apply equivalent privacy protections, or transfers to countries recognised as providing an adequate level of data protection. We take all reasonable steps to ensure your data security is not compromised by cross-border transfers.
8. Data Security
Rich Royal Casino data protection measures are designed to prevent unauthorised access, disclosure, alteration, or destruction of your personal data. Our information security framework includes:
- 256-bit SSL/TLS encryption: all data transmitted between your device and our servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
- Firewall protection: advanced firewall systems monitor and filter all incoming and outgoing traffic to our servers.
- Encryption at rest: sensitive personal information stored in our databases is encrypted to prevent exposure in the event of a breach.
- Access controls: user data is accessible only to authorised personnel on a strict need-to-know basis, governed by role-based access controls.
- Regular security audits: our systems undergo independent penetration testing and security reviews on a scheduled basis.
- RNG certification: our Random Number Generator (RNG) is certified by independent laboratories, ensuring fair gaming alongside robust data security.
- Incident response plan: in the event of a personal data breach, we will notify the relevant supervisory authority and affected individuals within the timeframes required by applicable law.
Despite these robust safeguards, no method of data storage or transmission over the internet is 100% secure. We continually review and enhance our information security practices to mitigate risk.
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Rich Royal Casino applies the following retention principles:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML / legal obligations |
| Financial transaction records | 7 years from transaction date | Tax and regulatory requirements |
| Gaming activity logs | 3–5 years from date of activity | Dispute resolution / regulatory |
| Communication records (support chats, emails) | 3 years from last interaction | Legitimate interests / legal claims |
| Marketing consent records | Until consent withdrawn + 1 year | Demonstrating lawful processing |
| Cookie & analytics data | Up to 13 months | Analytics / service improvement |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gambling / legal |
Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you. Data storage of anonymised analytics data may continue indefinitely as it no longer constitutes personal information under applicable privacy law.
10. Your Privacy Rights
As an Australian player, you benefit from a comprehensive set of privacy rights under the Australian Privacy Act 1988 and, where applicable, under the GDPR. Rich Royal Casino is committed to honouring these rights promptly and without unnecessary obstacles. Your privacy rights include:
10.1 Right of Access
You have the right to request a copy of the personal data Rich Royal Casino holds about you. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible, free of charge, within 30 days of your request.
10.2 Right to Correction
If any personal information we hold is inaccurate, incomplete, or out of date, you have the right to request that we correct it. You may update certain account details directly in your player profile, or contact our DPO to request corrections to information you cannot update yourself.
10.3 Right to Deletion ("Right to be Forgotten")
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right may be limited where we are required to retain data for legal or regulatory compliance — for example, AML record-keeping obligations that apply to your transaction history.
10.4 Right to Restriction of Processing
You may request that we restrict data processing in certain circumstances — for example, while you contest the accuracy of your personal data, or where you have objected to processing pending verification of our legitimate grounds.
10.5 Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.
10.6 Right to Object
You have the right to object to data processing carried out on the basis of our legitimate interests — including profiling for direct marketing purposes. If you object to marketing communications, we will cease processing your personal data for that purpose immediately.
10.7 Right to Withdraw Consent
Where processing is based on your consent (for example, marketing emails or non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing communications, use the unsubscribe link in any email we send or contact [email protected].
10.8 Exercising Your Rights
To exercise any of your privacy rights, submit a request to our Data Protection Officer at [email protected]. We may ask you to verify your identity before fulfilling your request to protect your confidentiality. We will respond within 30 days; complex requests may take up to 60 days, in which case we will notify you of the extension.
11. Supervisory Authority — OAIC
If you believe that Rich Royal Casino has not handled your personal data in accordance with the Australian Privacy Act 1988 or the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Email: [email protected]
- Post: GPO Box 5218, Sydney NSW 2001
We encourage you to contact our DPO first at [email protected] to allow us the opportunity to resolve your concern directly before escalating to the OAIC.
12. Children's Privacy
Rich Royal Casino does not knowingly collect personal data from anyone under the age of 18. Our services are strictly for adult players, and age verification is a mandatory step in our KYC process. If we become aware that we have inadvertently collected personal information from a minor, we will delete it immediately. If you believe a minor has registered an account, please contact us at [email protected] without delay.
13. Links to Third-Party Websites
Our website may contain links to third-party sites — for example, responsible gambling resources or payment provider portals. This Rich Royal Casino privacy policy applies solely to richroyalcasino-au.com and our own services. We are not responsible for the privacy practices or data protection standards of external websites. We recommend reviewing the privacy policies of any third-party site you visit.
14. Updates to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will notify you by prominent notice on our website or by email to the address associated with your account. The date at the top of this Rich Royal Casino privacy policy will always indicate when it was last revised. Your continued use of richroyalcasino-au.com after a policy update constitutes your acknowledgment of the revised terms. We encourage you to review this cookie policy and data protection document periodically.
Frequently Asked Questions (FAQ)
What personal data does Rich Royal Casino collect from players?
Rich Royal Casino collects personal data including your name, date of birth, contact details, financial information, gaming activity records, and technical data such as IP address and device identifiers. Full details are set out in Section 2 of this Rich Royal Casino privacy policy. All data collection is limited to what is necessary for account management, service provision, and legal compliance.
How does Rich Royal Casino use cookies?
Our cookie policy covers four types of cookies: essential, analytical, functional, and marketing. Essential cookies are necessary for the site to function and cannot be turned off. All other cookies require your consent, which you can manage via the Cookie Settings link in our website footer. For full details, see Section 5 of the Rich Royal Casino cookie policy.
Is my personal information safe at Rich Royal Casino?
Yes. Rich Royal Casino data security is underpinned by 256-bit SSL/TLS encryption, advanced firewall systems, encrypted data storage, strict access controls, and regular independent security audits. Our information security framework is designed to protect your personal information at every stage of data processing.
How can I access, correct, or delete my personal data?
You can exercise your privacy rights — including access, correction, deletion, restriction, portability, and objection — by contacting our Data Protection Officer at [email protected]. We will respond within 30 days. We may ask you to verify your identity to protect your confidentiality before processing your request.
Does Rich Royal Casino share my data with third parties?
Rich Royal Casino does not sell your personal data. We share user data only with payment providers, KYC/AML verification partners, regulatory authorities, and technology service providers — all under strict data protection agreements. See Section 6 for a full breakdown of third-party data sharing.
How long does Rich Royal Casino retain my personal data?
Retention periods vary by data category. Account and identity data is retained for the duration of your account plus five years. Financial transaction records are kept for seven years. Gaming activity logs are retained for three to five years. All data storage is governed by legal obligations and our legitimate operational needs. Data is securely deleted or anonymised once the applicable retention period ends.
What are my rights under the Australian Privacy Act?
As an Australian player, your privacy rights under the Privacy Act 1988 include the right to access your personal information, request corrections, lodge complaints with the OAIC, and opt out of direct marketing. The Rich Royal Casino privacy policy in Section 10 explains each right in detail and how to exercise them. The OAIC (Office of the Australian Information Commissioner) is the relevant supervisory authority if your complaint cannot be resolved directly with us.
How do I opt out of marketing communications from Rich Royal Casino?
You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any Rich Royal Casino promotional email, updating your communication preferences in your account settings, or contacting [email protected]. Opting out of marketing does not affect your ability to use our gaming services or receive transactional communications related to your account.
We are dedicated to earning and maintaining your trust. Rich Royal Casino treats data protection, privacy, and information security not as legal formalities but as core values that underpin everything we do. If you have any concerns about how your personal data is handled, do not hesitate to reach out to our Data Protection Officer at [email protected]. We are here to help and committed to upholding your privacy rights in full.