Privacy Policy
Rainbet collects personal information because a regulated gambling service cannot lawfully operate without it, and we limit that collection to what registration, verification, payments and safety genuinely require. The sections below set out what is held, why, for how long, and how you can exercise the rights that belong to you.
- Categories of information we hold
At registration we record your name, date of birth, residential address, email address, telephone number and chosen currency. Identity documents — passport, driving licence, national identity card — together with proof of address and, where required, proof of source of funds, are collected during verification.
Transactional records cover deposits, withdrawals, stakes, outcomes, bonus participation and the payment instruments used. Correspondence with our support team, including live chat transcripts and any recorded calls, is stored alongside the account it relates to.
Technical information is generated automatically: IP address, device type, operating system, browser fingerprint, approximate location derived from the connection, and timestamps of each login. Rainbet does not knowingly collect information about health, ethnicity, political opinions or religious beliefs, and we ask that you do not send such material to us.
- Why we process it and on what legal basis
Contractual necessity covers everything needed to run your account: crediting deposits, settling bets, paying withdrawals and answering support requests. Without this information the contract between you and Rainbet cannot be performed.
Legal obligation covers anti-money-laundering checks, sanctions and politically-exposed-person screening, age verification and the record-keeping demanded by the Anjouan Gaming Authority under licence ALSI-152406029-FI2.
Legitimate interests cover fraud detection, bonus-abuse analysis, collusion monitoring, network security and the internal reporting that keeps the platform stable. Consent is used only where the law requires it — principally for optional marketing and for non-essential cookies — and you may withdraw it at any moment without affecting anything processed beforehand.
- Sharing, transfers and safeguards
We disclose information to payment institutions, identity-verification providers, game studios that supply content on the platform, hosting and analytics suppliers, and to professional advisers bound by confidentiality. Each supplier is engaged under a written contract that restricts them to acting on our documented instructions.
Regulators, law enforcement agencies and courts may receive information where a valid legal request compels disclosure, and we will not notify you when notification would itself be unlawful.
Some suppliers operate outside the United Kingdom and the European Economic Area. Where that is the case we rely on adequacy decisions, the UK International Data Transfer Agreement or standard contractual clauses with additional technical measures, and we assess the destination country before any transfer begins. Rainbet does not sell personal information to anyone, under any circumstances.
- Storage periods and security measures
Account and transaction records are retained for a minimum of five years after the account closes, because gambling and anti-money-laundering rules require it. Verification documents follow the same schedule; support correspondence is generally kept for two years, and marketing preferences persist until you change them.
Once a retention period expires the records are deleted or irreversibly anonymised so that they can no longer be linked to an individual. Self-exclusion records are an exception and are held for the duration of the exclusion plus a further period, because deleting them would let a self-excluded person register again.
Data is encrypted in transit using TLS and at rest on our servers. Access is granted on a strict need-to-know basis with multi-factor authentication, privileged actions are logged, and we run penetration testing and vulnerability scanning on a scheduled basis. Should a breach occur that is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and inform you directly where the risk is high.
- Your rights and how to use them
You may request a copy of the information we hold, ask for inaccuracies to be corrected, object to processing based on legitimate interests, request restriction while a dispute is resolved, or ask for your data in a portable machine-readable format.
Erasure can be requested, but where a statutory duty obliges us to keep a record we will explain which obligation applies rather than delete it. Marketing consent can be revoked instantly using the unsubscribe link in any message or the communication settings in your profile.
Send requests through the privacy contact listed below. We answer within one calendar month and may extend that by two further months for genuinely complex requests, telling you why. If you are unsatisfied, UK residents may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
- Rainbet Data Protection Officer — privacy request form in the account settings area
- Rainbet customer support — live chat, available around the clock for account and verification queries
- Information Commissioner's Office (UK supervisory authority) — ico.org.uk, 0303 123 1113
This policy describes Rainbet's current practices and is reviewed whenever our processing activities or the applicable law change materially. It does not constitute legal advice. Where a translated version differs from the English text, the English version governs.