At Rich Royal Casino, protecting your personal data is not an afterthought — it is a core commitment built into every layer of how we operate. This Rich Royal Casino privacy policy has been prepared in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR). Whether you are creating an account, making a deposit, spinning the reels, or simply browsing our platform, we want you to understand precisely what personal information we gather, why we gather it, how it is used, and what rights you hold over your own user data. Data protection and information security are not abstract concepts at Rich Royal Casino — they are enforceable standards that govern every team member, every system, and every third-party partner we engage.
1. Identity of the Data Controller
Rich Royal Casino is operated by a company incorporated and registered in Curaçao, holding a valid gaming licence issued by the Government of Curaçao. As the entity that determines the purposes and means of data processing, our company acts as the data controller for all personal data collected through the richroyalcasino-australia.com website and any related mobile applications.
If you have questions about this privacy policy, our data collection practices, or wish to exercise your privacy rights, you may contact our dedicated Data Protection Officer (DPO) at any time:
- Email: [email protected]
- General support: [email protected]
- Live chat: available 24/7 directly on the site
We take all inquiries seriously and aim to respond within five (5) business days. For urgent data security concerns, live chat is the fastest route.
2. Personal Data We Collect
Rich Royal Casino collects several categories of personal information to provide a lawful, secure, and enjoyable gaming experience. Below is a comprehensive overview of the types of user data we may hold.
2.1 Identification and Contact Data
- Full legal name and date of birth
- Residential address and postcode
- Email address and phone number
- Copies of government-issued identity documents (passport, driver's licence) for KYC verification
- Selfies or video verification footage where required
2.2 Financial Data
- Payment method details (card numbers are truncated and never stored in full)
- Deposit and withdrawal transaction histories
- Bank account details or e-wallet identifiers (PayID, Skrill, Neteller, etc.)
- Cryptocurrency wallet addresses (Bitcoin, Ethereum, Litecoin)
- Source-of-funds documentation when required under AML obligations
2.3 Gaming Activity Data
- Games played, bet amounts, win/loss records, session durations
- Bonus activations, free-spin usage, wagering progress
- VIP programme tier (Bronze, Silver, Gold, Platinum, Diamond) and cashback history
- Responsible-gambling tool activations (deposit limits, loss limits, self-exclusion)
2.4 Technical Data
- IP address and approximate geolocation
- Device type, operating system, browser version
- Log files recording access times and page views
- Cookies, pixel tags, and similar tracking technologies (see Section 6)
2.5 Communication Data
- Live-chat transcripts and email correspondence
- Customer-support ticket content and resolution notes
- Survey responses and feedback submissions
2.6 Sensitive Data
Rich Royal Casino does not intentionally seek to collect sensitive information as defined under the Australian Privacy Act (such as health information, racial or ethnic origin, or political opinions). If such information is voluntarily provided — for example, a health condition mentioned in the context of a responsible-gambling request — it will be treated with the highest level of confidentiality and used solely to address your specific situation.
2.7 Data Received from Third Parties
We may receive personal data about you from third-party sources, including:
- Identity-verification and KYC service providers
- Payment processors and fraud-prevention agencies
- Affiliate partners who referred you to our platform
- Publicly available registers (e.g., self-exclusion databases administered by gambling regulators)
3. How We Collect Your Personal Information
Rich Royal Casino collects personal information through a variety of lawful methods:
- Direct collection — when you register an account, complete a deposit or withdrawal form, contact customer support, or respond to a survey.
- Automated collection — through cookies, server logs, and analytics tools that record how you interact with our website and app.
- Third-party collection — from payment processors, KYC providers, and fraud-screening agencies during financial transactions or identity checks.
- Mobile app usage — when you download our Android APK or use the iOS PWA via Safari, certain device-level data may be collected subject to your device permissions.
4. Purposes of Data Processing
Every instance of data processing at Rich Royal Casino is tied to a specific, documented purpose. We do not process your personal data beyond what is necessary for the purpose for which it was collected.
| Processing Purpose | Examples of Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, date of birth, address | Contract performance |
| Provision of gaming services | Gaming activity data, device data | Contract performance |
| KYC and AML compliance | Identity documents, financial data, source of funds | Legal obligation |
| Fraud detection and data security | IP address, transaction history, device fingerprint | Legitimate interest |
| Responsible gambling | Gaming activity, limits set, self-exclusion status | Legal obligation / legitimate interest |
| Marketing communications | Email, preferences, opt-in status | Consent |
| Customer support | Communication data, account data | Contract performance / legitimate interest |
| Service improvement and analytics | Technical data, gameplay data | Legitimate interest |
| Financial transactions | Payment method data, transaction records | Contract performance / legal obligation |
5. Legal Basis for Processing
Rich Royal Casino relies on the following legal bases for data processing, in line with the Australian Privacy Principles and the GDPR where relevant:
- Contract performance: Processing is necessary to deliver the services you signed up for, including operating your player account, processing deposits and withdrawals, and crediting bonuses.
- Legal obligation: We are required by applicable gambling, anti-money-laundering (AML), and counter-terrorism financing (CTF) laws to verify your identity and retain certain financial records.
- Legitimate interest: We process data where necessary for our legitimate business interests, such as preventing fraud, improving our platform, and ensuring the safety of all users — provided those interests are not overridden by your rights.
- Consent: For marketing emails, push notifications, and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Cookie Policy and Tracking Technologies
The Rich Royal Casino cookie policy outlines how we use cookies and similar technologies on our platform. A cookie is a small text file stored on your device when you visit our website. Cookies help us recognise returning visitors, remember your preferences, and analyse how our site is used.
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential cookies | Enable core site functionality: login sessions, security tokens, cart/deposit state | No — required for site to operate |
| Analytical cookies | Collect aggregated data on page visits, bounce rates, and traffic sources to improve the site | Yes — via cookie consent banner |
| Functional cookies | Remember your language, currency, and display preferences | Yes — via cookie consent banner |
| Marketing cookies | Track your interests to deliver relevant promotions and affiliate attribution | Yes — via cookie consent banner |
6.2 Managing Your Cookie Preferences
When you first visit richroyalcasino-australia.com, a consent banner will appear asking you to accept or customise your cookie preferences. You may change your choices at any time through the "Cookie Settings" link in our website footer. Additionally, you can configure your browser to reject or delete cookies; however, disabling essential cookies may impair your ability to log in or complete transactions.
Please note that the Rich Royal Casino cookie policy applies to first-party cookies set by our own domains. Third-party service providers (analytics platforms, advertising networks) may set their own cookies subject to their respective privacy policies.
7. Sharing Your Data with Third Parties
Rich Royal Casino does not sell your personal information to third parties. We may, however, share your user data with carefully selected partners under strict data protection agreements in the following circumstances:
7.1 Payment Providers
To process deposits and withdrawals, we share relevant financial data with our payment partners, including card processors, e-wallet providers (Skrill, Neteller, Paysafecard, Neosurf), and cryptocurrency infrastructure providers. These partners are contractually bound to protect your personal data and use it only for the specific payment transaction.
7.2 Regulatory and Legal Authorities
We may disclose personal information to government bodies, law enforcement agencies, or financial intelligence units where required by applicable law — for example, under our AML/CTF obligations, a court order, or a lawful regulatory request. Such disclosures are always limited to the minimum data required.
7.3 Identity Verification and KYC Partners
Before approving your first withdrawal, Rich Royal Casino requires mandatory KYC verification. We share your identification documents and other relevant data with accredited third-party identity-verification providers who operate under industry-standard information security frameworks.
7.4 Technology and Service Partners
Our platform is powered by game content from 50+ providers including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming. These providers may receive session data (e.g., player ID, bet activity) necessary to deliver game content and calculate outcomes. All providers operate under data-sharing agreements that impose confidentiality and data security obligations.
7.5 Affiliate Partners
If you arrived at Rich Royal Casino via an affiliate link, we may share limited data (such as registration confirmation and first-deposit status) with the referring affiliate for commission purposes. No detailed gaming or financial data is shared beyond what is strictly necessary.
8. International Data Transfers
As Rich Royal Casino is operated from Curaçao and uses globally distributed technology infrastructure, your personal data may be transferred to, stored in, or processed in countries outside Australia. Such transfers occur only where adequate data protection safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules where applicable
- Adequacy decisions recognising the destination country's data protection standards
- Your explicit consent where required
By using Rich Royal Casino's services and accepting this privacy policy, you acknowledge that your data may be transferred internationally in accordance with the safeguards described above.
9. Data Security Measures
Rich Royal Casino employs a multi-layered approach to data security to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our information security framework includes:
- 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-leading 256-bit SSL/TLS technology. The padlock icon in your browser confirms that your connection is secure.
- Firewall protection: Enterprise-grade firewalls monitor and filter all inbound and outbound network traffic to prevent intrusions and denial-of-service attacks.
- Data encryption at rest: Sensitive personal data, including financial records and identity documents, is encrypted when stored on our servers.
- Access controls: Only authorised personnel with a documented business need may access personal data. All access is logged and regularly audited.
- RNG certification: Our Random Number Generator (RNG) is certified by independent laboratories, ensuring game fairness and the integrity of gaming records.
- Regular security audits: We conduct periodic penetration tests and vulnerability assessments to identify and remediate potential weaknesses in our systems.
- Incident response plan: In the event of a data breach that is likely to cause serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches (NDB) scheme.
While Rich Royal Casino applies rigorous data security measures, no method of transmission over the internet is entirely risk-free. We encourage you to use a strong, unique password for your account and to enable any two-factor authentication options we offer.
10. Data Retention Periods
Rich Royal Casino retains your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, or as required by applicable law. The table below provides guidance on typical retention periods.
| Data Category | Typical Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 7 years | Legal and regulatory compliance |
| Financial transaction records | 7 years from transaction date | AML/CTF legal obligation |
| KYC identity documents | 5–7 years from last transaction | Regulatory requirement |
| Gaming activity logs | 5 years from account closure | Dispute resolution, responsible gambling |
| Customer support communications | 3 years from last contact | Service quality and dispute resolution |
| Marketing consent records | Duration of consent + 3 years | Proof of consent |
| Technical/log data | 12 months | Security monitoring and fraud detection |
After the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be linked back to you. Data storage beyond these periods occurs only where we are subject to a specific legal hold or ongoing regulatory inquiry.
11. Your Privacy Rights
As an Australian resident, you are protected by the Australian Privacy Principles. Where the GDPR applies, you enjoy additional rights. Rich Royal Casino respects and upholds all of your privacy rights as described below.
11.1 Right of Access
You have the right to request a copy of the personal data Rich Royal Casino holds about you. We will provide this in a clear, readable format within 30 days of a verified request. Contact us at [email protected] to submit an access request.
11.2 Right to Correction
If any personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request correction. You may update basic account details (such as your email address or contact number) directly within your account settings, or contact our DPO for other corrections.
11.3 Right to Deletion ("Right to Be Forgotten")
You may request that Rich Royal Casino delete your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that this right is subject to our legal obligations — for example, we cannot delete financial records we are required to retain under AML legislation.
11.4 Right to Restriction of Processing
You may ask us to restrict data processing in certain situations — for example, while you contest the accuracy of data we hold, or while we assess an objection you have raised. During a restriction period, your data may be stored but not actively processed for other purposes.
11.5 Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
11.6 Right to Object
You have the right to object to data processing carried out on the basis of legitimate interest, including profiling. Rich Royal Casino will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.
11.7 Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time by adjusting your account communication preferences, clicking "Unsubscribe" in any marketing email, or contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
11.8 Rights Related to Automated Decision-Making
Certain decisions at Rich Royal Casino — such as fraud-risk scoring or bonus eligibility — may involve automated processing. You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects, and to request human review of any such decision.
To exercise any of your privacy rights, please contact our Data Protection Officer at [email protected]. We may ask you to verify your identity before processing your request to ensure we protect your personal data from unauthorised access.
12. Supervisory Authority — OAIC
If you believe that Rich Royal Casino has not handled your personal data in accordance with the Australian Privacy Act 1988 or the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Mail: GPO Box 5218, Sydney NSW 2001
We encourage you to contact us first at [email protected] so we have the opportunity to address your concern directly before escalating to the OAIC. We take all complaints regarding data protection and privacy seriously and will respond within 30 days.
13. Responsible Gambling and Data Processing
Rich Royal Casino is committed to responsible gambling, and data processing plays a critical role in upholding that commitment. We monitor gaming activity data to identify patterns that may indicate problem gambling, such as rapidly escalating bet sizes, extended uninterrupted sessions, or frequent reversals of withdrawal requests.
When our systems or support team detect such patterns, we may reach out proactively, apply responsible-gambling tools, or refer you to support resources. The responsible-gambling tools available include:
- Deposit, bet, and loss limits (daily, weekly, monthly)
- Session time limits and reality checks
- Cooling-off periods: 24 hours, 48 hours, 7 days, or 30 days
- Self-exclusion: 6 months, 1 year, 5 years, or permanent
Data processed for responsible-gambling purposes is retained in line with the retention periods set out in Section 10 and is handled with the utmost confidentiality.
14. Children's Privacy
Rich Royal Casino's services are strictly intended for individuals aged 18 years and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will promptly delete that data and close the associated account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].
15. Links to Third-Party Sites
Our website may contain links to third-party websites — for example, responsible-gambling resources or payment provider portals. This Rich Royal Casino privacy policy applies solely to our own platform. We are not responsible for the data protection practices of third-party sites and encourage you to review their privacy policies independently.
16. Updates to This Privacy Policy
Rich Royal Casino reserves the right to update this privacy policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will notify you via email (to the address registered on your account) or by posting a prominent notice on our website at least 14 days before the changes take effect.
We encourage you to review this page periodically. The date at the top of the document indicates when it was last revised. Continued use of Rich Royal Casino's services after an update constitutes your acceptance of the revised privacy policy.
17. Contact Information
All enquiries, requests, and concerns related to Rich Royal Casino privacy, personal data, or data collection practices should be directed to:
- Data Protection Officer: [email protected]
- Customer Support: [email protected]
- Live Chat: 24/7 via the chat widget on richroyalcasino-australia.com
Frequently Asked Questions — Rich Royal Casino Privacy Policy
What personal data does Rich Royal Casino collect from Australian players?
Rich Royal Casino collects identification data (name, date of birth, address), contact details (email, phone), financial data (payment methods, transaction history), gaming activity records, technical data (IP address, device type), and communication records. Full details are provided in Section 2 of this privacy policy.
How does Rich Royal Casino protect my personal information?
We use 256-bit SSL/TLS encryption for all data in transit, encrypt sensitive personal data at rest, deploy enterprise-grade firewalls, enforce strict access controls, and conduct regular independent security audits. Our data security framework is designed to meet and exceed industry standards.
Does Rich Royal Casino share my data with third parties?
Rich Royal Casino shares user data only with trusted partners — payment processors, KYC providers, game studios, and regulatory authorities — under strict confidentiality agreements. We never sell your personal data. Details are set out in Section 7 of this privacy policy.
What is the Rich Royal Casino cookie policy?
The Rich Royal Casino cookie policy (Section 6) explains how we use essential, analytical, functional, and marketing cookies. Essential cookies are required for the site to function. All other cookies can be accepted or declined via our consent banner, or managed through your browser settings.
How long does Rich Royal Casino store my personal data?
Retention periods vary by data type. Account data is kept for the duration of your account plus seven years. Financial records are retained for seven years to meet AML obligations. Gaming logs are held for five years after account closure. Full details are in Section 10 on data storage.
How can I exercise my privacy rights at Rich Royal Casino?
To exercise any of your privacy rights — access, correction, deletion, restriction, portability, or objection — contact our Data Protection Officer at [email protected]. We will respond within 30 days and may request identity verification to protect your account.
Who can I contact if I have a complaint about data processing at Rich Royal Casino?
In the first instance, contact our DPO at [email protected]. If you remain dissatisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
Does Rich Royal Casino use my data for marketing?
Rich Royal Casino will only send you marketing communications if you have given your consent. You may opt out at any time by clicking "Unsubscribe" in any email, adjusting your account preferences, or contacting [email protected]. We base all marketing data processing on your freely given consent.
Rich Royal Casino is dedicated to the highest standards of data protection, information security, and privacy. This Rich Royal Casino privacy policy reflects our genuine respect for your personal data and our ongoing commitment to transparent, lawful, and fair data processing. We encourage you to read it carefully and to reach out to our team whenever you have questions. Your trust is the foundation on which Rich Royal Casino is built — and we will never take it for granted.