This privacy notice (hereinafter referred to as the “notice”) explains how RichRoyal and its direct and indirect subsidiaries (together “RichRoyal”, “us”, “we”, “our”) process your personal data.

This privacy notice applies to the personal data collected from registered users (“players”) with an account on our website and from visitors to our website.

Who we are

The operator of this website is the controller of your personal data. We are the controller because, within the scope of our business relationship with you, we decide how and why your data is processed in the manner described in this notice. Together with our joint controller, we maintain ownership of and security over the personal data you provide to us.

If you have any questions about this notice, including questions about exercising your data protection rights, you can contact our Data Protection Officer by email at dpo@richroyal.live.

What personal data do we collect?

Data that you provide to us directly

Depending on your interaction with our services, we may collect the following personal data from you:

Registration data: To create an account on our website, you must provide us with personal data, including your email address, date of birth, country, telephone number, gender, full name, social security number, postal code, and username. During registration, we automatically receive your IP address and location data.

Due Diligence Data: We collect your ID number/driving license number/passport number, proof of residence, social security number, origin of assets/funds, bank ID and financial documents/data to comply with our due diligence and KYC (Know Your Customer) obligations, as well as for age and identity verification, anti-money laundering and/or to meet legal or licensing requirements.

Financial Information: We may collect your financial data, including bank ID, CPR number, CPF number, IBAN, and payment information, to facilitate deposits and withdrawals to and from your account. This information may also be used to comply with KYC and AML regulations.

Automatically collected personal data

Device information: We receive information about the device and software you use to access our services, including IP address, operating system version, and device identifiers.

Log and usage information: To understand how you use our services and to improve them, our servers automatically collect usage data when you interact with our website. This information includes your activities, such as viewing content, clicking on advertisements, search queries, sharing our content on social media, the date and time of your sessions, pages visited, links you click, and the time spent on a page. We collect some of this data using cookies and similar technologies.

Location information: We may collect or infer your approximate location data when you use our services.

Personal data that we receive from third parties

We may collect personal data from other sources to provide or personalize our services, or to comply with legal obligations. This includes:

Publicly available personal data, e.g., information from social networks, linked accounts (e.g., Facebook or Google) and other publicly accessible digital platforms.

Why do we collect your data?

We use the personal data we collect to:

To maintain the security and functionality of our services, in particular to ensure the technical availability of the website and to protect our systems and intellectual property from security threats and unauthorized access.

Legal basis for the processing of your personal data

In accordance with the GDPR and other applicable data protection laws, we process your personal data only if there is a lawful basis for doing so. Several legal bases may apply to certain processing operations. These include:

Contract fulfillment or contract initiation

We process personal data to fulfill or initiate a contractual relationship with you. For example, to set up and support your account, to communicate with you regarding the terms and conditions, etc.

Legal obligation

The processing of your personal data may be necessary to comply with legal obligations. These include, but are not limited to:

Legitimate interest

Where necessary, we process your personal data to protect our legitimate interests or those of third parties, provided that your rights, freedoms, or interests do not override these interests. Examples:

consent

With your consent, we carry out certain processing operations, such as:

How we share your personal data

We share your personal data with the following categories of recipients:

If you submit a complaint, review, or inquiry about our services on a third-party platform (e.g., a casino review site, gambling forum, or dispute resolution service), it may be necessary to respond directly on that platform to clarify, investigate, or resolve your inquiry. In doing so, we will only share the personal data necessary to identify your account and respond appropriately. This disclosure is based on our legitimate interest in protecting our reputation and resolving external disputes transparently and accountably. Such disclosure will only occur if you or another party on your behalf have publicly submitted a complaint and will be limited to what is necessary.

How long we store your data

We store your personal data for as long as you have an account with us and as is necessary to fulfill the purposes stated in this privacy notice.

Furthermore, we store your data for a longer period if legal obligations require it, e.g. due to AML regulations or other regulatory requirements.

Once your account is closed and there is no longer a legal or business reason to retain your data, your personal data will either be deleted or anonymized.

Your rights

You have certain rights regarding your personal data. These include:

Cookies and other tracking technologies

We use cookies, tags, pixels, web beacons, and similar technologies to improve your experience on our website and in our applications. The first time you visit our website or apps, we ask for your consent to the use of non-essential cookies. Necessary cookies, which are essential for the website to function, do not require your consent. For more information about the cookies we use, their purposes, and how you can manage your settings, please see our Cookie Notice.

Data security

We place great importance on the security of your personal data and implement comprehensive measures to protect it from unauthorized access, loss, theft, and misuse. Our security strategy includes administrative, technical, and physical safeguards to protect your data from unauthorized disclosure, alteration, or destruction. Despite these measures, no system is completely secure against breaches. Data transmission over the internet, by its very nature, cannot be absolutely secure. We strive to protect your data to the best of our ability but cannot guarantee absolute security. We continuously evaluate and improve our security measures.

Data transfer outside the EU/EEA

We may process your personal data in countries outside the EU/EEA. When transferring your personal data to our affiliated companies or third parties, we ensure that appropriate safeguards are in place to guarantee a high level of data protection. This may be achieved through transfers to countries with an adequate level of protection, through standard contractual clauses approved by the EU Commission, or other legally recognized mechanisms.

Changes in ownership or control

In the event of a sale, merger, or other change in ownership or control of our company, your personal data may be disclosed as part of or in preparation for that transaction. The new owner or management may only use your personal data in accordance with this Privacy Notice unless you expressly consent to a different use.

How to contact us

If you have any questions about this privacy notice or our privacy practices, please contact us by email at cs@richroyal.live or info@richroyal.live.

Updates to this notice

It may be necessary to update this privacy notice due to technological developments or legal requirements. It is your responsibility to regularly check the current version. This privacy notice is valid from the date indicated on our website.

Valid from: October 2024