Our Privacy Policy at Rony Casino
This policy explains what personal data we collect when you register, play or transact with us at Rony Casino, why we collect it, who we share it with and what rights you hold over it. It applies to every visitor with an account on our platform.
Data We Collect About You
Identity and account data
When you open an account we ask for your full name, date of birth, email address, telephone number and residential address. We also record your chosen username, password (stored only as a hash) and your stated currency and language preferences.
- Name, date of birth, email address and phone number
- Residential address and country of residence
- Account credentials and communication preferences
Verification documents
Before your first withdrawal we request a copy of your ID or passport, a proof of address dated within the last three months and proof of your payment method. These documents are collected solely to satisfy our KYC and anti-money-laundering obligations.
Transactional and behavioural data
We record every deposit, withdrawal, wager and bonus redemption linked to your account, together with device identifiers, IP address, browser type and session times. Gameplay behaviour such as games opened, stakes placed and win or loss outcomes feeds our responsible-gambling monitoring and fraud detection systems. Where you opt in, we also store your marketing preferences, including which channels you agreed to receive messages on.
How We Use Your Data
We process your data for one purpose only at a time, and each purpose maps to a legal basis set out in the next section. Account creation and gameplay are the foundations; everything else supports safety, legality and, with your consent, communication.
- Creating and administering your player account
- Verifying your identity and age under KYC requirements
- Processing deposits and withdrawals through your chosen method
- Detecting fraud, bonus abuse and multi-accounting
- Monitoring play for responsible-gambling signals and enforcing limits you set
- Sending promotional material where you have given consent
- Meeting tax, AML and regulatory reporting obligations
Legal Bases for Processing
Contract
We process identity, account and transaction data to perform our contract with you. Without your name, payment details and account credentials we cannot provide the gaming service you signed up for, so this data is non-optional.
Legal obligation
Your verification documents, transaction records and AML screening results are processed because gambling law requires it. We must confirm you are of legal age, check sanctions lists and retain financial records for a statutory minimum of five years, and we cannot waive these steps even at your request.
Legitimate interest
Fraud prevention, device security and aggregate service analytics rest on our legitimate interest in keeping the platform safe and functional. This interest never overrides your rights; we balance it against any impact on you and you may object to this processing as described further down this page.
Consent
Marketing emails, SMS and personalised bonus offers run on consent alone. You give it when opting in, you can withdraw it at any time through your account settings or the unsubscribe link in every message, and withdrawal costs you nothing beyond losing the messages themselves.
How Long We Keep Data
We hold each category of data only as long as its purpose requires, with regulatory minimums setting the floor for financial and verification records. Once the retention period ends, we delete or irreversibly anonymise the data.
| Data category | Retention period |
|---|---|
| Identity and account data | While your account is open, then up to 5 years after closure for regulatory purposes |
| Verification documents | 5 years after the last transaction or account closure, whichever is later |
| Transaction and wagering records | At least 5 years under AML and tax rules |
| Device and IP logs | Up to 12 months for security and fraud analysis |
| Marketing preferences | Until you withdraw consent, then up to 90 days to process your opt-out |
Who We Share Data With
We never sell your personal data. Sharing is limited to processors and authorities that need it to deliver the service or that we are legally bound to inform, and each processor is bound by a written data processing agreement.
- Payment processors handling your deposits and withdrawals
- KYC and AML verification providers checking your documents
- Game and platform providers whose titles you play
- Our licensing regulator, Curaçao eGaming, when reporting is required
- Analytics and hosting providers operating under strict instructions
- Authorities and courts where disclosure is compelled by law
Your Rights Over Your Data
You control your data, and exercising these rights is always free. Send your request to our data protection officer at [email protected] or through live chat, which is staffed 24/7, and we respond within one month as GDPR requires.
- Access: get a copy of the personal data we hold about you
- Rectification: correct inaccurate or incomplete records
- Erasure: ask us to delete data where no legal duty requires retention
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interest
- Withdrawal of consent: stop marketing at any time via account settings or unsubscribe links
- Complaint: escalate to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we mishandled your data
Cookies and Tracking Notice
We use cookies to keep you logged in, remember your preferences and measure aggregate site performance, with marketing cookies set only after you accept them in the consent banner. Our separate Cookies Policy lists every cookie, its purpose and its lifetime, and your browser settings or the banner itself let you change your choices at any time.
Security Measures We Apply
All traffic between your device and our servers is encrypted with TLS, and stored passwords exist only as salted hashes. Access to player data follows a strict need-to-know model with role-based permissions, audit logging and mandatory two-factor authentication for our staff.
If a breach happens
Should a personal data breach occur, we notify the competent supervisory authority within 72 hours of becoming aware of it and inform you directly without undue delay where the breach poses a high risk to your rights. Our support team at [email protected] answers any security concern around the clock.
Frequently Asked Questions
How do I stop marketing emails from Rony Casino?
Use the unsubscribe link at the bottom of any message or switch off marketing in your account settings. Withdrawal takes effect immediately and costs nothing; we keep a record of your opt-out for up to 90 days so we honour it.
Why do you need my ID before my first withdrawal?
Gambling regulations require us to verify your age, identity and payment method before releasing funds. We ask for an ID or passport, a recent proof of address and proof of the payment method used, and we hold these documents for at least five years afterwards.
Can I get a copy of all data you hold on me?
Yes. Email [email protected] with your request and we send a structured copy of your personal data within one month, free of charge, as part of your GDPR right of access.
Do you share my data with advertisers?
No. We never sell or rent your personal data. Third parties receive only what is needed to process payments, run verification, operate games or meet legal reporting duties, always under a data processing agreement.