How We Handle Your Personal Data
This policy explains what personal data Riviera Casino collects when you play with us, why we need it, how long we hold onto it and what you can do about it. It applies to every visitor with an account on rivieracasino.com.
Personal Data We Collect
We only collect what we need to run your account, meet our licence obligations under Anjouan law and keep the site safe. When you register, we record your name, date of birth, residential address, email address and phone number. If you contact our 24/7 live chat, we keep a copy of that conversation.
Every withdrawal triggers our verification process, so we also hold copies of your photo ID, proof of address and evidence of the payment methods you use. Deposits and withdrawals through PayID, cards, e-wallets or crypto generate transaction records, including amounts, timestamps and wallet or card identifiers.
From the moment the site loads we receive technical signals: your IP address, device type, operating system, browser, language setting and approximate location derived from your IP. As you play, we log gameplay behaviour such as the games you open, bet sizes, session length, bonus usage and win/loss history.
- Identity data: name, date of birth, address, email, phone
- Verification documents: photo ID, proof of address, payment method evidence
- Transaction data: deposits, withdrawals, amounts, timestamps, method identifiers
- Technical data: IP address, device and browser details, approximate location
- Gameplay data: games played, bets, session duration, bonus activity
- Marketing preferences: which channels you opted into and which you declined
Why We Use Your Data
Your data runs the service you signed up for. We use identity details to create and administer your account, verify you are over 18 and resident in a permitted jurisdiction, and process every deposit and withdrawal. The United States, United Kingdom, Netherlands, Belgium, Israel, Iran, Iraq, Syria and North Korea are off-limits to us, and we check registrations against that list.
The same records feed our anti-fraud and anti-money-laundering work. We screen transactions, flag suspicious patterns and file reports where our licence demands it. Gameplay data also drives our responsible-gambling tools: deposit limits, loss limits, session reminders and reality checks all depend on us seeing how you actually play.
Marketing is a separate lane. If you have opted in, we send bonus news, tournament invitations and reload offers such as our Monday 50% bonus. The moment you withdraw consent, those emails and messages stop.
Legal obligations close the list. Licence conditions, tax rules, court orders and regulator requests all require us to produce accurate records about specific accounts, sometimes on short notice.
Our Legal Bases for Processing
Contract covers the core of what we do. Opening an account, processing your welcome bonus of up to 3200 AUD with 600 free spins, handling deposits and paying out wins are all steps we cannot perform without your personal data. If you never give us that data, we cannot deliver the service.
Legal obligation covers the parts regulators force on us. Identity verification before your first withdrawal, transaction monitoring, record-keeping for at least five years and reporting duties exist because our Anjouan licence (ALSI-202508063-FI2) and anti-money-laundering law require them. No preference on your side can switch these off.
Legitimate interest covers fraud prevention, site security, dispute resolution and the internal statistics we use to improve the casino. We weigh our interest against your privacy, keep the data minimal and never use this basis for advertising.
Consent governs marketing and non-essential cookies. You grant it explicitly, you can withdraw it at any time through your account settings or a link in every email, and withdrawal never affects your right to play.
How Long We Keep Your Data
We hold each category of data only as long as the purpose survives. Gambling regulation requires transaction and verification records to survive for at least five years after your last activity, so those categories have a fixed floor we cannot shorten, even at your request, until the statutory period lapses.
Account data stays alive while your account is open. Marketing data lasts until you withdraw consent or ask us to delete it, whichever comes first. Support chat logs expire after two years. Technical logs tied to security reviews are kept for twelve months.
Once a retention period ends, we delete or irreversibly anonymise the data. Closing your account starts a grace period of 30 days in case you return, after which the deletion clocks begin.
| Data category | Retention period |
|---|---|
| Verification documents | 5 years after account closure or last transaction |
| Transaction records | 5 years after last activity |
| Account and gameplay data | Life of the account, then up to 5 years where required |
| Marketing preferences | Until consent is withdrawn or deletion requested |
| Support chat logs | 2 years |
| Technical and security logs | 12 months |
Who We Share Data With
We do not sell your data, full stop. Sharing happens only with processors and authorities who need it to do a job for us, and each one is bound by a contract limiting what it can do with your information.
Payment processors handle your PayID transfers, card payments, e-wallet transactions and crypto transfers, and they receive only the details needed to move money. KYC and AML screening providers receive your ID documents to confirm you are who you claim. Our regulators can compel disclosure of records under licence conditions. Analytics and hosting providers receive pseudonymised usage data that keeps the site running.
Game providers such as Pragmatic Play, Evolution and the others in our lineup receive a player identifier and session tokens so the games can load your balance, but they never receive your full identity or payment details.
Your Rights Over Your Data
Erasure is the right most players ask about. We will delete your data on request, except the categories the law pins down for five years, which we lock down instead and use for nothing beyond the legal obligation. You also hold the right to portability, meaning we hand you a machine-readable copy of the data you gave us, and the right to object to processing based on legitimate interest.
Every request goes to [email protected] or through live chat. We answer within 30 days and never charge a fee for a first, reasonable request. Withdrawing consent for marketing works instantly from any email link or your account settings.
- Access: a full copy of the personal data we hold
- Rectification: corrections to inaccurate or incomplete records
- Erasure: deletion, subject to statutory retention
- Portability: your data in a reusable format
- Objection: an end to legitimate-interest processing
- Withdrawal of consent: marketing switched off at any time
- Complaint: to the OAIC in Australia or your local DPA in the EU/EEA
Cookies and Tracking
Our site uses cookies to keep you logged in, remember your currency preference, measure how pages perform and, with your consent, support personalised marketing. Essential cookies load without asking because the casino cannot function without them; everything else waits for the banner choice you make on your first visit.
The full inventory of cookies, what each one stores and how to disable them in your browser sits on our dedicated Cookies Policy page. Change your mind later through your browser settings or the cookie banner, and we honour the new choice on your next visit.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption, and stored verification documents sit encrypted at rest. Access to your data follows a need-to-know model: support agents see account details, the KYC team sees documents, and nobody outside those roles gets either. Every access attempt is logged and audited.
We test our defences regularly, work only with processors who meet the same standard and keep incident response plans current. If a breach ever affects your personal data and the law requires notification, we tell you and the relevant regulator without undue delay, describe what happened and what we are doing about it.
Nothing in this section overrides your own role: keep your password unique, enable every security prompt we offer and never share account credentials. You can reach our data protection officer at [email protected] for anything this policy leaves unclear. This policy was last updated in 2026.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] from the address registered on your account or ask through live chat. We verify your identity, then send a full copy of the personal data we hold within 30 days, free of charge.
Can I delete everything immediately after closing my account?
Marketing data and consent-based records go straight away. Verification documents and transaction records stay for five years after your last activity because our Anjouan licence and anti-money-laundering rules require it. After that period we delete them automatically.
Do game providers see my personal details?
No. Providers such as Pragmatic Play and Evolution receive only a player identifier and session token so the games can load your balance. Your name, address and payment details never reach them.
How do I stop marketing emails?
Use the unsubscribe link at the bottom of any email or switch off marketing in your account settings. Withdrawal takes effect immediately and never affects your account, bonuses or withdrawals.