Privacy Policy

Who we are (data controller)

The website is operated by RBGAMING N.V., registered at Hamchako, Mutsamudu, The Autonomous Island of Anjouan, Union of Comoros (Company No. 16077). For privacy queries, contact [email protected] and mark the subject “Privacy”.

Scope of this policy

This policy covers personal data processed through rainbetapp.org.uk, including account creation, gameplay, payments, promotions, and customer support. It does not cover third-party websites, apps, or services that have their own privacy terms.

Data we collect

Account and identity data
Name, date of birth, email, phone, address, country, and account identifiers.

Verification (KYC/AML) data
Copies of government ID, selfies for liveness checks, proof of address, and (where requested) proof of funds/wealth such as payslips or bank statements. Sensitive or special-category data is only processed where required by law and with appropriate safeguards.

Payment data
Transaction details, chosen payment method, partial card or account references, withdrawal preferences, and fraud-screening signals. Full card numbers are handled by certified payment providers and are not stored on our servers.

Usage and technical data
Log files, IP address, device and browser type, language, referral URLs, session timestamps, cookie identifiers, crash reports, and interaction data with pages, games, and betslips.

Communications data
Messages sent to support, verification uploads, call or chat transcripts, marketing preferences, and complaint records.

Cookies and similar tech
Cookies, local storage, and similar tools help run the site, keep you logged in, remember preferences, and measure performance. See the Cookie Policy for details and settings.

Lawful bases for processing

We process personal data under one or more of the following bases:

• Contract: to open and service your account, take deposits, settle bets, and process withdrawals.
• Legal obligation: to comply with AML/CTF rules, sanctions screening, accounting, taxation, and requests from competent authorities.
• Legitimate interests: to secure the platform, prevent fraud, improve products, personalise content within reasonable expectations, and defend legal claims.
• Consent: for optional uses such as certain cookies or marketing by email/SMS/push, where required. You can withdraw consent at any time.

How we use personal data

• Create and manage accounts, authenticate access, and provide customer support.
• Process deposits and withdrawals, verify ownership of payment instruments, and meet AML/CTF requirements.
• Operate games and the sportsbook, prevent collusion and abuse, and enforce house rules.
• Run risk controls, device fingerprinting, IP reputation checks, and velocity limits to combat fraud.
• Send service messages about your account, transactions, and policy changes.
• With your consent, send marketing and promotions; you can opt out via account settings or any message footer.
• Generate aggregated statistics to improve features and troubleshoot issues.

Automated decisions and profiling

Automated systems may assess activity to detect fraud, bonus abuse, and money-laundering risks, and to apply safer-gambling tools (for example, triggering reality checks or requesting documents). You may request human review of a decision that has legal or similarly significant effects.

Sharing your data

We share data only as needed and under contract with confidentiality and security obligations:

• Service providers: identity verification, payments, cloud hosting, analytics, security, communications, and customer support tools.
• Financial institutions and PSPs: to process deposits/withdrawals, resolve chargebacks, and prevent fraud.
• Game and platform providers: to run content you choose to play and to settle rounds.
• Professional advisers: legal, compliance, and auditing services.
• Authorities: regulators, law enforcement, courts, or FIUs where required by law or to protect rights and safety.
  We do not sell personal data.

International transfers

Where data is transferred outside the UK or EEA, we use lawful safeguards such as adequacy regulations, Standard Contractual Clauses, and additional technical/organisational measures. Copies of relevant safeguards can be requested via the contact email above.

Data retention

Retention depends on purpose and legal requirements. Account, transaction, and KYC records are typically kept for up to 10 years after account closure to meet AML/CTF and bookkeeping obligations. When data is no longer required, it is securely deleted or anonymised.

Security

We apply layered security including encryption in transit and at rest (where appropriate), access controls, monitoring, and regular reviews of vendors and systems. No method of transmission or storage is guaranteed to be 100% secure; please keep your credentials confidential and enable available security features.

Your rights (UK GDPR)

Subject to conditions and exemptions, you may:

• Access your data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase data (where no longer required and not restricted by law).
• Restrict or object to processing based on legitimate interests.
• Port data you provided in a structured, commonly used format.
• Withdraw consent for optional processing at any time.
  To exercise rights, email [email protected] from your registered address. We may need to verify your identity before acting on a request.

Marketing preferences

You can manage marketing choices in your account or by using unsubscribe links. Service and transactional messages will still be sent where necessary for your account.

Cookies

Essential cookies are required for the site to function. Non-essential cookies (for analytics or personalisation) operate on consent where applicable. Visit the Cookie Policy page to review categories and adjust settings.

Children

Access is restricted to persons aged 18+. We do not knowingly collect data from minors. If you believe a minor has used the site, contact support so we can investigate and remove any related data.

Third-party links

Links to other websites or apps are provided for convenience. Their content and privacy practices are outside our control; review their policies before sharing information.

Changes to this notice

We may update this policy to reflect legal, technical, or business developments. Significant changes will be highlighted on this page or communicated through your account inbox or email.

Contact

For privacy questions, rights requests, or complaints, email [email protected]. If unresolved, you may have the right to complain to the UK Information Commissioner’s Office (ICO).