What personal data we hold and for how long

When players register with Rainbet Casino, we collect identity, verification and transaction data to meet our compliance obligations. Each category is kept only for as long as our policy requires, and the table below sets out the main categories drawn from our records.

These periods reflect our AML framework and are not shortened on request, since the records support our ongoing regulatory obligations.

How we verify and screen your information

We use Sumsub to carry out a three-step verification process at account creation and again during certain transactions. This requires a government ID — passport, ID card or driving licence — with all corners visible, together with a selfie holding the ID and a handwritten note with 6 random numbers. Only the name, date of birth, nationality, gender and photo are required unless we need to ask for more.

Screening and monitoring

Through Sumsub we run PEP, adverse media and sanctions screening against UN, OFAC and EU lists, with enhanced due diligence applied to higher-risk customers, which may include temporary restrictions on an account. For crypto deposits and withdrawals we use Elliptic blockchain analytics to monitor transactions, alongside three tiers of internal review: automated AI monitoring, employee review and manual audits.

Proof of address

Address details are first checked electronically against two databases. If that check does not succeed, we ask for a utility bill, government letter or bank statement dated within the last three months.

Your rights and the legal basis for processing

Our handling of personal data sits within a framework that references the EU 6AMLD, Regulation (EU) 2015/847, FATF recommendations, GDPR and Anjouan AML law. We carry out an annual enterprise-wide risk assessment and provide annual staff AML training to keep this framework current, and our AML policy, version 1.2, was last updated on 8 April 2026.

Where source of funds information is requested, we may ask for employment documents, business ownership records, inheritance or investment paperwork, depending on the circumstances of the account. This information, together with your verification and transaction history, forms part of the record we are required to retain.

If a dispute involves how your data has been used, our complaints process applies: we acknowledge a complaint within 2 business days, provide an initial response within 10 business days, and escalated cases may take up to 30 days for a final determination, with correspondence retained for at least 5 years. For a wider look at how these safeguards fit together with our licensing, see our page on playing safely at Rainbet.