Privacy Policy

1. Introduction

At Richard Casino, we are fully committed to protecting the privacy, security, and personal data of all users who interact with our platform. This Privacy Policy explains how we collect, use, store, process, and safeguard personal information when users access our website, register accounts, participate in gaming activities, or communicate with our services.

We recognise that privacy and data protection are fundamental rights. Therefore, our data-handling practices are designed to comply with applicable privacy laws, gambling regulations, and international data-protection standards.

This Policy applies to:

• Website visitors
• Registered players
• Payment users
• Customer support contacts
• Marketing subscribers

By accessing Richard Casino services, users acknowledge and agree to the practices described in this Privacy Policy.

2. Legal and Regulatory Framework

Richard Casino operates in accordance with relevant privacy, cybersecurity, and gambling-industry compliance frameworks. Our privacy practices are informed by internationally recognised standards as well as Australian regulatory guidance where applicable to gambling services and consumer protection.

We align our practices with principles outlined by major regulatory and responsible gambling bodies, including data minimisation, transparency, lawful processing, and harm-prevention obligations.

Authoritative Australian Gambling & Regulatory Resources

3. Categories of Personal Data We Collect

To provide gaming services effectively and securely, Richard Casino collects several categories of personal data. The type and scope of information depend on user interaction level.

3.1 Identity Information

We may collect identity-related data, including:

• Full legal name
• Date of birth
• Residential address
• Government-issued identification
• Account username

Identity verification is required to comply with Know Your Customer (KYC) obligations and to prevent fraud, underage gambling, and financial crime.

3.2 Contact Information

Users may provide contact details such as:

• Email address
• Phone number
• Mailing address

This information enables account communication, support responses, and service notifications.

3.3 Financial Information

When processing deposits or withdrawals, we collect payment-related data, including:

• Payment method type
• Transaction history
• Billing identifiers
• Partial card or wallet references

We do not store full payment credentials. Payment processing is handled through secure, regulated third-party gateways.

3.4 Technical & Device Data

We automatically collect technical information when users access the platform:

• IP address
• Browser type
• Device model
• Operating system
• Log files
• Geolocation indicators

This data supports cybersecurity, fraud detection, and platform optimisation.

3.5 Gaming & Behavioural Data

As a licensed gambling platform, we collect gaming activity data, including:

• Game participation history
• Betting patterns
• Session duration
• Responsible gambling markers
• Self-exclusion records

This information is used to:

• monitor fair play
• detect harmful behaviour
• implement player protection tools

4. Methods of Data Collection

We collect personal data through several channels:

Direct collection

When users:

• create accounts
• submit verification documents
• contact support
• participate in promotions

Automated collection

Through:

• cookies
• tracking pixels
• analytics software
• server logs

Third-party collection

From:

• payment providers
• identity verification partners
• fraud-prevention databases

5. Cookies & Tracking Technologies

Richard Casino uses cookies and related technologies to enhance user experience, personalise services, and maintain platform security.

Cookies help us:

• remember login sessions
• store preferences
• analyse traffic
• detect suspicious activity

Users may control cookie preferences via browser settings. However, disabling cookies may impact platform functionality.

Australian Responsible Gambling & Player Protection Resources

Interactive Privacy Data Usage Chart

6. Purpose of Data Processing

We process collected data to:

• provide gaming services
• verify identity
• process payments
• detect fraud
• comply with legal obligations
• enforce responsible gambling safeguards
• improve platform performance

7. Data Storage & Information Security

At Richard Casino, we apply strict technical and organisational safeguards to ensure that all personal data is stored securely and protected from unauthorised access, disclosure, alteration, or destruction.

Our infrastructure incorporates enterprise-grade cybersecurity protocols designed to meet modern online-gaming and financial-service security expectations.

Key security measures include:

• End-to-end data encryption
• Secure Socket Layer (SSL) certification
• Firewall and intrusion-detection systems
• Multi-factor authentication controls
• Role-based access permissions
• Continuous system monitoring

All sensitive data is stored within protected environments using encrypted databases and restricted administrative access.

8. Encryption & Payment Security

Financial and transactional data requires the highest level of protection. Richard Casino utilises advanced encryption standards (AES-256 and TLS protocols) to safeguard all financial interactions.

Security mechanisms include:

• Tokenised payment processing
• PCI-DSS compliant gateways
• Segregated transaction servers
• Anti-fraud monitoring systems

We do not store full card numbers, CVV codes, or sensitive wallet credentials on our internal servers. Payment processing is handled via licensed third-party providers operating under regulated financial compliance frameworks.

9. Third-Party Data Sharing

We may share limited personal data with vetted third parties where operationally necessary and legally permitted.

Categories of third-party recipients include:

Payment service providers

To process deposits, withdrawals, and fraud checks.

Identity verification partners

To complete KYC (Know Your Customer) procedures and age verification.

Cybersecurity vendors

To detect suspicious activity, bot traffic, or account compromise risks.

Marketing platforms

Where users have consented to promotional communication.

All third parties are contractually obligated to maintain confidentiality, implement security safeguards, and process data solely for authorised purposes.

We never sell or rent personal data to unaffiliated commercial entities.

10. International Data Transfers

Given the global nature of online gaming infrastructure, user data may be processed or stored in jurisdictions outside the user’s country of residence.

When cross-border transfers occur, Richard Casino ensures that:

• Adequate data-protection safeguards are implemented
• Contractual data-processing agreements are enforced
• Transfers comply with applicable privacy regulations

Where required, we apply Standard Contractual Clauses (SCCs) or equivalent legal transfer mechanisms to maintain lawful processing.

11. AML & KYC Compliance

As part of our regulatory obligations, Richard Casino implements Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) compliance measures.

These include mandatory identity verification and transactional monitoring.

Data processed for AML/KYC purposes may include:

• Government identification documents
• Proof of address
• Payment ownership verification
• Source-of-funds declarations
• Transaction pattern analysis

These processes are required to:

• Prevent financial crime
• Detect fraud
• Enforce legal gambling age limits
• Ensure platform integrity

Failure to provide required verification data may result in account suspension or transaction restrictions.

12. Data Retention Periods

Richard Casino retains personal data only for as long as necessary to fulfil operational, legal, and regulatory obligations.

Retention periods vary depending on data category.

Typical retention principles:

• Account data — retained while account remains active
• Financial records — retained per financial compliance laws
• AML/KYC documentation — retained per regulatory mandates
• Support communications — retained for service quality review
• Marketing consent records — retained until withdrawal

Once retention obligations expire, data is securely deleted or anonymised.

User Privacy Rights Management

13. User Rights & Control

Users retain full rights over their personal data, subject to regulatory retention obligations. Requests may be submitted via customer support or designated privacy contact channels.

We may require identity verification before processing privacy requests to prevent unauthorised access.

14. Marketing Communications & Consent

Where users opt in to marketing communications, we may process contact data to deliver:

• promotional offers
• bonus campaigns
• platform updates
• partner promotions

Users may withdraw marketing consent at any time via:

• unsubscribe links
• account settings
• support requests

Withdrawal does not affect prior lawful processing.

15. Children’s Privacy

Richard Casino services are strictly limited to individuals who meet the legal gambling age in their jurisdiction.

We do not knowingly collect or process personal data belonging to minors. Where underage activity is identified, accounts are suspended and data handled in accordance with legal reporting obligations.

16. Policy Updates

We reserve the right to update this Privacy Policy to reflect:

• legal changes
• regulatory updates
• platform developments
• security enhancements

Material changes will be communicated via website notice or registered email notification where applicable.

17. Data Breach Detection & Response Procedures

Richard Casino maintains a structured incident-response framework designed to identify, contain, investigate, and remediate potential data-security breaches.

A data breach refers to any confirmed or suspected incident involving:

• Unauthorised access to personal data
• Data disclosure or leakage
• Loss or theft of sensitive information
• System intrusion or cyberattack
• Accidental deletion or alteration

Breach response framework

Our internal response protocol includes:

1. Immediate containment Securing systems to prevent further exposure.
2. Threat assessment Identifying breach scope, affected systems, and compromised data categories.
3. Forensic investigation Conducted by cybersecurity specialists to determine cause and impact.
4. User risk evaluation Assessing whether individuals face financial, identity, or privacy risk.
5. Remediation actions Patching vulnerabilities and strengthening safeguards.

User notification procedures

Where legally required or where risk exposure is significant, affected users will be notified. Notifications may include:

• Nature of the breach
• Data categories affected
• Recommended protective actions
• Support contact channels

Notifications are issued without undue delay and in accordance with regulatory timelines.

18. Account Security Responsibilities

While Richard Casino implements robust system security, users also play a role in safeguarding their accounts.

Users are responsible for:

• Maintaining password confidentiality
• Enabling two-factor authentication where available
• Avoiding credential sharing
• Logging out from shared devices
• Reporting suspicious activity immediately

Failure to maintain credential security may compromise account protection.

19. Responsible Gambling Data Processing

As part of our commitment to player protection, Richard Casino processes behavioural and interaction data to support responsible gambling initiatives.

This includes monitoring:

• Betting frequency
• Deposit escalation patterns
• Session duration
• Loss-chasing behaviour
• Time-of-day play anomalies

Such monitoring allows us to implement early-intervention safeguards.

Protection measures may include:

• Automated risk alerts
• Cooling-off prompts
• Deposit limit suggestions
• Temporary restrictions
• Self-exclusion facilitation

Responsible gambling data is processed strictly for harm-prevention purposes and not for marketing exploitation.

20. Self-Exclusion & Restriction Records

Where users voluntarily or regulatorily enter self-exclusion programs, we retain restriction data to ensure compliance.

This may include:

• Exclusion duration
• Linked accounts
• Identity markers
• Jurisdictional register checks

Restriction records cannot be deleted prematurely where retention is required by law or licensing conditions.

21. Complaint Handling & Dispute Resolution

Richard Casino provides structured channels for privacy-related complaints, data disputes, or regulatory concerns.

Users may submit complaints regarding:

• Data misuse
• Access denial
• Deletion refusal
• Marketing consent breaches
• Security concerns

Complaint process

1. Formal submission via support or privacy contact
2. Identity verification
3. Internal review
4. Resolution proposal
5. Escalation (if required)

We aim to resolve complaints within 30 days, subject to complexity.

22. Regulatory Escalation Rights

If users are dissatisfied with internal resolution outcomes, they may escalate complaints to relevant regulatory or privacy authorities within their jurisdiction.

For users interacting within Australian regulatory frameworks, complaints may be directed to national privacy or consumer-protection bodies where applicable.

23. Data Accuracy & User Responsibility

Users are responsible for ensuring that all submitted personal information is accurate, current, and complete.

Richard Casino is not liable for service disruption, verification failure, or transaction delays resulting from inaccurate or outdated personal data.

Users may update personal data via:

• Account settings
• Identity resubmission
• Support requests

24. Law Enforcement & Legal Disclosure

We may disclose personal data where legally required or where necessary to:

• Comply with court orders
• Respond to lawful subpoenas
• Cooperate with regulatory investigations
• Prevent financial crime
• Protect platform integrity

Disclosures are limited to legally mandated scopes and documented internally.

25. Business Transfers & Corporate Changes

In the event of mergers, acquisitions, restructuring, or asset transfers, user data may be transferred as part of operational continuity.

Where such transfers occur:

• Data protection obligations remain in force
• Users will be notified of material ownership changes
• Privacy rights remain unaffected

26. Data Anonymisation & Research Use

Aggregated and anonymised user data may be used for:

• Platform performance analytics
• Responsible gambling research
• Risk modelling
• Regulatory reporting

Anonymised datasets cannot be used to identify individual users.

27. Policy Interpretation

This Privacy Policy should be interpreted in conjunction with:

• Terms & Conditions
• Responsible Gambling Policy
• AML / KYC Compliance Policy
• Cookie Policy

Where conflicts arise, the stricter data-protection provision shall apply.

28. Contact Information — Privacy Office

Users may contact Richard Casino regarding privacy matters, data requests, or complaints via designated privacy channels.

Example contact structure

29. Effective Date & Policy Versioning

This Privacy Policy becomes effective as of the date of publication displayed on the website footer.

We recommend users review this Policy periodically to remain informed about data-handling practices.

Richard Casino remains committed to maintaining the highest standards of privacy, cybersecurity, responsible gambling protection, and regulatory compliance.

Our privacy framework is built on four core principles:

• Transparency
• Security
• Accountability
• Harm Prevention

By integrating technological safeguards, clinical risk monitoring, and regulatory alignment, we aim to create a secure and responsible digital gaming environment for all users.