Privacy Policy

We are committed to transparency and compliance with relevant data protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and the General Data Protection Regulation (GDPR). This policy covers all interactions with our website and services. The platform is designed exclusively for individuals aged 18 and older. We do not intentionally gather data from minors, and if we discover any such collection due to misuse, we will address it according to legal standards.

About the Operator

Rooli Casino is owned and managed by Novatrix SRL, a company registered in Costa Rica under number 3-102-893958. Its registered office is located at Province 03 of Cartago, County 07 of Oreamuno, Potrero Cerrado, North Side of Manuel Ávila Camacho School, Costa Rica. As the data controller, the company decides the purposes and methods for processing personal information as described here.

To support compliance and address any concerns, we have appointed a Data Protection Officer (DPO). Users can contact the DPO at [email protected] for questions about this policy, to exercise their rights, or to raise complaints regarding data handling.

Types of Personal Data Collected

We gather various categories of information to operate effectively, ensure security, and deliver a high-quality gaming experience. This includes:

• Identity information such as full name, username, date of birth, gender, nationality, and official identification numbers like passport or ID details.
• Contact information including residential address, proof of address documents, email, phone number, and other communication channels.
• Financial details covering bank account information, payment card data, and documents verifying source of funds or wealth, such as bank statements or income proofs.
• Transaction records related to deposits, withdrawals, and other financial activities on the platform.
• Gaming activity data, which encompasses games played, login and logout times, wagering patterns, bonus usage, and records connected to responsible gaming initiatives.
• Technical information like IP address and approximate location, login credentials, browser type and version, time zone, operating system, platform, and other access-related technology details.
• Marketing and communication preferences, along with any additional details shared during interactions with our team.

Purposes and Legal Basis for Processing

Personal data is processed for several key reasons, each supported by an appropriate legal foundation:

• To deliver services, including account management, transaction processing, identity verification, customer support, and access to promotions. This relies on the performance of our contractual obligations.
• To fulfill legal duties, such as anti-money laundering (AML) compliance, Know Your Customer (KYC) procedures, responsible gaming enforcement, and regulatory reporting. Here, we act under legal obligations.
• To prevent fraud, detect bonus abuse, and manage risks while protecting both the business and our users. This is based on our legitimate interests.
• For marketing and personalization, such as sending tailored offers and communications. Processing occurs with your consent or under legitimate interest where applicable.
• To analyze usage patterns, resolve technical problems, enhance user experience, and support research. Legitimate interest serves as the basis.
• To maintain and improve overall platform security, grounded in both legitimate interest and legal requirements.

Sources of Data Collection

Information comes from multiple reliable channels to maintain accuracy and compliance:

• Directly from you when registering, using services, or contacting support.
• Third-party verification services that assist with confirming identity, age, or address.
• Banks and payment processors involved in handling transactions.
• Specialized databases for AML checks and identifying politically exposed persons (PEPs).
• Official regulatory bodies and responsible gaming registries.
• Business partners, including affiliates, advertising networks, and analytics providers, who may supply pseudonymous data for optimization purposes.

Sharing Personal Information with Third Parties

We may disclose data to carefully selected partners only when necessary and under strict controls:

• Group companies for purposes like fraud prevention, AML, bonus monitoring, and responsible gaming. With consent, this may extend to marketing other group products.
• Game providers requiring limited details such as username or IP address to deliver their titles. Their own privacy policies apply and can be reviewed on their sites.
• Payment service providers to facilitate secure transactions.
• Marketing partners for promotional activities if consent has been given.
• Regulatory or law enforcement authorities when legally required, with efforts made to challenge overly broad requests.
• Communication tools for email and live chat support.
• AML and KYC verification systems to meet compliance standards.
• In cases of business transfers like mergers or acquisitions, with prior notification where possible.
• Professional advisors, consultants, and other processors bound by data protection agreements.

All recipients are required to handle data lawfully, securely, and solely for agreed purposes. We limit sharing to the minimum necessary and do not permit third parties to use information for their independent objectives.

International Data Transfers

When personal data moves outside the European Economic Area (EEA), we implement suitable protections. These include Standard Contractual Clauses approved by the European Commission or transfers to countries recognized for adequate data protection levels.

Data Retention Practices

We keep personal information only as long as needed to achieve the original collection purposes. Retention decisions consider the data type, legal requirements, and associated risks. Due to AML regulations, a minimum five-year retention period applies from the date of account closure, and earlier deletion requests cannot be accommodated during this time.

Anonymized data may be retained longer for service improvements and marketing analysis without involving automated decision-making processes.

Your Rights and Consent

Using our services indicates acceptance of the data practices described in this policy. Under applicable laws like GDPR and PIPEDA, individuals have rights to:

• Withdraw consent where processing relies on it, subject to any legal or contractual limitations.
• Access, rectify, or request erasure of their data.
• Restrict or object to certain processing activities.
• Request portability of their information.
• Opt out of marketing messages at any time.
• File complaints with relevant data protection authorities if concerns arise.

Automated Decision-Making

We do not typically base decisions solely on automated processes. Should such methods be used in particular situations, we will provide separate notification as required by law.

Data Security Measures

Strong technical, physical, and administrative safeguards protect personal information against unauthorized access, loss, or unlawful processing. Data exchanges occur over secure servers, and access is restricted to authorized personnel who need it for legitimate business reasons.

Player accounts are secured with unique login credentials, and users are encouraged to activate two-factor authentication (2FA) for enhanced protection. Keeping passwords confidential and preventing unauthorized access remains the responsibility of each account holder.

Updates to the Privacy Policy

This policy may be revised periodically to reflect technological developments or changes in legal obligations. We recommend checking it regularly to remain informed about how your information is managed.

Contacting Us

For any inquiries about this Privacy Policy or the handling of your personal data, please reach out to our Data Protection Officer at [email protected]. Support is also available through [email protected] or via live chat on the website.

We strive to handle all data responsibly and appreciate the trust you place in us when using Rooli Casino.