As a licensed operator in Italy, we gather and manage personal and transactional data under strict legal obligations. This policy spells out exactly how long we retain different categories of information, the legal reasons behind those periods, and the security measures that safeguard your data at every stage. We continuously balance our duty to retain records for fraud prevention and financial audits with the privacy rights you maintain under Italian data protection law and the GDPR. Our schedules receive regular reviews so we stay fully compliant.
Legal Grounds for Record Keeping
Our data management policy relies on several legal duties that affect gambling operators targeting the Italian market. Anti‑money laundering regulations from the Italian Financial Intelligence Unit oblige us to keep transaction logs, identity verification documents and suspicious activity reports for a fixed term after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate oblige us to preserve financial records that support taxable gaming revenue and player winnings. These adnkronos.com duties override any general right to erasure during the mandatory period. For operational data that doesn’t fall under a fixed legal window, we rely on legitimate interest assessments where a valid reason exists, and we provide an opt‑out option unless a compelling legal obligation stops us.
Storage with Consent
Marketing preferences, newsletter sign‑ups and the behavioural analytics utilised for personalised offers stay only with your explicit consent. You can revoke consent anytime through your account dashboard; once you do, we cease that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is removed from active systems to block further use, but it is not deleted retroactively. Consent records themselves are kept for six years as proof of compliance. We never employ this data for anything beyond the activity you agreed to.
Information Protection During Storage
Retained data is secured with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access requires multi‑factor authentication plus just‑in‑time privilege elevation that ends on its own. Every access event is logged into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to ensure our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard identifies every dataset as it nears expiration.
Access Control and Staff Training
Only employees whose roles demonstrably require access to retained personal data get permissions, richroyalcasinò, and those permissions go through monthly recertification audits. Any access to dormant user records initiates a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and telling the difference between data we must keep under a legal hold and data we can delete straight away.
Information Erasure Procedures
When a data class hits the end of its planned retention period, our automatic lifecycle system kicks off a secure deletion workflow. First, the data gets logically removed from production databases. Next, physical storage blocks are rewritten with random data patterns to hinder forensic recovery. Finally, a crypto-stamped record lands in a audit trail, giving auditable proof that erasure happened on time. Backup copies refresh every ninety days, so any deleted data disappears from all media within three months. When a litigation hold applies, we suspend the deletion workflow only for the affected records, record the hold reason, and resume once the hold lifts.
Data Categories and Holding Times
We organize all user data into well-defined categories, each linked to a retention schedule that corresponds to its purpose and legal context. That structured approach keeps us from retaining things forever. Every year our Data Protection Officer examines these groupings and modifies the timelines whenever new guidance emerges from the Garante per la protezione dei dati personali. Below you’ll see how long each data type is kept in our live systems before being securely de-identified or erased. Archived backups operate on a ninety‑day cycle because of technical limitations.
Identity and Financial Records
Identity documents you upload during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, are kept on file for ten years after you close your account, as anti‑money laundering law stipulates. Deposit and withdrawal logs, payment method tokens and wallet balance histories are kept for ten years from the date of each transaction, meeting both AML requirements and Italian Civil Code limitation periods. We hold these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline elapses, we remove all personal identifiers permanently; statistical trends may still be used but never in a way that traces to any individual.
Account Actions and Support Communications
In-depth reports of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.
Safe Gaming and Self‑Exclusion Data
Upon activating self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.
Cross-border Data Transfers and Storage Periods
Our main systems sits in Italy and the broader European Economic Area. Some secondary services, like fraud detection platforms and customer relationship tools, may send some personal data to countries outside the EEA. In those cases, we ensure an adequacy decision exists or we put Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we apply to transferred data mirror those in this policy, and processors are contractually bound to erase or return data when the service ends. We publish a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules maintain Italian user data inside European boundaries, confirmed through yearly audits.
Policy Changes and User Notifications
We evaluate this Data Retention Policy every six months and whenever a major legal change affects Italian gambling operations. Minor clarifications are posted silently with a revised effective date. Material changes that alter retention periods, add new data categories or alter the legal basis for processing are communicated directly to you by email at least thirty days before they come into force. You’ll also notice an in‑platform banner notification when you log in during the notice period. Historical versions are kept and available on request, each with a version number and a validity date range. If an earlier version offered a shorter retention period for certain data, we follow that promise for data collected under that version and apply new terms only going forward.
User Rights and Retention Management
When you file an erasure request, our system automatically examines each data category against its retention schedule. All data past its mandatory window is erased without delay. For data still subject to a legal retention obligation, we lock it down right away so it’s taken out of active use and kept solely for compliance storage; we advise you which specific law is relevant and the date deletion becomes possible. Access requests are responded to within thirty days and come with a breakdown of what we store, why, and the scheduled deletion date. If you question accuracy, we append a note instead of modifying the original record, so the audit trail stays intact. Portability requests are honoured in a structured, machine‑readable format even while data is still in its retention window.
Affiliate Program Data Retention
Affiliate partnership data, including contact information, payment information and commission payout records, is kept for the life of the active relationship plus ten years after the partnership concludes. This is due to tax obligations on commission payouts, which necessitate long‑term financial documentation. Affiliate performance statistics and aggregated referred‑player statistics get made anonymous after half a decade. We firmly disallow affiliates from autonomously collecting or storing personal information about referred customers; they obtain only anonymous, consolidated reports. Our affiliate agreements include audit rights to verify compliance, and any infringement is reason for immediate contract termination and commission loss.
Frequently Asked Questions
Is it possible to ask for data deletion prior to the retention period’s conclusion?
Certainly, you can submit a deletion request at any moment. We instantly examine each data category in relation to its legal retention duty. If no legal obligation applies, we erase it promptly. Regarding items we must preserve, we confine them to storage‑only, explain the legal basis blocking instant erasure, and share the projected deletion date. You can also view all your data categories with their scheduled deletion dates through your account dashboard. That partial approach respects your rights as far as Italian regulations allow.
What happens to my data if I self‑exclude permanently?
If you sign up for permanent self‑exclusion, your personal data is shifted to a dedicated exclusion register that operates indefinitely with highly restricted access. This is a legal mandate designed to stop you from creating new accounts. Your gameplay and transaction history, on the other hand, still follow the standard retention schedules and get deleted once those periods run out. The self‑exclusion entry is isolated from all marketing and operational systems, thus it fulfills solely the protective purpose for which it was gathered. No promotional communications will reach you.
How is data from dormant accounts managed?
An account is deemed inactive following twelve consecutive months without a login. At that point, we automatically switch off marketing communications and move the account to a dormant state with reduced processing. The underlying retention periods remain active according to the original data collection dates, not the date of inactivity. This implies that data from a dormant account is still retained for the complete legal period relevant to its category and subsequently erased following our standard protocols. If you come back after a long break, you might need to complete a fresh Know Your Customer check to reactivate. Your data dashboard displays the current status continuously.
