Rainbet's Approach to Safeguarding Personal Data

Privacy Policy at Casinos Rainbet

At Casinos Rainbet we collect only the personal data required to open and verify an account: name, date of birth, nationality, gender and a photo, gathered during identity checks run through our verification provider, Sumsub. Registration itself takes under two minutes and only asks for an email address, username and password before email confirmation, as described on our account access page.

What Else We May Request

During certain transactions we run a three-step verification that can include a government ID with all corners visible, a selfie holding that ID, and a handwritten note with six random numbers. Proof of address is checked electronically against two databases first; if that fails we ask for a utility bill, government letter or bank statement dated within three months. Where required, we also request source-of-funds documents such as employment records, business ownership papers or inheritance records.

Crypto transactions are monitored using Elliptic blockchain analytics, and all customer screening for PEP status, adverse media and sanctions runs through Sumsub against UN, OFAC and EU lists, with enhanced due diligence applied to higher-risk accounts.

Data Retention and Account Security

We keep KYC documents and transaction records for 10 years, in line with our anti-money-laundering framework, which follows EU 6AMLD, Regulation (EU) 2015/847, FATF recommendations, GDPR and Anjouan AML law. Our AML policy, version 1.2, was last updated on 8 April 2026, and we carry out an annual enterprise-wide risk assessment alongside annual staff AML training.

Account activity is monitored across three tiers: automated AI monitoring, employee review and manual audits. This structure sits alongside the oversight described on our licence page, since our operator, Rain Group LTD., holds an Anjouan Gambling License issued by the Anjouan Gaming Board.

Data in transit is protected with 128-bit SSL encryption, and we cannot change outcomes or payout settings on games hosted by third-party providers, since those run on the providers' own servers rather than ours. We also maintain a dedicated accessibility feedback channel for players who encounter barriers using the site, targeting WCAG 2.1 Level AA, ADA and EN 301 549 standards.

Your Rights Regarding Account Data

As a player, you can expect the following when it comes to the data we hold on you:

• Verification data (ID, selfie, address proof) is used only for account checks run through Sumsub, not shared beyond compliance purposes.
• Records are retained for 10 years for KYC and transaction history, and at least 5 years for complaint records.
• Complaints involving personal data are acknowledged within 2 business days, with an initial response inside 10 business days, and up to 30 days for escalated cases handled by our Compliance Manager.
• Deposit and withdrawal activity tied to your account is detailed further on our payments page, and the full picture of our offer, including these safeguards, is summarised on our overview page.
• Our responsible gambling policy, updated 24 June 2026, lets you request a cool-off period or self-exclusion, which cannot be reversed early once set.