As a regulated operator in Italy, we collect and manage personal and transactional data under rigorous legal obligations https://it-richroyal.it/legal-and-affiliates/. This policy details exactly how long we hold different categories of information, the legal reasons behind those periods, and the security measures that shield your data at every stage. We continuously balance our duty to retain records for fraud prevention and financial audits with the privacy rights you hold under Italian data protection law and the GDPR. Our schedules get regular reviews so we keep fully compliant.

Legal Basis for Information Storage

Our data management policy rests on several legal obligations that govern gambling operators operating in the Italian market. Anti‑money laundering regulations from the Italian Financial Intelligence Unit require us to keep activity logs, identity verification documents and suspicious activity reports for a specific duration after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate demand we preserve financial records that back up taxable gaming revenue and player winnings. These duties override any general right to erasure during the mandatory period. For operational data that falls outside a fixed legal window, we use legitimate interest assessments where a valid reason exists, and we provide an opt‑out option unless a compelling legal obligation stops us.

Consent‑Based Retention

Marketing preferences, newsletter sign‑ups and the behavioural analytics employed for personalised offers remain only with your explicit consent. You can retract consent anytime through your account dashboard; once you do, we stop that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is removed from active systems to block further use, but it is not deleted retroactively. Consent records themselves are kept for six years as proof of compliance. We never use this data for anything beyond the activity you agreed to.

Data Transfers Abroad and Storage Periods

Our main systems resides within Italy and the wider European Economic Area. Some supporting services, like fraud detection platforms and customer relationship tools, may transfer certain personal data to countries outside the EEA. In those cases, we guarantee an adequacy decision is available or we implement Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we assign to transferred data mirror those in this policy, and processors are contractually bound to erase or return data when the service ends. We maintain a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules maintain Italian user data inside European boundaries, confirmed through yearly audits.

Affiliate Program Data Retention

Affiliate partnership data, including contact information, payout data and commission transaction history, stays for the life of the active relationship plus a decade after the agreement terminates. This is due to tax obligations on commission payments, which require long‑term financial documentation. Affiliate performance metrics and aggregated referred‑player statistics get anonymized after five years. We firmly disallow affiliates from independently collecting or keeping personal information about referred customers; they obtain only anonymised, aggregated summaries. Our affiliate agreements include inspection rights to ensure compliance, and any breach is cause for instant agreement cancellation and commission forfeiture.

Data Removal Procedures

When a information type hits the end of its scheduled retention, our self-running lifecycle mechanism kicks off a protected erasure procedure. First, the data gets digitally detached from production databases. Next, physical storage blocks are overwritten with random data patterns to hinder forensic recovery. Finally, a cryptographically timestamped entry lands in a regulatory record, giving traceable confirmation that erasure happened on time. Backup copies refresh every ninety days, so any deleted data disappears from all media within three months. When a litigation hold applies, we pause the deletion workflow only for the affected records, document the hold reason, and continue once the hold lifts.

Policy Changes and User Notifications

We assess this Data Retention Policy every six months and whenever a major legal change impacts Italian gambling operations. Minor clarifications are published silently with a revised effective date. Material changes that modify retention periods, include new data categories or change the legal basis for processing are communicated directly to you by email at least thirty days before they become effective. You’ll also notice an in‑platform banner notification when you log in during the notice period. Historical versions are stored and available on request, each with a version number and a validity date range. If an earlier version offered a shorter retention period for certain data, we stick to that promise for data collected under that version and apply new terms only going forward.

Popular Queries

Is it possible to ask for data deletion prior to the retention period’s conclusion?

Yes, you can file an erasure request any time. We promptly review every data category against its mandatory retention requirement. If no legal obligation applies, we erase it promptly. For anything we must keep, we restrict it to storage‑only, tell you the legal basis stopping immediate deletion and give you the expected deletion date. You may also review all your data categories and their scheduled deletion dates from your account dashboard. That partial approach respects your rights as far as Italian regulations allow.

What happens to my data if I self‑exclude permanently?

Upon enrolling in permanent self‑exclusion, your identity information is transferred to a specialized exclusion register that remains active indefinitely under strictly controlled access. It is a legal obligation intended to block you from establishing new accounts. Your gameplay and transaction history, on the other hand, still follow the standard retention schedules and get deleted once those periods run out. The self‑exclusion record is separated from all marketing and operational platforms, so it only serves the safeguarding role it was intended for. No marketing communications will be sent to you.

How is data from dormant accounts managed?

An account becomes inactive after twelve straight months with no login. Then, we automatically halt marketing messages and place the account into a dormant condition with minimized processing. The underlying retention periods remain active according to the original data collection dates, not the date of inactivity. That means data from an inactive account is still held for the full statutory period that applies to its category and then deleted according to our standard procedures. If you come back after a long break, you might need to complete a fresh Know Your Customer check to reactivate. The current status is always visible on your data dashboard.

Data Safeguarding During Storage

Retained data is secured with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access requires multi‑factor authentication plus just‑in‑time privilege elevation that ends on its own. Every access event is written into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to ensure our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard marks every dataset as it nears expiration.

Access Control and Employee Education

Only employees whose roles demonstrably need access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records initiates a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and telling the difference between data we must keep under a legal hold and data we can delete straight away.

Data Subject Rights and Retention Handling

When you submit an erasure request, our system automatically examines each data category against its retention schedule. Anything past its mandatory window is removed without delay. For data still governed by a legal retention obligation, we lock it down right away so it’s removed from active use and stored only for compliance storage; we advise you which specific law is in effect and the date deletion becomes possible. Access requests are handled within thirty days and include a breakdown of what we keep, why, and the scheduled deletion date. If you challenge accuracy, we attach a note instead of modifying the original record, so the audit trail is preserved. Portability requests are fulfilled in a structured, machine‑readable format even while data is still in its retention window.

Data Categories and Storage Durations

We categorize all user data into distinct categories, each tied to a retention schedule that aligns with its use and legal context. That organized approach prevents us from holding on to things forever. Every year our Data Protection Officer examines these classifications and adjusts the timelines whenever new guidance emerges from the Garante per la protezione dei dati personali. Below you’ll see how long each data type is kept in our live systems before being securely de-identified or deleted. Archived backups follow a ninety‑day cycle because of technical constraints. selezionato a mano

Identification and Monetary Records

Identity documents you provide during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, remain on file for ten years after you end your account, as anti‑money laundering law mandates. Deposit and withdrawal logs, payment method tokens and wallet balance histories are held for ten https://www.ilsole24ore.com/art/ai-croupier-casino-venezia-mance-obbligatorie-e-piu-ricche-AEdOMZAC years from the date of each transaction, satisfying both AML requirements and Italian Civil Code limitation periods. We store these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline elapses, we strip away all personal identifiers permanently; statistical trends may still be applied but never in a way that links back to any individual.

Account Actions and Customer Support Interactions

Comprehensive records of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.

Ethical Play and Self‑Exclusion Data

Upon activating self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.