Introduction
Welcome to RioAce. This Privacy Policy outlines how RioAce, as the data controller, collects, uses, processes, and protects your personal information when you use our website, services, and applications. We are committed to safeguarding your privacy and ensuring the security of your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for our European customers. By accessing or using RioAce, you agree to the terms of this Privacy Policy. Please read it carefully to understand our practices regarding your data.
Information We Collect
We collect various types of information to provide and improve our services, manage your account, and meet our legal and regulatory obligations. This information includes:
- Identity Data: Your full name, date of birth, gender, and nationality.
- Contact Data: Your email address, postal address, and telephone number.
- Financial Data: Payment card details, bank account information, and other financial transaction data.
- Transaction Data: Details about deposits, withdrawals, wagers, and other activities on your RioAce account.
- Technical Data: Internet Protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access RioAce.
- Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
- Verification Data: Documents and information required for identity verification, such as copies of identification documents (e.g., passport, driving license), proof of address (e.g., utility bill), and source of funds documentation.
How We Use Your Information
We use your personal information for several purposes, always in accordance with applicable data protection laws:
- To register you as a new customer and manage your account.
- To process your transactions, including deposits and withdrawals.
- To provide our gaming services and enable your participation in games.
- To verify your identity and age, and to conduct checks for anti-money laundering (AML) and fraud prevention.
- To communicate with you regarding your account, our services, and promotional offers.
- To personalize your experience on RioAce and offer tailored content.
- To improve our website, products, and services.
- To comply with our legal and regulatory obligations, including responsible gambling measures.
- To detect and prevent fraud, money laundering, and other criminal activities.
- To resolve disputes and enforce our terms and conditions.
- To conduct research and analysis to understand market trends and customer preferences.
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into such a contract (e.g., creating and managing your account, processing transactions).
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which RioAce is subject (e.g., AML regulations, age verification, responsible gambling requirements).
- Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms (e.g., improving our services, preventing fraud, network and information security). We always balance our legitimate interests against your rights and freedoms.
- Consent: In specific situations, we may ask for your explicit consent to process your data for certain purposes (e.g., sending you marketing communications). You have the right to withdraw your consent at any time.
Data Sharing and Disclosure
We may share your personal information with third parties in the following circumstances:
- Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as payment processors, IT support, customer service, and marketing agencies. These providers are contractually bound to protect your data and only use it for the purposes specified by RioAce.
- Regulatory and Law Enforcement Bodies: We may disclose your information to regulatory authorities, licensing bodies, law enforcement agencies, and other governmental organizations when required by law, or to assist in investigations of fraud, money laundering, or other illegal activities.
- Affiliates and Group Companies: Your data may be shared with other companies within our corporate group for operational purposes, internal reporting, and service improvement.
- Fraud Prevention Agencies: To prevent fraud and money laundering, we may share your data with specialized agencies that perform checks on our behalf.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
- Professional Advisors: We may share data with our professional advisors, such as lawyers, auditors, and consultants, for legal, financial, or operational advice.
We do not sell your personal data to third parties.
Data Security
RioAce implements robust technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction, or alteration. These measures include:
- Encryption of data in transit and at rest.
- Secure server environments with restricted access.
- Firewalls and intrusion detection systems.
- Regular security audits and vulnerability assessments.
- Employee training on data protection and privacy.
- Strong authentication mechanisms for user accounts.
While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously review and update our security practices.
Your Privacy Rights
Under data protection laws, you have several rights regarding your personal data. These rights may vary depending on your jurisdiction, but generally include:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure ('Right to be Forgotten'): You have the right to request the deletion of your personal data in certain circumstances.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain situations.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object: You have the right to object to the processing of your personal data where we are relying on a legitimate interest as the legal basis for processing.
- Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
- Right to Complain: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request in accordance with applicable law.
Cookies and Tracking
RioAce uses cookies and similar tracking technologies to enhance your experience, analyze website usage, and for marketing purposes. Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
- Strictly Necessary Cookies: Essential for the operation of our website, enabling core functionalities like security, network management, and accessibility.
- Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website. This helps us improve the way our website works.
- Functionality Cookies: Used to recognize you when you return to our website, enabling us to personalize content for you and remember your preferences.
- Targeting/Advertising Cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of RioAce.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our retention periods are determined by considering:
- The type of data and its sensitivity.
- The purpose for which we process it.
- Legal and regulatory obligations (e.g., AML laws often require data retention for a minimum of five years after account closure).
- Statutory limitation periods for potential claims.
When your personal data is no longer required, we will securely delete or anonymize it.
International Data Transfers
Your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA) or your country of residence. This may occur if our service providers or their servers are located in such countries. When we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your privacy rights and ensure your data is treated securely and in accordance with this Privacy Policy. These safeguards may include:
- Transferring data to countries deemed by the European Commission to provide an adequate level of data protection.
- Using standard contractual clauses approved by the European Commission.
- Implementing binding corporate rules.
Children's Privacy
RioAce services are not intended for individuals under the age of 18 (or the legal age of majority in your jurisdiction, whichever is higher). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information as quickly as possible. If you believe we might have any information from or about a child, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Significant changes will be communicated through prominent notices on our website or via email.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact our Data Protection Officer:
- Email: [email protected]
- Postal Address: [Please refer to the "About Us" or "Terms and Conditions" section of our website for our registered office address, or contact customer support for specific details.]
We are committed to addressing your inquiries promptly and transparently.