This policy explains how Riverspin handles personal data when you visit the website, register an account, deposit, play and contact support. It covers the website, the installed web app and every communication that comes from the casino. By creating an account or continuing to use the site you confirm that you have read it, and you can come back to it at any time from the footer of every page.
Customer data is treated as confidential and is not sold to third parties. The sections below describe what we collect, why we need it, who can see it and for how long it is kept.
We collect only the data that an online casino needs to run an account safely and to meet its legal duties.
If you sign up with Google, we receive the basic account information that Google shares for that purpose, and nothing else from your Google account.
The site uses essential cookies to keep you signed in, remember your language and protect the session against misuse. Other cookies help us understand how pages perform so that we can fix errors and make the site faster. You can block or delete cookies in your browser settings, although parts of the site may stop working properly without the essential ones.
Web push notifications are optional. We only send them after you accept the browser prompt, and you can switch them off at any time in the notification settings of your browser.
We send promotional messages, including bonus offers, to the verified e-mail address of your account unless you have unsubscribed, and every message lets you opt out.
Data is shared only when it is needed to deliver the service or when the law requires it. Payment providers receive the details that a transaction needs, verification partners check documents, game providers receive the technical identifiers required to run a game session, and our support and security teams see the account data that their work requires. Authorities and regulators receive information when a valid legal request obliges us to provide it.
Everyone who handles personal data on our behalf is bound by confidentiality and may use the data only for the agreed purpose.
We keep account and transaction records for five years after you stop using our services, because the law requires us to hold them for that period. After that time the data is deleted or anonymised. Because of this retention duty, a request to delete everything at once cannot be carried out while the period runs, although we will remove data that we are no longer obliged to keep.
If your account stays unused for twelve consecutive months, it becomes inactive, and the retention period starts from the last use of the services.
Connections to the site use the TLS 1.3 protocol, and an AI-powered intrusion detection system scans traffic to catch unauthorised access early. Card data stays with PCI-compliant payment gateways, access to personal data inside the company is restricted to the people who need it, and you can add two-factor authentication to your account. You can help by keeping your password private and by signing out of devices you do not own.
You can view and edit personal data in your profile until it is verified. Once a detail is verified, a change goes through support, which protects the account against takeover. You can ask us what data we hold about you, ask us to correct it, object to marketing at any time, and use self-exclusion to lock the account.
To exercise a right or to ask a question about this policy, write to [email protected] or use the live chat, which is available around the clock. We may update this policy when our services or the law change, and the current version always sits on this page.
