As a authorized operator in Italy, we collect and manage personal and transactional data under rigorous legal obligations it-richroyal.it. This policy outlines exactly how long we hold different categories of information, the legal reasons behind those periods, and the security measures that safeguard your data at every stage. We regularly balance our duty to retain records for fraud prevention and financial audits with the privacy rights you possess under Italian data protection law and the GDPR. Our schedules receive regular reviews so we keep fully compliant.
Legal Grounds for Information Storage
Our retention approach relies on several regulatory requirements that affect gambling operators operating in the Italian market. Anti‑money laundering directives from the Italian Financial Intelligence Unit oblige us to keep transaction logs, identity verification documents and suspicious activity reports for a specific duration after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate demand we preserve financial records that back up taxable gaming revenue and player winnings. These obligations override any general right to erasure during the mandatory period. For operational data that isn’t covered by a fixed legal window, we rely on legitimate interest assessments where a valid reason exists, and we allow an opt‑out unless a compelling legal obligation stops us.
Consent‑Based Retention
Marketing preferences, newsletter sign‑ups and the behavioural analytics employed for personalised offers stay only with your explicit consent. You can revoke consent anytime through your account dashboard; once you do, we stop that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is removed from active systems to block further use, but it is not removed retroactively. Consent records themselves are kept for six years as proof of compliance. We never use this data for anything beyond the activity you agreed to.
International Data Transfers and Retention
Our main systems resides in Italy and the broader European Economic Area. Some ancillary services, like fraud detection platforms and customer relationship tools, may send certain personal data to countries outside the EEA. In those cases, we make sure an adequacy decision exists or we establish Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we apply to transferred data reflect those in this policy, and processors are contractually bound to delete or return data when the service ends. We keep a public register of sub‑processors, updated within fourteen days of any change, and we favour vendors with Italian data centres. Geo‑fencing rules ensure Italian user data inside European boundaries, validated through yearly audits.
Data Types and Storage Durations
We organize all user data into clear categories, each connected to a retention schedule that aligns with its purpose and legal context. That organized approach keeps us from holding on to things forever. Every year our Data Protection Officer assesses these categories and adjusts the timelines whenever new guidance arrives from the Garante per la protezione dei dati personali. Below you’ll view how long each data type remains in our live systems before being securely de-identified or deleted. Archived backups operate on a ninety‑day cycle because of technical limitations.
Identification and Monetary Records
Identity documents you upload during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, remain on file for ten years after you terminate your account, as anti‑money laundering law requires. Deposit and withdrawal logs, payment method tokens and wallet balance histories are retained for ten years from the date of each transaction, satisfying both AML requirements and Italian Civil Code limitation periods. We hold these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline passes, we strip away all personal identifiers permanently; statistical trends may still be applied but never in a way that links back to any individual.
Account Actions and Support Communications
Comprehensive records of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.
Responsible Gambling and Self‑Exclusion Data
When you activate self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.
Data Removal Procedures
When a data class hits the end of its scheduled retention, our self-running lifecycle mechanism kicks off a safe removal process. First, the data gets logically removed from production databases. Next, physical storage blocks are overwritten with random data patterns to prevent forensic recovery. Finally, a cryptographically timestamped entry lands in a regulatory record, giving auditable proof that deletion happened on time. Backup copies rotate every ninety days, so any deleted data is removed from all media within three months. When a litigation hold applies, we halt the deletion workflow only for the affected records, record the hold reason, and resume once the hold lifts.
Data Security Throughout Preservation
Stored information is secured with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access demands multi‑factor authentication plus just‑in‑time privilege elevation that expires on its own. Every access event is logged into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to ensure our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard identifies every dataset as it nears expiration.
Permission Management and Staff Training
Only employees whose roles demonstrably need access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records prompts a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and telling the difference between data we must keep under a legal hold and data we can delete straight away.
Partner Program Data Retention
Partner relationship data, including communication data, payment details and commission payment history, stays for the duration of the active partnership plus 10 years after the agreement terminates. This is due to tax obligations on commission transactions, which demand long‑term financial documentation. Affiliate performance statistics and combined referred-player data get anonymized after half a decade. We explicitly prohibit affiliates from autonomously collecting or keeping private data about referred users; they obtain only anonymous, consolidated statements. Our affiliate agreements include audit rights to ensure compliance, and any violation is grounds for instant agreement cancellation and commission forfeiture.
Policy Updates and User Notification
We review this Data Retention Policy every six months and whenever a major legal change hits Italian gambling operations. Minor clarifications are posted silently with a revised effective date. Material changes that alter retention periods, add new data categories or alter the legal basis for processing are communicated directly to you by email at least thirty days before they take effect. You’ll also see an in‑platform banner notification when you log in during the notice period. Historical versions are kept and available on request, each with a version number and a validity date range. If an earlier version gave a shorter retention period for certain data, we adhere to that promise for data collected under that version and apply new terms only going forward.
User Rights and Retention Handling
When you send an erasure request, our system automatically checks each data category against its retention schedule. Everything beyond its mandatory window gets deleted without delay. For data still subject to a legal retention obligation, we restrict it right away so it’s excluded from active use and kept solely for compliance storage; we advise you which specific law is in effect and the date deletion becomes possible. Access requests are answered within thirty days and provide a breakdown of what we store, why, and the scheduled deletion date. If you challenge accuracy, we add a note instead of changing the original record, so the audit trail is preserved. Portability requests are processed in a structured, machine‑readable format even while data is still in its retention window.
Frequently Asked Questions
Can I request deletion of my data before the retention period ends?
Certainly, you can submit a deletion request at any moment. We immediately check each data category against its legal retention obligation. If there’s no legal hold, we delete it fast. For anything we must keep, we restrict it to storage‑only, tell you the legal basis stopping immediate deletion and give you the expected deletion date. You can also view all your data categories with their scheduled deletion dates through your account dashboard. This partial method honors your rights to the extent permitted by Italian regulations.
What happens to my data if I self‑exclude permanently?
Upon enrolling in permanent self‑exclusion, your identity information is transferred to a specialized exclusion register that remains active indefinitely under strictly controlled access. That’s a legal requirement built to prevent you from opening new accounts. Your gameplay and transaction history, on the other hand, still follow the it.wikipedia.org standard retention schedules and get deleted once those periods run out. The self‑exclusion entry is isolated from all marketing and operational systems, thus it fulfills solely the protective purpose for which it was gathered. No promotional communications will reach you.
How is data from dormant accounts managed?
After twelve uninterrupted months of no login, an account is considered inactive. At that point, we automatically switch off marketing communications and move the account to a dormant state with reduced processing. The fundamental retention timelines continue based on the initial collection dates, not the inactivity date. Consequently, data from an inactive account is kept for the entire statutory duration applicable to its type and then removed in line with our usual processes. If you return following a lengthy hiatus, you might have to finish a fresh Know Your Customer assessment to re‑enable your account. Your data dashboard displays the current status continuously.