Privacy at Richard
We act as the data controller. This means we decide why and how your personal data is processed in our relationship with you.
Data we collect
Identity data covers who you are, such as your full name, username, birth date, gender, nationality and the numbers on your official ID. Contact data includes your address, proof of address, e-mail address and telephone number. Financial and transaction data covers bank and card details, source of funds or wealth, deposits, withdrawals and other transactions.
We also process gaming data such as games played, login and logout times, wagers, bonus use and responsible gaming interventions. Technical data can include your IP address, location, login credentials, browser, operating system, time zone and device details. Marketing data covers your preferences and communications with support or through other channels. We may also collect information you provide voluntarily.
Where data comes from
We receive data from you when you register, use your account or contact us. Other sources may include verification providers, financial institutions, payment providers, anti-money-laundering and politically exposed person databases, regulatory authorities, responsible gaming databases, marketing partners and affiliate partners.
Why we use it
We process data to perform our contract with you and meet legal duties, including AML, KYC, reporting and responsible gaming requirements. Legitimate interests support fraud prevention, risk management, system protection, analytics, technical troubleshooting, service improvement and customer support. Marketing and personalisation rely on your consent or our legitimate interests, as applicable.
Who may receive it
We may share personal data within our corporate group and with the studios behind our games, payment companies, marketing partners, regulators, other service providers, conversational artificial intelligence providers including Anthropic, OpenAI and Gemini, AML and KYC verification tools, and professional advisers such as lawyers, accountants or notaries. Trusted third parties may also receive data during a merger, acquisition or sale, and we will inform you before that change occurs.
Recipients are contractually limited to specified lawful purposes and handling obligations. Conversational artificial intelligence providers work as processors with restricted access to the tools we use for customer messages, to help us run and improve support and marketing.
International transfers may support hosting, customer service or verification. Where required, we use safeguards such as standard contractual clauses or transfers to countries covered by adequacy decisions.
How long we keep it
We keep personal data only as long as needed for its purpose or a legal requirement. Anti-money-laundering rules require retention for at least five years after account closure. Tax and dispute obligations may also affect the period. When data is no longer needed, we delete, anonymise or de-identify it.
Your choices and rights
Depending on the applicable law, you may access your data, correct it, request deletion subject to retention duties, restrict processing, request data portability, object to legitimate-interest or marketing processing, and withdraw consent. You may also complain to your local data protection authority.
We use access, authentication and need-to-know controls, staff training and organisational measures to reduce unauthorised access or disclosure. No measure is a promise of total protection.
Richard is for adults aged 18 and over. If we learn that we hold data from someone under the legal age, we will act to delete it, and we do not knowingly collect it.