As a licensed operator in Italy, we gather and look after personal and transactional data under rigorous legal obligations https://it-richroyal.it/legal-and-affiliates/. This policy spells out exactly how long we retain different categories of information, the legal reasons behind those periods, and the security measures that safeguard your data at every stage. We continuously balance our duty to retain records for fraud prevention and financial audits with the privacy rights you maintain under Italian data protection law and the GDPR. Our schedules receive regular reviews so we remain fully compliant.
Legal Basis for Information Storage
Our storage strategy relies on several legal duties that affect gambling operators operating in the Italian market. Anti‑money laundering rules from the Italian Financial Intelligence Unit force us to keep activity logs, identity verification documents and suspicious activity reports for a set period after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate oblige us to preserve financial records that support taxable gaming revenue and player winnings. These obligations override any general right to erasure during the mandatory period. For operational data that falls outside a fixed legal window, we rely on legitimate interest assessments where a valid reason exists, and we allow an opt‑out unless a compelling legal obligation overrides it.
Consent‑Based Retention
Marketing preferences, newsletter sign‑ups and the behavioural analytics utilised for personalised offers remain only with your explicit consent. You can retract consent anytime through your account dashboard; once you do, we halt that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is removed from active systems to block further use, but it is not removed retroactively. Consent records themselves are kept for six years as proof of compliance. We never employ this data for anything beyond the activity you agreed to.
Policy Updates and User Notification
We assess this Data Retention Policy every six months and whenever a major legal change hits Italian gambling operations. Minor clarifications are published silently with a revised effective date. Material changes that change retention periods, introduce new data categories or shift the legal basis for processing are communicated directly to you by email at least thirty days before they come into force. You’ll also notice an in‑platform banner notification when you log in during the notice period. Historical versions are archived and available on request, each with a version number and a validity date range. If an earlier version provided a shorter retention period for certain data, we adhere to that promise for data collected under that version and apply new terms only going forward.
User Rights and Retention Handling
When you send an erasure request, our system automatically reviews each data category against its retention schedule. All data past its mandatory window is erased without delay. For data still governed by a legal retention obligation, we secure it right away so it’s taken out of active use and kept solely for compliance storage; we notify you which specific law applies and the date deletion becomes possible. Access requests are handled within thirty days and provide a breakdown of what we store, why, and the scheduled deletion date. If you dispute accuracy, we append a note instead of modifying the original record, so the audit trail stays intact. Portability requests are fulfilled in a structured, machine‑readable format even while data is still in its retention window.
Affiliate Programme Data Retention
Affiliate partner information, including contact information, payment details and commission payout records, remains for the life of the active partnership plus ten years after the contract ends. That stems from tax obligations on commission transactions, which require long‑term financial archives. Affiliate performance metrics and aggregated referred‑player statistics get made anonymous after five years. We strictly forbid affiliates from autonomously collecting or storing personal data about referred players; they obtain only anonymised, combined reports. Our partner contracts include audit rights to ensure compliance, and any violation is cause for instant agreement cancellation and payout forfeiture. guarda qui
Data Transfers Abroad and Retention
Our primary infrastructure resides in Italy and the broader European Economic Area. Some ancillary services, like fraud detection platforms and customer relationship tools, may pass certain personal data to countries outside the EEA. In those cases, we make sure an adequacy decision exists or we put Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we assign to transferred data mirror those in this policy, and processors are contractually bound to delete or return data when the service ends. We maintain a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules keep Italian user data inside European boundaries, verified through yearly audits.
Data Removal Procedures
When a data category hits the end of its scheduled retention, our automated lifecycle engine kicks off a secure deletion workflow. First, the data gets virtually eliminated from production databases. Next, physical storage blocks are replaced with random data patterns to hinder forensic recovery. Finally, a digitally signed log lands in a regulatory record, giving verifiable evidence that purging happened on time. Backup copies refresh every ninety days, so any deleted data disappears from all media within three months. When a litigation hold applies, we halt the deletion workflow only for the affected records, record the hold reason, and restart once the hold lifts.
Information Protection During Preservation
Held data is secured with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access demands multi‑factor authentication plus just‑in‑time privilege elevation that expires on its own. Every access event is logged into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to keep our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard flags every dataset as it nears expiration.
Access Control and Staff Training
Only employees whose roles demonstrably need access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records initiates a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and telling the difference between data we must keep under a legal hold and data we can delete straight away.
Data Types and Storage Durations
We organize all user data into distinct categories, each linked to a retention schedule that corresponds to its purpose and legal context. That systematic approach prevents us from keeping things forever. Every year our Data Protection Officer examines these classifications and updates the timelines whenever new guidance arrives from the Garante per la protezione dei dati personali. Below you’ll view how long each data type stays in our live systems before being securely de-identified or destroyed. Archived backups operate on a ninety‑day cycle because of technical restrictions.
Identity and Monetary Records
Identity documents you upload during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, stay on file for ten years after you terminate your account, as anti‑money laundering law requires. Deposit and withdrawal logs, payment method tokens and wallet balance histories are held for ten years from the date of each transaction, fulfilling both AML requirements and Italian Civil Code limitation periods. We keep these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline passes, we eliminate all personal identifiers permanently; statistical trends may still be applied but never in a way that links back to any individual. il quadro generale
Account Activity and Support Communications
Comprehensive records of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.
Responsible Gambling and Self‑Exclusion Data
When you activate self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.
Common Questions
Can I request deletion of my data before the retention period ends?
Absolutely, you may lodge an erasure request whenever you wish. We immediately check each data category against its legal retention obligation. When no legal hold exists, we remove it quickly. Regarding items we must preserve, we confine them to storage‑only, explain the legal basis blocking instant erasure, and share the projected deletion date. You can also view all your data categories with their scheduled deletion dates through your account dashboard. That partial approach respects your rights as far as Italian regulations allow.
What happens to my data if I self‑exclude permanently?
Upon enrolling in permanent self‑exclusion, your identity information is transferred to a specialized exclusion register that remains active indefinitely under strictly controlled access. This is a legal mandate designed to stop you from creating new accounts. Your gaming and transaction history, however, still complies with standard retention schedules and is removed after those periods conclude. The self‑exclusion record is separated from all marketing and operational platforms, so it only serves the safeguarding role it was intended for. No promotional communications will reach you.
How do you handle data belonging to inactive accounts?
An account is deemed inactive following twelve consecutive months without a login. Then, we automatically halt marketing messages and place the account into a dormant condition with minimized processing. The underlying retention clocks keep ticking based on the original collection dates, not the inactivity date. That means data from an inactive account is still held for the full statutory period that applies to its category and then deleted according to our standard procedures. If you return following a lengthy hiatus, you might have to finish a fresh Know Your Customer assessment to re‑enable your account. Your data dashboard displays the current status continuously.