As a licensed operator in Italy, we collect and safeguard personal and transactional data under stringent legal obligations it-richroyal.it. This policy outlines exactly how long we hold different categories of information, the legal reasons behind those periods, and the security measures that safeguard your data at every stage. We regularly balance our duty to retain records for fraud prevention and financial audits with the privacy rights you hold under Italian data protection law and the GDPR. Our schedules undergo regular reviews so we remain fully compliant.
Regulatory Foundation for Data Retention
Our data management policy relies on several legal obligations that govern gambling operators serving the Italian market. Anti‑money laundering rules from the Italian Financial Intelligence Unit force us to keep activity logs, identity verification documents and suspicious activity reports for a fixed term after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate demand we preserve financial records that support taxable gaming revenue and player winnings. These obligations override any general right to erasure during the mandatory period. For operational data that doesn’t fall under a fixed legal window, we base our approach on legitimate interest assessments where a valid reason exists, and we provide an opt‑out option unless a compelling legal obligation prevents it.
Storage with Consent
Marketing preferences, newsletter sign‑ups and the behavioural analytics employed for personalised offers stay only with your explicit consent. You can retract consent anytime through your account dashboard; once you do, we cease that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is removed from active systems to block further use, but it is not removed retroactively. Consent records themselves are kept for six years as proof of compliance. We never employ this data for anything beyond the activity you agreed to.
Data Safeguarding During Preservation
Retained data is protected with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access demands multi‑factor authentication plus just‑in‑time privilege elevation that ends on its own. Every access event is written into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to keep our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard flags every dataset as it nears expiration.
Permission Management and Employee Education
Only employees whose roles demonstrably require access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records triggers a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and distinguishing the difference between data we must keep under a legal hold and data we can delete straight away.
International Data Transfers and Retention
Our main systems is located in Italy and the broader European Economic Area. Some secondary services, like fraud detection platforms and customer relationship tools, may transfer some personal data to countries external to the EEA. In those cases, we make sure an adequacy decision exists or we put Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we use to transferred data reflect those in this policy, and processors are contractually bound to erase or return data when the service ends. We keep a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules ensure Italian user data inside European boundaries, verified through yearly audits.
Partner Program Data Retention
Affiliate partnership data, including communication data, payout data and commission payout records, remains for the life of the current agreement plus 10 years after the partnership concludes. That stems from tax duties on commission transactions, which necessitate long‑term financial archives. Affiliate performance statistics and combined referred-player data get anonymized after five years. We explicitly prohibit affiliates from autonomously collecting or storing private data about referred users; they receive only anonymised, aggregated summaries. Our affiliate agreements include inspection rights to check adherence, and any infringement is reason for instant agreement cancellation and commission loss.
Policy Revisions and User Notification
We assess this Data Retention Policy every six months and whenever a major legal change impacts Italian gambling operations. Minor clarifications are posted silently with a revised effective date. Material changes that modify retention periods, add new data categories or shift the legal basis for processing are communicated directly to you by email at least thirty days before they take effect. You’ll also find an in‑platform banner notification when you log in during the notice period. Historical versions are stored and available on request, each with a version number and a validity date range. If an earlier version provided a shorter retention period for certain data, we follow that promise for data collected under that version and apply new terms only going forward.
Data Subject Rights and Retention Handling
When you submit an erasure request, our system automatically reviews each data category against its retention schedule. Everything beyond its mandatory window is removed without delay. For data still governed by a legal retention obligation, we restrict it right away so it’s excluded from active use and kept solely for compliance storage; we advise you which specific law is relevant and the date deletion becomes possible. Access requests are responded to within thirty days and include a breakdown of what we hold, why, and the scheduled deletion date. If you challenge accuracy, we append a note instead of altering the original record, so the audit trail remains intact. Portability requests are honoured in a structured, machine‑readable format even while data is still in its retention window.
Information Categories and Storage Durations
We organize all user data into distinct categories, each connected to a retention schedule that matches its use and legal context. That structured approach prevents us from holding on to things forever. Every year our Data Protection Officer examines these groupings and modifies the timelines whenever new guidance emerges from the Garante per la protezione dei dati personali. Below you’ll find how long each data type stays in our live systems before being securely anonymized or deleted. Archived backups follow a ninety‑day cycle because of technical limitations.
Personal and Fiscal Records
Identity documents you provide during Know Your Customer checks, like passport scans, utility bills and repubblica.it tax ID numbers, stay on file for ten years after you end your account, as anti‑money laundering law stipulates. Deposit and withdrawal logs, payment method tokens and wallet balance histories are retained for ten years from the date of each transaction, fulfilling both AML requirements and Italian Civil Code limitation periods. We store these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline elapses, we strip away all personal identifiers permanently; statistical trends may still be utilized but never in a way that links back to any individual.
Account Actions and Customer Support Interactions
Detailed logs of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.
Ethical Play and Self‑Exclusion Data
Once you enable self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.
Data Deletion Procedures
When a data category hits the end of its scheduled retention, our self-running lifecycle mechanism kicks off a safe removal process. First, the data gets logically removed from production databases. Next, physical storage blocks are replaced with random data patterns to stop forensic recovery. Finally, a crypto-stamped record lands in a audit trail, giving verifiable evidence that deletion happened on time. Backup copies refresh every ninety days, so any deleted data vanishes from all media within three months. When a litigation hold applies, we pause the deletion workflow only for the affected records, document the hold reason, and continue once the hold lifts.
Popular Queries
Can I request deletion of my data before the retention period ends?
Yes, you can file an erasure request any time. We immediately check each data category against its legal retention obligation. If no legal obligation applies, we erase it promptly. Regarding items we must preserve, we confine them to storage‑only, explain the legal basis blocking instant erasure, and share the projected deletion date. You may also review all your data categories and their scheduled deletion dates from your account dashboard. Such a partial strategy respects your rights within the limits of Italian law.
What happens to my data if I self‑exclude permanently?
When you register for permanent self‑exclusion, your identity data moves to a dedicated exclusion register that stays live indefinitely with tightly controlled access. That’s a legal requirement built to prevent you from opening new accounts. Your gaming and transaction history, however, still complies with standard retention schedules and is removed after those periods conclude. The self‑exclusion entry is isolated from all marketing and operational systems, thus it fulfills solely the protective purpose for which it was gathered. No marketing communications will be sent to you.
How do you handle data belonging to inactive accounts?
After twelve uninterrupted months of no login, an account is considered inactive. Then, we automatically halt marketing messages and place the account into a dormant condition with minimized processing. The underlying retention periods remain active according to the original data collection dates, not the date of inactivity. This implies that data from a dormant account is still retained for the complete legal period relevant to its category and subsequently erased following our standard protocols. Should you return after an extended absence, you may be required to undergo a new Know Your Customer verification to reactivate. Your data dashboard displays the current status continuously.