Rainbet Casino Privacy and Data Protection
Data protection at Rainbet follows the GDPR and the Anjouan AML law, with KYC records kept for 10 years. Our AML policy was last updated on 8 April 2026, so every check is current.
Claim 250% up to £2,100What Data Rainbet Casino Collects
Rainbet Casino collects the information needed to open an account, verify identity and process transactions. This happens at registration, during account access and whenever a withdrawal is requested through our cash-out process.
- Account details: email, username and password set at registration, completed in under 2 minutes.
- Identity documents: a government ID (passport, ID card or driving licence) with all corners visible, plus a selfie holding the ID and a handwritten note with 6 random numbers.
- Proof of address: checked electronically against two databases, or a utility bill, government letter or bank statement dated within 3 months if that check fails.
- Source of funds: employment documents, business ownership, inheritance or investment records, requested when needed.
- Transaction data: deposits, withdrawals and gameplay activity across all payment methods we support.
How We Protect and Use Personal Data
We use 128-bit SSL encryption to protect data in transit, and identity verification is carried out through Sumsub in a three-step process at account creation and during certain transactions. Crypto deposits and withdrawals are screened through Elliptic blockchain analytics, and transaction activity is monitored across three tiers: automated AI monitoring, employee review and manual audits.
Legal basis and screening
Our data handling follows the EU 6AMLD, Regulation (EU) 2015/847, FATF recommendations, GDPR and the Anjouan AML law. Sumsub also runs PEP, adverse media and sanctions screening against UN, OFAC and EU lists, with enhanced due diligence applied to higher-risk customers, which can include temporary account restrictions. Our AML policy, version 1.2, was last updated on 8 April 2026, and we carry out an annual enterprise-wide risk assessment plus annual staff AML training.
Players reviewing our full offering, including payments and account rules, can find the complete picture on our overview page.
Data Retention Periods
We keep different categories of records for set periods, depending on their regulatory purpose. The table below lists the retention periods that apply across our verification and complaints processes.
| Record type | Retention period |
|---|---|
| KYC documents and transaction records | 10 years |
| Complaint records | At least 5 years |
| Complaint acknowledgement | Within 2 business days |
| Initial complaint response | Within 10 business days |
| Escalated case determination | Up to 30 days |
These periods reflect our obligations under the AML and complaints-handling framework rather than a fixed limit on how long a player can be inactive.
Player Rights and Complaints Handling
If a player disagrees with how their data or an account matter has been handled, a complaint can be filed through our dedicated complaints email or online contact form, including full name, contact details, a detailed description, supporting documents and a preferred resolution. We acknowledge every complaint within 2 business days and provide an initial response within 10 business days.
Cases that require further review can take up to 30 days for a final determination, and unresolved matters can be escalated to our Compliance Manager via a dedicated compliance email. All complaint records are retained for at least 5 years, in line with the same retention standard applied to verification documents.
Account-level controls, including cool-off periods and self-exclusion, are managed separately and are described on our account limits page.