River Rock Casino Online
This Privacy Policy explains how River Rock Casino online collects, uses, stores, and shares your personal information when you access and use the platform. By registering an account or continuing to use the service, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, you should discontinue use of the platform and contact support to close your account.
1. Who We Are
The platform is operated under a licence issued by the Malta Gaming Authority. The platform is the data controller responsible for your personal information as defined under applicable privacy legislation, including the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial privacy laws. For all privacy-related enquiries, contact our Data Protection team using the details in the contact section of these terms.
2. Information We Collect
Online casino River Rock collects personal information through several channels during your use of the platform:
Information you provide directly:
- Identity data: Full legal name, date of birth, gender
- Contact data: Email address, phone number, residential address
- Financial data: Payment method details, transaction history, deposit and withdrawal records
- Verification documents: Government-issued photo ID, proof of address, payment method confirmation submitted during KYC
Information collected automatically:
- Technical data: IP address, device type, browser type and version, operating system
- Usage data: Pages visited, games played, session duration, betting patterns
- Location data: General geographic location derived from your IP address
Information from third parties:
- Identity verification providers: Data returned from third-party KYC and fraud prevention services
- Payment processors: Transaction confirmation and flagging data from payment networks
3. How We Use Your Information
River Rock Casino online uses your personal data for the following purposes:
- Account management: Creating and maintaining your player account, processing transactions, and providing customer support
- Identity verification: Fulfilling KYC obligations required by MGA licence conditions and Canadian anti-money laundering legislation under FINTRAC
- Fraud prevention: Detecting and investigating suspicious activity, duplicate accounts, and bonus abuse
- Regulatory compliance: Reporting obligations to the Malta Gaming Authority and relevant Canadian authorities
- Personalisation: Tailoring promotional offers, game recommendations, and communications to your account activity
- Platform improvement: Analysing aggregated usage data to improve performance, game selection, and user experience
- Legal obligations: Retaining records as required by applicable law
4. Legal Basis for Processing
River Rock online casino processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfil our obligations under your player account agreement, including account management and payment processing
- Legal obligation: Processing required to comply with MGA licence conditions, FINTRAC anti-money laundering requirements, and other applicable regulations
- Legitimate interests: Processing carried out for fraud prevention, platform security, and service improvement where these interests are not overridden by your rights
- Consent: Where you have provided explicit consent, such as for marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences
5. Who We Share Your Information With
Online casino River Rock does not sell your personal data to third parties. We share information only in the following circumstances:
- Regulatory authorities: The Malta Gaming Authority, FINTRAC, and other relevant bodies where disclosure is required by law
- Identity verification providers: Third-party KYC and fraud detection services used to confirm your identity and screen for financial crime
- Payment processors: Financial institutions and payment networks required to process your deposits and withdrawals
- Technology providers: Platform infrastructure, hosting, and security service providers operating under strict data processing agreements
- Legal proceedings: Law enforcement agencies or courts where disclosure is required by a valid legal order
All third parties who handle your data are required to process it in accordance with applicable privacy legislation and our data processing agreements.
6. Cookies and Tracking Technologies
River Rock Casino online uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you access the site.
Types of cookies we use:
- Essential cookies: Required for the platform to function. These cannot be disabled without affecting core functionality such as login sessions and account security
- Analytics cookies: Used to understand how players navigate the platform. Data collected is aggregated and does not identify individual users
- Preference cookies: Store your settings and preferences to improve your experience on return visits
- Marketing cookies: Used to deliver relevant promotional content based on your activity. You may opt out of these through your browser settings or account preferences
You can manage cookie settings through your browser at any time. Disabling non-essential cookies will not prevent you from accessing the platform but may affect certain personalisation features.
7. Data Retention
River Rock online casino retains your personal data for as long as your account remains active and for a defined period following account closure. Specific retention periods:
- Account and identity data: Retained for a minimum of five years following account closure, as required by MGA licence conditions and FINTRAC anti-money laundering obligations
- Transaction records: Retained for a minimum of five years in accordance with financial record-keeping requirements
- Communication records: Retained for two years following the last interaction
- Marketing data: Retained until you withdraw consent or request deletion, subject to overriding legal obligations
When retention periods expire, data is securely deleted or anonymised in a way that prevents re-identification.
8. Data Security
Online casino River Rock applies industry-standard security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction:
- Encryption: All data transmitted between your device and the platform is encrypted using SSL/TLS protocols
- Access controls: Personal data is accessible only to authorised staff with a legitimate operational need
- Segregated funds: Player account balances are held in accounts separate from operational funds
- Security audits: Regular penetration testing and security assessments are conducted by independent third parties
- Incident response: A documented process is in place to detect, respond to, and notify affected parties of data breaches within required timeframes
No system is completely immune to risk. If you suspect your account has been compromised, contact support immediately.
9. International Data Transfers
River Rock Casino online is operated under a Malta Gaming Authority licence, which means some of your personal data may be processed or stored outside Canada. Where data is transferred internationally, we apply appropriate safeguards including:
- Contractual protections: Standard data protection clauses in agreements with all third-party processors
- Regulatory oversight: All transfers comply with MGA data governance requirements and, where applicable, Canadian federal and provincial privacy standards
- Adequacy assessments: Before transferring data to any jurisdiction, we assess whether that jurisdiction provides an adequate level of protection under applicable law
If you have questions about where your data is processed, contact our Data Protection team directly.
10. Your Rights
As a user of River Rock online casino, you have the following rights in relation to your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete information
- Right to erasure: Request deletion of your data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations
- Right to restriction: Request that we limit how we process your data in certain circumstances
- Right to data portability: Request your data in a structured, machine-readable format where processing is based on consent or contract
- Right to object: Object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact our Data Protection team by email at privacy@riverrockcasino.com. We will respond within 30 days of receiving your request. If you are not satisfied with our response, you have the right to lodge a complaint with the Malta Gaming Authority or the relevant Canadian privacy commissioner in your province.