Privacy Policy
This notice sets out what personal information Royal Vegas Casino collects, why we need it, who it may be shared with, and the choices available to you. It applies to our website, our mobile experience and all communication channels we operate.
Information we collect
When you register, we collect identifying details including your full name, date of birth, residential address, email address, telephone number and preferred currency. Regulatory rules under our Malta Gaming Authority and Alcohol and Gaming Commission of Ontario licences oblige us to verify these details before an account may transact.
During verification we collect copies of government-issued photographic identification, proof of residential address dated within the last three months, and — where a payment requires it — partial card imagery or a bank statement extract showing the account holder's name. Full card numbers are never stored on our systems.
Through ordinary use of the site we automatically record technical information: IP address, approximate geographic region derived from it, browser and operating system version, device identifiers, referring page, and timestamped logs of pages viewed, games launched, bets placed and payments attempted.
How and why we use it
The primary purpose is contractual: opening and maintaining your account, processing deposits and withdrawals, settling wagers, applying promotional credits and responding to the queries you raise with our support team.
A second purpose is legal compliance. Anti-money-laundering legislation, counter-terrorist-financing obligations and the conditions attached to each of our gaming licences require us to monitor transaction patterns, screen against sanctions and politically-exposed-person lists, retain auditable records and report suspicious activity to the appropriate authority.
A third purpose rests on our legitimate interest in operating a secure and improving service: detecting bonus abuse and collusion, diagnosing faults, measuring which features are used, and identifying behavioural markers that may indicate gambling-related harm.
Marketing communications by email, SMS or push notification are sent only where you have opted in, and consent may be withdrawn at any moment through the preferences screen or the unsubscribe link carried in every message. Withdrawing marketing consent has no effect on your ability to play.
Disclosure to third parties
We share data with the game studios that supply our content, with payment institutions and card acquirers, with identity-verification and fraud-screening providers, with cloud hosting and customer-messaging vendors, and with professional advisers who are bound by confidentiality obligations.
Regulators — including the Malta Gaming Authority, the Alderney Gambling Control Commission, the Kahnawake Gaming Commission and the Alcohol and Gaming Commission of Ontario — may require disclosure of account records, as may law enforcement, tax authorities and courts acting under valid legal process. We also disclose to sports-integrity and self-exclusion registries where our licence conditions demand it.
Royal Vegas Casino does not sell personal information, and does not pass it to unaffiliated advertisers for their own independent marketing. Where a processor operates outside the European Economic Area, transfers are governed by standard contractual clauses or an equivalent recognised safeguard.
Retention, security and your rights
Account and transaction records are held for a minimum of five years after the account relationship ends, as anti-money-laundering law requires. Support correspondence is generally retained for two years, and self-exclusion records are kept permanently so that an exclusion cannot be circumvented by re-registering.
Data in transit is protected by TLS encryption, sensitive fields are encrypted at rest, and access is granted to employees strictly on a need-to-know basis with all administrative actions logged. Payment processing is handled by PCI DSS certified partners.
Subject to local law, you may request a copy of the data we hold, ask for inaccurate records to be corrected, object to processing based on legitimate interests, request erasure where no overriding legal duty applies, or ask for your data in a portable format. New Zealand residents hold these rights under the Privacy Act 2020 and may complain to the Office of the Privacy Commissioner.
Requests are answered within thirty days. Because gaming accounts are a target for impersonation, we will verify your identity before releasing or altering anything, and we may decline a deletion request in respect of records we are legally obliged to keep.
Cookies and similar technologies
Strictly necessary cookies keep you signed in, preserve your session across pages and protect against cross-site request forgery. These cannot be switched off without breaking core functionality.
Analytical and preference cookies remember your language, currency and layout choices and help us understand aggregate usage. Where required by law these are set only after consent, and the banner presented on your first visit lets you accept, reject or configure them individually. Browser settings offer an additional layer of control, though blocking all cookies will prevent you from logging in.