Privacy Policy

Welcome to RioAce. This Privacy Policy outlines how RioAce, as the data controller, collects, uses, stores, and protects your personal information when you use our website, services, and applications. We are committed to safeguarding your privacy and ensuring the security of your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for our European customers. By accessing or using RioAce, you agree to the terms of this Privacy Policy. Please read it carefully.

We collect various types of information to provide and improve our services to you. This includes:

• Identity Data: This includes your full name, date of birth, gender, and nationality. We collect this to verify your identity and ensure you meet the legal age requirements for gambling.
• Contact Data: Your email address, postal address, and telephone numbers. We use this to communicate with you about your account, promotions, and important service updates.
• Financial Data: Details about your payment methods, such as bank account details, credit/debit card information, and e-wallet details. We process this for deposits, withdrawals, and fraud prevention. Please note, we do not store full payment card numbers.
• Transaction Data: Details about your deposits, withdrawals, wagers, and other activities on our platform. This helps us manage your account and comply with regulatory obligations.
• Technical Data: Your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access RioAce. This data helps us ensure the security and functionality of our services.
• Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses. This information helps us personalize your experience.
• Usage Data: Information about how you use our website, products, and services, including pages visited, time spent, and game preferences. This helps us understand user behavior and improve our offerings.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
• Verification Data: Documents you provide for identity and address verification, such as copies of passports, driver's licenses, utility bills, and bank statements. This is crucial for our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.

We use your personal data for several purposes, always in line with legal requirements:

• Account Management: To register your account, verify your identity, and manage your access to RioAce services.
• Service Provision: To process your transactions, facilitate your gameplay, and provide customer support.
• Security and Fraud Prevention: To detect and prevent fraudulent activities, money laundering, and other illegal actions. This includes monitoring transaction patterns and using verification tools.
• Regulatory Compliance: To comply with our legal and regulatory obligations, including those related to licensing, responsible gambling, and anti-money laundering.
• Personalization: To tailor our services, content, and offers to your preferences, based on your activity and profile data.
• Marketing and Promotions: To send you marketing communications about our products, services, and promotions, where you have consented or where we have a legitimate interest. You can opt out at any time.
• Improvement of Services: To analyze usage patterns, conduct research, and gather feedback to enhance our website, games, and overall user experience.
• Communication: To respond to your inquiries, provide updates, and send important notices regarding your account or our services.

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of a contract with you, or to take steps at your request before entering into such a contract (e.g., creating your account, facilitating gameplay).
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject (e.g., anti-money laundering laws, responsible gambling regulations, tax laws).
• Legitimate Interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests (e.g., fraud prevention, improving our services, marketing, network and information security). We always balance our legitimate interests against your rights and freedoms.
• Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., sending marketing communications). You have the right to withdraw your consent at any time.

We may share your personal data with third parties under specific circumstances:

• Service Providers: We engage trusted third-party service providers who perform functions on our behalf, such as payment processors, IT support, identity verification services, customer support, and marketing agencies. These providers are contractually bound to protect your data and only use it for the purposes specified by RioAce.
• Regulatory and Law Enforcement Bodies: We may disclose your information to government authorities, regulators, or law enforcement agencies if required by law, court order, or to cooperate with investigations into illegal activities.
• Fraud Prevention Agencies: To prevent fraud, money laundering, and other criminal activities, we may share your information with specialized agencies.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will ensure appropriate safeguards are in place.
• Affiliates: We may share data with our corporate affiliates for operational and business purposes, provided they adhere to this Privacy Policy.

We do not sell your personal data to third parties.

RioAce takes the security of your personal data seriously. We implement a range of technical and organizational measures designed to protect your information from unauthorized access, accidental loss, disclosure, alteration, and destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) technology to encrypt data transmitted between your browser and our servers.
• Access Controls: Strict access controls and authentication mechanisms are in place to limit access to personal data to authorized personnel only.
• Firewalls: Our systems are protected by firewalls to prevent unauthorized access.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential weaknesses.
• Employee Training: Our staff receive regular training on data protection and security best practices.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data in certain situations, including for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly if you are in the European Economic Area.

To exercise any of these rights, please contact us using the details provided in the “Contact Us”, section. We may require you to verify your identity before processing your request.

RioAce uses cookies and similar tracking technologies to enhance your experience, analyze site usage, and support our marketing efforts. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Necessary for the website to function correctly, enabling core functionalities like security, network management, and accessibility.
• Analytical/Performance Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. This helps us improve our services.
• Functionality Cookies: Used to recognize you when you return to our website, allowing us to personalize content for you, greet you by name, and remember your preferences (e.g., language or region).
• Targeting/Advertising Cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our website and the advertising displayed on it more relevant to your interests.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of RioAce.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. The specific retention periods vary depending on the type of data and the purpose of processing. For instance:

• Account Data: Retained for the duration of your active account and for a period thereafter as required by regulatory obligations (e.g., 5-7 years after account closure for AML compliance).
• Transaction Data: Retained for up to 7 years to comply with financial regulations.
• Marketing Consent: Retained until you withdraw your consent or for a reasonable period after your last interaction with RioAce.

When your personal data is no longer required, we will securely delete or anonymize it.

Your personal data may be transferred to, and stored at, a destination outside of the European Economic Area (EEA) or your home jurisdiction. This may occur if our servers, service providers, or affiliates are located in countries that do not have equivalent data protection laws. When we transfer your data internationally, we implement appropriate safeguards to ensure your data receives a similar level of protection. These safeguards may include:

• Transferring data to countries deemed by the European Commission to provide an adequate level of data protection.
• Using specific contracts approved by the European Commission, known as Standard Contractual Clauses, which give personal data the same protection it has in Europe.

By using RioAce, you acknowledge and agree to such transfers.

RioAce services are not intended for individuals under the legal gambling age in their respective jurisdiction, which is typically 18 years or older. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete that information as quickly as possible. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any changes will be posted on this page with an updated “Last Updated”, date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Significant changes will be communicated to you via email or a prominent notice on RioAce.

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact our Data Protection Officer:

• By Email: [email protected]
• By Post: [Please use our support email for initial contact, and we will provide a postal address if necessary for specific requests.]

We aim to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.