As a authorized operator in Italy, we obtain and manage personal and transactional data under rigorous legal obligations. This policy details exactly how long we retain different categories of information, the legal reasons behind those periods, and the security measures that shield your data at every stage. We continuously balance our duty to retain records for fraud prevention and financial audits with the privacy rights you possess under Italian data protection law and the GDPR. Our schedules undergo regular reviews so we keep fully compliant.

Legal Grounds for Record Keeping

Our data management policy relies on several legal duties that apply to gambling operators operating in the Italian market. Anti‑money laundering directives from the Italian Financial Intelligence Unit require us to keep activity logs, identity verification documents and suspicious activity reports for a set period after the business relationship ends. Meanwhile, tax rules enforced by the Agenzia delle Entrate oblige us to preserve financial records that substantiate taxable gaming revenue and player winnings. These requirements override any general right to erasure during the mandatory period. For operational data that falls outside a fixed legal window, we base our approach on legitimate interest assessments where a valid reason exists, and we allow an opt‑out unless a compelling legal obligation overrides it.

Storage with Consent

Marketing preferences, newsletter sign‑ups and the behavioural analytics used for personalised offers are kept only with your explicit consent. You can withdraw consent anytime through your account dashboard; once you do, we halt that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal gets isolated from active systems to block further use, but it is not removed retroactively. Consent records themselves are kept for six years as proof of compliance. We never use this data for anything beyond the activity you agreed to.

Affiliate Program Data Retention

Affiliate partner information, including communication data, payout data and commission transaction history, is kept for the life of the active partnership plus ten years after the partnership concludes. That’s driven by tax requirements on commission payments, which necessitate long‑term financial archives. Affiliate performance metrics and combined referred-player data get anonymized after five years. We strictly forbid affiliates from separately gathering or retaining personal data about referred players; they get only anonymised, combined reports. Our partner contracts include review rights to ensure compliance, and any infringement is grounds for instant agreement cancellation and commission forfeiture.

Data Deletion Procedures

When a data category hits the end of its designated storage time, our self-running lifecycle mechanism kicks off a safe removal process. First, the data gets logically removed from production databases. Next, physical storage blocks are overwritten with random data patterns to prevent forensic recovery. Finally, a digitally signed log lands in a regulatory record, giving auditable proof that deletion happened on time. Backup copies cycle every ninety days, so any deleted data disappears from all media within three months. When a litigation hold applies, we suspend the deletion workflow only for the affected records, note the hold reason, and continue once the hold lifts.

Data Categories and Storage Durations

We organize all user data into clear categories, each linked to a retention schedule that corresponds to its purpose and legal context. That structured approach keeps us from retaining things forever. Every year our Data Protection Officer examines these classifications and modifies the timelines whenever new guidance comes from the Garante per la protezione dei dati personali. Below you’ll see how long each data type is kept in our live systems before being securely anonymised or deleted. Archived backups operate on a ninety‑day cycle because of technical limitations.

Identification and Monetary Records

Identity documents you submit during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, remain on file for ten years after you terminate your account, as anti‑money laundering law mandates. Deposit and withdrawal logs, payment method tokens and wallet balance histories are held for ten years from the date of each transaction, meeting both AML requirements and Italian Civil Code limitation periods. We keep these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline passes, we strip away all personal identifiers permanently; statistical trends may still be utilized but never in a way that connects to any individual.

User Activity and Support Communications

Comprehensive records of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.

Safe Gaming and Self‑Exclusion Data

Upon activating self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.

Policy Updates and User Notifications

We assess this Data Retention Policy every six months and whenever a major legal change hits Italian gambling operations. Minor clarifications are published silently with a revised effective date. Material changes that change retention periods, include new data categories or change the legal basis for processing are communicated directly to you by email at least thirty days before they come into force. You’ll also see an in‑platform banner notification when you log in during the notice period. Historical versions are stored and available on request, each with a version number and a validity date range. If an earlier version offered a shorter retention period for certain data, we adhere to that promise for data collected under that version and apply new terms only going forward.

International Data Transfers and Storage Periods

Our core infrastructure is located inside Italy and the larger European Economic Area. Some supporting services, like fraud detection platforms and customer relationship tools, may send certain personal data to countries beyond the EEA. In those cases, we guarantee an adequacy decision exists or we implement Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we use to transferred data reflect those in this policy, and processors are contractually bound to delete or return data when the service ends. We keep a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules keep Italian user data inside European boundaries, validated through yearly audits.

Data Security Throughout Retention

Retained data is protected with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access necessitates multi‑factor authentication plus just‑in‑time privilege elevation that terminates on its own. Every access event is logged into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to ensure our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard marks every dataset as it nears expiration.

Permission Management and Employee Education

Only employees whose roles demonstrably need access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records initiates a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and differentiating the difference between data we must keep under a legal hold and data we can delete straight away.

Individual Rights and Retention Management

When you file an erasure request, our system automatically reviews each data category against its retention schedule. Anything past its mandatory window is removed without delay. For data still subject to a legal retention obligation, we restrict it right away so it’s taken out of active use and kept solely for compliance storage; we inform you which specific law is in effect and the date deletion becomes possible. Access requests are handled within thirty days and come with a breakdown of what we store, why, and the scheduled deletion date. If you challenge accuracy, we add a note instead of modifying the original record, so the audit trail stays intact. Portability requests are honoured in a structured, machine‑readable format even while data is still in its retention window.

Common Questions

May I request data erasure before the retention period expires?

Absolutely, you may lodge an erasure request whenever you wish. We instantly examine each data category in relation to its legal retention duty. When no legal hold exists, we remove it quickly. Regarding items we must preserve, we confine them to storage‑only, explain the legal basis blocking instant erasure, and share the projected deletion date. Additionally, you can see all your data categories along with their planned deletion dates via your account dashboard. That partial approach respects your rights as far as Italian regulations allow.

What occurs with my data when I opt for permanent self‑exclusion?

When you register for permanent self‑exclusion, your identity data moves to a dedicated exclusion register that stays live indefinitely with tightly controlled access it-richroyal.it. This is a legal mandate designed to stop you from creating new accounts. Your gameplay and transaction history, on the other hand, still follow the standard retention schedules and get deleted once those periods run out. The self‑exclusion record is cut off from all marketing and operational systems, so it serves only the protective function it was collected for. You will not receive any promotional messages.

How do you handle data belonging to inactive accounts?

An account is deemed inactive following twelve consecutive months without a login. At that point, we automatically switch off marketing communications and move the account to a dormant state with reduced processing. The underlying retention periods remain active according to the original data collection dates, not the date of inactivity. That means data from an inactive account is still held for the full statutory period that applies to its category and then deleted according to our standard procedures. Should you return after an extended absence, you may be required to undergo a new Know Your Customer verification to reactivate. Your data dashboard displays the current status continuously.