As a regulated operator in Italy, we collect and safeguard personal and transactional data under strict legal obligations https://it-richroyal.it/legal-and-affiliates/. This policy spells out exactly how long we keep different categories of information, the legal reasons behind those periods, and the security measures that safeguard your data at every stage. We regularly balance our duty to retain records for fraud prevention and financial audits with the privacy rights you possess under Italian data protection law and the GDPR. Our schedules get regular reviews so we stay fully compliant.
Affiliate Programme Data Retention
Affiliate partner information, including communication data, payment details and commission payout records, stays for the life of the active relationship plus a decade after the partnership concludes. This is due to tax requirements on commission payments, which demand long‑term financial records. Affiliate performance metrics and aggregated referred‑player statistics get anonymized after 5 years. We strictly forbid affiliates from autonomously collecting or storing personal information about referred users; they get only anonymised, consolidated summaries. Our affiliate contracts include review rights to verify compliance, and any violation is grounds for immediate contract termination and commission forfeiture.
User Rights and Retention Management
When you submit an erasure request, our system automatically checks each data category against its retention schedule. All data past its mandatory window is removed without delay. For data still governed by a legal retention obligation, we lock it down right away so it’s taken out of active use and stored only for compliance storage; we notify you which specific law is relevant and the date deletion becomes possible. Access requests are handled within thirty days and provide a breakdown of what we store, why, and the scheduled deletion date. If you challenge accuracy, we append a note instead of altering the original record, so the audit trail stays intact. Portability requests are processed in a structured, machine‑readable format even while data is still in its retention window.
Data Categories and Retention Periods
We sort all user data into well-defined categories, each connected to a retention schedule that aligns with its use and legal context. That systematic approach prevents us from holding on to things forever. Every year our Data Protection Officer examines these classifications and updates the timelines whenever new guidance arrives from the Garante per la protezione dei dati personali. Below you’ll see how long each data type https://it.wikipedia.org/wiki/Francis_Kurkdjian is kept in our live systems before being securely anonymized or erased. Archived backups operate on a ninety‑day cycle because of technical limitations.
Identity and Fiscal Records
Identity documents you submit during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, remain on file for ten years after you close your account, as anti‑money laundering law requires. Deposit and withdrawal logs, payment method tokens and wallet balance histories are retained for ten years from the date of each transaction, meeting both AML requirements and Italian Civil Code limitation periods. We store these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline elapses, we eliminate all personal identifiers permanently; statistical trends may still be used but never in a way that links back to any individual.
Account Actions and Help Desk Messages
Detailed logs of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.
Safe Gaming and Self‑Exclusion Data
Once you enable self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.
Data Safeguarding In Storage
Held data is safeguarded with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access demands multi‑factor authentication plus just‑in‑time privilege elevation that expires on its own. Every access event is recorded into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to maintain our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard identifies every dataset as it nears expiration.
Permission Management and Employee Education
Only employees whose roles demonstrably necessitate access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records prompts a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and distinguishing the difference between data we must keep under a legal hold and data we can delete straight away.
International Data Transfers and Retention
Our primary infrastructure resides in Italy and the larger European Economic Area. Some supporting services, like fraud detection platforms and customer relationship tools, may transfer certain personal data to countries beyond the EEA. In those cases, we ensure an adequacy decision exists or we put Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we use to transferred data match those in this policy, and processors are contractually bound to erase or return data when the service ends. We maintain a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules ensure Italian user data inside European boundaries, confirmed through yearly audits.
Data Removal Procedures
When a data category hits the end of its scheduled retention, our automatic lifecycle system kicks off a secure deletion workflow. First, the data gets virtually eliminated from production databases. Next, physical storage blocks are overwritten with random data patterns to hinder forensic recovery. Finally, a cryptographically timestamped entry lands in a audit trail, giving verifiable evidence that purging happened on time. Backup copies refresh every ninety days, so any deleted data is removed from all media within three months. When a litigation hold applies, we pause the deletion workflow only for the affected records, record the hold reason, and continue once the hold lifts.
Legal Basis for Data Retention
Our storage strategy is based on several legal duties that govern gambling operators serving the Italian market. Anti‑money laundering regulations from the Italian Financial Intelligence Unit oblige us to keep transaction logs, identity verification documents and suspicious activity reports for a fixed term after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate require we preserve financial records that substantiate taxable gaming revenue and player winnings. These duties override any general right to erasure during the mandatory period. For operational data that isn’t covered by a fixed legal window, we rely on legitimate interest assessments where a valid reason exists, and we allow an opt‑out unless a compelling legal obligation overrides it.
Retention Based on Consent
Marketing preferences, newsletter sign‑ups and the behavioural analytics used for personalised offers stay only with your explicit consent. You can retract consent anytime through your account dashboard; once you do, we halt that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is removed from active systems to block further use, but it isn’t retroactively deleted. Consent records themselves are kept for six years as proof of compliance. We never employ this data for anything beyond the activity you agreed to.
Policy Revisions and User Notification
We evaluate this Data Retention Policy every six months and whenever a major legal change affects Italian gambling operations. Minor clarifications are posted silently with a revised effective date. Material changes that change retention periods, introduce new data categories or shift the legal basis for processing are communicated directly to you by email at least thirty days before they take effect. You’ll also find an in‑platform banner notification when you log in during the notice period. Historical versions are archived and available on request, each with a version number and a validity date range. If an earlier version provided a shorter retention period for certain data, we follow that promise for data collected under that version and apply new terms only going forward.
Popular Queries
Can I request deletion of my data before the retention period ends?
Certainly, you can submit a deletion request at any moment. We promptly review every data category against its mandatory retention requirement. If no legal obligation applies, we erase it promptly. For anything we must keep, we restrict it to storage‑only, tell you the legal basis stopping immediate deletion and give you the expected deletion date. You can also view all your data categories with their scheduled deletion dates through your account dashboard. Such a partial strategy respects your rights within the limits of Italian law.
What happens to my data if I self‑exclude permanently?
If you sign up for permanent self‑exclusion, your personal data is shifted to a dedicated exclusion register that operates indefinitely with highly restricted access. This is a legal mandate designed to stop you from creating new accounts. Your gameplay and transaction history, on the other hand, still follow the standard retention schedules and get deleted once those periods run out. The self‑exclusion record is cut off from all marketing and operational systems, so it serves only the protective function it was collected for. No marketing communications will be sent to you.
What is your approach to data from inactive accounts?
After twelve uninterrupted months of no login, an account is considered inactive. Then, we automatically halt marketing messages and place the account into a dormant condition with minimized processing. The underlying retention periods remain active according to the original data collection dates, not the date of inactivity. This implies that data from a dormant account is still retained for the complete legal period relevant to its category and subsequently erased following our standard protocols. Should you return after an extended absence, you may be required to undergo a new Know Your Customer verification to reactivate. The current status is always visible on your data dashboard.
About the Author
