Privacy Policy

Welcome to RioAce. This Privacy Policy outlines how RioAce, including its affiliates and subsidiaries, collects, uses, processes, and protects your personal data when you use our website, services, and applications (collectively, "Services"). We are committed to safeguarding your privacy and ensuring the security of your personal information. By accessing or using our Services, you agree to the terms of this Privacy Policy. Please read it carefully to understand our practices regarding your data.

RioAce operates under a strict regulatory framework, and our data processing activities are designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant. We believe in transparency and want you to be fully informed about your rights and our responsibilities concerning your personal data.

We collect various types of information to provide and improve our Services. This information can be categorised as follows:

• Information you provide directly: This includes data you submit when registering an account, making deposits or withdrawals, participating in promotions, or contacting customer support. Examples include your name, date of birth, address, email address, phone number, payment details (e.g., credit card information, bank account details), and identification documents (e.g., passport, driver's license) for verification purposes.
• Information collected automatically: When you use our Services, we automatically collect certain technical information about your device and browsing activity. This includes your IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, and the dates/times of your visits. This data helps us understand how our Services are used and improve their functionality.
• Information from third parties: We may receive information about you from third-party service providers, such as identity verification services, financial institutions, and fraud prevention agencies. This information is used to comply with legal and regulatory obligations, prevent fraud, and enhance the security of your account.

RioAce uses the collected information for various purposes, primarily to provide, maintain, and improve our Services, and to comply with legal obligations:

• Account Management: To create and manage your account, verify your identity, process transactions, and provide customer support.
• Service Delivery: To enable you to participate in games, place bets, and access other features of our platform.
• Security and Fraud Prevention: To detect and prevent fraudulent activities, money laundering, and other illegal acts, and to ensure the integrity of our Services.
• Compliance with Legal Obligations: To meet regulatory requirements imposed by our licensing authority and other applicable laws, including age verification and responsible gaming measures.
• Personalisation: To tailor our Services, content, and offers to your preferences and provide a more personalised experience.
• Communication: To send you important updates, service announcements, promotional offers (where you have consented), and respond to your inquiries.
• Analytics and Improvement: To analyse usage patterns, monitor the effectiveness of our marketing campaigns, and improve the functionality and performance of our Services.

We process your personal data based on several legal grounds, as required by data protection laws:

• Performance of a Contract: Processing is necessary for the performance of the contract between you and RioAce, specifically to provide you with our gaming services and manage your account.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which RioAce is subject, such as anti-money laundering regulations, responsible gaming requirements, and tax laws.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by RioAce or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. Our legitimate interests include preventing fraud, ensuring network and information security, improving our services, and marketing activities.
• Consent: In certain situations, we may rely on your explicit consent to process your personal data, particularly for sending direct marketing communications. You have the right to withdraw your consent at any time.

RioAce takes your privacy seriously and only shares your personal data when necessary and with appropriate safeguards. We may share your information with:

• Service Providers: Third-party vendors and service providers who perform functions on our behalf, such as payment processors, IT support, identity verification services, and marketing agencies. These providers are contractually bound to protect your data and use it only for the purposes for which it was disclosed.
• Regulatory and Law Enforcement Authorities: We may disclose your information to government bodies, regulatory authorities, and law enforcement agencies when required by law or in response to a valid legal request, such as a court order or subpoena.
• Affiliates and Group Companies: Your data may be shared within the RioAce group of companies for operational, administrative, and analytical purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction. We will notify you of any such change of ownership or control of your personal data.
• Fraud Prevention and Responsible Gaming Organisations: To combat fraud and promote responsible gaming, we may share relevant information with organisations dedicated to these causes.

We do not sell your personal data to third parties.

RioAce implements robust technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use industry-standard encryption technologies, such as SSL (Secure Socket Layer), to protect data transmitted between your device and our servers.
• Access Controls: Access to personal data is restricted to authorised personnel who require it for legitimate business purposes.
• Firewalls and Intrusion Detection Systems: We employ firewalls and other security technologies to monitor and prevent unauthorised access to our systems.
• Regular Security Audits: Our systems undergo regular security audits and vulnerability assessments to identify and address potential weaknesses.
• Employee Training: Our employees receive regular training on data protection and privacy best practices.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security, but we continuously work to enhance our security measures.

Under applicable data protection laws, you have several rights regarding your personal data. RioAce is committed to facilitating the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions, for example, if you contest the accuracy of the data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data in certain situations, particularly when processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request in accordance with applicable laws.

RioAce uses cookies and similar tracking technologies to enhance your experience, analyse website usage, and for marketing purposes. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: These cookies are necessary for the website to function correctly and cannot be switched off in our systems. They are usually set in response to actions made by you, such as setting your privacy preferences, logging in, or filling in forms.
• Analytical/Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
• Functionality Cookies: These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages.
• Targeting/Advertising Cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

RioAce retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our retention periods are determined based on legal obligations, regulatory requirements, and business needs.

Typically, we retain account information for the duration of your active account and for a further period as required by anti-money laundering and responsible gaming regulations. Transaction data is retained for a period mandated by financial regulations. After the retention period expires, your personal data will be securely deleted or anonymised.

As RioAce operates globally, your personal data may be transferred to, and stored at, a destination outside of the European Economic Area (EEA) or your country of residence. This includes countries that may not have the same level of data protection laws as your jurisdiction.

When we transfer your data internationally, we implement appropriate safeguards to ensure that your personal data receives an adequate level of protection. These safeguards may include:

• Transferring data to countries deemed to provide an adequate level of protection by the European Commission.
• Using Standard Contractual Clauses (SCCs) approved by the European Commission, which provide specific data protection obligations for the recipient.
• Relying on your explicit consent for the transfer, where appropriate.

By using our Services, you acknowledge and agree to such international transfers of your personal data.

RioAce Services are strictly for individuals who are at least 18 years of age, or the legal age of majority in their jurisdiction, whichever is higher. We do not knowingly collect personal data from individuals under this age. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our records.

If you believe that a minor has provided us with personal data, please contact us immediately using the details in the "Contact Us" section.

RioAce may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact our Data Protection Officer:

• By Email: [email protected]
• By Post: [Insert Company's Registered Office Address - if applicable, otherwise omit]

We are committed to resolving any privacy-related concerns you may have and will respond to your inquiries in a timely and professional manner.