Privacy & management of personal data

Ritzo is committed to safeguarding the privacy and security of Personal Data collected in connection with the provision of its online gambling services. This Policy describes what data Ritzo collects, why it is collected, how it is used, when it is shared, how it is protected, and the rights of individuals in relation to their Personal Data.

Data we collect

Ritzo collects Personal Data from and about users in several categories, as described below.

• Direct data provided by you: registration information (name, date of birth, address, contact details), identity verification documents for KYC/AML compliance, payment details, and any information you provide in support requests or during account communications.
• Automatically collected information: technical data such as IP address, device type, operating system, browser, language preferences, and usage logs; timestamped activity on the Services; and information obtained through cookies and similar technologies to improve functionality and security.
• Transaction and account activity data: deposits, withdrawals, winnings, bet history, limits and self‑exclusion settings, and other activity necessary to operate the Services and meet regulatory obligations.
• Information from third parties: data from payment processors, identity verification providers, and regulators or enforcement bodies as required or beneficial to provide the Services and ensure compliance.

Legal bases for processing

• Contractual necessity: processing required to provide the Services, verify identity, process transactions, and manage accounts under the terms of use.
• Legal obligation: processing to comply with applicable gambling, AML, tax and consumer protection laws and regulatory requirements.
• Legitimate interests: to maintain service quality, detect and prevent fraud, ensure security, and perform business analytics, provided such interests do not override the rights and freedoms of data subjects.
• Consent: where required, Ritzo may rely on consent for activities such as direct marketing communications; withdrawal of consent will not affect processing conducted on another lawful basis.

How we use your Personal Data

• Operate and provide the Services: establish and maintain user accounts, authenticate access, process bets and transactions, and deliver related features.
• Identity verification and eligibility: perform age checks, geographic checks, and know-your-customer procedures to determine eligibility and prevent prohibited activity.
• Compliance and risk management: comply with regulatory obligations (AML, responsible gaming), monitor for suspicious activity, and conduct fraud prevention and security measures.
• Customer support: respond to inquiries, diagnose issues, and provide assistance related to accounts, payments, or use of the Services.
• Operations and improvements: analyze usage to improve features, performance, and security; conduct research and testing of new functionality.
• Financial processing: manage deposits, withdrawals, and payouts; perform anti-fraud checks and settlement activities with financial institutions.
• Marketing and communications: with appropriate consent or where otherwise permitted by law, send updates about the Services, promotions, and notices; individuals may opt out of marketing communications at any time.
• Data sharing within Ritzo and with service providers: share data as necessary to operate the Services, provide customer support, and fulfill contractual obligations, subject to appropriate safeguards.

Data sharing

• Group and service providers: Ritzo may share Personal Data with other Ritzo entities or trusted service providers that perform services on its behalf (e.g., hosting, payments, analytics, customer support) under contractual obligations to protect data.
• Regulators and law enforcement: disclose data as required by law, regulation, or lawful process, or to respond to regulatory inquiries or to protect Ritzo’s rights.
• Referral and partner programs: share data with partners only where necessary and with appropriate safeguards, and in accordance with your consent where applicable.
• Other with consent: any other sharing subject to your explicit consent or as otherwise described in this Policy.

International transfers

Personal Data may be transferred to countries outside your residence. When such transfers occur, Ritzo implements appropriate safeguards designed to protect your data, including contractually recognized transfer mechanisms to ensure a level of protection comparable to that required under applicable law.

Security of your data

• Encryption: use of industry‑standard encryption for data in transit and at rest where feasible.
• Access controls: access to Personal Data is restricted to personnel who require it for processing purposes and who are bound by confidentiality obligations.
• Network and physical security: protections including firewalls, monitoring, and secure data centers with physical security controls.

Data retention

Ritzo retains Personal Data for as long as necessary to fulfill the purposes described in this Policy and to comply with legal and regulatory obligations. Account data remains for the duration of the active relationship and is retained for a period of up to five (5) years after last activity or in accordance with applicable law. Certain data may be retained longer if required for fraud prevention, dispute resolution, or regulatory compliance.

Your rights

• Access and portability: you may request a copy of your Personal Data in a structured, machine‑readable format.
• Rectification: you may request corrections to inaccurate or incomplete data.
• Erasure: you may request deletion of Personal Data, subject to legal obligations and legitimate interests.
• Restriction and objection: you may limit processing or object to processing based on legitimate interests, subject to exemptions.
• Withdrawal of consent: where consent is the basis for processing, you may withdraw it at any time without affecting the lawfulness of processing based on prior consent.
• Direct marketing opt‑out: you may opt out of marketing communications by following the unsubscribe instructions in communications or by contacting Ritzo.
• Data protection authority: you may lodge a complaint with your local data protection authority if you believe Ritzo has misapplied your data.

Cookies and tracking

Ritzo uses cookies and similar technologies to operate the Services, analyze usage, and tailor experiences. You may adjust your browser settings to limit cookies; note that completely disabling cookies may impair functionality of the Services.

Data breach notification

In the event of a personal data breach, Ritzo will assess the impact and, where required by law, notify affected individuals and the relevant supervisory authorities within applicable timeframes.

Children’s privacy

The Services are intended for adults only. Ritzo does not knowingly collect Personal Data from individuals under the legal age for gambling in their jurisdiction. If we become aware of data from a minor, we will delete it promptly.

Policy updates

Ritzo may update this Policy from time to time. Material changes will be communicated via the Services or through approved notification channels. Your continued use of the Services after such updates constitutes acceptance of the revised Policy.

How to contact Ritzo about this policy

If you have questions or requests regarding your Personal Data or this Policy, please contact: [email protected].