Scope of this policy
This policy covers 19richcasino.com and every account service reached through it. It is written for players in Australia and applies whether you open the site on desktop, on mobile web, or through our iOS and Android apps.
By creating an account or continuing to browse, you accept the handling described below. If any part of it does not sit right with you, the safest course is to stop using the site and contact us before depositing.
Short version: we collect what a licensed casino is obliged to collect, we do not sell it, and you can ask to see or delete it.
Everything below is the long version, section by section.
What we collect
Data reaches us in three ways — you give it to us, your device reports it, or a verification partner returns it to us. It groups into four buckets.
Identity
Full name, date of birth, residential address, email and phone number, plus the ID documents used to prove them.
Financial
Deposit and withdrawal history, the methods you use, and wallet or masked card references. We never store full card numbers.
Gameplay
Titles opened, stake sizes, session length, bonus claims and VIP tier progress across the 5,865-game library.
Technical
IP address, approximate location, device and browser type, operating system, and the pages you move between.
We do not ask for, and do not want, information about your health, political views, religion or trade union membership. If you send it to us in a support ticket, we will remove it once the ticket closes.
Why we hold it
Every field we keep maps to a purpose. Where a purpose ends, the field goes.
| Purpose | What it uses | Basis |
|---|---|---|
| Running your account | Identity, financial, gameplay | Contract with you |
| Age and identity checks | Identity documents | Legal obligation |
| Anti-money-laundering | Financial, technical | Legal obligation |
| Fraud and bonus abuse | Technical, gameplay | Legitimate interest |
| Responsible gaming triggers | Gameplay, financial | Legal obligation |
| Marketing messages | Contact details | Your consent |
Marketing is the only row you can switch off without closing your account. Every message carries an unsubscribe link, and the preference centre in your account settings applies across email and push in one action.
Storage and retention
Records sit on servers inside the European Economic Area. Where a provider operates elsewhere, the transfer runs under Standard Contractual Clauses or an equivalent safeguard.
| Record | Kept for |
|---|---|
| Account and verification files | Five years after the account closes |
| Transaction records | Five years, as anti-money-laundering rules require |
| Support conversations | Two years from the last message |
| Marketing preferences | Until you withdraw consent, then a suppression record only |
| Self-exclusion requests | Permanently, so the exclusion cannot be undone by accident |
Your rights
You can exercise any of the following by writing to our support team from the email address on your account. We answer within 30 days and never charge for a first request.
- Access — a copy of the personal data we hold about you.
- Correction — fix anything inaccurate or out of date.
- Erasure — deletion, except where licensing law forces us to keep a record.
- Restriction — pause processing while a dispute is resolved.
- Portability — your data in a machine-readable file.
- Objection — stop processing based on legitimate interest, marketing included.
Retention rules beat erasure requests where the two collide. A closed account with a five-year AML clock still running cannot be wiped early, but it can be locked so nobody works with it.
Security measures
Traffic between your device and 19rich Casino runs over 256-bit TLS encryption. Stored identity documents are encrypted at rest, and access is limited to the staff who need it for verification or compliance work.
Internally we run access logging, periodic permission reviews and segregated environments so that development work never touches live player records. Should a breach ever affect your rights, we will notify you and the relevant regulator without undue delay.
Your own habits matter as much as ours: use a password unique to this site, turn on any additional verification we offer, and never share account credentials with anyone claiming to represent us. Our staff will never ask for your password.
Under-18s
Gambling is restricted to adults. We do not knowingly hold data on anyone under 18, and any account that fails an age check is frozen immediately, with stakes returned and winnings voided.
If you share a device with minors, consider filtering software such as Net Nanny or CyberPatrol alongside a device passcode.
Changes and contact
We review this policy at least once a year and whenever the way we handle data materially changes. The review date at the top of the page always reflects the current version, and significant changes are announced by email or by a notice on the site.
Questions, requests or complaints go to our privacy desk through the contact page. If you are not satisfied with our answer, you may raise the matter with the Malta Gaming Authority or with your local data protection authority.
Related reading: Cookies Policy, Terms & Conditions and Responsible Gaming.