3-minute read · Revised Oct 6, 2026
How Rainbet Protects Your Data
Your account documents are kept on file for 10 years and verified through Sumsub's three-step process. Rainbet also applies 128-bit SSL encryption and GDPR-aligned handling across every transaction.
Claim 250% up to £2,100Privacy Policy at Rainbet Casino
At Rainbet Casino we collect the personal data needed to open and verify an account, process payments and meet our anti-money-laundering obligations. This includes identification documents submitted through our verification partner Sumsub, proof-of-address records and, where requested, source-of-funds documentation such as employment or business records.
Why we collect this data
Our three-step verification process runs at account creation and during certain transactions. It is used for PEP, adverse media and sanctions screening against UN, OFAC and EU lists, and for enhanced due diligence on higher-risk customers, which can include temporary account restrictions while checks are completed. For crypto deposits and withdrawals, we use Elliptic blockchain analytics to monitor transactions, alongside a three-tier system of automated AI monitoring, employee review and manual audits.
We protect account data with 128-bit SSL encryption, and we work within the EU 6AMLD, Regulation (EU) 2015/847, FATF recommendations, GDPR and Anjouan AML law. Our AML policy, version 1.2, was last updated on 8 April 2026, and we carry out an annual enterprise-wide risk assessment together with annual staff AML training.
Data Retention at a Glance
The length of time we hold different categories of data depends on what it relates to and the regulatory obligation behind it.
| Data type | Handling / retention |
|---|---|
| KYC documents & transaction records | Kept for 10 years |
| Complaints records | Kept for at least 5 years |
| Identity verification | Three-step process via Sumsub |
| Crypto deposits & withdrawals | Monitored via Elliptic blockchain analytics |
These periods reflect our obligations under the AML framework rather than a fixed company preference, and apply consistently across every account on the site.
Your Rights and Document Requirements
When verifying an account, we ask for a government-issued passport, ID card or driving licence with all corners visible, a selfie holding that document and a handwritten note with six random numbers. As a rule, only your name, date of birth, nationality, gender and photo are required unless additional checks apply. Proof of address is first checked electronically against two databases; if that fails, we ask for a utility bill, government letter or bank statement dated within the last three months.
We design our platform to target WCAG 2.1 Level AA, ADA standards and EN 301 549, and we maintain a dedicated accessibility feedback channel for players who encounter barriers. Complaints involving personal data are acknowledged within 2 business days, with an initial response within 10 business days and up to 30 days for escalated cases handled by our Compliance Manager.
Account-related data questions can be raised through our support channels, and players reviewing how we handle deposits can check the relevant processing details on our deposit methods page.