Privacy Policy

Welcome to RioAce. This Privacy Policy describes how RioAce, as the data controller, collects, uses, processes, and protects your personal information when you use our website, mobile applications, and related services (collectively, "Services"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy explains your rights regarding your personal data and how we safeguard it. By accessing or using our Services, you agree to the terms of this Privacy Policy.

RioAce operates under strict regulatory requirements, and this policy reflects our commitment to compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users within the European Economic Area (EEA) and other relevant data protection legislation.

We collect various types of information to provide and improve our Services. This includes:

• Identity Data: Name, date of birth, gender, nationality, and copies of identification documents (e.g., passport, driver's license) required for identity verification and "Know Your Customer" (KYC) procedures.
• Contact Data: Residential address, email address, and telephone number.
• Financial Data: Bank account details, payment card details, and transaction history. We do not store full payment card numbers on our servers.
• Profile Data: Username, password, preferences, feedback, and survey responses.
• Usage Data: Information about how you use our Services, including your betting patterns, game play, website navigation, and the features you interact with.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
• Publicly Available Information: Data from publicly accessible sources, where permitted by law, for verification and fraud prevention purposes.

RioAce uses your personal information for the following purposes:

• Account Management: To set up and manage your account, verify your identity, and provide customer support.
• Service Provision: To operate our games and betting services, process your transactions (deposits and withdrawals), and manage your participation in promotions and bonuses.
• Security and Fraud Prevention: To detect and prevent fraudulent activities, money laundering, and other illegal activities, ensuring the integrity of our Services. This includes carrying out necessary due diligence and risk assessments.
• Legal and Regulatory Compliance: To comply with our legal and regulatory obligations, including those related to licensing, responsible gambling, and anti-money laundering (AML) laws.
• Service Improvement: To analyze usage patterns, troubleshoot technical issues, and improve the functionality and user experience of our Services.
• Personalization: To tailor our Services and marketing communications to your preferences.
• Communication: To send you important notices, updates, and marketing communications (where you have consented or where legally permitted).
• Responsible Gambling: To monitor and identify potential responsible gambling concerns and provide support or impose restrictions as necessary.

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of a contract with you, or to take steps at your request before entering into such a contract (e.g., creating and managing your account, processing transactions).
• Legal Obligation: Processing is necessary for compliance with a legal or regulatory obligation to which we are subject (e.g., AML, KYC, responsible gambling regulations).
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided that your fundamental rights and freedoms do not override those interests. Our legitimate interests include preventing fraud, improving our services, and ensuring network and information security.
• Consent: In certain situations, we may ask for your explicit consent to process your personal data for specific purposes, such as sending you marketing communications. You have the right to withdraw your consent at any time.

RioAce may share your personal information with the following categories of recipients:

• Service Providers: Third-party vendors and service providers who perform services on our behalf, such as payment processors, identity verification services, IT and hosting providers, and customer support providers. These parties are contractually bound to protect your data and use it only for the purposes for which it was disclosed.
• Regulatory and Law Enforcement Bodies: We may disclose your information to government authorities, regulators, and law enforcement agencies when required by law, to comply with legal processes, or to protect our rights and interests.
• Affiliates and Group Companies: Your data may be shared with other entities within our corporate group for operational, analytical, and marketing purposes, subject to appropriate safeguards.
• Fraud Prevention Agencies: To prevent fraud and money laundering, we may share your data with specialized agencies.
• Auditors and Professional Advisors: Our auditors, legal advisors, and other professional consultants may access your data as part of their services to us.
• Potential Purchasers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We do not sell your personal data to third parties for their independent marketing purposes.

RioAce is committed to protecting your personal data. We implement appropriate technical and organizational measures to safeguard your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Using SSL (Secure Socket Layer) technology to encrypt data during transmission.
• Access Controls: Restricting access to personal data to authorized personnel only, based on a need-to-know basis.
• Firewalls: Employing robust firewalls and intrusion detection systems.
• Regular Audits: Conducting regular security audits and vulnerability assessments.
• Data Minimization: Collecting only the personal data that is necessary for the stated purposes.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to certain legal obligations we may have to retain it.
• Right to Restriction of Processing: You can request that we limit the processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You can object to the processing of your personal data where we rely on legitimate interests as the legal basis, or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly if you are in the EEA.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We may require you to verify your identity before fulfilling your request.

RioAce uses cookies and similar tracking technologies to enhance your experience, analyze website usage, and for marketing purposes. Cookies are small text files stored on your device when you visit our Services.

• Essential Cookies: Necessary for the operation of our Services, enabling core functionalities like security, network management, and accessibility.
• Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our Services. This helps us improve the way our Services work.
• Functionality Cookies: Used to recognize you when you return to our Services, enabling us to personalize content for you and remember your preferences.
• Targeting/Advertising Cookies: Record your visit to our Services, the pages you have visited, and the links you have followed. We will use this information to make our Services and the advertising displayed on it more relevant to your interests.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our retention periods are determined by taking into account:

• The type of personal data.
• The purpose of processing.
• Our legal and regulatory obligations.
• The potential for disputes.

For example, we typically retain account information and transaction data for a minimum of five years after account closure, as required by anti-money laundering regulations and our licensing authority. If you request the deletion of your data, we will comply unless there is a legal or legitimate business reason to retain it.

Your personal data may be transferred to, and stored at, a destination outside of your country of residence, including countries outside the European Economic Area (EEA) that may not have the same level of data protection laws as your home jurisdiction. When we transfer your data internationally, we take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Transferring data to countries deemed to provide an adequate level of data protection by the European Commission.
• Using standard contractual clauses approved by the European Commission.
• Implementing binding corporate rules.

RioAce Services are not intended for individuals under the legal gambling age in their respective jurisdiction, which is typically 18 years or older. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information as quickly as possible. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically to stay informed about how RioAce is protecting your information. Significant changes will be communicated through more prominent notices, such as email notifications.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please do not hesitate to contact our Data Protection Officer:

Email: [email protected]

Postal Address: [Please use a neutral placeholder if a specific address is not available, e.g., "Data Protection Officer, RioAce, Registered Office Address"]

We are committed to addressing your inquiries promptly and transparently.