As a authorized operator in Italy, we collect and look after personal and transactional data under strict legal obligations. This policy spells out exactly how long we keep different categories of information, the legal reasons behind those periods, and the security measures that shield your data at every stage. We continuously balance our duty to retain records for fraud prevention and financial audits with the privacy rights you maintain under Italian data protection law and the GDPR. Our schedules get regular reviews so we stay fully compliant.
Data Safeguarding Throughout Preservation
Stored information is protected with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access demands multi‑factor authentication plus just‑in‑time privilege elevation that terminates on its own. Every access event is written into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to ensure our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard flags every dataset as it nears expiration.
Permission Management and Employee Education
Only employees whose roles demonstrably require access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records prompts a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and distinguishing the difference between data we must keep under a legal hold and data we can delete straight away.
Partner Program Data Retention
Affiliate partner information, including contact information, payment details and commission payment history, is kept for the life of the current agreement plus ten years after the agreement terminates. That’s driven by tax requirements on commission transactions, which necessitate long‑term financial records. Affiliate performance statistics and aggregated referred‑player statistics get made anonymous after 5 years. We strictly forbid affiliates from independently collecting or keeping personal information about referred customers; they get only anonymous, combined summaries. Our partner contracts include inspection rights to check adherence, and any breach is reason for instant agreement cancellation and commission forfeiture.
Cross-border Data Transfers and Storage Periods
Our main systems resides inside Italy and the larger European Economic Area. Some ancillary services, like fraud detection platforms and customer relationship tools, may send limited personal data to countries outside the EEA. In those cases, we ensure an adequacy decision exists or we implement Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we apply to transferred data mirror those in this policy, and processors are contractually bound to delete or return data when the service ends. We maintain a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules keep Italian user data inside European boundaries, verified through yearly audits.
Regulatory Foundation for Information Storage
Our storage strategy rests on several regulatory requirements that affect gambling operators targeting the Italian market. Anti‑money laundering rules from the Italian Financial Intelligence Unit oblige us to keep transaction records, identity verification documents and suspicious activity reports for a fixed term after the business relationship ends. Meanwhile, tax rules imposed by the Agenzia delle Entrate demand we preserve financial records that support taxable gaming revenue and player winnings. These obligations override any general right to erasure during the mandatory period. For operational data that doesn’t fall under a fixed legal window, we rely on legitimate interest assessments where a valid reason exists, and we allow an opt‑out unless a compelling legal obligation prevents it.
Consent‑Based Retention
Marketing preferences, newsletter sign‑ups and the behavioural analytics utilised for personalised offers are kept only with your explicit consent. You can revoke consent anytime through your account dashboard; once you do, we halt that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal gets isolated from active systems to block further use, but it is not deleted retroactively. Consent records themselves are kept for six years as proof of compliance. We do not use this data for anything beyond the activity you agreed to.
Policy Revisions and Player Notification
We review this Data Retention Policy every six months and whenever a major legal change affects Italian gambling operations. Minor clarifications are published silently with a revised effective date. Material changes that modify retention periods, introduce new data categories or shift the legal basis for processing are communicated directly to you by email at least thirty days before they become effective. You’ll also notice an in‑platform banner notification when you log in during the notice period. Historical versions are archived and available on request, each with a version number and a validity date range. If an earlier version offered a shorter retention period for certain data, we adhere to that promise for data collected under that version and apply new terms only going forward.
Data Types and Holding Times
We sort all user data into well-defined categories, each linked to a retention schedule that corresponds to its function and legal context. That structured approach stops us from holding on to things forever. Every year our Data Protection Officer reviews these groupings and updates the timelines whenever new guidance comes from the Garante per la protezione dei dati personali. Below you’ll view how long each data type is kept in our live systems before being securely de-identified or destroyed. Archived backups operate on a ninety‑day cycle because of technical restrictions.
Identity and Financial Records
Identity documents you upload during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, remain on file for ten years after you terminate your account, as anti‑money laundering law requires. Deposit and withdrawal logs, payment method tokens and wallet balance histories are held for ten years from the date of each transaction, fulfilling both AML requirements and Italian Civil Code limitation periods. We hold these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline passes, we remove all personal identifiers permanently; statistical trends may still be used but never in a way that links back to any individual.
User Activity and Help Desk Messages
Comprehensive records of game sessions, Rich Royal Casino condizioni affiliazione, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently goal.com deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.
Ethical Play and Self‑Exclusion Data
Upon activating self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.
Data Deletion Procedures
When a data category hits the end of its planned retention period, our self-running lifecycle mechanism kicks off a secure deletion workflow. First, the data gets virtually eliminated from production databases. Next, physical storage blocks are rewritten with random data patterns to prevent forensic recovery. Finally, a digitally signed log lands in a compliance ledger, giving verifiable evidence that deletion happened on time. Backup copies cycle every ninety days, so any deleted data vanishes from all media within three months. When a litigation hold applies, we suspend the deletion workflow only for the affected records, record the hold reason, and resume once the hold lifts.
Individual Rights and Retention Interactions
When you file an erasure request, our system automatically examines each data category against its retention schedule. All data past its mandatory window is erased without delay. For data still governed by a legal retention obligation, we lock it down right away so it’s removed from active use and held only for compliance storage; we inform you which specific law is in effect and the date deletion becomes possible. Access requests are handled within thirty days and come with a breakdown of what we hold, why, and the scheduled deletion date. If you challenge accuracy, we add a note instead of modifying the original record, so the audit trail is preserved. Portability requests are honoured in a structured, machine‑readable format even while data is still in its retention window.
Common Questions
May I request data erasure before the retention period expires?
Absolutely, you may lodge an erasure request whenever you wish. We instantly examine each data category in relation to its legal retention duty. When no legal hold exists, we remove it quickly. For any data we are required to retain, we limit it to storage‑only, inform you of the legal reason preventing immediate removal, and provide the anticipated deletion date. You can also view all your data categories with their scheduled deletion dates through your account dashboard. This partial method honors your rights to the extent permitted by Italian regulations.
What happens to my data if I self‑exclude permanently?
If you sign up for permanent self‑exclusion, your personal data is shifted to a dedicated exclusion register that operates indefinitely with highly restricted access. That’s a legal requirement built to prevent you from opening new accounts. Your gaming and transaction history, however, still complies with standard retention schedules and is removed after those periods conclude. The self‑exclusion record is cut off from all marketing and operational systems, so it serves only the protective function it was collected for. You will not receive any promotional messages.
How do you handle data belonging to inactive accounts?
An account is deemed inactive following twelve consecutive months without a login. At that point, we automatically switch off marketing communications and move the account to a dormant state with reduced processing. The underlying retention periods remain active according to the original data collection dates, not the date of inactivity. That means data from an inactive account is still held for the full statutory period that applies to its category and then deleted according to our standard procedures. If you come back after a long break, you might need to complete a fresh Know Your Customer check to reactivate. Your data dashboard displays the current status continuously.
