Your Privacy at Ragnaro Casino

This Privacy Policy explains what personal data we collect when you play at Ragnaro Casino, why we collect it, how long we keep it, and the rights you hold over it.

Data We Collect From You

When you register an account, deposit, or contact support, we collect the personal data needed to run that service. We launched in 2017 under Ragnaro Gaming Ltd (Malta), licensed by the MGA, and our data collection follows that licence's requirements as well as Australian privacy principles.

We group the data into six categories. Each category serves a specific purpose listed in the next section.

• Identity data: full name, date of birth, email address, phone number, residential address.
• Verification documents: passport, driver licence or other ID, proof of address, payment method verification, collected under our KYC process before your first withdrawal.
• Transaction data: deposits and withdrawals, amounts, currency, payment method (PayID, cards, e-wallets or crypto wallet addresses).
• Technical data: IP address, device type, operating system, browser, approximate location derived from IP.
• Gameplay behaviour: games played, bet sizes, session times, bonus and loyalty activity.
• Marketing preferences: which communications you opted into or out of, and how you responded.

How We Use Your Data

We use each category of data for a defined purpose, never for anything beyond those purposes without asking you again.

• Creating and maintaining your player account, including the 5-tier loyalty program from Bronze to Diamond.
• Verifying your identity and age under KYC and AML rules before processing withdrawals.
• Processing deposits and withdrawals, including crypto payouts within 1 hour.
• Preventing fraud, bonus abuse, multiple accounts and underage gambling.
• Monitoring play for responsible-gambling indicators, such as sudden loss spikes that trigger session reminders or cool-off suggestions.
• Sending marketing about promotions like the Monday reload of 50% up to 300 AUD, but only with your consent.
• Meeting legal and regulatory obligations, including tax and licence reporting to the MGA.

Our Legal Bases Explained

Contract. We process your identity, account and transaction data because they are necessary to perform our agreement with you. Without a name and payment details we cannot open an account or pay out winnings.

Legal obligation. Verification documents, transaction records and AML reports are processed because gambling law requires it. Our MGA licence (MGA/B2C/1031/2023) obliges us to keep these records, and we cannot delete them early even at your request.

Legitimate interest. Fraud prevention, security monitoring and service improvement rely on our legitimate interest in operating a safe casino. This also covers minimal analytics that help us fix faults and improve game loading times.

Consent. Marketing emails, SMS and personalised offers are sent only if you ticked the consent box. You can withdraw that consent at any time and the processing stops, although account data retained under law is unaffected.

How Long We Keep Records

We do not hold your data forever. Each category has a retention period set by law or by the purpose it serves, after which it is deleted or irreversibly anonymised.

• Transaction and KYC records: kept for at least 5 years after your last transaction, as required by gambling and AML regulations.
• Account data: kept while your account is active, then for 5 years of dormancy before closure and deletion.
• Verification documents: deleted within 30 days after KYC review is completed, unless regulation requires longer storage.
• Technical and device logs: up to 12 months for security and fraud analysis.
• Marketing preferences and consent records: kept until you withdraw consent, plus a short period to prove the withdrawal.
• Support chat and email transcripts: up to 24 months for dispute resolution.

Who We Share Data With

We never sell your personal data. We share it only with service providers who need it to deliver a function you use, and each one is bound by a data processing agreement.

• Payment processors handling PayID, Visa, Mastercard, Skrill, MiFinity, Jeton and crypto transactions.
• KYC and AML verification providers who check your ID and proof of address documents.
• The MGA and other regulators or law enforcement, when legally requested.
• Analytics and hosting providers processing data inside the EU/EEA or covered by equivalent safeguards.
• Game providers, who receive only your player ID and session token, never your full identity.
• Email and SMS delivery services for marketing you consented to.

Your Rights Over Your Data

You control your personal data. Where a right cannot be fully exercised, for example deleting KYC records still within their legal retention window, we explain what we can and cannot do and why.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate details such as an outdated address.
• Erasure: ask us to delete data held on consent or legitimate interest alone.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest, including profiling for fraud checks where law permits.
• Withdraw consent: unsubscribe from marketing at any time, via the link in every email or your account settings.
• Complain: raise a complaint with the relevant data protection authority, or contact Gambling Help Online (1800 858 858) if your concern relates to gambling harm.

Cookies and Tracking

Our site uses strictly necessary cookies for login sessions and security, plus optional analytics and marketing cookies that load only after you accept them in the cookie banner. You can change your cookie choices anytime from your browser settings or our cookie banner. Full details of every cookie category and its lifespan are set out in our separate Cookies Policy page.

How We Protect Your Data

All traffic between you and our servers runs over TLS encryption, and payment and verification documents are stored in encrypted form with strict access controls. Only staff who need access for support, payments or compliance have it, and every access is logged.

If a data breach occurs that risks your rights, we notify the relevant regulator within 72 hours and affected players directly, as GDPR requires. Our support team is available 24/7 at [email protected] if you suspect unusual activity on your account, and questions for our Data Protection Officer can go to [email protected].

Frequently Asked Questions

Can I delete my Ragnaro Casino account data completely?

You can request erasure of marketing data and gameplay history, but KYC and transaction records must be kept for at least 5 years under our MGA licence. We delete everything else and explain exactly what remains.

Do you share my data with game providers?

Game providers receive only an anonymous player ID and session token so the game can load. They never see your name, payment details or documents.

How do I stop marketing emails and SMS?

Use the unsubscribe link in any email or switch off communications in your account settings. Consent withdrawal takes effect immediately, though it can take a few days to clear queued messages.

Who do I complain to about privacy?

Contact our DPO first at [email protected]. If you are not satisfied with the response, you can complain to the data protection authority in your jurisdiction.