Privacy Policy of Rainbet Casino

1. Scope and responsible entity

This Privacy Policy explains how Rainbet Casino processes personal information in connection with the online casino services made available through foodtoshare.ca to users located in Canada. For the purposes of Canadian privacy law, including the Personal Information Protection and Electronic Documents Act, Rainbet Casino is the organization responsible for the personal information it collects, uses, discloses, and retains. Where the General Data Protection Regulation applies because a user is located in the European Economic Area or the United Kingdom, Rainbet Casino acts as the data controller for the relevant processing activities.

Rainbet Casino may operate its gambling services under an offshore online gaming licence, such as a Curaçao eGaming licence, where applicable to its business model and market availability. Licensing and regulatory requirements may require the collection of identity, age, payment, and responsible gambling information. For data protection questions, requests, or complaints, users may contact Rainbet Casino at [email protected].

This document applies to account registration, website access, deposits, withdrawals, gameplay activity, customer support communications, fraud prevention, responsible gambling controls, and compliance checks. It does not apply to personal information processed by independent third-party websites, payment institutions, or identity verification providers acting under their own legal responsibilities.

2. Categories of personal information collected

Rainbet Casino collects personal information that is necessary to provide online gambling services, verify users, process transactions, maintain platform security, and comply with applicable legal obligations. The information collected may vary depending on the user’s country, payment method, account activity, and risk profile. Rainbet Casino does not knowingly permit registration by persons under the legal gambling age applicable to their location.

The categories of personal information collected may include:

Account and master data, including name, date of birth, residential address, email address, telephone number, username, account identifier, preferred language, and country of residence.
Identity verification data, including government-issued identification documents, passport or driver’s licence details, proof of address, photographs, liveness checks, and age verification records.
Financial and transaction data, including deposit and withdrawal history, payment method details, wallet addresses where cryptocurrency payments are supported, bank references, chargeback records, and anti-money laundering risk indicators.
Technical data, including IP address, device identifiers, browser type, operating system, time zone setting, geolocation derived from IP address, login timestamps, and security logs.
Usage and gameplay data, including games played, bet amounts, session duration, bonuses claimed where applicable, responsible gambling limits, self-exclusion status, and customer support interactions.
Communications data, including emails, live chat transcripts, complaint records, verification correspondence, and call notes where telephone support is used.

Sensitive information, such as biometric data from liveness checks or documents containing national identifiers, is processed only where necessary for identity verification, fraud prevention, or legal compliance. Users should not submit unnecessary sensitive information through support channels.

3. Purposes for processing personal information

Rainbet Casino processes personal information for specified, explicit, and legitimate purposes related to the provision and control of online gambling services. The organization limits processing to information reasonably required for those purposes and applies data minimization principles where appropriate. Processing may be automated in part, for example when detecting suspicious login activity or screening transactions against risk rules.

Personal information is processed for the following purposes:

Creating, administering, and securing user accounts, including authentication and password recovery.
Verifying identity, age, residence, source of funds where required, and eligibility to use the services.
Processing deposits, withdrawals, refunds, chargebacks, and payment reconciliation.
Monitoring gameplay activity for fraud, collusion, bonus abuse, account takeover, money laundering, and other prohibited conduct.
Applying responsible gambling tools, including deposit limits, cooling-off periods, time-out requests, and self-exclusion measures.
Providing customer support, responding to complaints, and maintaining records of disputes or regulatory inquiries.
Complying with tax, accounting, licensing, anti-money laundering, counter-terrorist financing, sanctions screening, and consumer protection obligations.
Conducting analytics, platform performance measurement, security testing, and internal reporting based on aggregated or pseudonymized information where possible.

Rainbet Casino may also process limited contact information to send essential service communications, such as account security notices, withdrawal confirmations, policy updates, or verification requests. Marketing communications, where offered, are subject to applicable consent requirements and unsubscribe mechanisms under Canadian anti-spam legislation.

4. Legal bases and authority for processing

Rainbet Casino processes personal information on legal bases recognized under applicable privacy laws. In Canada, processing is generally based on meaningful consent, contractual necessity, legal obligations, and legitimate business purposes that a reasonable person would consider appropriate in the circumstances. Where the GDPR applies, equivalent lawful bases include performance of a contract, compliance with a legal obligation, legitimate interests, consent, and, where necessary, the establishment or defence of legal claims.

The main legal bases include:

Performance of a contract, where processing is necessary to register an account, provide gambling services, manage balances, process payments, and deliver customer support.
Legal obligation, where processing is required for age verification, KYC checks, anti-money laundering controls, recordkeeping, regulatory reporting, tax accounting, and sanctions screening.
Legitimate interests, where processing is necessary to prevent fraud, protect network security, enforce terms of use, investigate disputes, conduct internal audits, and safeguard the integrity of the platform.
Consent, where required for optional cookies, direct electronic marketing, or certain voluntary account features.
Vital or public interest grounds, in rare circumstances where required by law or necessary to address serious harm, regulatory risk, or unlawful activity.

A user may withdraw consent where processing is based on consent, but withdrawal does not affect processing already carried out lawfully. Withdrawal may also limit the availability of some services if the relevant information is necessary for account operation or legal compliance.

5. Security of personal information

Rainbet Casino applies technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction. These safeguards are selected with regard to the sensitivity of the information, the volume of records, the nature of online gambling transactions, and the risks associated with internet-based services. No security system can guarantee absolute protection, and transmission of information over the internet carries inherent risks.

Security measures may include:

TLS 1.2 or TLS 1.3 encryption for data transmitted between the user’s browser and the website, using strong encryption configurations such as 128-bit or 256-bit cryptographic protocols.
Firewalls, intrusion detection systems, anti-malware tools, vulnerability scanning, and network segmentation for production environments.
Role-based access controls, multi-factor authentication for administrative systems, least-privilege permissions, and periodic access reviews.
Encryption or hashing of credentials, secure password storage, session monitoring, and automatic logout for inactive sessions.
Logging, audit trails, incident response procedures, backup controls, and regular security reviews of critical systems.
Employee and contractor confidentiality obligations, security training, and internal procedures for handling identification documents and payment-related information.

If Rainbet Casino becomes aware of a security incident involving personal information, it will assess the nature and severity of the incident. Where required by applicable law, affected users, regulators, or other relevant authorities will be notified within applicable reporting timelines.

6. Disclosure of personal information to third parties

Rainbet Casino may disclose personal information to third parties where necessary for service delivery, legal compliance, fraud prevention, payment processing, or platform security. Third parties are required to process information only for authorized purposes and to apply appropriate confidentiality and security measures. Rainbet Casino does not sell personal information to third parties for marketing purposes.

Categories of recipients may include:

Payment service providers, banks, card processors, e-wallet providers, cryptocurrency payment processors, and chargeback management services.
Identity verification, document authentication, sanctions screening, politically exposed person screening, and anti-money laundering service providers.
Hosting providers, cloud infrastructure operators, cybersecurity vendors, analytics providers, customer support tools, email delivery services, and data storage providers.
Game software suppliers, platform providers, fraud detection services, and responsible gambling tool providers where such sharing is necessary for account functionality or compliance.
Professional advisers, including lawyers, auditors, accountants, insurers, and compliance consultants.
Regulators, licensing authorities, law enforcement agencies, courts, tax authorities, and other public bodies where disclosure is required or permitted by law.

Some recipients may be located outside Canada, including in jurisdictions that may not provide the same level of statutory privacy protection. Where cross-border transfers occur, Rainbet Casino uses contractual, technical, and organizational safeguards intended to protect the information in accordance with applicable law.

7. Use of cookies and similar technologies

Rainbet Casino uses cookies, local storage, pixels, tags, and similar technologies to operate the website, maintain secure sessions, remember user preferences, measure performance, and detect suspicious activity. Cookies may be placed by Rainbet Casino or by approved third-party service providers acting on its behalf. Certain cookies are essential for login, account security, payment navigation, and fraud prevention.

Cookies may include:

Strictly necessary cookies, which support authentication, load balancing, session integrity, and security controls.
Functional cookies, which remember preferences such as language, region, or interface settings.
Analytics cookies, which help measure page performance, error rates, traffic patterns, and feature usage.
Security cookies, which support bot detection, device recognition, account protection, and abuse prevention.
Advertising or measurement cookies, where used, which are subject to applicable consent and preference requirements.

Users can manage, block, or delete cookies through their browser settings. If cookies are disabled, some website functions may not operate correctly, including login persistence, payment redirection, responsible gambling tools, or account security checks. Browser-based controls may not remove all server-side records associated with a user account.

8. Rights of individuals regarding personal information

Users may have rights under Canadian privacy laws, provincial privacy statutes, or applicable international laws such as the GDPR. The availability and scope of these rights may depend on the user’s location, the legal basis for processing, and whether Rainbet Casino must retain the information for gambling, anti-money laundering, accounting, or dispute resolution purposes. Requests can be submitted to [email protected].

Subject to legal limitations, users may exercise the following rights:

Right of access, including confirmation of whether personal information is held and access to relevant records.
Right to rectification, including correction of inaccurate or incomplete account information.
Right to erasure, where information is no longer required and no legal retention obligation applies.
Right to restriction of processing, where processing is disputed or should be limited pending review.
Right to object to processing based on legitimate interests or direct marketing.
Right to data portability, where technically feasible and legally applicable.
Right to withdraw consent, where processing is based on consent.
Right to complain to a privacy regulator, including the Office of the Privacy Commissioner of Canada where applicable.

Rainbet Casino may request additional verification before responding to a rights request, such as confirmation of account details or identity documentation. Responses are generally provided within 30 days, unless an extension is permitted by law because the request is complex or numerous records must be reviewed.

9. Retention and deletion of personal information

Rainbet Casino retains personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law, licensing conditions, accounting rules, anti-money laundering obligations, dispute handling requirements, and responsible gambling controls. Retention periods vary according to the category of information and the reason it was collected. When information is no longer required, it is deleted, anonymized, or securely archived according to internal retention procedures.

Examples of retention practices may include:

Account records retained for the duration of the account relationship and for a reasonable period after closure to address disputes, chargebacks, or legal claims.
KYC, payment, and anti-money laundering records retained for up to 5 years after account closure or the last relevant transaction, where required by applicable compliance standards.
Security logs retained for shorter operational periods, such as 90 to 180 days, unless needed for investigation or incident response.
Customer support records retained for periods necessary to resolve complaints, evidence consent, or respond to regulatory inquiries.
Self-exclusion and responsible gambling records retained as necessary to enforce exclusion requests and prevent re-registration.

A deletion request may not result in immediate deletion of all records if retention is legally required. In such cases, Rainbet Casino will restrict further use of the retained information to the relevant legal or compliance purpose.

10. Third-party websites and external links

The Rainbet Casino website may contain links to third-party websites, payment portals, game supplier pages, identity verification interfaces, social media pages, or other external services. These third-party services are not controlled by Rainbet Casino when they operate independently and may collect personal information under their own privacy terms. Rainbet Casino is not responsible for the privacy practices, security standards, cookie use, or content of third-party websites.

Users should review the privacy notices and terms of any third-party service before submitting personal information. This is particularly important when using payment services, uploading identification documents through an external verification provider, or following links to responsible gambling resources operated by independent organizations. Leaving foodtoshare.ca may subject the user to different legal terms and data protection practices.

11. Updates to this document

Rainbet Casino may revise this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, operational practices, security measures, technology, or available services. Updated versions will be posted on foodtoshare.ca and will take effect from the date of publication unless a later effective date is stated. Material changes may be communicated through account notifications, email, or prominent website notices where required by law.

Users are encouraged to review this document periodically to remain informed about how personal information is collected, used, disclosed, secured, and retained. Continued use of the services after an update may indicate acknowledgement of the revised terms, subject to any consent requirements that apply under Canadian privacy law or other applicable legal frameworks.