Privacy policy for Royal Reels 25

RoyalReels25 collects the following data when you use the casino.

Account data. Name, email address, date of birth, residential address, phone number, username, and password. We collect this at sign-up. It is needed to set up your account, verify your identity, and contact you about your account.

KYC documents. Driver's licence, passport, or other government-issued photo ID, plus proof of address (utility bill or bank statement, less than 3 months old) for KYC verification at first withdrawal. We retain these for the AML retention period.

Payment data. Deposit method, deposit amount, withdrawal amount, transaction IDs, and the last four digits of any card used. We do not store full card numbers. These are tokenised by our payment processor. Crypto deposits and withdrawals are recorded by transaction ID on the relevant blockchain.

Gameplay data. Games played, bet sizes, win or loss, session times, bonus claims, and bonus wagering progress. Used for account administration, bonus enforcement, fraud detection, and responsible-gambling monitoring.

Device and session data. IP address, device type, browser, operating system, and session timestamps. Used for security, fraud detection, and troubleshooting.

Cookies. Functional cookies to keep you signed in, remember your language preference, and remember your responsible-gambling settings. We do not set advertising or third-party tracking cookies.

Royal Reels collects data to operate the casino, meet our legal obligations, and protect you.

Operating the casino. Account data and payment data are needed to set up your account, process deposits and withdrawals, and run the games. Gameplay data is needed to apply bonus terms, calculate wagering progress, and detect bonus abuse.

Legal obligations. KYC and AML law requires us to verify your identity, monitor transactions, screen against sanctions lists, and retain records for the AML period. We are required to report suspicious activity to the relevant authorities where the law requires it.

Protection. Device and session data is used to detect fraud, unauthorised access, and problem gambling patterns. Responsible-gambling monitoring is part of our Curacao licence conditions.

RoyalReels25 does not sell your data. We do not share it with advertising networks, data brokers, or social media platforms for marketing. We do not add self-excluded players to any marketing list.

If we change what we collect or how we use it, we update this page and announce the change on the home page for at least 30 days before it takes effect.

the 25 shares your data with the following categories of third parties, all bound by data processing agreements.

Payment processors. For deposits and withdrawals. Includes PayID providers, BPAY, POLi, Visa and Mastercard networks, and crypto payment processors. They see the data needed to route the transaction.

KYC and AML providers. For identity verification and sanctions screening. They see the documents you submit and the data needed to check them against government and international watchlists.

Game providers. For gameplay data (bets, outcomes, bonus progress) so they can run the games and pay out winnings. They do not see your personal identity unless a specific game feature requires it.

Cloud hosting and security providers. For storing and protecting the data on our platform, bound by confidentiality and security obligations.

Regulators and law enforcement. When legally compelled (court order, subpoena, valid request under AU or Curacao law), we disclose data as required. We challenge requests we believe are overbroad or unlawful.

Professional advisers. Auditors, lawyers, and tax advisers bound by professional confidentiality.

Royal Reels does not share your data with advertising networks, data brokers, or social media platforms for marketing.

If Royal Reels is sold or transferred, your data may transfer as part of the asset sale. We notify affected players via the home page and give 30 days to request deletion before the transfer completes.

Royal Reels retains your data for the periods below.

• Account data and KYC documents: 5 years after your last transaction, per anti-money-laundering law. After that, we delete it unless you ask us to delete it earlier.
• Payment transaction records: 5 years per AML law.
• Gameplay data: 5 years per AML law. Used for bonus enforcement, dispute resolution, and responsible-gambling monitoring during the retention period.
• Marketing data: We do not send marketing to self-excluded players. For active players, we retain marketing preferences until you opt out, then delete.
• Server logs: 90 days for security and debugging, then deleted automatically.
• Backups: Encrypted at rest, retained for 12 months on a rolling basis.

After the retention period, data is deleted from active systems within 30 days and from backups within 90 days.

If you ask us to delete your data earlier, we honour the request unless AML law requires us to retain it. We tell you in writing if we cannot honour a deletion request and explain why.

Under the AU Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

• Request access to the personal data we hold about you. We provide a copy within 30 days.
• Request correction if the data is inaccurate, out of date, or incomplete. We correct it within 30 days.
• Request deletion of your data. We delete it within 30 days, unless AML law requires us to retain it.
• Opt out of marketing. We do not send marketing to self-excluded players. For active players, every marketing email has an unsubscribe link.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any of these rights, contact us via live chat or email [email protected] with the subject "Privacy request". We respond within 30 days.

Identity verification is required for data access, correction, and deletion requests. We ask for a copy of your driver's licence or passport, matched to the email address on your account. This protects your data from being released to someone pretending to be you.

For any privacy-related request, contact Royal Reels via:

Live chat. 25/7, linked from the help icon on every page. Subject line: "Privacy request". First response under 3 minutes.

Email. [email protected]. Subject: "Privacy request". Replies within 30 days.

Include your name, the email address on your account, and what you are requesting (access, correction, deletion, complaint). If your request is complex and we need more time, we tell you why and give you an updated timeline.

RoyalReels25 is the AU portal name you will see on data processing notices and regulatory filings. For AU privacy complaints you can also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phone on 1300 363 992. The OAIC is the independent regulator for privacy complaints in Australia.