As a authorized operator in Italy, we collect and look after personal and transactional data under strict legal obligations. This policy outlines exactly how long we keep different categories of information, the legal reasons behind those periods, and the security measures that safeguard your data at every stage. We constantly balance our duty to retain records for fraud prevention and financial audits with the privacy rights you maintain under Italian data protection law and the GDPR. Our schedules get regular reviews so we remain fully compliant.

Regulatory Foundation for Data Retention

Our storage strategy rests on several regulatory requirements that govern gambling operators targeting the Italian market. Anti‑money laundering rules from the Italian Financial Intelligence Unit oblige us to keep transaction logs, identity verification documents and suspicious activity reports for a fixed term after the business relationship ends. Meanwhile, tax rules administered by the Agenzia delle Entrate demand we preserve financial records that support taxable gaming revenue and player winnings. These obligations override any general right to erasure during the mandatory period. For operational data that falls outside a https://www.fanpage.it/attualita/estrazioni-lotto-superenalotto-e-10elotto-sabato-7-settembre-2024-numeri-vincenti-e-quote/ fixed legal window, we use legitimate interest assessments where a valid reason exists, and we provide an opt‑out option unless a compelling legal obligation overrides it.

Consent‑Based Retention

Marketing preferences, newsletter sign‑ups and the behavioural analytics utilised for personalised offers remain only with your explicit consent. You can revoke consent anytime through your account dashboard; once you do, we cease that processing immediately and delete the connected profiles within thirty days. Data processed lawfully before withdrawal is separated from active systems to block further use, but it is not removed retroactively. Consent records themselves are kept for six years as proof of compliance. We never employ this data for anything beyond the activity you agreed to.

Data Removal Procedures

When a data class hits the end of its scheduled retention, our automated lifecycle engine kicks off a secure deletion workflow. First, the data gets digitally detached from production databases. Next, physical storage blocks are overwritten with random data patterns to prevent forensic recovery. Finally, a cryptographically timestamped entry lands in a audit trail, giving auditable proof that purging happened on time. Backup copies refresh every ninety days, so any deleted data disappears from all media within three months. When a litigation hold applies, we pause the deletion workflow only for the affected records, document the hold reason, and restart once the hold lifts.

Information Categories and Retention Periods

We categorize all user data into distinct categories, each linked to a retention schedule that matches its function and legal context it-richroyal.it. That structured approach keeps us from retaining things forever. Every year our Data Protection Officer assesses these categories and adjusts the timelines whenever new guidance comes from the Garante per la protezione dei dati personali. Below you’ll see how long each data type stays in our live systems before being securely anonymised or destroyed. Archived backups operate on a ninety‑day cycle because of technical limitations.

Identity and Fiscal Records

Identity documents you provide during Know Your Customer checks, like passport scans, utility bills and tax ID numbers, remain on file for ten years after you terminate your account, as anti‑money laundering law requires. Deposit and withdrawal logs, payment method tokens and wallet balance histories are held for ten years from the date of each transaction, satisfying both AML requirements and Italian Civil Code limitation periods. We hold these records in encrypted, access‑restricted vaults and tamper‑proof ledgers. Once the retention deadline passes, we strip away all personal identifiers permanently; statistical trends may still be used but never in a way that links back to any individual.

Account Actions and Support Communications

Comprehensive records of game sessions, bets placed, outcomes and session lengths are kept for five years after each gaming event, matching the statute of limitations for civil disputes. Customer service transcripts, email threads and call recordings stay for three years from your last interaction, covering the typical complaint‑handling window. After those periods, raw logs and case attachments get permanently deleted. Aggregated, anonymised datasets can be kept indefinitely for product improvement and service quality analysis. All of this data lives in case management systems with role‑based access restrictions.

Responsible Gambling and Self‑Exclusion Data

Once you enable self‑exclusion, your identity data must be stored permanently in a locked‑down register to stop you from opening new accounts, a measure Italian gambling regulations explicitly permit. Other safer‑gambling markers, like expired voluntary deposit limits, are deleted two years after the limit lifts. We never use self‑exclusion register data for anything other than enforcing the dizionari.corriere.it exclusion. The register is completely walled off from marketing and operational systems, so it serves only its protective purpose.

Policy Changes and User Notifications

We assess this Data Retention Policy every six months and whenever a major legal change affects Italian gambling operations. Minor clarifications go up silently with a revised effective date. Material changes that modify retention periods, include new data categories or shift the legal basis for processing are communicated directly to you by email at least thirty days before they take effect. You’ll also see an in‑platform banner notification when you log in during the notice period. Historical versions are kept and available on request, each with a version number and a validity date range. If an earlier version gave a shorter retention period for certain data, we follow that promise for data collected under that version and apply new terms only going forward.

Individual Rights and Retention Management

When you send an erasure request, our system automatically reviews each data category against its retention schedule. All data past its mandatory window gets deleted without delay. For data still governed by a legal retention obligation, we lock it down right away so it’s removed from active use and kept solely for compliance storage; we inform you which specific law applies and the date deletion becomes possible. Access requests are handled within thirty days and provide a breakdown of what we keep, why, and the scheduled deletion date. If you dispute accuracy, we append a note instead of changing the original record, so the audit trail remains intact. Portability requests are honoured in a structured, machine‑readable format even while data is still in its retention window.

Data Security In Retention

Stored information is protected with AES‑256 encryption at rest, TLS 1.3 protocols in transit and isolated virtual private clouds. Access necessitates multi‑factor authentication plus just‑in‑time privilege elevation that terminates on its own. Every access event is written into an immutable audit trail. We run quarterly penetration tests through CREST‑certified firms and continuous vulnerability scans to maintain our storage tight. Backups are encrypted and spread across Italian data centres, with strict controls that block accidental restoration of data past its deletion date. A dedicated lifecycle dashboard flags every dataset as it nears expiration.

Access Control and Staff Training

Only employees whose roles demonstrably necessitate access to retained personal data get permissions, and those permissions go through monthly recertification audits. Any access to dormant user records prompts a managerial review within one business day. Every staff member who handles personal data completes mandatory annual training on Italian data protection law and our internal retention policies, including hands‑on exercises on spotting valid erasure requests and differentiating the difference between data we must keep under a legal hold and data we can delete straight away.

International Data Transfers and Retention

Our main systems resides inside Italy and the broader European Economic Area. Some ancillary services, like fraud detection platforms and customer relationship tools, may pass certain personal data to countries outside the EEA. In those cases, we make sure an adequacy decision exists or we implement Standard Contractual Clauses in place together with a transfer impact assessment. The retention periods we use to transferred data match those in this policy, and processors are contractually bound to erase or return data when the service ends. We keep a public register of sub‑processors, updated within fourteen days of any change, and we prefer vendors with Italian data centres. Geo‑fencing rules ensure Italian user data inside European boundaries, confirmed through yearly audits.

Partner Program Data Retention

Partner relationship data, including communication data, payment information and commission payment history, is kept for the life of the current agreement plus 10 years after the partnership concludes. This is due to tax duties on commission payments, which require long‑term financial records. Partner performance data and aggregated player referral data get anonymised after half a decade. We explicitly prohibit affiliates from autonomously collecting or storing personal data about referred customers; they obtain only anonymized, aggregated summaries. Our partner contracts include inspection rights to verify compliance, and any infringement is grounds for prompt contract ending and payout forfeiture.

Frequently Asked Questions

Can I request deletion of my data before the retention period ends?

Absolutely, you may lodge an erasure request whenever you wish. We promptly review every data category against its mandatory retention requirement. When no legal hold exists, we remove it quickly. For anything we must keep, we restrict it to storage‑only, tell you the legal basis stopping immediate deletion and give you the expected deletion date. You can also view all your data categories with their scheduled deletion dates through your account dashboard. Such a partial strategy respects your rights within the limits of Italian law.

What happens to my data if I self‑exclude permanently?

Upon enrolling in permanent self‑exclusion, your identity information is transferred to a specialized exclusion register that remains active indefinitely under strictly controlled access. That’s a legal requirement built to prevent you from opening new accounts. Your gaming and transaction history, however, still complies with standard retention schedules and is removed after those periods conclude. The self‑exclusion record is cut off from all marketing and operational systems, so it serves only the protective function it was collected for. No promotional communications will reach you.

How is data from dormant accounts managed?

An account becomes inactive after twelve straight months with no login. At that point, we automatically switch off marketing communications and move the account to a dormant state with reduced processing. The fundamental retention timelines continue based on the initial collection dates, not the inactivity date. This implies that data from a dormant account is still retained for the complete legal period relevant to its category and subsequently erased following our standard protocols. If you come back after a long break, you might need to complete a fresh Know Your Customer check to reactivate. Your data dashboard shows the current status at all times.