Rainbet Privacy Policy

This Privacy Policy explains which personal data Rainbet collects from its players, why the data is processed, how long it is kept and which rights a player has over it. The controller is Rain Group Ltd, registered in Anjouan, Union of the Comoros, which operates the platform under the terms of its licence. The policy applies to the website, the account area and the sportsbook; it is read together with the Terms and Conditions and the Cookie Policy.

The platform is operated by Rain Group Ltd, a company registered in Anjouan, Union of the Comoros, and licensed there for online games of chance. The policy is written in English; where a translation differs, the English text applies. Questions about this policy are answered by the support chat and by e-mail to the privacy address.

Data Collected at Registration and Verification

Opening an account requires an e-mail address and a password; the password is stored in hashed form and is not accessible to anyone in readable text. A username chosen by the player, the preferred currency and the optional telegram handle are stored with the account.

The platform also records the data a player enters voluntarily: the preferred language, the linked telegram account and the answers given in the self-assessment described on the Responsible Gambling page. Where a bonus is claimed, the deposit linked to it is recorded with the transaction history.

Where the Terms and Conditions allow a check, the platform requests identity documents: a government-issued photo document, a selfie with the six digits issued in the verification tab, and a proof of address no older than three months. Where the volume of play justifies it, a document on the source of funds may be requested as well. These documents are stored in a restricted area and are visible only to the staff who review them.

Data Collected During Use

Every deposit, bet, bonus, reward claim and withdrawal is recorded, together with the timestamp, the amount and the game or event it was placed on. The account is linked to the IP addresses and devices used to log in, which serve to enforce the one-account rule and to detect unauthorised access.

Blockchain transactions are public by nature; a deposit or withdrawal made in crypto is visible to anyone who knows the wallet address. The platform does not publish wallet addresses together with names, but a player should be aware that the connection between their wallet and their account may be inferred by others.

Purposes and Legal Grounds

Personal data is processed for the following purposes and on the following grounds.

Purpose	Ground
Operating the account, the cashier and the games	Performance of the account contract
Identity, source-of-funds and fraud checks	Legal obligation (anti-money-laundering, licensing)
Payment processing	Performance of the account contract
Settlement of bets and payment of winnings	Performance of the account contract
Support and dispute handling	Legitimate interest
Marketing and promotions	Consent, withdrawn at any time

Data is not used for automated decisions that produce legal effects; the limits and restrictions described on the Responsible Gambling page are set by the player or applied by staff. Profiling is limited to the detection of fraud, bonus abuse and gambling-related risk patterns, which are reviewed by staff before any restriction is applied.

Who Receives the Data

Personal data is shared only where the purpose requires it, with the following categories of recipient.

• Payment providers and banks that process deposits and withdrawals.
• Game studios that receive the minimum data needed to operate their games.
• Identity-verification providers that review the documents submitted.
• The licensing authority, on request, and the payment networks' fraud services.
• Professional advisers such as auditors and lawyers, bound by confidentiality.
• Analytics providers that receive pseudonymised or aggregated data only.

Some of these providers are located outside the player's country; transfers are made under contractual safeguards. Personal data is never sold.

Retention

Account data and transaction records are kept for five years after an account is closed, which matches the retention period required by the licence. Verification documents are kept for the same period and then deleted, unless a regulator requires longer. Support correspondence is kept for two years.

A request to delete data is carried out within 30 days where no legal obligation requires the data to be kept; where an obligation exists, the remaining data is restricted to storage only. Balances that are pending verification are not released before the check is completed, even where the account has been closed.

Rights of the Player

Every account holder may ask for a copy of the data held about them, ask for it to be corrected, withdraw consent to marketing, ask for the data to be deleted where the law allows, and object to processing based on legitimate interests. Requests are made through the support chat or the privacy e-mail address and are answered within 30 days.

Where a player believes the platform has not respected these rights, they may complain to the licensing authority or to the data-protection authority of their own country. The platform keeps a record of every privacy request and its outcome.

Security and Cookies

Data is transmitted over encrypted connections, and access to the account systems is limited to the staff whose role requires it. Passwords are stored in hashed form, and two-factor authentication can be switched on from the account settings to protect the login. No system can be guaranteed to be immune from attack, but the platform reviews its security continuously.

The site uses essential cookies for the login session and the currency selection, and optional cookies for analytics, which can be refused in the cookie banner without losing access to the account. Full details are set out in the Cookie Policy.

Questions about Privacy

The four questions below cover most of the privacy requests the support team receives.