Riobet Calls Win Information Strictly Confidential, Yet Accepting a Win Is Consent to Use Your Name in Advertising

Riobet's Privacy Policy, headed Appendix 1, describes what the Operator collects and where it goes. It never names the Operator, the company group it shares data with, or the law it is bound by, and its strongest promise to winners is qualified by a sentence in a different section.

• Winnings are confidential. "All information about your winnings, withdrawals, and bonuses is also strictly confidential and stored on protected servers." The next sentence reads "Our company does not disclose information about winnings, unless officially requested to do so by the relevant government authorities." Read alone, a win stays between the player and the casino.
• Accepting a win is consent to advertising. Under Marketing communications: "Please note that by accepting any contest prizes or winnings from us, you consent to the use of your name and any of your personal information for advertising purposes without additional compensation, unless otherwise required by law." No separate opt-in is described. The consent is given by accepting the prize or the winnings, so a player who takes a win is not asked a second time.
• Marketing stops by email, with a set phrase. The policy states "The Operator has the right to send the User notifications about new products and services, special offers and various events." To refuse them, a player writes to support@riobet.com with the note "Refusal of notifications about new products and services and special offers". The policy gives no time for the refusal to take effect.
• Data goes to a group the policy does not name. "We may pass information that you have shared with us to our business partners and other entities within our group of companies." The group includes the parent company, its own parent company and all of their subsidiaries, and data may also go to business partners, suppliers and subcontractors. Details of the third parties that received data so the player could use the service are to be made available to the player. A player can ask who received their data but cannot learn from the document who holds it in the first place.
• A sale of the company is likely to carry the data with it. Riobet does not sell player data, but the policy says that in a merger, an acquisition or a partial acquisition the data is most likely to be included in the sale or transfer, and players are to be told by email before the transfer. Notice comes first, and the policy describes no way to refuse.
• Retention has no length. "After closing your account, our company will retain your personal information for as long as permitted by law." It is to be used only for inquiries into financial and fiscal records, money laundering, fraud or other illegal activity. With no law named anywhere in the policy, the period has no limit a reader can check.
• The listed rights stop short of deletion. A player may contact the Operator to confirm the accuracy of their data, ask how it is used, prohibit its use for marketing and update it. Erasure is not on the list.

The policy promises that information about winnings stays private and that player data is not sold. The two exceptions that matter most come from the act of winning and from a sale of the company.