Rolletto Takes Santeda International Out of Its Privacy Policy and Leaves the Data Controller Unnamed

Three edits, in sections 1 and 6. The rest of the policy, from the five-year retention rule to the NetEnt territory list, reads as it did on 31 August, and the date line was not changed. Rolletto's Terms and Conditions lost their operator and licence paragraph in the same scan.

• The paragraph that named the company is gone. Section 1 used to state "This Privacy Policy explains what personal data we collect from players, why we collect it and how we utilise it." followed by "The website r0lletto.com ("Casino", "Website", “Company”, "We", "Us", "Our") is registered under Santeda International BV Limited by the Curaçao Licensing N.V. and the company incorporated under the laws of Curaçao." and "Registered address: Pareraweg 45, Curacao". All three were deleted and nothing replaced them. The words "Company", "Casino" and "Website" are still used throughout the policy, and nothing in it now says what they refer to.
• The named processor became "the Company". Section 6 now reads "Data processing of your information may be undertaken by the Company or by another company in the group of companies, which may use a third party to fulfill such data processing needs." Before, the first party in that sentence was Santeda International BV. The party that processes player data is now described, not named.
• The staff list was reworded, not widened. In the sentence on which employees can see personal data, "more specifically" before the list became "including" and "as well as" became "and", and the list still ends with "other selected employees". The list of who can see a player's data was open before the edit and is open after it.
• The rights and the retention rule stay. The policy still states "Please note that this Privacy Policy constitutes an agreement between you and the Company." It still keeps data for a minimum of five years from the last transaction or account closure, and still says "In addition, as per Article 77 of the GDPR, you have the right to lodge a complaint related to your data processing to a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of an alleged infringement." A player can still be told that a complaint is possible, by a policy that no longer says who it would be against.

Nothing about what is collected, kept or shared changed. What changed is that the one party with obligations under the policy is no longer identified in it.