Privacy Policy at Richyfish Casino

This policy explains what personal data we collect when you play at Richyfish Casino, why we process it, how long we hold it and what rights you have over it. It applies to every visit to richy-fish.org.uk and to all account activity on our platform.

Data We Collect From You

We collect only the data we need to open your account, verify your identity, process your payments and meet our regulatory duties as a licensed operator.

Some of this data you give us directly, some we generate when you use our services, and some we receive from verification and payment partners.

• Identity data: your name, date of birth, email address, phone number and residential address.
• Verification documents: a photo ID, proof of address and evidence of your payment method, collected under our KYC requirements before your first withdrawal and processed within 48 hours.
• Transaction data: deposits, withdrawals, bet history, bonuses claimed and winnings, including amounts in GBP, EUR, USD or cryptocurrency.
• Technical data: your IP address, device and browser type, operating system and pages you visit on our mobile-optimised site.
• Gameplay behaviour: the games you play, session length, betting patterns and win or loss history, which we use for responsible-gambling monitoring.
• Marketing preferences: your choices about promotional emails, SMS and bonus offers, and whether you hold our welcome bonus or VIP status.

Why We Use Your Information

Every processing activity we carry out serves a defined purpose. We do not sell your data, and we do not use it for anything unrelated to running our casino.

Protecting you and the integrity of our platform sits behind much of what we do. Fraud prevention and anti-money-laundering checks run continuously, and our responsible-gambling tools, including deposit limits, session reality checks and GamStop integration, depend on accurate behavioural data to flag risks early.

• Creating and managing your player account, including VIP club membership from Minnow to Whale tier.
• Verifying your identity, age and payment method under our MGA licence obligations.
• Processing deposits and withdrawals and handling disputes over transactions.
• Detecting fraud, bonus abuse, underage gambling and money laundering.
• Monitoring play for signs of harmful gambling behaviour so we can intervene and offer support through GamCare and BeGambleAware.
• Sending marketing and promotional offers where you have consented, and honouring your right to opt out at any time.
• Meeting legal, tax and regulatory reporting duties in every jurisdiction we serve.

Our Legal Bases

Contract. To open an account, verify you and pay out your winnings, we must process your data to perform the agreement you enter when you register. Without it, we cannot operate your account.

Legal obligation. Our MGA licence (MGA/B2C/491/2022) obliges us to run KYC checks, monitor transactions for money laundering and keep gambling records for at least 5 years. We cannot switch these duties off, and they apply even after you close your account.

Legitimate interest. We rely on this basis to secure our platform, prevent fraud and bonus abuse, and improve our games and services. We weigh our interest against your rights and never use this basis for marketing.

Consent. Marketing communications and non-essential cookies reach you only with your consent. You can withdraw that consent at any time through your account settings or the unsubscribe link in every message, and withdrawal never affects the lawfulness of earlier processing.

Data Retention Schedules

We keep each category of data only as long as the purpose requires or the law demands, then we delete or anonymise it.

Gambling regulations require us to retain transaction and verification records for a minimum of 5 years after account closure. Marketing data, by contrast, survives only until you ask us to stop, and technical logs roll off our systems on fixed schedules.

Sharing With Third Parties

We share your data with a limited set of partners, each bound by contract to process it only for the purpose we specify and to protect it to the same standard we apply ourselves.

We never sell your personal data, and we do not share it for third-party advertising beyond the processors listed in our cookies policy.

• Payment processors handling your Visa Debit, Mastercard Debit, Trustly, e-wallet and cryptocurrency transactions.
• KYC and AML providers who verify your documents and screen transactions against sanctions lists.
• Game and platform providers whose slots and live tables you play, receiving your username and gameplay activity only.
• The Malta Gaming Authority and other regulators or law-enforcement bodies where disclosure is legally required.
• Analytics and hosting services that help us run and improve the site.
• Professional advisers such as auditors and lawyers, strictly on a need-to-know basis.

Your Rights Over Your Data

UK and EU data protection law gives you enforceable rights over your personal data, and we answer every request within one month of receiving it and proof of identity.

To exercise any right, contact our data protection officer at [email protected] or our support team at [email protected]. Where we refuse a request, for example an erasure claim that conflicts with our 5-year regulatory retention duty, we will explain why within the same one-month window.

• Access: get a copy of the personal data we hold about you, including your gameplay and transaction history.
• Rectification: correct data that is inaccurate or incomplete.
• Erasure: ask us to delete data where no legal requirement forces us to keep it.
• Portability: receive your data in a structured, machine-readable format or have it sent to another operator.
• Objection: object to processing based on legitimate interest, including profiling for fraud detection, which we then weigh against your request.
• Withdrawal of consent: stop marketing and non-essential cookies at any time without affecting your account.
• Complaint: escalate to the Information Commissioner's Office at ico.org.uk or, in the EU, to your national data protection authority.

Cookies and Tracking

Our site uses essential cookies to keep you logged in and secure, plus analytics and optional marketing cookies that run only with your consent. When you first visit, a consent banner lets you accept or reject each category, and you can change your choices at any time from the cookie settings link in the footer.

For the full list of cookies, their purposes and their lifespans, read our dedicated Cookies Policy page on this site.

Keeping Your Data Secure

We encrypt your data in transit with TLS and at rest in our data stores, restrict access to staff who need it for their role, and log every access for audit. Verification documents sit in segregated storage with the strictest controls we operate, and payment card details never touch our servers, since our PCI-DSS-certified processors handle them directly.

If a breach ever affects your personal data and creates a risk to you, we notify the relevant supervisory authority within 72 hours of confirming it and inform you directly where the risk is high. If you suspect any security issue on your account, change your password and contact our 24/7 live chat support immediately.

We review this policy whenever our processing changes and republish it on this page, with the update date shown as 2026.

Frequently Asked Questions

Can I delete my account and all my data?

You can close your account at any time through support. Verification, transaction and gambling records must then be retained for at least 5 years under our MGA licence conditions; everything else is deleted on closure.

How long does a data access request take?

We respond within one month of receiving your request and proof of identity. You will get a copy of the personal data we hold, including your gameplay and transaction history.

How do I stop marketing emails from Richyfish Casino?

Use the unsubscribe link in any message or switch off marketing in your account settings. We stop sending offers immediately and keep only a record of your consent withdrawal for 3 years.

Do you share my data with advertisers?

No. We never sell your personal data and do not share it for third-party advertising. Data goes only to the payment, verification, provider, regulator and analytics partners listed in this policy.

Who do I contact about a privacy concern?

Email our data protection officer at [email protected]. If you are unhappy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.