How long does Rainbet keep my KYC documents?

KYC documents and transaction records are kept for 10 years as part of our compliance obligations. This applies to identity documents, proof of address and any source-of-funds records submitted during verification.

What documents does Rainbet ask for during verification?

We use Sumsub for a three-step process requiring a government ID, a selfie holding that ID and, if needed, proof of address or source-of-funds documents. Most accounts only need name, date of birth, nationality, gender and a photo.

How can I raise a concern about how my data is handled?

Concerns can be raised through our complaints process, which acknowledges submissions within 2 business days and gives an initial response within 10 business days. Escalated cases involving the Compliance Manager can take up to 30 days for a final determination.

Rainbet's Approach to Protecting Your Data

Every account at Casino Rainbet is checked through Sumsub's three-step verification before data is stored securely. Our platform uses 128-bit SSL encryption and keeps records for up to 10 years under our compliance framework.

Claim 250% up to £2,100

Privacy Policy and Data Protection at Casino Rainbet

We collect personal data to open and verify accounts, process transactions and meet our legal obligations. At registration we ask for an email address, a unique username and a password; during verification we use Sumsub to check a government ID, a selfie holding that ID and, where required, proof of address or source-of-funds documents. This three-step process applies at account creation and again during certain transactions.

Why we process this data

Our verification steps support anti-money-laundering compliance under the EU 6AMLD, Regulation (EU) 2015/847, FATF recommendations, GDPR and Anjouan AML law. Crypto deposits and withdrawals are additionally screened through Elliptic blockchain analytics, and all accounts pass through PEP, adverse media and sanctions screening against UN, OFAC and EU lists. Transaction monitoring runs on three tiers: automated AI checks, employee review and manual audits.

Data submitted through account registration, deposits and withdrawals on casino rainbet is handled under this same framework, with an annual enterprise-wide risk assessment and annual staff AML training keeping our practices current. Our AML policy is currently version 1.2, updated on 8 April 2026.

What We Collect and How Long We Keep It

The table below sets out the main categories of data we process and the retention periods that apply to each.

Data Type	Purpose	Retention Period
KYC documents and transaction records	Identity verification and AML compliance	10 years
Complaint records	Tracking resolution and escalation	At least 5 years
AML risk assessments	Enterprise-wide compliance review	Reviewed annually

These periods reflect our obligations under the Anjouan AML law and related EU frameworks rather than a fixed company preference, so they apply equally across accounts regardless of where a player deposits or withdraws.

Your Rights and Account Safeguards

Several practical safeguards shape how your data is used and how you can act on it.

Account registration takes under 2 minutes and only asks for an email, username and password at first sign-up, with identity details requested later through Sumsub.
Only the minimum data required is collected unless additional checks are triggered, meaning name, date of birth, nationality, gender and a photo cover most verifications.
Proof of address is checked electronically against two databases first; a utility bill, government letter or bank statement dated within 3 months is only requested if that check fails.
High-risk accounts may undergo enhanced due diligence, which can include temporary restrictions while checks are completed.
Complaints about how your data or account is handled can be raised through our complaints process, with acknowledgement within 2 business days.
Access to your account starts at sign-in, where password recovery is also managed.

Security Measures Behind the Scenes

We apply 128-bit SSL encryption across the platform to protect data in transit between a player's device and our servers. Game outcomes from third-party providers are hosted on the providers' own servers, meaning we cannot alter results or payout settings for those titles, while our own originals run on a provably fair, SHA-256 cryptographic algorithm that lets players verify the seed data of every round.

Our platform also targets WCAG 2.1 Level AA, ADA standards and EN 301 549, and maintains a dedicated accessibility feedback channel for players who encounter barriers using the site. These measures sit alongside our identity checks and AML screening as part of the same overall approach to handling player data responsibly.

Any disputes over how an account was verified or how data was used can be escalated to our Compliance Manager through a dedicated compliance email, with escalated cases taking up to 30 days for a final determination. Details on payment processing linked to this verification are covered separately under payment methods.

Common Questions About Data Protection at Rainbet

How long does Rainbet keep my KYC documents?
KYC documents and transaction records are kept for 10 years as part of our compliance obligations. This applies to identity documents, proof of address and any source-of-funds records submitted during verification.
What documents does Rainbet ask for during verification?
We use Sumsub for a three-step process requiring a government ID, a selfie holding that ID and, if needed, proof of address or source-of-funds documents. Most accounts only need name, date of birth, nationality, gender and a photo.
Does Rainbet screen crypto transactions for security?
Yes, crypto deposits and withdrawals are monitored through Elliptic blockchain analytics alongside PEP, adverse media and sanctions screening against UN, OFAC and EU lists. Transaction monitoring also runs through AI checks, employee review and manual audits.
How can I raise a concern about how my data is handled?
Concerns can be raised through our complaints process, which acknowledges submissions within 2 business days and gives an initial response within 10 business days. Escalated cases involving the Compliance Manager can take up to 30 days for a final determination.

Claim 250% up to £2,100