Roobet Privacy Rules: Casino Data, Security and Account Safety
Privacy, Data Collection and Use
We handle privacy, account security, and verification under clear rules for players in Canada. Personal data is collected only for account management, gameplay support, payments, compliance, and platform protection.
Navigation
Depending on how you use our services, we may process identity details, contact information, technical records, payment data, behavioural activity, and cookie-based preferences. We also use usage data such as device information, IP address, browser details, and location-related signals to help keep access secure.
Data is processed on recognised legal grounds, including consent, contract fulfilment, legitimate interests, and compliance obligations. This supports registration, gameplay, transaction handling, fraud prevention, analytics, and required reporting.
Security Measures for Accounts and Payments
Security starts at sign-up and continues through every login, deposit, withdrawal, and account change. We use encryption for registration records, account activity, and transaction history, while access permissions and logs are reviewed regularly.
Multi-factor authentication helps protect money transfers, and device fingerprints, browser metadata, network identifiers, and geolocation checks can help detect unusual activity. Where needed, payment providers may request extra steps such as video checks or SMS confirmation before sensitive transfers proceed.
For storage, we use segregated systems for personal information, financial records, and authentication logs. Protections can include AES-256 for databases, TLS 1.2+ for data in transit, and encrypted daily backups stored in geo-redundant facilities.
Some session and verification tools are essential because they support authentication, payment integrity, and withdrawal controls. These tools cannot always be disabled without affecting access to key account functions.
Privacy Controls and Player Rights
You can manage marketing, analytics, and tracking preferences through your account settings. Non-essential tracking can be limited, consent can be withdrawn, and browser-level controls can be used for additional restrictions.
Cookie tools help maintain sessions, remember display choices, improve navigation, support customer service, and detect suspicious behaviour. Session identifiers may function only while you are logged in, while other preferences can remain for longer based on their set expiry.
You can also request access to, correction of, export of, or deletion of eligible records. Some information must still be retained where KYC, AML, audit, or financial monitoring duties apply.
| Account Privacy Control | How It Works for Players in Canada | Timing or Access Note |
|---|---|---|
| Cookie and tracking preferences | Players can open Privacy Settings or Privacy Controls from the account dashboard, review categories such as analytics, personalisation, and required session tools, and turn off all non-essential tracking if preferred. | Changes take effect right away, and a "Delete All" option removes non-essential stored data linked to marketing or analytics. |
| Essential session and payment protection | Required tools cannot be turned off because they support session integrity, deposits, withdrawals, authentication, and verification. Short-lived HTTP-only session tokens and authentication tokens help keep balances and account actions secure. | Session identifiers work while logged in, while some cookies remain until their set expiration date unless deleted earlier by the user. |
| Security around logins and transactions | Multi-factor authentication protects money transfers, encrypted identifier storage and real-time monitoring help detect unusual login attempts, and active sessions are monitored for suspicious activity. | If an unusual withdrawal or profile change happens, especially outside the typical United States 1 location, an account may be locked until verification is completed. |
| Data access and export tools | Registered users can request summaries of stored identity information, transaction activity, and communication logs, and can also download transaction reports in formats such as PDF or CSV. | Export History from the main dashboard is available Right Away, while authorised requests for personal records can take For up to 30 days. |
| Identity and account verification | To open an account, players need proof of address, date of birth, and a photo ID. Electronic verification tools may check this information with trusted third-party databases to confirm eligibility and help prevent duplicate accounts. | Payment companies may request extra checks such as video verification or SMS codes for sensitive transfers. |
| Storage, encryption and backups | Personal information, financial records, and authentication logs are kept in segregated systems with separate access controls. Protection includes AES-256 for databases, TLS 1.2+ for data in transit, and encrypted daily backups stored in geo-redundant facilities. | Only authorised staff with verified roles can access sensitive records, and regular audits review encryption, backup routines, and unauthorised access logs. |
| Retention and deletion requests | Retention follows legal and operational rules: payment data is generally kept for up to 7 years, behavioural and technical data is normally retained up to 5 years, and cookies follow their own expiration dates. Verified users can also request deletion, subject to AML and financial monitoring obligations. | Stored identification documents can be reviewed in 15 days, and after approved deletion work is completed, users receive an email confirming what was removed and what must still be retained for legal reasons. |
| International transfers and Canadian rights | Roobet may transfer personal data outside Canada for operational needs, using protections such as Standard Contractual Clauses and safeguards consistent with Canadian standards. Canadian users can request correction, data portability, objection to certain processing, and withdrawal of consent for marketing. | The policy is effective as of June 2025, with the latest revision dated June 2025, and material updates are announced prominently to registered users where appropriate. |
KYC and AML Verification Rules
Verification is part of how we protect both accounts and the platform. We check identity details such as name, date of birth, and address, and we may conduct PEP and sanctions screening or request source-of-funds information where necessary.
Our AML and CFT controls include internal policies, KYC checks, transaction monitoring, governance, training, and reporting. We use internal and external monitoring tools to assess gameplay patterns and financial transactions for unusual activity.
We also appoint a Money Laundering Reporting Officer to oversee AML procedures, review controls, and investigate suspicious cases. Employees receive mandatory annual AML training so consistent standards are applied across support, operations, and compliance.
Where suspicious activity is identified, reporting protocols apply and cooperation with relevant authorities may follow. This approach supports lawful operation under licence 8048/JAZ2021-031 and keeps privacy practices aligned with security and financial integrity.
For players in Canada, this means clearer consent tools, stronger login protection, traceable account actions, and defined rights over stored data. If you want to review your settings or request a record, you can do so through your account controls and support options.