Privacy Policy

This Privacy Policy explains how Richard Casino, operated via the website richardbet-au.com, collects, uses, stores, and shares your personal information. It applies to players, registered account holders, and all visitors who access or use richardbet-au.com or related mirror domains, whether they browse the site, open an account, deposit or withdraw funds, place bets, or contact our support team. By using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective and deemed current as of February 2026 and replaces all earlier versions published on richardbet-au.com.

Who We Are

Data Controller

Operator: Hollycorn N.V.
Registered address: Scharlooweg 39, Willemstad, Curaçao
Company registration number: 144359 (Curaçao)
Gaming licence: 8048/JAZ2019-015 issued by Antillephone N.V. (Curaçao)

Payment Processing Subsidiary

Entity: Libergos Ltd
Registered address: Cyprus
Company registration number: ΗΕ 371971
Role: Processing of certain fiat payments (including Visa/Mastercard) on behalf of Hollycorn N.V.

Brand and Website

Brand name: Richard Casino
Casino project name: Richard Casino
Official website for Australian players: https://richardbet-au.com
Licence validator: Antillephone N.V. validation page

Data Protection Contact

Primary privacy and complaints email: [email protected] (for privacy inquiries, data subject requests, and player complaints)
External regulator email (gaming disputes): [email protected] (Antillephone N.V. - primarily for gambling-related disputes, not general privacy matters)
Postal contact for privacy matters: Data Protection Officer, Hollycorn N.V., Scharlooweg 39, Willemstad, Curaçao

For the purposes of EU data protection law, Hollycorn N.V. acts as the "data controller" of your personal data. For Mexican data subjects, Hollycorn N.V. is a private data controller under the principles reflected in Mexican data protection law. For Australian users, Hollycorn N.V. is an offshore operator that processes data in line with applicable laws and the standards described in this Privacy Policy.

What Personal Data We Collect

We collect and process different categories of personal data when you visit richardbet-au.com, register an account, use our services, or communicate with us. The exact data collected depends on your interaction with our services and your device settings.

Identification and Contact Data

Basic identification data: full name, date of birth, gender (if provided), nationality, residential address, and country of residence.
Contact data: email address, phone number, preferred language, and any other details you voluntarily provide through forms or communications.
Verification data (KYC/AML): copies of identity documents (passport, ID card, driver's licence), proof of address (utility bill, bank statement), payment instrument ownership proofs, and other documents required for compliance checks.

Account and Behavioral Data

Account data: username, password hash, security questions/answers, account settings, communication preferences, and account status (active, self-excluded, closed).
Gameplay and betting data: game selections, stakes, wins and losses, bonus usage, wagering contributions, jackpots, tournament participation, and timestamps of gaming sessions.
Interaction data: clicks, navigation paths, page views, time spent on pages, referring URLs, and interactions with banners, offers, and emails (opens, clicks, unsubscribes).

Technical and Log Data

Device information: device type, operating system, browser type and version, screen resolution, device identifiers where available, and language settings.
Network data: IP address, approximate geolocation derived from IP, internet service provider, and connection timestamps.
Log data: login attempts, password reset events, changes to account settings, consent changes, transactional logs, and security events (e.g., failed login attempts, suspected fraud flags).

Payment and Financial Data

Transaction data: deposit and withdrawal history, amounts, currencies (including AUD), payment methods used, payment reference numbers, and transaction timestamps.
Payment instrument data: limited card details (such as masked card number and expiry date) or e-wallet identifiers. Full card details are normally processed by our payment providers and not stored by us in plain form.
Anti-fraud data: risk scores, chargeback information, and sanctions or watchlist checks where required by law or payment partners.

Cookies and Similar Technologies

Cookies: small text files placed on your device (session and persistent cookies) to remember your preferences, maintain sessions, and analyse website use.
Similar technologies: web beacons, pixels, tags, and local storage used for analytics, personalisation, and marketing measurement.
Third-party tracking: analytics and advertising partners may place their own cookies or trackers to provide aggregated usage statistics, prevent fraud, and deliver personalised or contextual advertising where permitted.

We generally do not seek to collect sensitive personal data (such as health data), but your behavioural and transactional data may indicate responsible gambling risks. Where applicable, we may process such inferred data to protect you and comply with responsible gambling and anti-money laundering obligations.

Legal Basis for Processing

Our processing of personal data is based on several legal grounds, depending on the context and applicable laws (including principles aligned with the GDPR, Mexican privacy law, and relevant Australian privacy expectations).

Contractual Necessity

Account creation and management: We process your identification, contact, and account data to open and maintain your player account, verify your eligibility (e.g., age and location), and provide customer support.
Provision of gaming services: We process gameplay, betting history, and technical data to deliver casino games, manage sessions, calculate wins/losses, assign bonuses, and provide tournaments and promotions.
Payments: We process payment and financial data to accept deposits, process withdrawals, handle refunds, and manage payment disputes.

Compliance with Legal Obligations

KYC/AML requirements: To comply with anti-money laundering (AML), counter-terrorist financing, and "know your customer" (KYC) obligations in relevant jurisdictions (including Curaçao and, where applicable, regulations impacting payment processing in Cyprus or other countries), we verify your identity, monitor transactions, and retain records for legally mandated periods.
Responsible gambling: We may process data relating to your betting behavior to detect potential problematic gambling patterns and apply tools such as limits, cooling-off periods, or self-exclusion.
Tax and regulatory reporting: We process and store transaction data and other records as required by licensing and tax authorities.

Legitimate Interests

Service optimisation and analytics: We analyse aggregated and pseudonymised data to improve the performance, usability, and content of richardbet-au.com (e.g., page design, game offering, mobile compatibility).
Security and fraud prevention: We process technical, log, and transactional data to prevent, detect, and investigate fraud, abuse of bonuses, hacking, money laundering, and other misuse of our services.
Business interests: We may process data for internal reporting, risk management, audits, and potential corporate transactions, in a manner that respects your rights and freedoms.

Consent

Marketing communications: We send email and other electronic marketing communications (including promotional offers, newsletters, and personalised bonuses) only where you have consented or where permitted by applicable law. You may withdraw consent at any time by using the unsubscribe link or contacting us.
Optional cookies and tracking: Where required by law or good industry practice, we rely on your consent for non-essential cookies (e.g., advertising or advanced analytics cookies) through banner choices or browser settings.

When we rely on legitimate interests, we balance those interests against your rights and expectations. Where local laws (such as GDPR or Mexican privacy regulations) impose stricter standards, we adapt our processing and legal bases accordingly.

Purpose of Processing

We process your personal data only for specific, explicit, and legitimate purposes. These purposes include, but are not limited to, the following:

Provision and Operation of Casino Services

Account lifecycle: creating, maintaining, and closing your account; verifying your identity and age; verifying your location where relevant; and managing self-exclusion or other responsible gambling tools.
Gameplay and betting: enabling you to play games, place bets, access bonuses, join tournaments, and track your gaming history.
Payments: processing deposits and withdrawals, handling currency conversion, and managing payment verification and disputes.

Service Improvement and Personalisation

Analytics: understanding how players use richardbet-au.com to improve navigation, game selection, device optimisation, and site stability.
Personalised content: tailoring displayed games, bonuses, and recommendations based on your previous activity and preferences, where allowed by law and your preferences.

Marketing and Promotions

Direct marketing: sending promotional messages about Richard Casino offers, tournaments, and features via email or other channels where you have not opted out.
Campaign measurement: measuring the effectiveness of marketing campaigns and affiliates, including which promotions are redeemed, to improve our offers.

Security, Fraud Prevention, and Legal Compliance

Fraud and abuse control: monitoring for unusual patterns, multiple accounts, bonus abuse, and payment fraud; verifying device and IP information.
Regulatory compliance: fulfilling AML/KYC, responsible gambling, and licensing obligations; maintaining records for inspections or regulatory queries.
Legal claims: managing and defending legal claims, enforcing our Terms and Conditions, and cooperating with law enforcement and regulators when lawfully requested.

Disclosure & Sharing

We do not sell your personal data. However, we may share your data with carefully selected third parties for the purposes described in this Privacy Policy and only to the extent necessary.

Group Companies and Payment Processors

Group entities: Hollycorn N.V. and its wholly owned subsidiary Libergos Ltd (Cyprus) may access and process your data as part of providing and supporting payment services and other operational functions.
Payment partners: banks, card schemes (e.g., Visa, Mastercard), e-wallet providers, and other payment service providers process your payment data to execute deposits and withdrawals, perform fraud screening, and comply with financial regulations.

Service Providers (Processors)

IT and hosting providers: companies providing data hosting, cloud infrastructure, backup, and security services.
Analytics and performance providers: tools that help us understand how our site is used and improve performance (e.g., web analytics, error monitoring).
Marketing and communications providers: email service providers, customer relationship management tools, and marketing platforms used to deliver permitted communications and manage preferences.
Identity verification and anti-fraud providers: third parties that help verify your identity, check sanctions lists, detect fraud, or assess risk.

Regulators, Authorities, and Dispute Resolution

Gaming regulators and dispute bodies: Antillephone N.V. and related bodies may receive relevant data in the context of licence compliance or dispute resolution involving richardbet-au.com.
Public authorities: law enforcement, courts, and government bodies may receive your data when we are legally required or permitted to disclose it (e.g., to investigate fraud, money laundering, or other offences).
Data protection authorities: where necessary to respond to a regulatory investigation or complaint under GDPR, Mexican privacy laws, or other applicable frameworks.

Affiliates and Advertising Partners

Affiliate partners: we may share limited data (e.g., anonymised or aggregated conversion data) to verify affiliate referrals and commission payments.
Advertising networks: subject to your consent and local law, we may allow advertising or analytics partners to collect data via cookies or similar technologies to measure campaigns or show relevant advertising.

Whenever we share your data, we require recipients to implement appropriate security measures and to process your data only in accordance with our instructions and applicable law.

International Transfers

Because Hollycorn N.V. operates internationally, your personal data may be transferred to and processed in countries outside your country of residence. These countries may have different data protection standards from those in your home jurisdiction.

Locations of Processing

Curaçao: primary location of Hollycorn N.V. where core operational and compliance activities occur.
Cyprus: location of Libergos Ltd, which processes certain payment-related data.
Other countries: our service providers (hosting, analytics, email, KYC, etc.) may be located or may store data in the European Union/EEA, the United Kingdom, and other jurisdictions, including potentially outside the EEA and Mexico.

Safeguards for International Transfers

Contractual safeguards: when transferring personal data from the EEA/UK to countries not deemed to have an adequate level of protection, we aim to use appropriate safeguards such as European Commission-approved Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.
Organisational and technical measures: we apply consistent security controls (encryption, access restrictions, and internal policies) across our operations to protect your data regardless of location.
Mexican data subjects: where Mexican privacy law applies, we handle cross-border transfers in line with its principles, including informing you about the transfers and applying appropriate safeguards.

By using richardbet-au.com, you acknowledge that your data may be processed in countries outside your own, as described above. We implement reasonable measures to ensure that such transfers comply with applicable laws and that your data remains adequately protected.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet legal, regulatory, accounting, or reporting requirements, and to resolve disputes. Retention periods may vary depending on the category of data and applicable law.

General Retention Rules

Active accounts: while your player account is active, we retain your data for the entire duration of the relationship.
After account closure: once your account is closed, we generally retain core account, transactional, and verification records for up to five (5) years or longer where required by AML/KYC or other regulations.

Category-Specific Retention

Identification and KYC data: typically retained for 5 - 10 years after the end of the business relationship or the date of the last transaction, depending on applicable AML and financial regulations.
Transaction and betting data: retained for at least 5 years after account closure to comply with regulatory and accounting obligations and to address possible disputes.
Technical and log data: retained for shorter periods, generally between 6 and 24 months, unless needed for security investigations, legal proceedings, or ongoing disputes.
Marketing data: retained until you withdraw consent or object to processing, after which we will cease marketing communications and keep a minimal record of your opt-out request.

Deletion and Anonymisation

Deletion: when data is no longer required, we securely delete or destroy it.
Anonymisation: in some cases, we may anonymise data (so it can no longer be linked to an identified or identifiable person) for statistical, analytical, or business purposes. Anonymised data may be retained for longer periods.

Where you exercise your rights to erasure under applicable law (such as GDPR or Mexican privacy law), we will comply to the extent that such rights do not conflict with our legal obligations to retain certain records.

Your Rights

Depending on your place of residence and the laws that apply to our processing of your data, you may have a range of rights regarding your personal data. We aim to respect and, where feasible, align our practices with the rights provided under the EU General Data Protection Regulation (GDPR), Mexican privacy law (including the Federal Law on Protection of Personal Data Held by Private Parties), and relevant Australian privacy principles.

Core Data Subject Rights

Right of access: you can request confirmation whether we process your personal data and receive a copy of the data we hold about you, along with information on how we use it.
Right to rectification: you can request correction of inaccurate or incomplete personal data. In many cases, you can update basic details directly in your account settings.
Right to erasure ("right to be forgotten" / cancellation): you may request deletion of your personal data where there is no overriding legal basis for us to continue processing it (e.g., where data is no longer necessary or you have withdrawn consent and no other legal basis applies). Mexican ARCO "cancellation" rights and GDPR erasure rights are taken into account, subject to legal retention requirements.
Right to restriction of processing: in certain cases (e.g., while we verify contested data or objections), you may request that we restrict the processing of your data rather than deleting it.
Right to object: you may object to processing based on our legitimate interests, including profiling related to such interests, and we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is required for legal claims.
Right to data portability: where technically feasible and legally required (e.g., under GDPR), you may request a structured, commonly used, and machine-readable copy of certain personal data you have provided to us and ask us to transfer it to another service provider, where applicable.

Marketing and Cookie Rights

Withdrawal of consent: where we rely on your consent (e.g., for email marketing or certain cookies), you may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Marketing opt-out: you can opt out of marketing communications by following the unsubscribe link in emails or by contacting us. We may still send non-promotional messages (for example, about changes to our terms or policy updates).
Cookie controls: you can manage cookie preferences via your browser settings and, where offered, our internal cookie management tools.

Procedures for Exercising Your Rights

Submit a request: send an email to [email protected] clearly stating:
- your full name and username;
- the right(s) you wish to exercise (e.g., access, rectification, erasure, restriction, objection, portability);
- details of the data or processing in question.
Identity verification: to protect your data, we may ask you to provide additional information or documentation to verify your identity and ensure the request originates from the account holder.
Response time: we aim to respond to your request within 30 days of receipt. For complex or numerous requests, this period may be extended in accordance with applicable law, and we will inform you of any extension and reasons.
Cost: we generally handle requests free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with applicable legal standards.

These rights operate alongside any rights you may have under Australian privacy law and Mexican ARCO rights. If you are unsatisfied with our response, you also have the right to lodge a complaint with an appropriate data protection authority (see "Complaints & Contacts" below).

Cookies & Tracking Technologies

Cookies and similar technologies help us provide a secure and high-quality experience at richardbet-au.com. They are used to remember your choices, keep you logged in, analyse usage, and support marketing and affiliate programs.

Types of Cookies We Use

Session cookies: temporary cookies that exist only while your browser is open. They are essential for core functionality, such as maintaining your login session and keeping items in your balance while you navigate the site.
Persistent cookies: cookies stored on your device for a defined period after your browser is closed, used to remember your preferences (e.g., language, login choice) and to help us recognise returning users.
First-party cookies: set directly by richardbet-au.com to support essential functions and provide analytics.
Third-party cookies: set by service providers such as analytics platforms or advertising partners that help us measure performance, detect fraud, and, where permitted, deliver tailored promotions.

Purposes of Cookies

Strictly necessary/functional: required for the website to operate correctly (e.g., login, security, form submissions). These cannot normally be disabled without affecting functionality.
Analytics and performance: help us understand how players use the site, which pages are most visited, and how site features perform, enabling improvements.
Advertising and marketing: used to track the effectiveness of campaigns, affiliates, and promotions, and, where allowed, to tailor marketing messages.

Managing Cookies

Browser settings: you can manage or delete cookies through your browser settings. You may choose to block some or all cookies; however, doing so may impact your ability to use certain features of richardbet-au.com.
Internal tools: where available, our site may provide cookie or privacy settings that allow you to opt in or out of certain categories of cookies.

For further details on specific cookies used by richardbet-au.com, please refer to any dedicated cookie notices made available on the site, if applicable.

Data Security

We apply technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. While no system can guarantee absolute security, we continually work to reduce risks to a reasonable level in line with industry standards.

Technical Measures

Encryption in transit: data transmitted between your browser and our servers is protected using up-to-date transport layer security (TLS 1.2 or higher), helping prevent interception.
Encryption at rest: sensitive data elements are stored using encryption and/or other appropriate pseudonymisation techniques, where technically feasible.
Access controls: access to production systems and data is restricted to authorised personnel based on role and necessity, using strong authentication methods and, where possible, multi-factor authentication.

Organisational Measures

Policies and training: staff handling personal data are trained on privacy and security obligations and are bound by confidentiality commitments.
Vendor due diligence: third-party processors are selected and monitored based on their ability to provide appropriate security and privacy protection.
Security reviews: we perform periodic reviews, vulnerability assessments, and other checks to identify and mitigate potential security risks.

Incident Response

Detection and response: we maintain processes to detect security incidents, investigate their scope and impact, and take remedial actions.
Notification: where required by applicable law (e.g., GDPR, Mexican privacy law, or the Australian Notifiable Data Breaches scheme if engaged), we will notify relevant authorities and affected individuals without undue delay following the discovery of a qualifying data breach.

We aim to align our security controls with recognised international standards such as ISO 27001 and SOC 2 where appropriate, although we do not claim formal certification unless explicitly stated on richardbet-au.com.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise your data protection rights, you have several contact and escalation options.

Contacting Us

Email (primary): [email protected] - for privacy inquiries, data subject requests, and general or gaming-related complaints.
Postal address: Data Protection Officer, Hollycorn N.V., Scharlooweg 39, Willemstad, Curaçao.
Website: you may also find additional contact options or forms on https://richardbet-au.com, where available.

Internal Complaint Procedure

Submit your complaint: send us a detailed description of your concern (including your username, relevant dates, and any supporting evidence) via email or post.
Acknowledgement: we will endeavour to acknowledge receipt of your complaint within a reasonable time, typically within a few business days.
Investigation: our team, in cooperation with the responsible personnel (including data protection and compliance staff), will investigate the matter and may request additional information if needed.
Response: we aim to provide a substantive response within 30 days of receiving your complaint. For complex matters, this period may be extended as allowed by law, and we will inform you of any extension and reasons.

External Escalation - Data Protection Authorities

If you are not satisfied with our response or believe that your data protection rights have been violated, you may have the right to lodge a complaint with a relevant supervisory authority, for example:

European Union / EEA residents: your local data protection authority, particularly in your habitual residence, place of work, or place of alleged infringement (for example, authorities in an EU Member State).
Mexico: the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), which oversees compliance with Mexican data protection law. For contact details and procedures, consult INAI's official website.
Australia: the Office of the Australian Information Commissioner (OAIC) may accept complaints concerning privacy infringements where Australian privacy law applies. For more information, see the OAIC's official website.

External Escalation - Gaming Regulator

Licensee and regulator: Hollycorn N.V. operates under licence number 8048/JAZ2019-015, issued by Antillephone N.V. in Curaçao.
Licence validation: you can verify our licence via the validator link.
Regulator contact for gaming disputes: if your complaint relates specifically to gaming operations and cannot be resolved with us, you may contact Antillephone N.V. at [email protected]. Please note that this channel primarily addresses gambling-related disputes rather than general privacy matters.

Using these external channels does not affect any other rights or remedies you may have under applicable laws.

Updates

We may revise this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry practices. The most current version will always be available on richardbet-au.com.

Notification of Changes

Last updated notice: the top of this Privacy Policy indicates when it was last updated (currently February 2026).
User notifications: for material changes, we will take appropriate steps to inform you, which may include:
- email notifications to your registered email address;
- prominent notices or banners on richardbet-au.com;
- alerts or messages within your account dashboard (where available).

Advance Notice and User Choices

Advance notice: where changes significantly affect your rights or how we use your data, we will endeavour to provide notice at least 30 days before the changes take effect, unless immediate changes are required by law or for security/compliance reasons.
Your options: if you do not agree with a revised Privacy Policy, you may choose to stop using our services and request account closure. Continued use of richardbet-au.com after the effective date of the updated policy will constitute your acknowledgement of the changes.

We recommend that you review this Privacy Policy periodically to stay informed about how Richard Casino, via richardbet-au.com, protects and processes your personal data.