How Rarawin Handles Your Data

What we collect at registration, cashier and KYC stages, who receives it, and how to make an access or deletion request at [email protected].

Rarawin Casino Privacy Policy

Mwali Gaming Services Ltd as Data Controller

The controller of personal data collected through rarawin.app is Mwali Gaming Services Ltd, the operator of Rarawin, with its registered address at Hamchako Business Centre, Mutsamudu, Autonomous Island of Anjouan, Union of the Comoros. The company operates under an iGaming licence from the Anjouan Offshore Finance Authority. All references to we, us and our in this policy mean that company, and all references to you mean the person who registers and plays.

Cookies, Analytics and Processing Purposes

We process your data to create and run your account, take deposits and pay out withdrawals, verify your identity, meet anti-money-laundering (AML) obligations under our licence, prevent fraud and multi-accounting, answer support requests and, only where you opt in, send promotional messages. The legal bases are performance of the contract you accept at registration, our legal obligations, our legitimate interest in securing the platform, and your consent for marketing and non-essential cookies.

Cookies fall into three groups. Essential cookies keep you signed in and protect the cashier, and they cannot be switched off. Functional cookies remember settings such as your accepted cookie notice. Analytics cookies show us which pages are used so we can fix broken ones. You can decline non-essential cookies in the cookie notice, and you can delete or block any cookie in your browser settings at any time, though blocking essential ones stops the login from working.

Personal Data We Collect and Where It Is Stored

At registration we collect your name, email address, date of birth, country and password. In the cashier we record the payment method, transaction amounts and dates, and for cards only the details our payment partners pass back to us. For KYC we hold your passport, Australian driver’s licence or Medicare card, and a utility bill or bank statement as proof of address. Server logs record your IP address, device type, browser and the pages you visit.

Our servers and those of our game and payment partners are located outside Australia, so your data is transferred to and processed in other jurisdictions, including the Union of the Comoros. Transfers are limited to the providers named in this policy and to what each of them needs to do its job.

Third Parties Receiving Your Data

We share data only where a service cannot run without it. Payment details go to Visa, Mastercard, Skrill, Neteller, Paysafecard and the banks handling transfers, and to the Bitcoin and USDT networks for crypto transactions, which are public by design. Game sessions are exchanged with Pragmatic Play, Evolution Gaming, Spribe, Hacksaw Gaming, Thunderkick, Nolimit City, BGaming and Ezugi, which receive your player ID and session data but not your identity documents. KYC documents are reviewed by our own compliance team. We disclose data to authorities when the law requires it, and we do not sell personal data.

Retention and Account Closure

We keep account and transaction data while your account is open. When you close it, we delete data we no longer need, but we retain identity records, transaction history and correspondence for the period our AML obligations require, and the support desk confirms the exact period on request. Marketing consent ends the moment you withdraw it, and support logs are deleted once the query and any related complaint are closed.

Your Data Rights

You may ask to access the data we hold about you, correct inaccurate details, delete data we no longer need a lawful reason to keep, restrict or object to processing, and receive your data in a portable format. Requests are answered by email, and we may ask you to confirm your identity first so that nobody else can obtain your file. Objecting to marketing takes effect immediately, while deletion of KYC records is subject to the retention rules above.

Where to Take a Privacy Complaint

If our reply does not resolve your concern, you may complain to the privacy authority where you live, which for Australian residents is the Office of the Australian Information Commissioner. You may also raise it with the Anjouan Offshore Finance Authority, which licenses our operation. We ask that you contact us first so that we can try to fix the problem directly.

Sending Us a Data Request

Send access, correction, deletion and objection requests to [email protected] from the email address registered on your account, and state the right you wish to use. Our inbox is monitored around the clock and first replies arrive within approximately four hours, although a full response to a complex request may take longer.