1. Introduction
Welcome to rainbowrichesfreespins.uk ("we", "us", "our"). We are dedicated to providing comprehensive information about the "Rainbow Riches Free Spins" slot game by Scientific Games / Barcrest, a reputable and licensed game provider. Your privacy is paramount to us, especially given the sensitive nature of the online gambling industry and our unwavering commitment to responsible gaming. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you visit our website.
We understand that you are entrusting us not only with your personal information but also with your expectation of a fair, secure, and transparent experience. This policy is designed to be clear, transparent, and to demonstrate our unwavering commitment to your privacy and protection, in line with UK data protection laws and Google's high standards for quality YMYL (Your Money or Your Life) content. We aim to build trust by clearly explaining our practices and demonstrating our proactive approach to data protection.
2. Who We Are
3. Key Principles of Our Data Protection
We are committed to the following principles when processing your personal data, ensuring that your rights and interests are always protected:
- Lawfulness, Fairness, and Transparency: We process your data lawfully, fairly, and in a transparent manner, always informing you about our practices.
- Purpose Limitation: We collect your data for specified, explicit, and legitimate purposes related to our website and do not further process it in a manner that is incompatible with those purposes.
- Data Minimisation: We only collect data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. We do not collect unnecessary information.
- Accuracy: We take reasonable steps to ensure your data is accurate and, where necessary, kept up to date.
- Storage Limitation: We keep your data for no longer than is necessary to fulfil the purposes for which it is processed, adhering to legal and regulatory requirements.
- Integrity and Confidentiality: We process your data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using robust technical and organisational measures.
- Accountability: We are responsible for, and must be able to demonstrate compliance with, these principles, and we regularly review our practices.
4. What Personal Data We Collect
As a website primarily focused on providing information about a slot game, we generally collect limited direct personal data. However, we do collect data related to your interaction with our site and, if you choose to engage with features like comments or newsletters (if available), more direct information.
The types of personal data we may collect include:
- Identity Data: Your name, username, or similar identifier (e.g., if you submit a comment, create an account for a forum, or contact us).
- Contact Data: Email address (e.g., if you sign up for a newsletter or contact us).
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data: Information about how you use our website, including the pages you visit, the duration of your visit, search queries, and interactions with embedded content. This may include data related to your engagement with game demonstrations or simulated gameplay features on our site (e.g., anonymous data on stake levels chosen in demo mode, spin history in demo mode, win/loss records in demo mode), purely for analytical purposes to understand user interaction with the game content we present. This data is typically aggregated or anonymised.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
We do not directly collect sensitive personal data (special category data) such as health data, race, ethnicity, religious beliefs, sexual orientation, or biometric data. We also do not collect financial data (e.g., credit card numbers) as we do not process payments directly on this informational site. If you navigate to an external casino, their privacy policy will govern their data collection practices, including financial data.
5. How We Collect Your Personal Data
We use different methods to collect data from and about you, including through:
- Direct Interactions: You may give us your Identity and Contact Data by filling in forms or by corresponding with us by email (e.g., when you subscribe to our newsletter, submit feedback, or contact customer support).
- Automated Technologies or Interactions: As you interact with our website, we will automatically collect Technical Data and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
- Third Parties: We may receive Technical Data from analytics providers like Yandex.Metrica (discussed below) or search information providers.
6. Why We Collect Your Personal Data and Our Lawful Bases
We collect and process your personal data for various purposes, relying on specific lawful bases under the UK GDPR. We ensure that we always have a valid legal reason for processing your data.
- To Operate and Maintain Our Website: To ensure our website functions correctly, to deliver content, and to troubleshoot problems. Lawful Basis: Our legitimate interests (to administer our site, prevent fraud, and provide our services).
- To Understand and Improve User Experience: To analyse how users interact with our site, including engagement with game information and demo versions, to enhance site design, content relevance, and overall user satisfaction. Lawful Basis: Our legitimate interests (to study how customers use our products/services, to develop them, and to grow our business).
- To Communicate With You: To respond to your enquiries, provide customer support, or send you newsletters if you have subscribed. Lawful Basis: Performance of a contract with you (if you request a service), or your consent (for newsletters), or our legitimate interests (to respond to queries).
- For Security and Fraud Prevention: To protect our website and users from malicious activity, fraud, and unauthorised access. Lawful Basis: Our legitimate interests (to prevent fraud and ensure network and information security) and compliance with a legal obligation (if applicable).
- For Legal and Regulatory Compliance: To comply with legal obligations relevant to our operations, such as age verification (if implemented for content access), or other regulatory requirements. Lawful Basis: Compliance with a legal obligation.
- For Marketing Purposes: To send you information about new games, promotions, or related services that may be of interest to you, where you have consented to receive such communications. Lawful Basis: Your consent. You can opt-out at any time.
7. Marketing and Communications
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
- Promotional Offers from Us: We may use your Identity, Contact, Technical, and Usage Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, and offers may be relevant for you. We will only send you direct marketing communications if you have explicitly consented to receive them.
- Third-Party Marketing: We will get your express opt-in consent before we share your personal data with any third party for their own direct marketing purposes.
- Opting Out: You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at [email protected].
8. Cookies and Tracking Technologies (Including Yandex.Metrica)
Our website uses cookies and similar technologies to distinguish you from other users, provide you with a good experience, and allow us to improve our site.
What are Cookies? Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
How We Use Cookies: We use cookies for:
- Strictly Necessary Cookies: Essential for the website to function correctly (e.g., remembering cookie consent preferences).
- Analytical/Performance Cookies: Allow us to recognise and count the number of visitors and to see how visitors move around our website. This helps us improve how our website works, for example, by ensuring users are finding what they are looking for easily.
- Functionality Cookies: Used to recognise you when you return to our website, enabling us to personalise our content for you (e.g., remembering your preferences).
- Targeting Cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.
Yandex.Metrica International Data Transfer
We use Yandex.Metrica for web analytics services. This service helps us understand how users interact with our site, including mouse movements, clicks, and scrolling patterns (often referred to as 'web-visor' functionality). Yandex.Metrica collects information such as anonymised IP addresses, device type, browser information, and pages visited. This data is used solely for the purpose of improving our website's usability, content, and performance.
Please be aware that Yandex.Metrica is operated by Yandex LLC, a company based in Russia. This means that data collected by Yandex.Metrica may be transferred to and processed in Russia, a country for which the UK and EU currently do not have an adequacy decision. We rely on Standard Contractual Clauses (SCCs) as adopted by the European Commission and approved for use in the UK, along with additional technical and organisational safeguards (such as IP anonymisation), to ensure your data receives a level of protection equivalent to that in the UK.
9. Who We Share Your Data With
We may share your personal data with the following categories of recipients, always ensuring that appropriate safeguards are in place:
- Service Providers: We may share data with trusted third-party service providers who perform services on our behalf, such as website hosting, data analytics (e.g., Yandex.Metrica), customer support platforms, and email delivery services. These providers are contractually obligated to protect your data, process it only according to our instructions, and adhere to strict confidentiality agreements.
- Regulators and Law Enforcement: We may disclose your data if legally required to do so, or in response to valid requests by public authorities (e.g., the UK Gambling Commission, the Information Commissioner's Office, or law enforcement agencies) to comply with legal obligations or protect our rights.
- Affiliate Partners: This site participates in casino affiliate programs. This means we may include links to third-party online casinos or gambling operators. If you click on such a link and subsequently register or deposit funds with that third-party site, we may receive a commission. We do not share your personal data directly with these affiliate partners for their marketing purposes without your explicit consent. Your interaction with and data processing by these third-party sites will be governed by their respective privacy policies.
- Professional Advisers: We may share data with professional advisers, such as lawyers, bankers, auditors, and insurers, who provide consultancy, banking, legal, insurance, and accounting services, to manage our business effectively and comply with our legal obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will ensure that the new entity honours this Privacy Policy or provides you with notice of any changes.
10. International Data Transfers
Your personal data may be transferred to, and stored at, a destination outside the UK. This includes the use of Yandex.Metrica, which involves data processing in Russia.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the UK government (an "adequacy decision").
- Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (e.g., UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses).
- Where we use providers based in the US, we may transfer data to them if they are part of a framework that provides equivalent protection to the UK (e.g., the UK Extension to the EU-US Data Privacy Framework, if applicable, and if they are certified under it).
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.
11. Data Security
We have implemented robust and appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. These measures include:
- Technical Safeguards: We use encryption (SSL/TLS) for data in transit, firewalls, intrusion detection systems, and regular vulnerability scanning and penetration testing.
- Organisational Safeguards: We restrict access to personal data to employees, agents, contractors, and other third parties who have a strict business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality. We also provide regular data protection training to our staff.
- Incident Response: We have detailed procedures in place to deal with any suspected personal data breach, including rapid detection, containment, and recovery. We will notify you and any applicable regulator of a breach where we are legally required to do so.
12. How Long We Keep Your Data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.
For example, basic information about users (e.g., contact data for marketing) is kept until you unsubscribe or withdraw consent. Analytics data is typically retained for a maximum of 26 months, or as per the specific analytics provider's policy, before being aggregated or deleted. Server logs containing IP addresses may be retained for security and audit purposes for a limited period, typically up to 12 months.
13. Your Legal Rights
Under UK data protection law, you have the following rights regarding your personal data. We are committed to upholding these rights:
The Right to Be Informed
To be informed about how your personal data is being used (which is what this Privacy Policy aims to do).
The Right of Access
To request a copy of the information we hold about you. This is also known as a Data Subject Access Request.
The Right to Rectification
To request that we correct inaccurate personal data we hold about you.
The Right to Erasure
To request that we delete your personal data, in certain circumstances (e.g., if the data is no longer necessary for the purposes for which it was collected).
The Right to Restrict Processing
To request that we temporarily stop processing your personal data in certain circumstances (e.g., if you contest the accuracy of the data).
The Right to Data Portability
To request that we transfer the data we hold about you to another organisation, or to you, in a structured, commonly used, machine-readable format, where technically feasible.
The Right to Object
To object to our processing of your personal data in certain circumstances, particularly for direct marketing, or where we are relying on legitimate interests.
Automated Decision Making Rights
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
If you wish to exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will respond to all legitimate requests within one month.
14. Responsible Gambling and Player Protection
While rainbowrichesfreespins.uk is an informational site and does not offer direct gambling, we are acutely aware of the risks associated with gambling. We believe in promoting a safe and responsible environment and take our role in providing information seriously. We strongly encourage all users to gamble responsibly if they choose to engage with real money games on external sites.
GamCare
Free, confidential support and information
Freephone: 0808 8020 133
www.gamcare.org.uk
We do not collect personal data related to your gambling habits beyond what is necessary for site analytics (e.g., engagement with demo games, typically anonymised). If you have concerns about your gambling behaviour, please seek help from the organisations listed above.
15. Links to Other Websites
Our website may include links to third-party websites, plug-ins, and applications, including online casinos or gambling operators. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this policy will always indicate when the latest revisions were made. We will notify you of any significant changes by posting the new policy on our website and, where appropriate, by email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.
If you have any questions about this Privacy Policy or our data protection practices, or if you wish to exercise any of your rights, please contact our Data Protection Officer:
Making a Complaint to the ICO
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance. We are committed to resolving any issues you may have.