What Info Does Rizk Collect?
The primary type of information Rizk obtains is the data you provide directly. This happens when you interact with various site features. For instance, when you register and verify a Rizk account, you may need to submit identity documents such as a passport, national ID card, or driver’s licence.
Some data is sent to Rizk automatically. This can include your IP address, operating system, the device you use to access Rizk, crash logs (if the site or app fails while you’re using it), and similar technical details.
Rizk only occasionally obtains information about you from third parties. For example, the platform might request client-related details from its payment processors when necessary to meet AML and KYC requirements.
Legality of Processing Your Data
One legal basis for Rizk to collect your information is the contract you enter into when registering. Additionally, Rizk is subject to anti-money laundering and know-your-customer obligations imposed by its licence—such as the Malta Gaming Authority (MGA) authorisations—which permit the platform to process certain personal and payment data.
How Rizk App Uses the Collected Data
Why does Rizk collect this information? The platform uses it to:
- Verify your eligibility to use the app: the Rizk application needs to confirm you meet the minimum age requirement (at least 20 years old for New Zealand customers) and reside in an eligible jurisdiction;
- Fulfil legal obligations: Rizk must perform AML and KYC checks in line with its licence conditions, which can involve processing payment and identity data;
- Provide support: if you report a technical issue, details about your device, system, or transactions can help Rizk’s support team troubleshoot and resolve it;
- Improve Rizk: by collecting and analysing how you interact with the platform, Rizk can enhance its performance and overall user experience;
- Promote responsible gambling: by monitoring play patterns and time spent on the site, Rizk’s specialists can better identify potential signs of gambling-related harm;
These and other points in the Privacy Policy may be updated from time to time. If changes occur, Rizk will notify you and provide access to the updated information.
Sharing Your Personal Data
Under Rizk’s Privacy Policy, the platform may share your personal data with certain parties. This can include other companies within the Rizk group and third-party service providers such as payment processors, game suppliers, and technical partners.
Rizk may also disclose your information to regulators, law enforcement agencies, government bodies, courts, fraud prevention organisations, licensing authorities, and relevant self-regulatory entities when required for compliance with AML, KYC, or other legal obligations.
How Rizk Protects Your Data
The platform holds a significant amount of sensitive information that requires robust protection. To ensure this, Rizk employs strong encryption. Standard TLS (Transport Layer Security) is used when you transmit your data and while it is stored on Rizk’s systems.
In addition to encryption, Rizk implements conventional network security controls. These include firewalls, intrusion prevention systems and network segmentation, all of which are monitored and maintained following industry best practices. To strengthen network defence, Rizk has a dedicated team that continuously monitors security systems, event logs, notifications and alerts across its infrastructure to detect and manage threats.
Furthermore, Rizk restricts access to your information. Only a small number of authorised company employees, contractors and agents can view the data you provide.
Data Retention
You can delete certain information you’ve shared with Rizk at any time; some data may be removed automatically; the remainder is retained for periods determined by Rizk. Why is this necessary? Most commonly, it’s to comply with legal obligations that require Rizk to carry out AML and KYC procedures (both of which rely on your data).
Your Rights Towards Your Shared Data
Here are some of your main rights regarding your personal information shared with Rizk:
- To know what personal information Rizk holds about you;
- To correct any information that is inaccurate or misleading;
- To request that Rizk delete all data about you if it is no longer necessary for processing, you have a legal basis for deletion, your data has been processed unlawfully, etc.;
- To request that Rizk restrict the processing of your information;
- To lodge a complaint with your local data protection authority.
If you wish to exercise any of these rights, send a relevant request to [email protected].