Rivox Privacy Policy

This Privacy Policy explains how Rivox (“we”, “our”, “us”) handles personal information about players in Australia. It should be read together with our Terms and Conditions and Cookie Policy. By opening an account or using our services, you acknowledge the practices described below.

Data Controller and How to Contact Our DPO

Rivox is the operator of this website and the entity responsible for determining how your personal information is handled. Our practices are designed to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). They also reflect the conditions of our operating licence and the gambling and anti-money-laundering rules that apply to our services. Where we refer to “legal bases”, we do so to explain our purposes transparently, even though the APPs are framed differently from the GDPR.

Our Data Protection Officer (DPO) oversees privacy compliance and acts as the point of contact for players and regulators. You can reach the DPO at [privacy email address] or by writing to the Data Protection Officer at the registered address shown on our website. Please include your account username so we can verify and answer your enquiry efficiently.

Personal Data We Collect

We collect only the information reasonably necessary to operate your account and meet our legal duties. This includes:

Identity data: name, date of birth, nationality and identification documents.
Contact data: email address, residential address and telephone number.
Financial and payment data: card or e-wallet details, bank account information, deposits, withdrawals and source-of-funds documents.
Gameplay and transaction data: games played, stakes, wins, bonuses, limits and account activity.
Device, IP and geolocation data: IP address, browser type, device identifiers, operating system and approximate or precise location.
Marketing preferences: your consent choices, communication settings and responses to our offers.

We also keep records of your communications with customer support. Information obtained from third parties, such as verification providers, receives the same care as information you give us directly.

Why We Use Your Data and Our Legal Bases

We process personal information only for defined purposes, each supported by a legal basis or equivalent justification:

Creating your account, providing games and processing payments: performance of our contract with you.
Identity, age and fraud checks and responsible gambling monitoring: compliance with legal obligations and licence conditions.
Security, fraud prevention, analytics and service improvement: our legitimate interests, balanced against your rights.
Direct marketing, non-essential cookies and optional features: your consent, which you may withdraw at any time.
Handling disputes, complaints and legal claims: legal obligation and legitimate interests.

Under the APPs, we collect sensitive information only with your consent or where the law permits or requires it. We do not use your information for purposes you would not reasonably expect, and we will seek fresh consent where a new purpose requires it.

KYC and AML Verification

As a regulated gambling operator, we are required to know who our players are. We therefore verify your identity, age, source of funds and location, including through geolocation checks, before and during your use of our services. This may involve reviewing identity documents, proof of address and bank statements. It may also involve screening against sanctions, politically exposed person and fraud databases.

This data is processed to meet anti-money-laundering and counter-terrorism financing obligations, age restrictions and our licensing requirements. We may request further documents at registration, before a withdrawal, or when account activity triggers a risk review. If you cannot complete verification, we may restrict, suspend or close your account. In certain circumstances we are legally obliged to report suspicious activity to the relevant authorities, and we may be prohibited from telling you.

Cookies and Tracking Technologies

We use cookies, pixels, local storage and similar technologies to operate our website and understand how it is used. They fall into several categories:

Strictly necessary cookies, which enable log-in, security and fraud prevention and cannot be switched off.
Functional cookies, which remember language, display and responsible gambling settings.
Analytics cookies, which help us measure performance and improve our games and user experience.
Marketing cookies, which measure campaigns and tailor offers and are used only with your consent.

You can manage your preferences through our cookie banner or your browser settings, although disabling certain cookies may affect functionality. Cookie names, purposes and durations are set out in our Cookie Policy, which we review regularly. Device and IP data collected through these technologies may also be used to detect multiple accounts, bonus abuse and unauthorised access.

Data Sharing and International Transfers

We do not sell your personal information. We disclose it only to trusted recipients where necessary:

Payment providers and banks, to process deposits and withdrawals.
KYC and verification vendors, to confirm identity, age and location.
Regulators, law enforcement and other authorities, where required by law or our licence.
Game providers and technology suppliers, who receive limited data to deliver games and maintain integrity.
Affiliates and marketing partners, who receive limited, non-sensitive data and only where you have consented.

Some recipients are located outside Australia. Before disclosing information overseas, we take reasonable steps under APP 8 to ensure recipients protect it consistently with the APPs, using contractual clauses, due diligence and technical safeguards. All service providers act under written agreements that limit their use of your data to our instructions.

Security, Storage and Retention

We protect personal information using encryption in transit and at rest, secure network architecture, firewalls, intrusion monitoring and regular security testing. Access is restricted on a need-to-know basis through role-based permissions, multi-factor authentication and activity logging, and our staff receive ongoing privacy training. No system is completely secure, so please protect your login details and tell us promptly of any suspected unauthorised access.

We keep personal information only as long as needed for the purposes described. Account and gameplay data is generally held while your account is active and for a limited period afterwards. AML, financial and transaction records are retained for the period mandated by law, typically around seven years. Marketing data is kept until you withdraw consent. When information is no longer required, we securely destroy or de-identify it.

Your Rights, Marketing Choices and Complaints

Under the Privacy Act you may request access to, and correction of, the personal information we hold. Where practicable, we also consider requests for erasure, portability, objection to processing and withdrawal of consent, although some data must be retained by law. To exercise these rights, email our DPO. We will verify your identity, acknowledge your data subject access request promptly and generally respond within 30 days.

You can opt out of marketing at any time using the unsubscribe link, your account settings or customer support. Essential service and regulatory messages will continue.

If you are dissatisfied, please contact our DPO first. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Last updated: 15.10.2026. We may amend this policy from time to time, and we will notify you of material changes through our website or by email.