How F1 Casino handles personal data
F1 Casino, operated by RSO Limited, decides why and how the personal data of its members is processed. The policy applies from 9 October 2026, the date of its publication on the site. Employees and authorised third parties who handle the data are bound to keep it confidential, and questions can be sent to [email protected].
What we receive when you register and verify
At registration and verification we may collect:
- name, surname and contact details;
- date of birth and age verification details;
- IP address and location data;
- device and browser information;
- identity verification documents requested under KYC.
Only people aged 18 or over, or of the age of majority where they are located, may register. We may ask for extra documents to check age and suspend an account in the meantime. Under KYC the documents we may request are an identity document, address verification, a selfie and additional financial documents. Until KYC is complete, withdrawals may be stopped and the account restricted. Some of the data can also be checked through third-party verification and security service providers.
What we use it for
| Purpose | What it covers | Data mostly involved |
|---|---|---|
| Identity and security | Verifying who you are, preventing fraud, securing the platform | Identity documents, date of birth, IP and location |
| Legal compliance | Anti-money-laundering and KYC checks required by law | Identity documents, account activity |
| Service improvement | Platform performance, user experience, service quality | Device and browser data, usage data |
| Communication | Account information, security alerts, service updates | Contact details |
| Marketing | Campaign, bonus and promotion notices, where you have consented | Contact details, consent record |
| Legal processes | Protecting our rights and meeting legal duties in disputes | Account activity, betting history |
The legal bases we rely on are performance of the contract, compliance with legal obligations, legitimate commercial interests and your consent where it is required.
What is recorded while you play and pay
Account activity covers deposits, withdrawals and betting history. Continuous transaction monitoring detects suspicious behaviour, and an account with unusual activity can be reviewed or restricted, with further documents requested within KYC.
For crypto transactions we may use third-party blockchain analysis tools to evaluate transaction history, wallet risk score and possible illegal activity. A transaction with a wallet flagged as high risk can be rejected or placed under review, and we may ask for a source of funds explanation. Player handles can appear in public feeds such as live bet tables, challenges and raffle winner lists, so do not put personal details into a username.
Cookies on the site
| Cookie type | Use | Can you refuse it? |
|---|---|---|
| Essential | Session, security verification and basic site functions | No |
| Performance and analytics | Pages visited, session time, click behaviour, traffic sources, collected anonymously | Yes |
| Functional | Language, region and game settings | Yes, but settings may reset |
| Marketing and advertising | Interest profile and ad frequency, including third-party ad providers | Yes |
Session cookies disappear when the browser is closed, while persistent cookies stay until their set period ends or you delete them. You can control or block cookies in your browser settings. Cookies set by third parties follow those parties’ own policies, over which we have no direct control. Where an advertising cookie builds an interest profile, it can also be used by third-party ad providers such as search engines, so review their privacy policies separately.
Data in referrals and competitions
The Refer a Friend programme works on registrations of invited people, and only genuine, verified registrations count; fake accounts or manipulation cancel all winnings. Raffle entries, Challenge results and tournament placings are linked to the player handle and to real-money bets on the account, because tickets are earned only with real money. VIP status, tier progress and birthday rewards are calculated from the betting volume and the date of birth held in the membership details.
Who receives the data and where it is processed
- Affiliated group companies, on a limited basis, to carry out the service.
- Service providers: payment systems, KYC providers and technical infrastructure services.
- Authorities, where a competent authority requests the data under the law.
- A new owner or structure, if the company is sold, merged or restructured.
Shared data is processed only as far as needed and under confidentiality principles. Data may be processed in secure data centres in different countries, in line with international data protection standards.
What happens to the data when an account closes
We retain data for the period required by legal obligations and may delete or anonymise it afterwards. When an account is closed, data that is not subject to a legal retention duty may be deleted. Self-exclusion and addiction support requests are handled in confidence, and marketing communications stop when you self-exclude.
Exercising your rights
Your rights apply to the data listed above, including contact details, documents, device data and betting history. You may ask to access your personal data. Access can be limited where a legal obligation requires it, and if we refuse a request we give you the reasons.
- Write to [email protected] from the address registered on the account, or ask live support, which is open around the clock.
- State what you want: access, deletion of data that is not subject to a retention duty, or a correction.
- Expect identity checks. We may need to confirm that the request comes from the account holder before releasing anything.
- If we decline, we explain the reason. A complaint can then go to the competent supervisory authority.
Security that you share with us
We apply technical, administrative and physical measures to protect data. The security of your own device remains your responsibility, and we recommend logging out securely. Information that you post on social media or in other public places is treated as made public by you. Documents that are incorrect or false can lead to closure of the account, and the funds can be seized, as set out in our verification rules.