River Rock Online Casino
This Privacy Policy explains how River Rock online casino collects, uses, and protects the personal information of Canadian players who access our online platform. We operate under the Kahnawake Gaming Commission licence and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) along with applicable provincial privacy legislation. If you have questions about how we handle your data, contact details are at the bottom of this page.
1. Who We Are
We operate the online platform available to Canadian players at this domain. Our land-based resort runs separately at 3250 Highway 128, Geyserville, California, under the Dry Creek Rancheria Band of Pomo Indians. For the purposes of this Privacy Policy, "we", "us", and "our" refer to the online platform and its operators. We act as the data controller for all personal information collected through this platform.
2. Information We Collect
River Rock Casino Canada collects two categories of information: what you provide directly, and what we gather automatically.
Information you provide:
- Identity data: Full legal name, date of birth, gender, and government-issued ID details submitted during registration or KYC verification.
- Contact data: Email address, phone number, and residential address.
- Financial data: Payment method details, transaction history, deposit and withdrawal records.
- Account data: Username, password, account preferences, and communication history with our support team.
- Verification documents: Copies of ID, proof of address, and payment method confirmation submitted during the verification process.
Information we collect automatically:
- Device and technical data: IP address, browser type, operating system, device identifiers, and screen resolution.
- Usage data: Pages visited, games played, session duration, clicks, and navigation patterns.
- Cookie data: Data collected through cookies and similar tracking technologies as described in Section 6.
3. How We Use Your Information
River Rock Casino online uses your personal data for the following purposes:
- Account management: To create, maintain, and manage your player account, including processing deposits, withdrawals, and bonus activations.
- Identity verification: To meet our KYC obligations under Kahnawake Gaming Commission requirements and applicable Canadian anti-money laundering legislation.
- Fraud prevention: To detect and prevent unauthorised account access, bonus abuse, and suspicious financial activity.
- Regulatory compliance: To meet reporting obligations to our licensing authority and relevant Canadian regulatory bodies.
- Customer support: To respond to your enquiries, process complaints, and resolve disputes.
- Marketing communications: To send promotional offers, bonus notifications, and platform updates - only where you have given explicit consent or where permitted under applicable law.
- Platform improvement: To analyse usage patterns and improve the performance, security, and design of our platform.
4. Legal Basis for Processing
River Rock Canada processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfil our obligations to you as a registered player - account management, payments, and game access.
- Legal obligation: Processing required to comply with anti-money laundering regulations, licensing conditions, and Canadian privacy law.
- Legitimate interests: Processing for fraud detection, platform security, and internal analytics, where our interests don't override your privacy rights.
- Consent: Processing for direct marketing communications, where you have opted in. You can withdraw consent at any time by contacting us or updating your account preferences.
5. Who We Share Your Information With
River Rock CA does not sell your personal data.
We share it only in the following circumstances:
- Kahnawake Gaming Commission: As our licensing authority, they may request player data for regulatory and compliance purposes.
- Payment processors: Interac, card networks, e-wallet providers, and cryptocurrency processors receive the financial data necessary to complete your transactions.
- Identity verification providers: Third-party KYC services that assist with document verification and fraud screening.
- IT and platform providers: Technical partners who support the operation and security of our platform, bound by data processing agreements.
- Legal and regulatory authorities: Canadian law enforcement agencies, tax authorities, or courts where disclosure is required by law.
All third parties who handle your data on our behalf are contractually required to protect it and use it only for the specified purpose.
6. Cookies and Tracking Technologies
River Rock online casino uses cookies and similar technologies to function correctly and to improve your experience.
Here's what we run:
- Essential cookies: Required for the platform to operate - session management, login authentication, and security functions. These cannot be disabled.
- Analytics cookies: Track how players navigate the platform, which pages perform well, and where technical issues occur. We use this data to improve performance.
- Marketing cookies: Record your activity to deliver relevant promotional content. These only activate with your explicit consent.
- Preference cookies: Store your language, display, and notification settings between sessions.
You can manage cookie preferences through your browser settings or through our cookie consent tool when you first access the platform. Disabling non-essential cookies won't affect your ability to play, but some features may behave differently.
7. Data Retention
River Rock Casino Canada retains your personal data for as long as your account remains active and for a period afterwards as required by law and our licensing obligations.
- Account data: Retained for a minimum of five years following account closure, in line with Canadian anti-money laundering requirements.
- Transaction records: Retained for seven years for financial compliance purposes.
- Support communications: Retained for two years from the date of the last interaction.
- Marketing data: Retained until you withdraw consent or we determine the data is no longer relevant.
When retention periods expire, data is securely deleted or anonymised so it can no longer be linked to you.
8. Data Security
River Rock Casino online apply industry-standard technical and organisational measures to protect your personal information:
- Encryption: All data transmitted between your device and our platform uses TLS encryption. Sensitive stored data is encrypted at rest.
- Access controls: Personal data is accessible only to staff and systems that require it to perform a specific function.
- Monitoring: We run continuous security monitoring to detect and respond to unauthorised access attempts.
- Breach response: In the event of a data breach that poses a risk to your rights, we will notify you and the relevant regulatory authority within 72 hours of becoming aware of the incident, in accordance with PIPEDA requirements.
No system is completely immune to risk. If you suspect your account has been compromised, contact our support team immediately.
9. International Data Transfers
River Rock CA is operated by entities that may process data outside Canada. Where personal data is transferred internationally, we ensure equivalent protections are in place through contractual safeguards, including standard data protection clauses recognised under Canadian privacy law.
Data shared with the Kahnawake Gaming Commission may be processed in the Kahnawake territory, Mohawk Nation. Payment processors and technical partners may operate in various jurisdictions. In each case, we require contractual commitments to data protection standards consistent with PIPEDA.
10. Your Rights
As a Canadian player, you have the following rights regarding your personal data:
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data in your account.
- Withdrawal of consent: Withdraw consent for marketing communications at any time without affecting your account status.
- Complaint: If you believe we've mishandled your data, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
To exercise any of these rights, contact our support team through live chat or email. We will respond within 30 days. In complex cases, we may request additional information to verify your identity before processing your request.
This Privacy Policy was last updated in May 2026. River Rock online casino reviews and updates it periodically - continued use of the platform following any changes constitutes acceptance of the revised version.
