rabona Privacy Policy: How the Operator Collects, Uses and Protects Player Data
This independent review page breaks down the privacy practices rabona documents for players registering from Hungary. The operator, Rabidi N.V., processes personal data under its Curaçao (Antillephone N.V.) licence 8048/JAZ, and the analysis below explains exactly what that means for your identity documents, payment records and browsing data.
Introduction: Data Protection Commitment and GDPR Alignment
rabona states that it processes player data in line with the EU General Data Protection Regulation (GDPR), even though the operating company Rabidi N.V. is registered in Curaçao (Scharlooweg 39, Willemstad, registration number 151791) and holds an offshore licence rather than a Hungarian SZTFH concession. The GDPR commitment is not merely cosmetic: EU-facing payment processing runs through TILAROS LIMITED (HE 406322), a Cyprus-registered entity, which places the operator’s transactional data flows squarely inside the EU regulatory perimeter. For Hungarian players, this means standard GDPR rights — access, rectification, erasure, restriction and objection — apply to the data held on the account. The platform has operated since 2019, so the privacy framework described here reflects several years of established practice rather than a newly drafted policy.
What Data Does rabona Collect?
rabona collects three categories of data: personal identification details submitted at registration and KYC, transactional records tied to deposits and withdrawals, and technical data such as IP addresses and cookies gathered automatically during sessions. Each category serves a distinct legal and operational purpose, detailed below.
Personal Identification Data
At registration, the operator requests the standard identity set: full name, date of birth, email address, residential address and phone number. Before the first withdrawal can be approved, rabona requires KYC verification through the “ELLENŐRZÉS” (Verification) menu, where the player uploads a photo of a valid ID (personal identity card, passport or driving licence), proof of address (a utility bill or bank statement) and proof of the payment method used (a bank card photo or an e-wallet screenshot). This documentation is mandatory — withdrawals remain locked until verification clears.
Transactional Data
Every deposit and withdrawal leaves a data trail. Given that rabona supports Visa and Mastercard bank cards, Skrill, Skrill 1-Tap, NETELLER, MiFinity and Jeton Wallet e-wallets, paysafecard, Revolut, Rapid Transfer, Klarna and bank transfer, the operator processes card references, wallet identifiers and transaction histories across a wide range of fiat rails. Cryptocurrency transactions (Bitcoin, Bitcoin Cash, Ethereum, Litecoin, Ripple, Dogecoin, USDT, USDC) generate wallet address records as a secondary option alongside the fiat-first payment structure. Accounts are maintained in HUF, with a minimum deposit of 6 000 HUF, and all of these movements are logged for accounting, anti-money-laundering and dispute-resolution purposes.
Technical Data: Cookies and IP Addresses
The platform automatically records IP addresses, device and browser type, session timestamps, pages visited and gameplay activity. Cookie identifiers support login persistence, language preferences (including the Hungarian interface) and traffic analysis. This technical layer is standard for a platform offering slots, live casino, table games, game shows and progressive jackpots from providers such as Evolution, Pragmatic Play, Play’n GO, NetEnt, Microgaming, Pragmatic Play Live, BGaming and InOut, since session integrity must be maintained across thousands of simultaneous game connections.
Purposes of Data Processing
Service Provision
Account data exists primarily to run the service: settling bets, crediting winnings, applying the welcome offer (100% match bonus up to 150 000 HUF with 200 free spins, x35 wagering on slots within 21 days, activated with promo code RABOVIP and a minimum 6 000 HUF deposit) and enforcing its terms — for instance, the rule that Skrill and NETELLER deposits do not trigger the welcome bonuses, or the 1 250 HUF maximum bet per spin while a bonus is active. Without transactional and identity data, none of these mechanics could be administered or audited.
Verification and Security
KYC data underpins anti-money-laundering controls, age verification (minimum age 18) and fraud prevention. The operator cross-checks the payment method used against the verified account holder, which is why a bank card photo or e-wallet screenshot is part of the document set. Payout routing — whether a Skrill or NETELLER withdrawal processed within 1–4 hours according to the operator, or a bank transfer taking longer — only proceeds after this security layer is satisfied.
Marketing Communication
With consent, rabona uses contact details for promotional emails and bonus notifications. Marketing processing is separate from service processing: players can opt out without affecting their account, and the opt-out mechanism is described in the user rights section below.
Data Sharing: Third Parties and Legal Obligations
rabona shares data with a defined circle of recipients. Payment processors — including TILAROS LIMITED for EU payment services and the individual providers behind Visa, Mastercard, Skrill, NETELLER, MiFinity, Jeton Wallet, paysafecard, Revolut, Rapid Transfer and Klarna — receive the minimum data needed to execute transactions. Game suppliers such as Evolution (whose Lightning Roulette is a flagship title on the site) receive session data required to run live tables. Beyond commercial partners, the operator discloses data where legally compelled: regulatory requests under the Curaçao 8048/JAZ licence framework, court orders and AML reporting obligations. Data is not sold to unrelated third parties, according to the operator’s documented policy.
Data Security: Encryption and Access Controls
The operator documents SSL/TLS encryption for all data in transit between the player’s device and its servers, covering login credentials, uploaded KYC documents and payment details. Internally, access to personal data is restricted to personnel whose roles require it — compliance officers handling verification, payment staff processing withdrawals, and support agents resolving account issues. Uploaded documents such as the ID photo and utility bill are stored in secured systems rather than general-access environments. As with any offshore-licensed operator, players should weigh these documented measures against the absence of Hungarian SZTFH oversight; the GDPR framework via the Cyprus payment entity provides the primary enforceable protection layer.
User Rights: Access, Deletion, Correction and Marketing Opt-Out
Under the GDPR-aligned policy, Hungarian players hold the following rights, exercisable through customer support or the account interface:
- Right of access: request a copy of the personal data the operator holds, including registration details and transaction history.
- Right to rectification: correct inaccurate data such as a changed residential address — relevant because the address on file must match the proof-of-address document at KYC.
- Right to erasure: request account and data deletion, subject to retention obligations. Transaction and identity records tied to AML rules may be retained for the legally mandated period even after account closure.
- Right to restriction and objection: limit processing in disputed cases and object to marketing profiling.
- Marketing opt-out: unsubscribe via the link in promotional emails or by adjusting communication preferences in the account settings; this does not affect service-related messages such as withdrawal confirmations.
Cookie Policy: Types and Management
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly necessary | Login sessions, account security, bet settlement | No — required for the platform to function |
| Functional | Language (Hungarian interface), currency display in HUF, preferences | Yes, via browser settings |
| Analytical | Traffic measurement, page performance, navigation patterns | Yes, via cookie banner or browser |
| Marketing | Bonus promotion relevance, campaign attribution | Yes, via cookie banner or browser |
Players manage cookies through the consent banner shown on first visit or through browser controls. Blocking strictly necessary cookies prevents login and gameplay, including access via the Android APK or PWA app versions; blocking analytical and marketing cookies has no impact on core functionality.
Contact for Privacy Questions
Data protection requests — access copies, deletion, rectification or complaints — go through rabona’s customer support channels, which route privacy matters to the operator’s compliance function under Rabidi N.V. Players should submit requests from the email address registered on the account so identity can be matched against KYC records. For context on the operator’s broader corporate structure, see: about rabona. Related policies are covered here: rabona terms and conditions and rabona responsible gambling.
Frequently Asked Questions About rabona
What data does rabona collect?
rabona collects identity data (name, date of birth, address, email, phone), KYC documents (ID photo, utility bill or bank statement, payment method proof), transactional records across all deposit and withdrawal methods, and technical data including IP addresses, device information and cookie identifiers gathered during sessions.
How does rabona protect my data?
The operator documents SSL/TLS encryption for all transmitted data, restricted internal access limited to staff whose roles require it, and secured storage for uploaded KYC documents. EU-facing payment processing runs through Cyprus-registered TILAROS LIMITED, placing transactional data under GDPR protections.
Can I request deletion of my data?
Yes. Players can request account and data erasure through customer support. However, rabona may retain transaction and identity records for the period mandated by anti-money-laundering obligations under its Curaçao licence, even after the account is closed.
Does rabona use cookies?
Yes. The platform uses strictly necessary cookies for login and bet settlement, functional cookies for language and HUF currency preferences, plus analytical and marketing cookies. Non-essential cookies can be disabled via the consent banner or browser settings without affecting gameplay.
Players who have reviewed the privacy framework and want to see how the platform handles their data in practice — from the 6 000 HUF minimum deposit to KYC-gated withdrawals — can register through the link below.