Privacy Policy

Where the record comes from

The current keeps this fact about personal information, and does not add a processor.

One email holds one account. An email already inside self-exclusion cannot open a second account. The password is a hash of at least ten characters with letters and numbers. Five failed sign-ins within fifteen minutes lock the email for fifteen minutes. The session, cookie rvh_sid, ends after thirty minutes without activity or after twelve hours. Reset, if the account exists, puts a one-hour link in the mail log. The confirmation on screen does not reveal whether the email was known.

The file and the status

The current keeps this fact about personal information, and does not add a processor.

The gate asks if you are 18 or older. The registration form asks for a date of birth and refuses a younger date. Neither one looks at an identity document. A file upload, JPG, PNG, or PDF under 8 MB, is stored privately and the status becomes Pending. It starts Unverified. Riverhouse does not flip the status to Verified. No reviewer inside the website does that. A bad file leaves the status alone.

Location and the empty history

The current keeps this fact about personal information, and does not add a processor.

The province on the form is not a location. Real-money casino games are available only to eligible players physically located in Alberta. Riverhouse repeats this because the catalogue is easy to mistake for a lobby that will deal. It will not. A geolocation provider is not connected. The browser is not asked for a position. Being an Alberta resident on paper does not replace that missing provider. Sign-in still works for the account pages. Launch does not. There is no Play control and no practice spin.

Money that is not collected

The current keeps this fact about personal information, and does not add a processor.

Amounts are Canadian dollars. No payment method is connected. The deposit form refuses. The withdrawal form does not create a withdrawal. The balance, which is only the sum of completed ledger rows, does not change. Card numbers and bank details are not taken. Fees and timings are not published. Payment brands are not shown.

The hash, the cookies, the mailbox

The current keeps this fact about personal information, and does not add a processor.

Registration collects name, email, the hashed password of at least ten characters with letters and numbers, date of birth, phone, and a Canadian street, city, province or territory, and postal code. Under 18, the date stops the form. An excluded email stops the form. A duplicate email stops the form. Afterward the date and the email cannot be rewritten in the profile. The gate, separate from all of that, stores a yes in a cookie for 365 days if you confirm you are 18 or older. Clearing the cookie asks again.

How long, and what you can ask

The current keeps this fact about personal information, and does not add a processor.

A limit you save is real on the account even while payments are refused. A stricter deposit limit applies at once. A looser one waits twenty-four hours. Loss limits wait on recorded losses, and nothing is recording. Session limits sign you out. Reality checks show the ledger and offer a stop. Time-out choices are twenty-four hours, seven days, and thirty days. Self-exclusion choices are six months, one year, five years, or no end date. Self-exclusion blocks a fresh withdrawal request and a fresh registration on that email. Riverhouse does not forward the exclusion to a provincial register.

What this policy refuses to invent

What Riverhouse will not invent is a controller's registered office. The server can see an IP. The account stores a hash of it beside a support note or a sign-in, not the address itself. Nothing is sold. No named processor overseas receives a copy. A request for your record goes to privacy@eltacasino.slonik.store and is matched to the account email. Deletion will not lift an exclusion and will not complete itself on the site. Reset tokens last an hour and then are gone.

What the current repeats

Downstream of “Where the record comes from”, the limit is still this. The current keeps this fact about personal information, and does not add a processor.

Downstream of “The file and the status”, the limit is still this. The current keeps this fact about personal information, and does not add a processor.

Downstream of “Location and the empty history”, the limit is still this. The current keeps this fact about personal information, and does not add a processor.

Downstream of “Money that is not collected”, the limit is still this. The current keeps this fact about personal information, and does not add a processor.

Downstream of “The hash, the cookies, the mailbox”, the limit is still this. The current keeps this fact about personal information, and does not add a processor.

Downstream of “How long, and what you can ask”, the limit is still this. The current keeps this fact about personal information, and does not add a processor.

Downstream of “What this policy refuses to invent”, the limit is still this. What Riverhouse will not invent is a controller's registered office. The server can see an IP. The account stores a hash of it beside a support note or a sign-in, not the address itself. Nothing is sold. No named processor overseas receives a copy. A request for your record goes to privacy@eltacasino.slonik.store and is matched to the account email. Deletion will not lift an exclusion and will not complete itself on the site. Reset tokens last an hour and then are gone.