Privacy Notice

Version published: 1.0

Effective date: January, 2025

This document, herein referred to as the "Privacy Notice," outlines the privacy practices governing the collection and processing of Personal Data, as well as other relevant information, when you access or use the Services and Website (https://runa.casino/), regardless of the device (such as a computer, mobile phone, tablet, etc.) that you employ.

The Data Controller (as defined below and “we”, “us” or “our”) responsible for processing your Personal Data, as outlined in this Privacy Notice, is:

The company is authorized to conduct online gaming and entertainment activities within the legal framework established in Costa Rica.

As we are operating in Costa Rica, we comply with Law No. 8968 – Protection of the Person Concerning the Processing of Their Personal Data (Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales) and its implementing regulations (Executive Decree No. 37554-JP). These laws establish your rights regarding your Personal Data and our obligations as a Data Controller.

Additionally, we adhere to the principles of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) to ensure compliance with international privacy standards.

By using our Services, you acknowledge that you have read and understood this Privacy Notice. If you have any questions or concerns, please contact us at: [email protected].

1. DEFINITIONS

In this context, the subsequent terms are defined as follows:

Data Controller means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.

Personal Data means any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.

Services mean services provided by us as described in the relative Terms and Conditions of the Website.

2. Handling of your Personal Data

Information you provide to us: To register an account and utilize our Services, we will politely ask you to provide specific information. This information is necessary for the provision of our Services (for example, your email address is required for account creation). It is important to note that if you do not provide the necessary information, we will be unable to offer our Services to you. We may handle the following types of Personal Data:

Category of Personal Data	Types of Personal Data
Account Information	When you sign up, we ask for your name, username, email address, and password, which are essential for setting up your account
Payment information	The mentioned details are necessary to facilitate payment collection for the Services. Our payment processing partners handle basic billing information for payment processing and refund requests (such as purchase date, full name of the credit card owner, credit card details, etc.).
Communications	We utilize your email address and communications to address your requests or queries.

We gather certain information automatically:

Access logs	Similar to the majority of websites online, our Website gathers access logs (including IP address, browser type, operating system) to guarantee the secure, dependable, and resilient functioning of our Services.
Tracking Technologies (Cookies)	Cookies are typically small text or image files that are placed on your device when you visit our Website. Some cookies are necessary for the smooth operation of our Website, while others are used to enhance functionality, analyze aggregated usage statistics for improving performance, and support advertising efforts.
Usage Data	Information about how you use our Website and Services.

Tracking Technologies (Cookies)

In addition to any Personal Data that you choose to submit through the Website, we may use a variety of tracking technologies, including cookies, that passively collect certain information whenever you interact with the Website. This type of usage information may include the device you are using, your IP address, device ID, anonymous traffic data, other unique identifiers, location, all of the areas within our Website that you visit, what content you are interested in or interact with, and the time of the visit.

Types of Cookies we may use:

Necessary Cookies	These cookies are necessary for allowing users to navigate around our Website and access features.
Functional Cookies	These cookies allow the Website to offer enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have included on our pages. If you do not allow these cookies, some or all of these services may not work properly.
Marketing Cookies	These cookies are used to deliver content that is more relevant to you and your interests. They may be used to deliver targeted advertisements as well as help measure the effectiveness of an advertising campaign.
Performance Cookies	To provide functionality to the Website and help us deliver our Services.

Here is a list of links which will help you to understand how to manage your cookies preferences:

3. Purposes for which we process Personal Data and the legal bases on which we rely

We collect and process your Personal Data (including, where legally permissible, special categories of Personal Data) for the following purposes and relying on the following legal bases:

Purpose	Description	Legal basis
Managing our customer and user accounts	We process your Personal Data (including Usage Data) to manage customer and user accounts generally, such as billing, customer correspondence and customer relationship management	Necessary for the performance of a contract or our legitimate interest in the management of customer and user accounts.
Providing our Website and Services	We process your Personal Data to operate and administer our Website and to provide you with the content you access.	Our legitimate interest in providing online content to our customers and prospective customers regarding our Service offering
Managing payments	We process your Personal Data to verify that information and to collect payments to the extent that doing so is necessary to complete a transaction	Necessary for the performance of a contract.
Maintaining our security	We process your Personal Data (including your Usage Data) for the purposes of maintaining your own security, including investigating, detecting and preventing suspicious activity, fraud and cybercrime.	Our legitimate interest in promoting the safety and security generally and to protect our rights and the rights of others.
Conducting market research, analysis, and customer surveys. Improving and personalizing the user experience.	We collect your Personal Data in order to meet the goals set out in surveys and marketing promotions	Consent (if required under applicable law) and Legitimate interest (for instance, to create promotions you may be interested in)
Handling contact and user support requests.	We process your Personal Data, if you fill out a “Contact Us” web form or request user support, or if you contact us by other means.	Necessary for the performance of a contract or our legitimate interest in fulfilling your requests and communicating with you.

4. Who do we share Personal Data with

We may share your Personal Data as follows:

Service providers: With our contracted service providers, who provide services such as IT and system administration and hosting, credit card processing, research and analytics, marketing, customer support and data enrichment for the purposes and pursuant to the legal bases described above.
Professional advisers: In individual instances, we may share your Personal Data with professional advisers acting as service.
Public authorities: With public and government authorities, to the extent we are compelled to disclose Personal Data to comply with our legal obligations.
Third parties involved in a corporate transaction: If we are involved in a merger, reorganization, dissolution or other fundamental corporate change, or sell a Website or business unit, or if all or a portion of our business, assets or stock are acquired by a third party. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of Personal Data.

5.Cross-Border Transfers Of Personal Data

We have the ability to store, access, and transfer Personal Data worldwide. We evaluate cross-border data transfers and put in place suitable measures to ensure the protection of your Personal Data in accordance with the guidelines outlined in this Privacy Notice.

Measure	Description
Adequacy decision	If your Personal Data is transferred to countries outside the European Economic Area (EEA), we ensure the recipient country has received an adequacy decision from the European Commission. For more information about adequacy decisions, click here.
Appropriate safeguards	To transfer personal data to recipients lacking an adequacy decision, we may utilize standard contractual clauses that have been approved by the European Commission or other legally recognized transfer mechanisms. For more information about standard contractual clauses, click here.

6. Your rights relating to your Personal Data

You may have certain rights relating to your Personal Data:

The right to access your Personal Data and obtain a copy thereof;
The right to rectify inaccurate Personal Data and complete incomplete Personal Data
The right to request the erasure (right to be forgotten) of your Personal Data, subject to certain conditions;
The right to restrict the processing of your Personal Data under certain circumstances;
The right to data portability of your Personal Data, in certain cases;
The right to object to the processing of your Personal Data, where applicable;
The right to withdraw your consent at any time, without affecting the lawfulness of any processing carried out based on your consent prior to its withdrawal;
The right to lodge a complaint with a supervisory authority if you believe we have not complied with applicable data protection laws.

If you wish to exercise any of these rights, please contact us using the following email address: [email protected]

You will not be required to pay any fees to exercise these rights. If you make a request, we have one month to respond to you.

To make a complaint, please reach out to us using the contact details provided in this Privacy Notice. We kindly request that you provide as much detail as possible regarding your complaint to help us understand and investigate the matter thoroughly.

If you are dissatisfied with our response or feel that your complaint has not been properly addressed, you have the right to lodge a complaint with the relevant data protection authority in your country of residence, place of work, or where you believe the violation has occurred.

7. How we secure your Personal Data

We are committed to ensuring that your Personal Data is secure. In order to prevent unauthorized access or disclosure, we have put in place appropriate technical and organizational measures to safeguard and secure the Personal Data we process.

8. How long do we keep your Personal Data

We may retain your Personal Data for a period of time consistent with the original purpose of collection or as long as required to fulfill our legal obligations. We determine the appropriate retention period for Personal Data on the basis of the amount, nature, and sensitivity of the Personal Data being processed, the potential risk of harm from unauthorized use or disclosure of the Personal Data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements.

After expiry of the applicable retention periods, your Personal Data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of such data.

9. Children

Our websites and services are not directed at children. We do not knowingly collect Personal Data from children under the age of 18. If you believe we have mistakenly or unintentionally collected Personal Data of a minor without appropriate consent please contact us and we will take steps to delete their Personal Data from our systems.

10. Links to Other Websites

Our Website may contain links to third-party websites that operate under different privacy practices. If you navigate to any of these websites via the provided links or submit your Personal Data to them, such information will be processed in accordance with their respective privacy policies and practices.

For example, when you make payment for the Services: in this case, you will be redirected to the payment provider operated by third party. These websites are outside our control and we bear no liability for the result of your visit to these websites. We recommend you to visit “Privacy Policy” or “Data Policy” or another privacy document on any of these third-parties services before submitting any information to the latter.

11. Changes to this Privacy Notice

We reserve the right to modify or amend this Privacy Notice at any time. Any changes we make to our Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by email. If we do, we will update the “Effective date” at the top.

We strongly encourage you to periodically review this Privacy Notice to remain informed about our practices regarding the collection, processing, and sharing of your Personal Data.