Trust centre

Security and integrity in every draw

How Rhase protects player data, payments and the fairness of every result.

SOC 2PCI DSSGLI certifiedPIPEDA
Certifications

Independently certified

SOC 2

SOC 2

Independently audited controls for how we protect customer and player data.

PCI

PCI DSS

Card payments processed to the Payment Card Industry Data Security Standard.

GLI

GLI certified

Random number generation and draw systems certified by Gaming Laboratories International.

Data security

SOC 2 audited controls protect customer and player data across the platform.

  • SOC 2 audited controls
  • Encryption in transit and at rest
  • Role-based access
  • Regular third-party testing

Draw integrity

Every result comes from certified random number generation and is recorded so it can be verified later.

  • GLI-certified random number generation
  • Tamper-evident audit log
  • Recorded draw setup and results

Payments

Card payments are processed to the Payment Card Industry Data Security Standard.

  • PCI DSS compliant processing
  • Supports most payment options
  • Apple Pay and Google Pay

Licensing & regulation

Rhase is built for regulated fundraising and helps you meet the conditions of your lottery licence.

  • Licence application support
  • Regulator-ready reports

Privacy (PIPEDA)

Rhase handles personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

  • Personal information handled under PIPEDA
  • Role-based access to player data
Documents

Security documents

Available to customers and organizations evaluating Rhase. Requests go to info@rhase.net.

Security overview (PDF)Request
SOC 2 reportRequest
GLI certificationRequest
PCI DSS attestationRequest
Data processing agreementRequest

Questions from your board?

Talk to our compliance team.

Book a demo