Privacy Policy
This Privacy Policy (“Policy”) outlines how our online gaming platform collects, processes, stores, and protects personal information from users in Canada. We are committed to maintaining the highest standards of data privacy and security in accordance with Canadian federal and provincial legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy laws. This Policy is effective immediately upon acceptance and was last updated on January 18, 2026. Please review this document carefully to understand our privacy practices and your rights regarding your personal data.
Information We Collect
We collect various categories of personal information to provide our gaming services, enhance user experience, and comply with regulatory requirements. The types of information we gather include both directly provided data and information collected through automated means. Understanding what data we collect is essential for users to make informed decisions about their participation on our platform.
- Account registration information, including full name, date of birth, email address, physical address, and telephone number
- Financial information such as banking details, credit card numbers, payment method information, and transaction history
- Government-issued identification documents for age verification and know-your-customer (KYC) compliance
- Device information including IP address, browser type, operating system, and unique device identifiers
- Gaming activity data encompassing gameplay history, betting patterns, winnings, and losses
- Communication records including customer service inquiries, email correspondence, and chat interactions
- Location data derived from IP address geolocation services
- Cookies and tracking technology data used for session management and user preference storage
Purpose of Data Collection
Our platform collects personal information for specific and legitimate business purposes. Each category of data serves distinct functions related to service delivery, legal compliance, and customer relationship management. Users should understand how their information contributes to the operation and improvement of our gaming platform.
- Account creation and management to enable users to access gaming services
- Payment processing and financial transaction verification to facilitate deposits and withdrawals
- Age and identity verification to ensure compliance with Canadian gaming regulations and prevent underage gambling
- Anti-money laundering (AML) and counter-terrorism financing (CTF) compliance as required by FINTRAC regulations
- Responsible gaming implementation including self-exclusion programs and deposit limit enforcement
- Customer support provision and technical issue resolution
- Marketing communications and promotional offers based on user preferences and consent
- Fraud detection and prevention to protect both the platform and legitimate users
- Platform improvement and optimization through analytical data review
- Legal compliance with Canadian federal and provincial gaming licensing requirements
Legal Basis for Processing
Our processing of personal data is grounded in legitimate legal bases under PIPEDA and applicable provincial legislation. We process information only when we have a valid legal reason to do so, and we ensure that all processing activities are transparent and proportionate to stated purposes. Users have the right to understand why their data is being processed and how it supports the provision of gaming services.
- Performance of a contract to which you are a party, including the terms of service governing platform use
- Compliance with legal obligations under Canadian federal gaming regulations and provincial licensing requirements
- Protection of legitimate interests including fraud prevention, system security, and platform integrity
- Explicit consent provided by users for specific processing activities such as marketing communications
- Consent to age verification and KYC procedures as conditions of service provision
Cookies and Tracking Technologies
Our platform utilizes cookies and similar tracking technologies to enhance user experience, maintain session security, and gather analytical information. These technologies help us remember user preferences, track gameplay sessions, and prevent unauthorized access. Users can manage cookie preferences through their browser settings, though some cookies are essential for platform functionality.
- Session cookies that maintain login status and user authentication throughout gaming sessions
- Preference cookies that store user settings, language preferences, and account customization choices
- Analytics cookies that collect information about how users navigate and interact with the platform
- Security cookies that implement fraud detection and unauthorized access prevention mechanisms
- Marketing cookies that track user engagement with promotional content and advertising campaigns
- Third-party cookies from analytics providers and advertising partners integrated with our platform
Data Retention and Storage
We maintain clear policies regarding how long personal information is retained on our systems. Data retention periods are determined by the specific type of information, legal requirements, and business necessity. Financial and transaction records are retained in accordance with Canadian tax law and gaming regulatory requirements, while account information is maintained for the duration of user relationship plus additional periods as required by law.
- Account registration data is retained for the active account lifecycle plus seven years for regulatory compliance
- Financial transaction records and payment information are maintained according to anti-money laundering regulations
- Identity verification documents are stored securely for the duration of account operation
- Gaming activity logs are retained for minimum three years to support responsible gaming audits
- Customer service communications are archived for dispute resolution and quality assurance purposes
- Marketing preference data is maintained until users withdraw their consent or request deletion
- All personal data is securely destroyed when retention periods expire, except where legal holds apply
Data Security and Protection Measures
Protecting user data from unauthorized access, alteration, and disclosure is our highest priority. We implement comprehensive security measures aligned with Canadian privacy standards and industry best practices for financial data protection. Our security infrastructure includes technological safeguards, administrative procedures, and physical security measures to ensure data integrity and confidentiality throughout its lifecycle.
- Advanced encryption protocols including SSL/TLS encryption for data transmission and AES-256 for data at rest
- Secure socket layer (SSL) certificates that authenticate our platform and establish encrypted connections
- Multi-factor authentication options to prevent unauthorized account access and credential compromise
- Regular security audits and penetration testing conducted by independent cybersecurity firms
- Intrusion detection systems and firewalls that monitor and prevent unauthorized access attempts
- Secure data centers with restricted physical access, surveillance systems, and access logging
- Employee training programs ensuring all staff understand data protection obligations and security protocols
- Data access restrictions limiting employee exposure to personal information to operational necessity only
- Incident response procedures for detecting, reporting, and mitigating security breaches
- Compliance with Payment Card Industry Data Security Standard (PCI DSS) for credit card information handling
Sharing and Disclosure of Information
We carefully control with whom personal information is shared and only disclose data to third parties when necessary for service delivery, legal compliance, or with explicit user consent. All third-party processors of personal data are subject to strict contractual obligations requiring equivalent privacy protections. Users have the right to understand who has access to their personal information and for what purposes.
- Payment processors and financial institutions required to process deposits, withdrawals, and transactions
- Identity verification service providers authorized to confirm age and prevent underage gambling
- Government agencies and law enforcement when legally required by warrant, subpoena, or regulatory demand
- FINTRAC and regulatory bodies as mandated by anti-money laundering and counter-terrorism financing legislation
- Responsible gaming databases for cross-casino self-exclusion program implementation
- Marketing and analytics partners only with explicit user consent and data processing agreements in place
- Legal advisors and accountants under professional confidentiality obligations
- Fraud prevention services and credit reporting agencies for security verification purposes
- Platform service providers including hosting companies, customer support systems, and software vendors
User Rights and Access Requests
Canadian privacy law grants users specific rights regarding their personal information held by our platform. Users may exercise these rights by submitting formal requests to our privacy department. We are committed to responding to access requests promptly and in accordance with PIPEDA timelines, typically within thirty days. Users should understand and be able to exercise these fundamental privacy rights without undue burden or delay.
- Right to access all personal information we hold about you in a clear and understandable format
- Right to request correction or amendment of inaccurate, incomplete, or outdated personal information
- Right to request deletion of personal data, subject to legal retention obligations and regulatory requirements
- Right to withdraw consent for optional data processing activities including marketing communications
- Right to request a copy of personal information in a portable, machine-readable format
- Right to know what information is collected about you and the purposes for such collection
- Right to opt-out of third-party information sharing and targeted advertising initiatives
- Right to lodge a complaint with provincial privacy commissioners regarding alleged privacy violations
- Right to request restriction or limitation of processing activities for specific purposes
- Right to obtain information about third parties with whom your data is shared
Marketing Communications and Preferences
We send promotional emails, notifications, and marketing materials to users who have provided consent or expressed interest in receiving such communications. All marketing messages include unsubscribe mechanisms allowing users to withdraw consent at any time. We respect user preferences and maintain detailed opt-in and opt-out records to ensure compliance with Canadian anti-spam legislation (CASL). Users can manage their communication preferences through account settings or by contacting our customer service team directly.
- Promotional emails about new games, special bonuses, and exclusive offers relevant to user interests
- Account activity notifications including login alerts, deposit confirmations, and withdrawal updates
- Responsible gaming reminders and resources for users who show signs of problematic gambling behavior
- Updates about platform maintenance, security enhancements, and policy changes
- Personalized recommendations based on gameplay history and preference data only with consent
- Third-party promotional content shared only by users who explicitly opt-in to such information
Cross-Border Data Transfers
Our platform operates within Canada and maintains data within Canadian jurisdiction to the maximum extent possible. However, some technical services, payment processors, and support functions may involve data processing in other jurisdictions. Any international data transfers are carefully controlled and comply with PIPEDA standards. Users should understand that while we strive to maintain Canadian data residency, operational necessity may occasionally require controlled data processing by service providers in other countries under strict contractual protections.
- Payment processing infrastructure may route transaction data through international financial networks
- Cloud hosting services may maintain backup systems in other jurisdictions with equivalent security
- Customer support platforms may involve staff or contractors in other countries accessing limited information
- All international transfers are subject to data processing agreements ensuring privacy law compliance
- Users retain rights to access and control personal information regardless of processing location
Responsible Gaming and Data Protection
Our commitment to responsible gaming extends to how we handle personal information related to gambling behavior and patterns. We utilize data collected to implement responsible gaming measures, support self-exclusion programs, and protect vulnerable users. Personal information indicating problem gambling behaviors is treated with heightened sensitivity and used exclusively for protective purposes. Users seeking gambling support resources have access to comprehensive information about addiction services and treatment options.
- Deposit limit tracking and enforcement preventing excessive spending by individual users
- Self-exclusion program participation monitoring across multiple licensed platforms in Canada
- Loss limit implementation allowing users to restrict maximum losses within specified timeframes
- Behavior analysis identifying patterns suggesting problem gambling or account vulnerability
- Integration with responsible gaming databases that prevent users on self-exclusion from accessing services
- Real-time alerts notifying users of significant losses or unusual gaming patterns
- Data sharing with responsible gaming organizations and treatment providers with explicit user consent
Privacy Policy Updates and Contact Information
This Privacy Policy may be updated periodically to reflect changes in our data handling practices, technological developments, or evolving Canadian privacy law. We will notify users of significant policy changes through email and by posting updates on our platform. Continued use of our services following policy updates constitutes acceptance of the revised terms. Users who disagree with policy changes may request closure of their accounts and deletion of personal data subject to legal retention requirements. For privacy inquiries, data access requests, or to exercise your rights, please contact our dedicated privacy team using the information below.
- Policy updates will be announced at least thirty days in advance of implementation for material changes
- Historical versions of our Privacy Policy are available upon request from our privacy department
- Users will receive notification of policy changes via email to their registered account address
- For privacy inquiries: [email protected]
- For data access requests: [email protected]
- For complaints regarding privacy practices: [email protected]
- Mailing address: Privacy Department, [Platform Name], Toronto, Ontario, Canada
- Response times for privacy requests: thirty days from receipt of complete request documentation
- Users may also contact their provincial privacy commissioner for unresolved privacy concerns
- Last updated: January 18, 2026
