Privacy Policy

This Privacy Policy governs the collection, use, and protection of personal information by our online gaming platform operating in Canada. We are committed to maintaining the highest standards of data protection in compliance with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Last updated: January 22, 2026.

1. Information We Collect

We collect various types of personal information necessary for providing secure and compliant online gaming services. The information collected falls into several categories, each serving specific operational and regulatory purposes.

  1. Account registration data including full legal name, date of birth, residential address, email address, and telephone number
  2. Government-issued identification documents such as driver’s license, passport, or provincial ID for identity verification
  3. Financial information including banking details, credit card information, and transaction history
  4. Gaming activity data encompassing betting patterns, game preferences, session duration, and wagering amounts
  5. Technical information such as IP address, device specifications, browser type, and operating system
  6. Communication records including customer support interactions, chat logs, and correspondence
  7. Location data to ensure compliance with provincial gaming regulations and geo-blocking requirements

2. Purpose of Data Collection

Personal information collection serves multiple essential functions required for operating a licensed gaming platform in Canada. Each data processing activity is conducted with specific legitimate purposes aligned with regulatory requirements and operational necessities.

  1. Identity verification and age confirmation to comply with legal gaming age restrictions
  2. Account security maintenance and fraud prevention measures
  3. Payment processing and financial transaction management
  4. Regulatory compliance reporting to provincial gaming authorities
  5. Customer support service provision and dispute resolution
  6. Responsible gambling monitoring and intervention programs
  7. Marketing communications delivery based on user preferences and consent
  8. Platform security enhancement and technical performance optimization

3. Legal Basis for Processing

Our data processing activities are grounded in various legal bases recognized under Canadian privacy law. We ensure that every processing activity has appropriate legal justification and complies with statutory requirements for personal information handling.

Contract performance represents the primary legal basis for most data processing activities, as personal information is essential for providing gaming services, managing user accounts, and processing financial transactions. Regulatory compliance constitutes another fundamental basis, particularly for identity verification, age confirmation, and reporting obligations to gaming authorities. Legitimate interests justify certain processing activities such as fraud prevention, security measures, and platform improvement initiatives, provided they do not override individual privacy rights.

4. Data Sharing and Disclosure

We maintain strict controls over personal information sharing and disclosure, ensuring that data is only shared with authorized parties for legitimate purposes. All third-party sharing arrangements are governed by comprehensive agreements ensuring adequate protection standards.

  1. Payment processors and financial institutions for transaction processing and verification
  2. Identity verification services for compliance with know-your-customer requirements
  3. Gaming software providers for platform functionality and game operation
  4. Customer support service providers operating under strict confidentiality agreements
  5. Legal and regulatory authorities when required by law or court order
  6. Professional advisors including lawyers, auditors, and compliance consultants
  7. Successor entities in case of business transfer or merger transactions

5. Data Retention Policies

Personal information retention periods are determined by regulatory requirements, operational needs, and legal obligations. We maintain comprehensive retention schedules ensuring information is kept only as long as necessary for legitimate purposes.

Account information and gaming records are retained for seven years following account closure, as required by provincial gaming regulations and anti-money laundering legislation. Financial transaction records are maintained for the same period to comply with tax reporting obligations and audit requirements. Communication records and customer support interactions are retained for three years to facilitate dispute resolution and service improvement. Technical data and system logs are typically retained for one year unless required for security investigations or legal proceedings.

6. Security Measures

We implement comprehensive security measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. Our security framework incorporates industry best practices and regulatory standards applicable to online gaming operations.

  1. Advanced encryption protocols for data transmission and storage
  2. Multi-factor authentication systems for account access and sensitive operations
  3. Regular security audits and vulnerability assessments
  4. Employee training programs on data protection and privacy obligations
  5. Secure data centers with physical access controls and environmental monitoring
  6. Incident response procedures for addressing potential security breaches
  7. Regular software updates and security patch management
  8. Network monitoring and intrusion detection systems

7. User Rights and Controls

Canadian privacy legislation grants individuals specific rights regarding their personal information. We provide accessible mechanisms for exercising these rights and responding to user requests within statutory timeframes.

  1. Access rights to obtain copies of personal information we hold
  2. Correction rights to update or rectify inaccurate information
  3. Deletion rights subject to legal and regulatory retention requirements
  4. Portability rights to receive personal information in structured formats
  5. Objection rights to certain processing activities
  6. Restriction rights to limit specific data processing operations
  7. Withdrawal of consent for marketing communications and optional services

8. Cookies and Tracking Technologies

Our platform utilizes various tracking technologies to enhance user experience, ensure security, and comply with regulatory requirements. We provide transparent information about cookie usage and offer user controls where technically feasible.

Essential cookies are necessary for platform functionality, account security, and regulatory compliance, including session management, fraud prevention, and geo-location verification. Analytics cookies help us understand user behavior and improve platform performance, while marketing cookies enable personalized communications and promotional offers. Users can manage certain cookie preferences through browser settings, though disabling essential cookies may impact platform functionality and regulatory compliance capabilities.

9. International Data Transfers

While we primarily process personal information within Canada, certain operational requirements may necessitate international data transfers to jurisdictions with adequate privacy protection standards. All international transfers are conducted with appropriate safeguards and regulatory compliance measures.

Gaming software providers and payment processors may operate servers in jurisdictions with substantially similar privacy protection standards to Canada. Cloud service providers utilized for data backup and disaster recovery maintain facilities in countries recognized for adequate data protection frameworks. All international data transfer arrangements include contractual protection clauses ensuring equivalent privacy safeguards and user rights protection.

10. Marketing Communications

We may send marketing communications to users who have provided appropriate consent or where permitted by applicable anti-spam legislation. Our marketing practices comply with Canada’s Anti-Spam Legislation (CASL) and provincial privacy requirements.

Marketing communications include promotional offers, game announcements, tournament information, and platform updates delivered via email, SMS, or push notifications. Users maintain control over marketing preferences through account settings and can withdraw consent at any time using unsubscribe mechanisms provided in all communications. We maintain comprehensive consent records and honor opt-out requests within required timeframes.

11. Responsible Gaming and Privacy

Our responsible gaming programs involve personal information processing to identify and assist users who may be experiencing gambling-related difficulties. These initiatives are conducted with appropriate privacy safeguards while fulfilling our regulatory and social responsibility obligations.

Gaming behavior analysis helps identify potentially problematic patterns, enabling proactive intervention and support services. Self-exclusion programs require personal information processing to ensure effectiveness across platform access points and prevent circumvention attempts. Third-party counseling services may receive limited personal information necessary for providing appropriate support, always with user consent and strict confidentiality protections.

12. Contact Information and Complaints

We maintain accessible channels for privacy-related inquiries, complaints, and data subject requests. Our privacy team is committed to addressing concerns promptly and in compliance with statutory response timeframes.

Privacy inquiries can be submitted through our dedicated privacy contact form, customer support channels, or direct communication with our Data Protection Officer. We acknowledge receipt of privacy requests within 48 hours and provide substantive responses within 30 days as required by applicable legislation. Users who are unsatisfied with our privacy practices may file complaints with the Office of the Privacy Commissioner of Canada or relevant provincial privacy commissioners. We maintain comprehensive records of privacy requests and our responses to ensure accountability and regulatory compliance.