Privacy Policy

This Privacy Policy explains how personal information is handled when using the services made available to users in Canada. It describes what information may be collected, the purposes for using it, the legal bases that may apply depending on the context, how it is safeguarded, and the choices available to individuals. This document is intended to be read together with the Terms, game rules, and any notices shown at the moment information is collected.

Provincial and federal privacy expectations in Canada vary by activity and jurisdiction. When Canadian requirements apply, practices are designed to align with recognized Canadian privacy principles, including accountability, limiting collection, safeguarding, openness, and individual access. Where a specific law or regulator imposes additional obligations, those obligations are followed for the relevant activity.

Scope and Key Definitions

This policy applies to information processed in relation to accounts, gameplay, payments, verification, customer support, promotions, security controls, and compliance checks. It covers information collected directly, generated through use of services, or obtained from trusted third parties for permitted purposes.

Definitions used in this policy

The terms below are provided to improve clarity and consistency throughout this document.

Personal information: information about an identifiable individual, including identifiers and account-related data.
Processing: any operation performed on information, such as collecting, storing, using, disclosing, or deleting.
Account data: information provided during registration and profile management.
Verification data: documents and checks used to confirm identity, age, and eligibility.
Device and usage data: technical information about how services are accessed and used.
Service providers: third parties who process information on behalf of the operator under contract.

Information Collected

Information is collected in ways that are proportionate to the purpose. Some information is required to provide core services such as account creation, age verification, payments, and security. Other information is optional and used to improve user experience or deliver preferences-based features.

Information provided directly

When an account is created or updated, information may be requested to establish identity, enable payments, and support responsible gaming and compliance. The exact fields shown can vary depending on settings, risk indicators, and regulatory expectations for the activity.

Identity and contact details: name, date of birth, email address, phone number, and residential address.
Account credentials: login details and security settings, such as multi-factor authentication preferences.
Payment-related details: deposit and withdrawal method details and transaction identifiers. Full payment card details are generally handled by payment partners under secure standards.
Support content: messages, attachments, and information provided when contacting customer support.
Preference information: communication choices and marketing opt-in or opt-out settings.

Information collected automatically

When services are accessed, certain technical information is generated automatically. This helps secure accounts, prevent abuse, measure performance, and understand how features are used. The categories below are typical for online gaming and transactional services.

Device identifiers and attributes: device type, operating system, browser type, language settings.
Network and connection data: IP address, approximate location derived from IP, time zone, and connection logs.
Usage events: pages viewed, clicks, session duration, in-game events, error logs, and feature interactions.
Cookies and similar technologies: described in the Cookies Policy page.

Information obtained from third parties

Limited third-party sources may be used to confirm details, process payments, or maintain safety and integrity. Information is requested only where relevant and typically under contract and confidentiality expectations.

Identity and age verification partners: confirmation results, match indicators, and verification reference IDs.
Payment processors and banks: transaction confirmations, fraud indicators, chargeback details, and settlement data.
Fraud prevention and security providers: risk signals, device reputation, and threat intelligence indicators.
Responsible gaming and self-exclusion systems: where applicable, status checks and compliance indicators.

Purposes for Using Information

Information is used to provide services, comply with legal requirements, protect users, maintain platform integrity, and improve performance. The purposes below are grouped by operational need.

Account creation and service delivery

Information is used to create accounts, authenticate users, provide access to games and features, process transactions, and manage balances and bonus eligibility.

Registering and maintaining accounts and profiles
Enabling deposits, withdrawals, and transaction confirmations
Providing multilingual support relevant to Canadian users
Managing promotions and loyalty features based on eligibility rules

Verification, compliance, and risk controls

Gaming services require robust controls for age checks, identity verification, anti-fraud measures, and compliance monitoring. Information may be used to meet these obligations and to take action when risks are detected.

Confirming age, identity, and residency where required
Preventing fraud, account takeover, and abusive gameplay patterns
Managing responsible gaming limits and self-exclusion requests
Meeting reporting and record-keeping requirements applicable to the activity

Customer support and communications

Support interactions may involve account review, transaction tracing, technical troubleshooting, and complaint resolution. Communication choices are respected, and operational messages may still be sent when necessary to deliver services.

Responding to support requests and investigating incidents
Sending service messages such as security alerts and policy updates
Providing notices about changes to terms, game rules, and features

Product improvement and analytics

Usage patterns and technical logs help identify bugs, improve stability, optimize performance for Canadian networks, and evaluate the effectiveness of product changes. Where feasible, data is aggregated or de-identified for analytics.

Monitoring uptime, performance, and error rates
Improving user experience and navigation
Evaluating feature engagement and service quality

Marketing and promotions

Marketing is carried out based on user preferences and applicable rules. Some messages are triggered by account actions, while promotional messages are optional and can be managed through settings.

Sending opted-in promotional communications
Providing personalized offers where allowed and appropriate
Managing campaign measurement and frequency controls

Legal Bases and Canadian Considerations

Depending on the context and jurisdiction, information processing may rely on consent, contractual necessity, legal obligation, or legitimate business interests such as security and fraud prevention. When consent is used, it can be withdrawn through settings or by contacting support, subject to legal and operational constraints.

In Canada, privacy regimes often emphasize meaningful consent and reasonable purposes. The approach taken is to explain purposes in plain language, limit collection to what is required, and provide practical controls where possible.

How Information Is Shared

Information is not sold as a business model. Information may be disclosed to service providers and partners strictly to deliver services, meet compliance obligations, or protect users and the platform. Disclosures are limited to what is necessary for the stated purpose.

Service providers and operational partners

Third parties may process information under contract and instructions, with confidentiality and security obligations. Categories of providers may include:

Payment processing and payout facilitation
Identity, age, and fraud prevention checks
Customer support tools and communications systems
Hosting, content delivery networks, and security monitoring
Analytics and performance monitoring services

Legal and compliance disclosures

Information may be disclosed to authorities, regulators, or other entities when required by law, court order, or lawful request, or when necessary to establish, exercise, or defend legal rights. Disclosures may also occur to investigate suspected fraud, security incidents, or prohibited activity.

Corporate transactions

If a corporate transaction occurs such as a merger, acquisition, or restructuring, information may be transferred as part of that process subject to confidentiality controls and notice requirements where applicable.

International Transfers

Services may rely on infrastructure or service providers located outside Canada. When information is processed in other countries, it may be subject to the laws of those jurisdictions. Safeguards are used to protect information during such transfers, including contractual commitments, security standards, and access controls.

Data Retention

Information is retained only for as long as needed for the purposes described, including legal and compliance obligations. Retention periods can vary depending on the type of information, the nature of the account, and regulatory record-keeping expectations. When retention is no longer necessary, information is deleted or anonymized in a secure manner.

Retention logic overview

The table below summarizes typical retention drivers and examples. Exact durations may differ based on legal requirements and case specifics.

Category	Why it is retained	Typical retention trigger
Account profile data	Account management, support, security	Active account lifecycle; limited period after closure
Verification records	Age/identity compliance, fraud prevention	Completion of verification and ongoing compliance needs
Transaction records	Payments, audits, dispute handling	Completion of transaction and financial record requirements
Support communications	Issue resolution, quality assurance	Closure of ticket and any dispute window
Security and access logs	Threat detection, incident response	Log rotation cycles and investigation needs

Security Measures

Security is approached as a layered program combining administrative, technical, and physical controls. Controls are selected based on risk, sensitivity, and industry expectations for transactional platforms. No method of transmission or storage is perfectly secure, but reasonable safeguards are implemented to reduce risk.

Examples of safeguards

The list below illustrates common safeguards used to protect information and accounts.

Encryption in transit and, where appropriate, at rest
Access controls, role-based permissions, and least-privilege practices
Monitoring for suspicious logins, device anomalies, and account takeover indicators
Secure development practices and vulnerability management
Incident response procedures and audit trails for critical actions
Segmentation of systems handling sensitive workflows

Individual Rights and Choices for Canadian Users

Access and control options are provided through account settings and support channels. Some requests require verification to protect accounts and prevent unauthorized disclosure. Where applicable, requests are handled within a reasonable timeframe.

Common request types

Depending on circumstances and legal framework, the following requests may be available.

Access: obtain a copy of personal information held, subject to permitted exceptions
Correction: request corrections to inaccurate or incomplete information
Deletion: request deletion where lawful and operationally feasible
Withdrawal of consent: adjust marketing preferences or other consent-based processing
Portability: where supported for specific datasets, receive information in a usable format

How requests are handled

Requests are reviewed with attention to account security, legal obligations, and fraud risks. Some information cannot be deleted immediately due to legal retention requirements, dispute handling, or the need to prevent wrongdoing. In such cases, information may be restricted from routine use while still retained for required purposes.

Age Restrictions and Minor Protection

Services are intended only for individuals who meet minimum age requirements applicable to the activity. Where reasonable suspicion exists that an account may be associated with a minor, access may be restricted pending verification. Information associated with suspected underage use may be used to investigate and to enforce restrictions.

Responsible Gaming and Privacy

Responsible gaming controls may require processing information related to limits, self-exclusion, session management, and pattern detection for harm prevention. These features are intended to support safer play and may be required in certain contexts. Information used for responsible gaming is handled with heightened sensitivity and access restrictions.

Automated Decision-Making and Profiling

Automated systems may be used to detect fraud, prevent abuse, protect account security, and enforce rules. These systems may evaluate signals such as device reputation, transaction patterns, and gameplay behaviors. When actions are taken that significantly affect access, review steps may be available through support where appropriate, subject to legal and security constraints.

Third-Party Content and Integrations

Some games or tools may be provided through integrated partners. When using integrated content, limited technical information may be shared to enable gameplay, synchronize sessions, and ensure fair results. Partner access is limited to what is needed to provide the integrated service and maintain integrity.

Managing Preferences

Preference controls can include communication choices, cookie settings, and certain privacy options available in account settings. Opting out of promotional communications does not stop important service messages such as security alerts, transaction confirmations, or policy updates that are necessary to deliver services.

Contact and Complaints

Questions, requests, or concerns about privacy can be submitted through support channels available in the account area. To protect users, requests may require identity verification. If a concern cannot be resolved through support, escalation options may be provided in accordance with applicable Canadian privacy complaint processes relevant to the activity and jurisdiction.

Changes to This Privacy Policy

This policy may be updated to reflect changes in services, security practices, or legal requirements. When material changes are made, notice may be provided through the website or via account communications. Continued use of services after an update indicates acceptance of the updated policy, subject to any consent requirements that apply to specific changes.