Privacy Policy

This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you visit and use the online casino services offered via betcasino-ca.com by Casino. It applies to players, prospective players, and all other visitors to our websites and mobile applications who are located in Canada. By creating an account, using our services, or interacting with our platforms, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and replaces any earlier versions relating to betcasino-ca.com.

Who We Are

For the purposes of this Privacy Policy, "Casino", "we", "us", or "our" refers to the entities operating the online casino services available through betcasino-ca.com for users in Canada, as follows:

Ontario players: The data controller and operating company is Casino Operations ON Ltd., a limited company incorporated under the laws of Ontario, Canada, and licensed by the Alcohol and Gaming Commission of Ontario (AGCO), operating under license number OPIG1234567 and an operating agreement with iGaming Ontario (iGO).
Rest of Canada (RoC) players: The data controller and operating company is Casino International N.V., an N.V. entity operating under licenses from the Kahnawake Gaming Commission (license number 890) and the Curacao Gaming Control Board (license number OGL/2024/152/0112).

Due to the nature of our licensing structure, certain processing operations may be jointly determined by the above entities. Where this is the case, the entities act as joint controllers or independent controllers for clearly separated operations, in accordance with applicable law.

Legal address and registration details: Specific registered office addresses, company registration numbers, and tax identification numbers for Casino Operations ON Ltd. and Casino International N.V. may be obtained upon written request using the contact details below. Where required by local law (including Ontario regulations), such information is also available through the relevant public registries (e.g., AGCO/iGO and Kahnawake Gaming Commission registers).

Data Protection Contact:

Data Protection Officer / Privacy Contact: Data Protection Department, Casino
Email: [email protected] (please indicate "Privacy / Data Protection" in the subject line)
Website: https://betcasino-ca.com
Postal contact: A mailing address for privacy-related correspondence will be provided upon request and in your account area where required by local law.

What Personal Data We Collect

We collect and process different categories of personal information when you use betcasino-ca.com and related services offered under the Casino brand. The exact data collected depends on your interactions with us, your province or territory of residence, and legal obligations (including KYC/AML requirements).

Identification and Contact Data

Account and profile data: Full name, date of birth, username, password, security questions and answers.
Contact details: Email address (including the address you use to contact us via [email protected]), telephone number(s), and preferred language.
Government-issued identification: Copies or data from passports, national ID cards, driver's licences, health cards (where permitted), social insurance number (only where strictly required by law and, if applicable, appropriately masked), and other documents used for identity verification and age verification.
Address data: Residential address, billing address, province/territory, country, and proof of address documents (e.g., utility bills, bank statements).

Technical and Usage Data

Device and connection information: IP address, device identifiers, browser type and version, operating system, screen resolution, device settings, language and time zone settings.
Service usage data: Log-in and log-out times, session duration, pages viewed, links clicked, navigation paths, in-game events, and technical logs (including error logs and crash reports).
Location data: Approximate location derived from IP address and, where permitted and required for regulatory geo-location (e.g., for Ontario), more precise location information using approved geo-location technologies.

Financial and Transaction Data

Payment data: Limited payment card details (such as card type, last four digits, tokenised card identifiers), bank account details, e-wallet identifiers, and payment processor transaction IDs. Full card data is typically processed and stored by our PCI-compliant payment partners.
Gaming and transaction history: Deposits, withdrawals, bonus use, wagering activity, bets placed, wins and losses, balances, pending withdrawals, and account limits.
Verification and risk data: Results of credit checks or affordability checks (where permitted by law), sanctions lists screening, PEP checks, and other risk scoring data required for AML/CTF obligations.

Behavioral and Profile Data

Betting and gaming behaviour: Game preferences, frequency and duration of play, average stake size, use of bonuses, and play patterns.
Responsible gambling data: Self-exclusion status, deposit/wager/loss limits, cool-off periods, reality checks, interactions with responsible gambling tools, communication with responsible gambling support services, and referrals (e.g., to ConnexOntario or Responsible Gambling Council resources).
Marketing and communication preferences: Opt-ins and opt-outs for email, SMS, push notifications, and in-account messages; responses to campaigns; and engagement metrics.

Communications and Support Data

Support interactions: Records of emails, chats, and other communications with customer support via [email protected] or in-product messaging, including call recordings where permitted and notified.
Complaints and dispute data: Information you provide when lodging a complaint, internal handling notes, and correspondence with regulators (e.g., AGCO, iGO, Kahnawake Gaming Commission) where relevant.

Cookies and Similar Technologies

Cookies: Small text files placed on your device to remember your preferences, keep you logged in, ensure security, and measure usage.
Tracking technologies: Web beacons, pixels, local storage, SDKs, and similar tools used for analytics, fraud prevention, and, where permitted, interest-based advertising.
Third-party tools: Analytics and advertising tags (e.g., from major analytics providers and ad networks) that may collect information about your browsing behaviour on our sites and, with your consent where required, across third-party sites.

Where we collect or process sensitive information or information subject to enhanced protection under applicable laws (such as certain government identifiers), we do so only where strictly necessary, applying additional safeguards and in line with the principles of necessity and proportionality.

Legal Basis for Processing

Our processing of personal information depends on your location and the specific activity. For Canadian users, we comply with applicable federal and provincial privacy and gaming laws, as well as international standards analogous to GDPR where relevant. We process personal data only where we have a valid legal basis.

Performance of a Contract

Account creation and management: We process your identification, contact, and technical data to register and manage your player account, verify your eligibility to participate, and provide access to games.
Provision of services: We process transaction, gaming, and behavioural data to operate games, manage bets, process deposits and withdrawals, and deliver bonuses and promotions you choose to participate in.
Customer support: We process communications and support data to respond to your questions, handle complaints, and provide ongoing assistance.

Compliance with Legal and Regulatory Obligations

KYC and age verification: We process identity documents, address data, and other verification information to comply with legal requirements regarding age, identity, and eligibility.
AML/CTF obligations: We process transaction and risk data to monitor for suspicious activity, keep mandated records, and report to competent authorities, including FINTRAC (Financial Transactions and Reports Analysis Centre of Canada) at https://fintrac-canafe.gc.ca, where required.
Gaming regulations: We process data to satisfy the rules and conditions imposed by regulators and licensing authorities (including AGCO/iGO and the Kahnawake Gaming Commission), such as responsible gambling measures, reporting requirements, and audit trails.
Tax, accounting and legal duties: We process and retain certain data for accounting, taxation, and legal defence purposes.

Legitimate Interests

Where allowed by applicable law and where our interests are not overridden by your rights and freedoms, we rely on legitimate interests such as:

Service improvement and analytics: Using technical and usage data to analyse performance, improve our products, and develop new features.
Fraud and security: Monitoring activity for fraud detection, account takeover prevention, security incident management, and enforcing our Terms and Conditions.
Network and information security: Ensuring the ongoing integrity, availability, and confidentiality of our systems and data.
Internal governance: Conducting audits, risk assessments, and internal reporting necessary for managing our business.

Consent

Marketing communications: We use your contact and profile data to send electronic marketing messages (e.g., email, SMS, push notifications) only where you have provided consent or where otherwise permitted by law, and you can withdraw consent at any time.
Cookies and advertising technologies: For non-essential cookies and cross-site advertising or profiling, we rely on your consent, obtained via our cookie banner or settings.
Optional data sharing: In some cases (e.g., specific promotional partnerships or surveys), we rely on your explicit consent to share data with named partners or use it for specific additional purposes.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Purpose of Processing

We use your personal information for clearly defined purposes aligned with our legal and regulatory obligations, our legitimate business interests, and your expectations as a player or website visitor.

Provision and Management of Casino Services

Account lifecycle: Creating, verifying, maintaining, and closing accounts; managing your credentials and security controls; enabling self-service account options.
Gaming operations: Providing access to casino games, processing bets, calculating results, and crediting or debiting your balance accordingly.
Payments: Facilitating deposits, withdrawals, payment method management, chargeback handling, and payment reconciliation via trusted payment partners.

Regulatory Compliance and Responsible Gambling

Legal compliance: Fulfilling obligations under gaming, AML/CTF, and other applicable laws (including requirements imposed by AGCO/iGO and the Kahnawake Gaming Commission).
Responsible gambling: Implementing and monitoring deposit limits, loss limits, time limits, self-exclusion, and reality checks; detecting at-risk behaviour and intervening appropriately; working with recognised support organisations such as ConnexOntario (https://connexontario.ca) and the Responsible Gambling Council (https://responsiblegambling.org).

Service Improvement and Analytics

Usage analytics: Analysing aggregated and pseudonymised usage data to understand how our services are used, identify technical issues, and optimise performance.
Product development: Using feedback and behavioural data to refine existing games, design new features, and improve the user experience.

Marketing, Personalisation and Promotions

Direct marketing: With your consent where required, sending offers, newsletters, and promotional materials about our products, bonuses, and campaigns.
Personalised content: Customising our website and app content, recommendations, and promotions based on your profile and past behaviour, within the limits allowed by law and your preferences.
Campaign measurement: Assessing the effectiveness of marketing campaigns and optimising our marketing strategy.

Security, Fraud Prevention and Dispute Handling

Fraud and abuse detection: Monitoring activity for suspicious or prohibited conduct, including bonus abuse, money laundering, identity theft, and account compromise.
Security operations: Preventing, detecting, and responding to security incidents; protecting our systems, players, and partners.
Disputes and enforcement: Investigating and resolving complaints, enforcing our Terms and Conditions, and prosecuting or defending legal claims.

Disclosure & Sharing

We do not sell your personal information in the traditional sense of the word. We may, however, share your information with carefully selected third parties in the circumstances described below, always in accordance with applicable law and subject to appropriate safeguards and contractual protections.

Service Providers and Technical Partners

Payment processors and banks: To process deposits, withdrawals, chargebacks, and payment disputes, we share limited personal and transaction data with payment service providers, banks, card schemes, and e-wallet operators.
Gaming software providers: We may share technical and usage data, and in some cases player identifiers, with providers of game content and platforms necessary for operating casino games.
IT and security vendors: Providers of hosting, cloud services, content delivery networks, security tools, data analytics, and monitoring solutions that support our technical infrastructure.

Regulators, Authorities, and Compliance Partners

Gaming regulators: Alcohol and Gaming Commission of Ontario (AGCO), iGaming Ontario, Kahnawake Gaming Commission, and any other relevant gaming authorities, for licensing, audit, compliance reporting, and dispute resolution. For example:
- https://igamingontario.ca/en/player/player-disputes
- https://gamingcommission.ca/complaints.htm
- https://agco.ca/status
- https://gamingcommission.ca/interactive.htm
Financial intelligence and law enforcement: FINTRAC and other competent authorities for AML/CTF reporting and investigations, as well as police and law enforcement agencies where required by law.
Screening and verification services: Providers used for identity verification, sanctions screening, PEP checks, affordability or credit assessments (where lawful), and fraud prevention.

Affiliates and Group Companies

Group transfers: To the extent that Casino Operations ON Ltd. and Casino International N.V. form part of a wider corporate group (including a TSX-listed parent company), we may share data with affiliates that provide intra-group IT, compliance, risk management, or support services, subject to appropriate intra-group data protection arrangements.
Business transactions: In connection with mergers, acquisitions, reorganisations, or asset sales, personal information may be transferred to acquiring or successor entities, subject to continuity of protection and compliance with applicable laws.

Marketing and Advertising Partners

Affiliate marketing networks: Limited data (such as anonymised identifiers, registration and conversion data) may be shared with marketing affiliates for tracking and performance measurement.
Advertising networks and analytics providers: With your consent where required, we may share pseudonymised or aggregated data with advertising and analytics platforms to deliver, measure, and improve our marketing campaigns.

Other Disclosures

Legal rights and obligations: We may disclose personal information where necessary to comply with legal obligations, respond to lawful requests and court orders, enforce our terms and policies, or protect our rights, property, and safety, or those of our players and third parties.
Your instructions: We may share information with third parties where you have expressly requested or consented to such sharing.

International Transfers

Due to the cross-border nature of online gaming operations and our licensing structure, your personal information may be transferred to and processed in countries or territories outside your province, territory, or country of residence, including:

Canada (inter-provincial): Data may be stored or accessed from data centres or offices located in different Canadian provinces or territories, including Ontario.
Kahnawake: Some operations for RoC players are conducted under a license from the Kahnawake Gaming Commission, which may involve transfers to servers or service providers located in Kahnawake, Canada.
Curacao: For RoC offshore operations conducted under the Curacao Gaming Control Board license (OGL/2024/152/0112), data may be processed by Casino International N.V. or its service providers in Curacao or other jurisdictions.
Other countries: Certain service providers (e.g., cloud, analytics, payment processors) may be located in or process data from countries with different data protection regimes.

Where we transfer personal information internationally, we implement appropriate safeguards as required by applicable law, which may include:

Contractual safeguards: Standard contractual clauses or equivalent contractual protections ensuring a level of data protection consistent with applicable standards.
Technical and organisational measures: Encryption, access controls, data minimisation, and strict vendor due diligence.
Regulatory conditions: Compliance with any conditions imposed by Canadian regulators in relation to data hosting, access, and disclosure.

By using our services, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your home jurisdiction, but we will always protect your information as described in this Privacy Policy and in accordance with applicable law.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law, regulation, or regulatory guidance. Retention periods may vary depending on your province or territory of residence, the nature of the data, and our regulatory obligations, including those relating to AML/CTF and gaming regulation.

General Retention Principles

Account-related data: Core account data (identification, contact, and verification documents) is typically retained for the duration of your account and for a period of up to 5 to 7 years after account closure, depending on applicable legal and regulatory requirements, to comply with AML, financial recordkeeping, and limitation periods for legal claims.
Transaction and gaming records: Deposits, withdrawals, bets, wins/losses, and related transactional data are usually retained for at least 5 years after the transaction date or account closure, or longer where required by law or regulators.
AML/CTF and compliance data: Records created and maintained for AML/CTF and other regulatory compliance purposes may be retained for 5 to 10 years as required by FINTRAC and other applicable regulations.
Marketing data: Marketing preference data and evidence of consent are retained for as long as you remain subscribed and for a limited period thereafter (typically up to 2 years) to demonstrate compliance, unless you request earlier deletion where permitted.
Support and complaint records: Support interactions and complaint files are generally retained for 3 to 7 years, depending on the seriousness of the issue and applicable limitation periods.

Deletion and Anonymisation

Account closure: When you close your account or we terminate it, we will take reasonable steps to either delete or irreversibly anonymise data that is no longer required, subject to legal and regulatory retention obligations.
Data minimisation: We regularly review the personal information we hold and either delete or anonymise data that is no longer needed, in accordance with internal retention schedules.
User requests: Where you exercise your right to erasure and we have no overriding legal basis to retain the data, we will delete or anonymise your personal information within applicable timeframes.

After anonymisation, data can no longer be associated with you and may be used for statistical, analytical, or reporting purposes without further notice to you.

Your Rights

Depending on your province or territory of residence and the specific laws that apply to our relationship (including Canadian privacy laws and, for comparative and best-practice purposes, principles similar to those found in GDPR), you may have some or all of the rights described below in relation to your personal information. While we do not target Mexico, where Mexican data protection concepts are applicable by analogy (such as access, rectification, cancellation, and opposition rights under Mexican legislation), we aim to align our practices with these standards as far as consistent with Canadian law and our regulatory obligations.

Access to Your Data

What this means: You can request confirmation of whether we process your personal information and obtain a copy of such information, together with information about how we use it.
How to exercise: Submit a request via email to [email protected] indicating "Data Access Request" in the subject line and providing sufficient information to verify your identity.

Correction (Rectification) of Inaccurate Data

What this means: You can request that we correct or update inaccurate or incomplete personal information we hold about you (for example, an outdated address or misspelled name).
How to exercise: Update certain data directly in your account settings where available, or contact us at [email protected] with details of the correction requested and supporting documentation if needed.

Deletion (Erasure / Cancellation)

What this means: You may request that we delete certain personal information, subject to legal and regulatory obligations that may require us to retain some information (e.g., AML/CTF, tax, and gaming regulations).
Limitations: We may not be able to delete data we are legally obliged to retain or that is necessary for the establishment, exercise, or defence of legal claims. Where full deletion is not possible, we will restrict processing to the extent permitted.

Restriction of Processing

What this means: In certain circumstances, you may request that we temporarily restrict the processing of your personal information (for example, while we verify its accuracy or assess an objection).
Effects: While processing is restricted, we will not use your data for any purpose other than storage and essential compliance-related processing, unless you consent or we are required by law.

Objection to Processing

What this means: You may object to the processing of your personal information based on our legitimate interests, on grounds relating to your particular situation. You may also object at any time to processing for direct marketing purposes.
Marketing objection: If you object to direct marketing, we will stop using your data for that purpose without undue delay.

Data Portability

What this means: Where applicable and technically feasible, you may request a copy of certain personal information you provided to us in a structured, commonly used, and machine-readable format, and request that we transmit it to another service provider, where processing is based on consent or contract and carried out by automated means.

Withdrawal of Consent

What this means: Where we rely on your consent for specific processing activities (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time.
How to exercise: Use the unsubscribe link in marketing emails, adjust your preferences in your account settings (where available), modify your browser or cookie settings, or contact us at [email protected].

Procedures, Timeframes and Charges

Verification: We may need to verify your identity before acting on your request, which may require additional information or documentation.
Response time: We aim to respond to all valid requests within 30 days of receipt. If your request is complex or we have received multiple requests, this period may be extended in accordance with applicable law, and we will inform you of the extension and reasons.
Fees: We generally handle your requests free of charge. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

To exercise any of your rights, please contact us using the details in the "Complaints & Contacts" section below. We will assess your request in line with Canadian privacy laws and relevant regulatory requirements.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to ensure the proper functioning of betcasino-ca.com, enhance your experience, and, where permitted, provide personalised content and advertising.

Types of Cookies

Strictly necessary (functional) cookies: Required for the website and games to function properly, including maintaining your session, enabling secure log-in, and storing essential preferences. These cookies cannot be switched off in our systems, although you may block them in your browser (which may affect site functionality).
Preference cookies: Remember your settings and choices (such as language, region, and display preferences) to provide a more personalised experience.
Analytics and performance cookies: Help us understand how visitors use our website and apps, measure performance, and improve our services. They collect information in aggregated or pseudonymised form.
Advertising and targeting cookies: Used, with your consent where required, to deliver relevant advertisements and track the performance of marketing campaigns, sometimes across multiple websites or devices.
Third-party cookies: Placed by third-party service providers (e.g., analytics tools, advertising networks, social media platforms) as part of their embedded services.

Managing Cookies

Cookie banner and settings: On your first visit and periodically thereafter, you will be presented with cookie information and, where required, options to accept, reject, or customise your cookie preferences.
Browser controls: You can configure your browser to block or delete cookies. Instructions are typically available in your browser's "Help" or "Settings" menu. Blocking all cookies may impact your ability to use certain features or access games.
In-account controls: Where available, you may adjust your marketing and tracking preferences in your account settings.

For more detailed information on specific cookies and tracking tools used on betcasino-ca.com, including lifetimes and providers, please refer to any dedicated cookie information we provide on our website.

Data Security

We implement a comprehensive set of technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction, in alignment with recognised security standards and regulatory expectations.

Technical Security Measures

Encryption in transit and at rest: We use up-to-date transport layer security (TLS 1.2 or higher) to protect data transmitted between your device and our servers. Sensitive data is encrypted at rest using industry-standard encryption technologies.
Access controls: Access to personal information is restricted to authorised personnel on a need-to-know basis, using role-based permissions, strong authentication, and secure access management.
Network and application security: We employ firewalls, intrusion detection and prevention systems, anti-malware tools, and secure coding practices, and we conduct regular vulnerability assessments and penetration tests.
Data minimisation and pseudonymisation: Where appropriate, we minimise the personal information we process and may pseudonymise or anonymise data to reduce risk.

Organisational Security Measures

Policies and procedures: We maintain internal information security, privacy, and incident response policies that define how personal data must be handled throughout its lifecycle.
Staff training: Employees and contractors with access to personal information receive regular training on data protection, confidentiality, and information security best practices.
Vendor management: We conduct due diligence on service providers and require them to implement appropriate security measures and comply with contractual data protection obligations.
Security audits: We carry out regular internal and external audits, reviews, and assessments to verify the effectiveness of our security controls and compliance with relevant standards (including, where applicable, alignment with frameworks such as ISO 27001 and SOC 2).

Incident Response

Monitoring: Our systems are monitored for security events and potential incidents.
Response and notification: In the event of a data breach affecting your personal information, we will investigate promptly, mitigate the impact, and notify you and relevant authorities where required by law and regulatory rules.

While we take robust steps to secure your information, no system can be completely secure. You are responsible for maintaining the confidentiality of your login credentials and for using appropriate security measures on your own devices.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal information, or if you wish to exercise your data protection rights, you may contact us using the details below.

Contacting Casino

Primary contact email (players and privacy): [email protected]
Website: https://betcasino-ca.com

Please include your full name, account username (if applicable), province or territory of residence, and a clear description of your request or complaint. This will help us respond more efficiently.

Internal Complaint Procedure

Submission: Send your complaint or request to [email protected] with "Privacy Complaint" or "Data Protection Request" in the subject line.
Acknowledgement: We will acknowledge receipt of your complaint or request as soon as reasonably practicable, typically within 5 business days.
Investigation: Our Data Protection Department or relevant internal team will review your submission, gather necessary information, and, where required, liaise with our compliance and legal teams.
Response: We will provide you with a substantive response within 30 days of receiving your complete request or complaint, unless a longer period is permitted or required by law due to complexity. If we need more time, we will inform you of the extension and reasons.
Remedies: Where your complaint is upheld, we will take appropriate corrective action, which may include updating data, changing processes, or providing explanations.

Regulatory and External Escalation

If you are not satisfied with our response or believe that we are not handling your personal information in accordance with applicable laws, you may have the right to lodge a complaint with a relevant data protection or gaming regulatory authority, such as:

Ontario (regulated players):
- iGaming Ontario (iGO) - Player Disputes Portal: https://igamingontario.ca/en/player/player-disputes
- Alcohol and Gaming Commission of Ontario (AGCO): License status and contact details are available at https://agco.ca/status and https://igamingontario.ca.
Kahnawake (RoC players using Kahnawake-licensed services):
- Kahnawake Gaming Commission - Complaints: https://gamingcommission.ca/complaints.htm
- Interactive providers list and contact information: https://gamingcommission.ca/interactive.htm
Financial Intelligence (AML/CTF issues): FINTRAC at https://fintrac-canafe.gc.ca.

Additional information about responsible gambling support and resources can be found through:

ConnexOntario: https://connexontario.ca
Responsible Gambling Council: https://responsiblegambling.org

Where EU or other foreign data protection authorities may have a role (for example, if you are temporarily in the EU and benefit from EU data protection rules), you may also have rights to complain to such authorities in line with their jurisdiction and our applicable legal obligations.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. The version posted on betcasino-ca.com will always be the most current version.

Notification of Changes

Last updated notice: The date of the latest revision appears at the end of this Privacy Policy.
Material changes: If we make material changes that significantly affect how we process your personal information or your rights, we will provide you with clear notice, which may include:
- Email notifications sent to the address associated with your account.
- Prominent notices or banners on our website and/or in your account dashboard.
- In-product messages when you next log in.

Advance Notice and Your Options

Advance notice: Where required by law or where changes materially affect your rights or obligations, we will provide at least 30 days' advance notice before the new Privacy Policy takes effect, unless immediate implementation is required by law or regulatory direction.
Your continued use: By continuing to use our services after the effective date of the updated Privacy Policy, you acknowledge that you have read and understood the changes.
Right to object or close your account: If you do not agree with the updated Privacy Policy, you may choose to stop using our services and request account closure. In such a case, we will process your personal information in accordance with this Privacy Policy and applicable retention obligations.

Last updated: January 2026