Privacy Policy

Version: 1.0  |  Last Updated: August 19, 2026

At SpinBoss ("we", "us", "our"), accessible at spin-boss-casino.ca (the "Website"), we take the privacy and security of your personal information seriously. This Privacy Policy describes how we collect, use, store, share, and protect personal data when you visit or use our Website and services.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy. By using the Website, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions or concerns about this Policy or our data practices, please contact our Data Protection Officer (DPO) at [email protected].

1. Introduction

1.1. Scope

This Privacy Policy applies to all personal information collected from individuals who:

• Visit the Website, whether or not they are registered players;
• Register an Account and use our gaming services;
• Contact us for support or information;
• Subscribe to promotional communications.

1.2. Commitment to Privacy

We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We collect only the personal data that is necessary for us to deliver our services and fulfil our legal obligations.

2. Data We Collect

2.1. Information You Provide Directly

When you register an Account or interact with our services, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, gender;
• Contact Data: Email address, phone number, residential address, province/territory;
• Account Data: Username, encrypted password, account preferences and settings;
• Financial Data: Payment method details (e.g., card type and last four digits, e-wallet identifiers, bank account details where applicable), transaction history, deposit and withdrawal records;
• Verification Data: Copies of government-issued identification documents, proof of address, source of funds documentation submitted for KYC purposes;
• Communications Data: Records of your correspondence with our support team, chat logs, and feedback submitted via the Website.

2.2. Information Collected Automatically

When you access the Website, we automatically collect technical and usage data, including:

• Device Data: IP address, browser type and version, operating system, device identifiers;
• Usage Data: Pages visited, games played, session duration, clicks and interactions, referring URLs;
• Location Data: General geographic location derived from your IP address;
• Cookie Data: Information collected via cookies and similar tracking technologies (see Section 6 for full details).

2.3. Information From Third Parties

We may receive personal information from third-party sources, including:

• Identity verification and fraud prevention service providers;
• Payment processors and financial institutions;
• Marketing and analytics partners;
• Publicly available registers or databases used for AML compliance.

3. How We Use Your Data

3.1. Primary Purposes

We use your personal information for the following primary purposes:

• Account creation and management: To register your Account, verify your identity, and administer your player profile;
• Service delivery: To provide access to games, process deposits and withdrawals, and manage your Account balance;
• KYC and AML compliance: To verify your identity and comply with anti-money laundering, counter-terrorism financing, and fraud prevention obligations;
• Customer support: To respond to your enquiries, complaints, and requests;
• Responsible gaming: To monitor gaming behaviour, identify potential problem gambling, and enforce player protection measures in accordance with our Responsible Gaming Policy;
• Financial processing: To process payments, detect and prevent fraudulent transactions, and maintain accurate financial records.

3.2. Secondary Purposes

• Marketing communications: To send you promotional offers, newsletters, and personalised recommendations, where you have provided your consent or where we have a legitimate interest in doing so;
• Website improvement: To analyse Website usage, conduct testing, and improve our platform, game offerings, and user experience;
• Security: To detect, investigate, and prevent unauthorised access, fraud, and other prohibited activities;
• Legal compliance: To meet our obligations under applicable law and respond to requests from law enforcement or regulatory authorities.

3.3. Opting Out of Marketing

You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email, adjusting your communication preferences in Account settings, or by contacting us at [email protected]. Opting out of marketing will not affect the delivery of transactional or service-related communications.

4. Legal Bases for Processing

We process your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract we have with you (your Account and the associated Terms & Conditions);
• Legal obligation: Processing is necessary for us to comply with applicable laws, including KYC, AML, and responsible gaming requirements;
• Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, Website analytics, and service improvement, provided these interests are not overridden by your rights;
• Consent: Where we have obtained your specific, informed, and freely given consent, for example for direct marketing communications or certain types of cookies.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties:

• Payment service providers: To process deposits, withdrawals, and refunds (e.g., card processors, e-wallet providers, banking institutions);
• Identity verification providers: To perform KYC, age verification, and fraud screening;
• Game software providers: Who may receive limited data necessary to deliver game functionality and ensure fair play;
• Marketing and analytics platforms: To manage promotional campaigns and analyse Website performance (subject to appropriate data processing agreements);
• IT and security providers: Who support the operation, security, and maintenance of our platform;
• Legal and professional advisors: Including lawyers, auditors, and accountants, under obligations of confidentiality;
• Law enforcement and regulatory authorities: Where required by law or court order.

5.2. Data Processing Agreements

All third parties who process personal data on our behalf are required to enter into data processing agreements with us and to implement appropriate technical and organisational security measures. We do not sell your personal information to third parties for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device and remember certain information about your visit. We also use similar tracking technologies such as web beacons, pixel tags, and local storage objects.

6.2. Types of Cookies We Use

6.3. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Website. For targeting and marketing cookies, you can also opt out via our cookie preference centre, accessible via the cookie banner on first visit to the Website.

7. Data Security

7.1. Technical Measures

We implement industry-standard technical security measures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive personal and financial data stored on our systems;
• Firewalls, intrusion detection, and prevention systems;
• Access controls and role-based permissions limiting staff access to personal data to those with a legitimate need;
• Regular security audits and penetration testing.

7.2. Organisational Measures

Our staff are trained on data protection responsibilities and are bound by confidentiality obligations. We maintain a formal information security policy and incident response procedures. In the event of a personal data breach that poses a risk to your rights, we will notify you and the applicable regulatory authority as required by law.

8. Data Retention

8.1. Retention Periods

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account data: For the duration of your Account, plus a minimum of 5 years following Account closure, as required for AML compliance;
• Financial and transaction records: Minimum of 7 years in accordance with accounting and regulatory obligations;
• KYC documentation: Minimum of 5 years from the end of the business relationship;
• Support communications: Up to 3 years from the date of the last interaction;
• Marketing data: Until you withdraw consent or for up to 2 years of inactivity.

After the applicable retention period, data will be securely deleted or anonymised.

9. Your Rights

9.1. Rights Under PIPEDA and Provincial Law

As a Canadian resident, you have the following rights with respect to your personal information:

• Right of access: You may request a copy of the personal data we hold about you;
• Right to correction: You may request that inaccurate or incomplete personal data be corrected;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing;
• Right to complain: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the applicable provincial privacy commissioner;
• Right to erasure (where applicable): In certain circumstances, you may request the deletion of your personal data, subject to our legal retention obligations.

9.2. How to Exercise Your Rights

To exercise any of your rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond within 30 calendar days of receiving your request. We may require you to verify your identity before processing your request.

10. International Data Transfers

In some cases, your personal data may be transferred to and processed in countries outside of Canada, for example where our service providers or technology partners are located. Where such transfers occur, we ensure that appropriate safeguards are in place, such as contractual clauses or equivalent data protection standards, to protect your personal information in accordance with this Policy and applicable Canadian privacy law.

11. Minors

The Website is not directed at individuals under the age of 18 (or the higher legal minimum gambling age in your province). We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated Account. If you believe a minor has registered an Account, please contact us immediately at [email protected]. For more information on how we protect minors, please see our Responsible Gaming Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. The revised Policy will be published on the Website with an updated "Last Updated" date. Where changes are material, we will notify you by email or by a prominent notice on the Website. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the details below:

• General enquiries: [email protected]
• Privacy / Data Protection Officer: [email protected]
• Website: spin-boss-casino.ca

If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or call toll-free: 1-800-282-1376.