Privacy Policy

Version: 1.0  |  Last Updated: August 19, 2026

This Privacy Policy ("Policy") describes how SpinBoss Casino ("SpinBoss", "we", "us", or "our"), operating the website at spin-boss-casino.ca (the "Website"), collects, uses, stores, shares, and protects your personal information. It also describes your rights with respect to your personal data and how you may exercise them.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By using our Website or Services, you confirm that you have read and understood this Policy. If you do not agree with the practices described herein, please discontinue use of the Website.

We are committed to compliance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Introduction

1.1. Who We Are

SpinBoss Casino operates the online gambling platform accessible at spin-boss-casino.ca and is the data controller responsible for your personal information collected through the Website and associated Services.

1.2. Scope

This Policy applies to all personal information collected from:

• Registered Players and prospective registrants;
• Visitors to our Website;
• Individuals who contact us via email, live chat, or telephone;
• Recipients of our marketing communications.

1.3. Definitions

• "Personal Information" – any information that identifies or can reasonably be used to identify an individual.
• "Processing" – any operation performed on personal information, including collection, storage, use, disclosure, or deletion.
• "Third Party" – any person or organisation other than you and SpinBoss Casino.

2. Data We Collect

2.1. Information You Provide Directly

We collect personal information that you voluntarily provide to us, including:

• Registration data: Full name, date of birth, email address, phone number, home address, and username;
• Identity verification documents: Copies of government-issued photo ID, proof of address, and source of funds documentation (as part of our KYC process);
• Payment information: Payment method details, transaction history, and billing address (note: we do not store full card numbers — payment processing is handled by certified third-party providers);
• Communications: Records of your interactions with our customer support team, including emails, live chat transcripts, and any feedback or complaints submitted.

2.2. Information Collected Automatically

When you visit or use the Website, we automatically collect certain technical and usage data, including:

• Device and browser information: IP address, browser type and version, operating system, device type, and unique device identifiers;
• Usage data: Pages visited, time spent on the Website, links clicked, game sessions, wager history, and deposit/withdrawal activity;
• Location data: General geographic location derived from your IP address;
• Log data: Server logs, error reports, and access timestamps.

2.3. Information from Third Parties

We may receive personal information about you from third parties, including:

• Payment service providers and banking institutions;
• Identity verification and fraud prevention services;
• Marketing and analytics partners;
• Publicly available sources and credit reference agencies.

3. How We Use Your Data

We use your personal information for the following purposes:

• Account creation and management: To register and maintain your Player Account, verify your identity, and provide access to our Services;
• Service delivery: To facilitate deposits, withdrawals, gameplay, and the redemption of bonuses and promotions;
• KYC and compliance: To verify your age, identity, and eligibility, and to comply with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations;
• Customer support: To respond to your enquiries, resolve disputes, and handle complaints;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, cheating, collusion, and other prohibited conduct;
• Responsible gaming: To monitor gaming behaviour and apply player protection tools, including spending limits and self-exclusion in accordance with our Responsible Gaming Policy;
• Marketing and promotions: To send you relevant offers, newsletters, and promotional communications, where you have consented to receive them;
• Analytics and improvement: To analyse Website usage patterns and improve the quality, performance, and content of our Services;
• Legal obligations: To comply with applicable Canadian laws and regulations and to respond to lawful requests from regulatory or law enforcement authorities.

4. Legal Bases for Processing

We process your personal information on the following legal grounds:

• Consent: Where you have provided explicit consent, such as for the receipt of marketing communications. You may withdraw your consent at any time by contacting us or using the unsubscribe link in our emails;
• Contractual necessity: Processing that is necessary to perform our obligations under the Terms & Conditions you accepted upon registration;
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including AML/CTF obligations and age verification;
• Legitimate interests: Processing that serves our legitimate business interests, such as fraud prevention, security monitoring, and service improvement, where such interests are not overridden by your rights and interests.

5. Data Sharing & Third Parties

5.1. Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the Website and delivering our Services. These include:

• Payment processors and financial institutions;
• Identity verification and KYC solution providers;
• Game software providers and platform operators;
• Customer support and live chat software providers;
• Email and marketing communication platforms;
• Cloud hosting and data storage providers;
• Analytics and tracking technology providers.

All third-party processors are contractually required to process your data only as instructed by us and in accordance with applicable privacy laws, and to implement appropriate technical and organisational security measures.

5.2. Legal & Regulatory Disclosures

We may disclose your personal information to regulatory authorities, law enforcement agencies, courts, or other government bodies where required by applicable law or valid legal process, including in connection with the prevention or investigation of financial crime.

5.3. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the successor entity as part of the transaction. We will notify you of any such change via the Website or by email.

5.4. No Sale of Personal Information

We do not sell, rent, or lease your personal information to third parties for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies

Cookies are small text files placed on your device when you visit our Website. They help us recognise your device, remember your preferences, and understand how you interact with our platform.

6.2. Types of Cookies We Use

6.3. Managing Cookies

You may control and manage cookies through your browser settings or via our Cookie Consent tool available on the Website. Please note that disabling certain cookies may affect the functionality of the Website. Strictly necessary cookies cannot be disabled as they are essential to its operation.

6.4. Other Tracking Technologies

In addition to cookies, we may use web beacons, pixel tags, and similar technologies to track user activity on the Website and in our email communications. These help us understand engagement with our content and marketing campaigns.

7. Data Security

7.1. Security Measures

We implement a comprehensive range of technical and organisational security measures to protect your personal information from unauthorised access, loss, alteration, or disclosure. These include:

• SSL/TLS encryption for all data transmitted between your browser and our servers;
• Firewalls and intrusion detection systems to monitor for and prevent unauthorised access;
• Access controls and role-based permissions limiting staff access to personal data;
• Regular security assessments and penetration testing;
• Secure data centres with physical access controls.

7.2. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable Canadian privacy law.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, to comply with AML/CTF regulations and applicable recordkeeping requirements;
• Transaction records: Retained for a minimum of 7 years in accordance with financial recordkeeping obligations;
• KYC documents: Retained for a minimum of 5 years from the date of verification or Account closure, whichever is later;
• Customer support records: Retained for up to 3 years from the date of the last interaction;
• Marketing preferences: Retained until you withdraw your consent or request deletion.

9. Your Rights

Subject to applicable Canadian privacy law, you have the following rights with respect to your personal information:

• Right of Access: You may request a copy of the personal information we hold about you;
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal information;
• Right to Erasure: You may request deletion of your personal information, subject to legal retention obligations;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing;
• Right to Complain: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the applicable provincial privacy commissioner;
• Right to Object: You may object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact our Privacy Officer at [email protected]. We will respond to your request within 30 days. We may request proof of identity before processing your request.

10. International Data Transfers

Some of our third-party service providers may be located outside of Canada. When we transfer your personal information internationally, we take steps to ensure that an adequate level of protection is maintained, including through the use of contractual safeguards, standard data protection clauses, or other mechanisms recognised under applicable Canadian law. By using our Website, you acknowledge that your personal information may be processed in jurisdictions outside Canada.

11. Minors

Our Services are strictly intended for adults who meet the minimum legal gambling age in their jurisdiction. We do not knowingly collect personal information from individuals under the age of 18 (or 19 in most Canadian provinces). If we become aware that we have collected personal information from a minor without appropriate consent, we will take steps to delete that information promptly. If you believe that we may have collected information from a minor, please contact us immediately at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The updated version will be posted on this page with a revised "Last Updated" date. Where changes are material, we will notify you via email or a prominent notice on the Website. We encourage you to review this Policy periodically. Your continued use of the Website following the posting of changes constitutes your acceptance of the updated Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer:

• Privacy Officer Email: [email protected]
• General Support: [email protected]
• Website: spin-boss-casino.ca

You also have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you believe your privacy rights have been violated.