Privacy Policy

Version: 1.0  |  Last Updated: June 15, 2025

This Privacy Policy ("Policy") describes how Casino Days ("we", "us", or "our"), operating through casinodays-ca.it.com (the "Website"), collects, uses, stores, and shares personal data relating to Players, visitors, and other individuals who interact with our services ("you"). We are committed to protecting your personal data and to processing it in a transparent, fair, and lawful manner.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

1. Introduction

1.1 Our Commitment to Privacy

We respect your right to privacy. We only collect personal data that is necessary for the provision of our services and we process it in accordance with applicable data protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada.

1.2 Scope

This Policy applies to all personal data processed by us in connection with the Website, including data collected during account registration, gameplay, deposits and withdrawals, customer support interactions, marketing communications, and visits to the Website by non-registered users.

1.3 Data Controller

For the purposes of applicable data protection law, Casino Days is the data controller responsible for your personal data. Our designated privacy contact can be reached at [email protected].

2. Data We Collect

2.1 Data You Provide Directly

We collect personal data that you voluntarily provide to us when you:

• Register an Account: full name, date of birth, email address, postal address (including province and postal code), username, and phone number;
• Complete KYC Verification: copies of government-issued identity documents, proof of address, and, where required, source of funds documentation;
• Make Financial Transactions: payment method details (card numbers, e-wallet identifiers, bank account details);
• Contact Customer Support: the content of your communications and any attachments you provide;
• Participate in Promotions: responses to surveys, competition entries, and promotional claim data.

2.2 Data Collected Automatically

When you access the Website, we automatically collect certain technical data, including:

• Device and Browser Information: IP address, device type, operating system, browser type and version;
• Usage Data: pages visited, games played, time spent on pages, click paths, session duration;
• Transaction Data: deposit and withdrawal history, wagering history, bonus activity;
• Geolocation Data: approximate geographic location derived from your IP address (we do not collect precise GPS location without your explicit consent);
• Cookies and Tracking Data: as described in Section 6 of this Policy.

2.3 Data Received from Third Parties

We may receive personal data about you from third-party sources, including:

• Identity and age verification providers used for KYC purposes;
• Payment processors and financial institutions processing your transactions;
• Fraud prevention and AML compliance services;
• Publicly available sources and credit reference agencies;
• Self-exclusion registries and responsible gambling databases (e.g., where you have registered with a self-exclusion program).

3. How We Use Your Data

3.1 Provision of Services

We use your personal data primarily to provide and manage the services offered through the Website, including:

• Creating and managing your Account;
• Verifying your identity and age (KYC);
• Processing deposits, withdrawals, and other financial transactions;
• Enabling you to access and play Games;
• Providing customer support and handling complaints.

3.2 Legal and Regulatory Compliance

We are required to process certain personal data to comply with our legal obligations, including:

• Anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations;
• Age verification requirements;
• Responding to lawful requests from regulatory, law enforcement, and governmental authorities;
• Maintaining records for accounting and tax purposes.

3.3 Responsible Gaming

We use your Account data, gameplay data, and transaction data to monitor your gambling activity and to identify potential indicators of problem gambling. This may include applying responsible gambling tools proactively, for example by contacting you if our systems flag unusual patterns of play. Full details of our approach are set out in our Responsible Gaming Policy.

3.4 Marketing Communications

Where you have given your consent, or where we are otherwise permitted to do so under applicable law, we may send you promotional communications about our products, services, and offers by email, SMS, or other electronic channels. You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, by updating your Account notification preferences, or by contacting us at [email protected].

3.5 Fraud Prevention and Security

We process personal data to detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other illegal or prohibited behaviour. This processing is essential to protect both you and us.

3.6 Analytics and Website Improvement

We use aggregated and, where possible, anonymised data to analyse user behaviour, improve the Website's performance, enhance the user experience, and develop new products and features.

4. Legal Bases for Processing

We process your personal data on the following legal bases:

• Contractual Necessity: processing is necessary to perform our contract with you (the Terms & Conditions), e.g., Account management, payment processing, game delivery;
• Legal Obligation: processing is required to comply with applicable laws and regulations, e.g., KYC, AML, and CFT obligations;
• Legitimate Interests: processing is necessary for our legitimate interests or those of a third party, where those interests are not overridden by your data protection rights, e.g., fraud prevention, website security, analytics;
• Consent: where you have given explicit, freely given, specific, informed, and unambiguous consent to the processing, e.g., marketing communications, non-essential cookies.

Where we rely on consent as a legal basis, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Third Parties

5.1 Our Service Providers

We may share your personal data with trusted third-party service providers who assist us in delivering our services. These include:

• Payment processing companies and financial institutions;
• Identity and age verification providers;
• Game software providers and platform operators;
• Cloud hosting, IT infrastructure, and cybersecurity providers;
• Customer support platform providers;
• Email marketing and communications platforms;
• Analytics and fraud prevention services.

All third-party processors are bound by contractual obligations to process your data only on our instructions, to maintain appropriate security measures, and to comply with applicable data protection laws.

5.2 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where we are required or authorised to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of us, our Players, or others.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate restructuring, your personal data may be transferred to the relevant third party as part of that transaction. We will notify you of any such transfer and ensure that the receiving party is bound by privacy obligations no less protective than those set out in this Policy.

5.4 No Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (such as web beacons, pixels, and local storage) to operate the Website, analyse usage, and deliver relevant content and advertising.

6.2 Types of Cookies We Use

6.3 Managing Cookies

On your first visit to the Website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You may change your cookie preferences at any time through the cookie settings panel available on the Website. You may also configure your browser to block or delete cookies; however, please note that disabling essential cookies may affect the functionality of the Website.

7. Data Security

7.1 Security Measures

We employ industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive data stored on our servers;
• Access controls limiting access to personal data to authorised personnel on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Two-factor authentication (2FA) options for Account access.

7.2 Data Breach

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the applicable supervisory authority in accordance with our obligations under applicable data protection law, within the timeframes required by law.

8. Data Retention

8.1 Retention Periods

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our legal obligations. Specific retention periods include:

• Account Data: retained for the duration of your Account and for a minimum of five (5) years after Account closure, in compliance with AML record-keeping obligations;
• Transaction Records: retained for a minimum of five (5) years from the date of the transaction;
• KYC Documents: retained for a minimum of five (5) years after the end of the business relationship;
• Support Communications: retained for three (3) years following the closure of the support ticket;
• Marketing Data: retained until you withdraw consent or for a maximum of three (3) years from the last interaction, whichever is earlier.

8.2 Deletion

At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an individual.

9. Your Rights

9.1 Rights Under PIPEDA and Provincial Legislation

Subject to applicable law, you have the following rights with respect to your personal data:

• Right of Access: to request a copy of the personal data we hold about you;
• Right to Rectification: to request correction of inaccurate or incomplete data;
• Right to Erasure ("Right to be Forgotten"): to request deletion of your personal data, subject to our legal retention obligations;
• Right to Restrict Processing: to request that we limit the way we use your data in certain circumstances;
• Right to Data Portability: to receive your personal data in a structured, machine-readable format where technically feasible;
• Right to Object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: where processing is based on consent, to withdraw that consent at any time.

9.2 How to Exercise Your Rights

To exercise any of your rights, please contact our privacy team at [email protected]. We will respond to your request within 30 calendar days of receipt. We may ask you to verify your identity before processing your request. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to respond.

9.3 Complaints

If you believe that we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca or with your applicable provincial privacy commissioner.

10. International Data Transfers

10.1 Cross-Border Transfers

Your personal data may be transferred to and processed in countries outside Canada, including countries whose data protection laws may differ from those in your province or territory. Where we transfer personal data internationally, we ensure that appropriate safeguards are in place, such as:

• Contractual clauses that impose data protection obligations equivalent to those applicable in Canada;
• Transfers to countries recognised as providing an adequate level of data protection;
• Other legally recognised transfer mechanisms as required.

10.2 List of Jurisdictions

Data may be processed in the jurisdictions where our service providers operate their infrastructure, which may include countries within the European Economic Area (EEA), the United Kingdom, and other countries. A current list of data processing locations is available upon written request.

11. Minors

Our services are not directed at or intended for use by individuals under the applicable minimum gambling age. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from an individual below the applicable minimum age, we will promptly delete that data and close any associated Account. If you believe that we may have inadvertently collected data from a minor, please contact us immediately at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or our services. Material changes will be communicated to you via email and/or a prominent notice on the Website at least fourteen (14) days before the changes take effect. The date of the most recent revision is indicated at the top of this Policy. We encourage you to review this Policy periodically.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us at:

• Privacy & Data Protection Officer: [email protected]
• General Support: [email protected]
• Website: casinodays-ca.it.com

We are committed to resolving any privacy concerns you may have in a timely and transparent manner.