Privacy Policy

This Privacy Policy sets out how sudbury-casino, operated via sudbury-casino-ca.com, manages and protects personal data of players and website visitors. It applies to all users interacting with our services or platforms. The policy is effective as of November 6, 2025.

Who We Are

OBSERVE: sudbury-casino is a land-based and online casino brand operated under the regulatory authority of the Alcohol and Gaming Commission of Ontario (AGCO), Canada, with operations exclusively within Canadian jurisdictions.

Legal Operator: The property is managed by Gateway Casinos & Entertainment Limited (parent company), registered under Canadian law. Operational location: 400 Bonin Road, Chelmsford, ON P0M 1L0, Canada. Corporate headquarters: 4331 Dominion Street, Burnaby, BC V5G 1C7, Canada.
Licensing: Registered and regulated by the AGCO under the Gaming Control Act, 1992. All activities are subject to AGCO oversight. Casino operations valid through 2025.
Contact for Data Protection:
- Email (General): [email protected]
- Email (Support): [email protected]
- Postal Address: 400 Bonin Road, Chelmsford, ON P0M 1L0, Canada
- Data Protection Officer (DPO): For data protection queries, please contact [email protected] with subject line "Data Protection"
- Phone: Not specified (please use email for data protection inquiries)

REFLECT: All correspondence regarding privacy or data protection is directed to the responsible team at sudbury-casino-ca.com, ensuring regulatory compliance and user support.

What Personal Data We Collect

OBSERVE: sudbury-casino collects personal data required for service provision, regulatory compliance, and site optimization.

Personal Identification Data: Full name, date of birth, address, government-issued identification, email address, and phone number.
Technical Data: IP address, device identifiers, browser type, operating system, access logs, and session information.
Payment Data: Payment card details, bank account information, transaction history, and payout details (collected and processed in accordance with PCI-DSS standards where required).
Behavioral Data: Betting and gaming history, gameplay logs, site navigation patterns, and clickstreams.
Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party analytics cookies, and similar technologies for authentication, analytics, and advertising purposes.

EXPAND: Data is collected directly from users, through automated technologies, and from third-party partners as required by law. Failure to provide certain data may restrict access to our services.

Legal Basis for Processing

OBSERVE: sudbury-casino processes data under multiple legal grounds as stipulated by Canadian laws and AGCO requirements.

User Consent: Where required, we obtain explicit consent for data processing, especially for marketing communications and cookies.
Contract Fulfillment: Processing necessary to provide casino services, manage accounts, complete transactions, and fulfill user agreements.
Legitimate Interests: Ensuring platform security, conducting analytics, preventing fraud, and improving service operations, provided these interests do not override user rights.
Legal Obligations: Compliance with KYC (Know Your Customer), AML (Anti-Money Laundering), and regulatory reporting requirements as mandated by the AGCO and Canadian law.

REFLECT: All processing activities are transparently linked to their relevant legal basis, with user rights respected at all times.

Purpose of Processing

OBSERVE: Personal data is processed for clearly defined and lawful purposes, ensuring only relevant and necessary information is handled.

Provision of Casino Services: Account creation, verification, user authentication, gameplay management, and financial transactions.
Service Improvement: Monitoring site usage, collecting user feedback, and conducting analytics to enhance user experience.
Marketing and Communication: Sending promotional offers, newsletters (with consent), and service-related notifications.
Fraud Prevention and Security: Detecting suspicious activity, enforcing account security, and mitigating risks.
Regulatory Compliance: Fulfilling statutory obligations, including reporting to authorities and maintaining audit records.

REFLECT: Data use is strictly limited to these purposes, and users may opt out of non-essential processing (e.g., marketing) at any time.

Disclosure & Sharing

OBSERVE: sudbury-casino shares personal data only when necessary and in accordance with strict legal safeguards.

Payment Partners: Data shared with payment processors and financial institutions to facilitate deposits, withdrawals, and anti-fraud checks.
Service Providers: Third-party vendors delivering IT services, analytics, marketing, and customer support, bound by contractual data protection obligations.
Regulators and Authorities: Disclosure to AGCO and other competent authorities for regulatory compliance, audits, and legal investigations.
Affiliates: Data may be shared within the Gateway Casinos group solely for operational and compliance purposes.
Advertising Networks (With Consent): Data may be shared with advertising and analytics partners only where explicit user consent is obtained.

Legal Protection: All third parties are contractually required to maintain confidentiality, use data solely for specified purposes, and comply with applicable Canadian privacy laws.

International Transfers

OBSERVE: sudbury-casino primarily stores and processes data within Canada. International transfers occur only in limited circumstances.

Countries/Regions: Personal data may be transferred to service providers in other provinces or, where necessary, to countries with adequate data protection standards.
Protection Guarantees: All cross-border transfers are protected by standard contractual clauses or other legal mechanisms to ensure data protection equivalent to Canadian standards. Where data is processed outside Canada, contractual and technical safeguards are implemented to maintain privacy and security.

REFLECT: Users are notified of any significant changes to international data transfer practices, and all transfers comply with AGCO and federal privacy regulations.

Data Retention

OBSERVE: sudbury-casino applies specific retention policies based on regulatory obligations and operational needs.

Personal Data: Retained for the duration of the user relationship and no more than 5 years following account closure, unless longer retention is required by law (e.g., for KYC/AML).
Payment Data: Stored securely for 7 years in accordance with financial regulations, after which it is deleted or anonymized.
Technical and Behavioral Data: Retained for up to 3 years for analytics and security purposes before being anonymized or deleted.
Deletion Criteria: Data is deleted upon user request (unless retention is required), expiration of retention periods, or when processing is no longer necessary for the stated purposes.

REFLECT: sudbury-casino conducts regular reviews to ensure data is not retained longer than necessary and provides users with clear procedures for data deletion requests.

Your Rights

OBSERVE: In line with Canadian privacy laws (PIPEDA, Ontario's Freedom of Information and Protection of Privacy Act) and international standards, sudbury-casino guarantees the following rights:

Access: You may request access to your personal data at any time.
Correction & Deletion: You may request correction of inaccurate or incomplete data, or deletion where legally permissible.
Restriction of Processing: You may request limits on the use of your data in specific situations.
Objection: You may object to processing based on legitimate interests, including direct marketing.
Data Portability: You may request a copy of your data in a standardized, machine-readable format.
Withdrawal of Consent: Where processing relies on your consent, you may withdraw it at any time (e.g., unsubscribing from marketing communications).

Procedure: To exercise your rights, submit a request to [email protected] or via our support email. We will acknowledge your request within 5 business days and provide a complete response within 30 days, free of charge.
Legal Reference: Rights are granted under Canadian law, with alignment to GDPR standards for international users where applicable. sudbury-casino does not process data governed by Mexican privacy law unless a user is physically located in Mexico and accesses the platform (rare for CA-only service).

REFLECT: sudbury-casino is committed to facilitating these rights without undue delay, subject to applicable legal and regulatory constraints.

Cookies & Tracking Technologies

OBSERVE: sudbury-casino uses cookies and similar technologies to enhance functionality, analyze usage, and support marketing efforts.

Session Cookies: Enable essential site functions and expire when you close your browser.
Persistent Cookies: Remain on your device for a defined period to remember preferences and settings.
Third-Party Cookies: Deployed by analytics (e.g., Google Analytics) and advertising partners to gather aggregated usage data or target relevant content (with your consent).

Cookie Management: You can manage or disable cookies through your browser settings or by using internal account panel controls where available. For more information, consult our Cookies Policy.

Data Security

OBSERVE: sudbury-casino implements robust technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

Encryption: All data is encrypted in transit using TLS 1.2+ and at rest with industry-standard protocols.
Access Controls: Multi-factor authentication, strict user privilege management, and regular access reviews.
Security Audits: Regular third-party and internal security audits, vulnerability assessments, and penetration testing.
Staff Training: Mandatory staff training on data protection, security awareness, and incident response procedures.
Incident Response: Comprehensive incident response protocols for prompt detection, containment, and notification of data breaches.
Compliance: Adherence to international security standards, including ISO 27001 and SOC 2 frameworks, to the extent applicable to Canadian casino operations.

REFLECT: sudbury-casino regularly updates its security measures in line with evolving threats and regulatory guidance.

Complaints & Contacts

OBSERVE: sudbury-casino provides multiple channels for privacy inquiries and complaints.

Email (DPO/Data Protection): [email protected]
Email (Support): [email protected]
Postal Address: 400 Bonin Road, Chelmsford, ON P0M 1L0, Canada
Online Feedback: Please email or use the support page on sudbury-casino-ca.com.

Complaint Procedure: Submit your complaint via email or post. You will receive an acknowledgment within 5 business days and a full response within 30 days. If further investigation is needed, you will be informed of expected timelines.
Escalation: If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada:
30 Victoria Street, Gatineau, Quebec K1A 1H3, Canada
Toll-free: 1-800-282-1376
Website: priv.gc.ca

REFLECT: sudbury-casino is committed to resolving all complaints fairly and in compliance with legal obligations. Users are encouraged to contact our DPO before escalating to supervisory authorities.

Updates

OBSERVE: sudbury-casino reserves the right to update this Privacy Policy as required by changes in law or operational practices.

Notification: Users will be notified of material changes via email (where provided), website banners, and/or account dashboard alerts.
Version Control: This policy is identified as "Last updated: November 6, 2025". A changelog of material updates will be maintained on sudbury-casino-ca.com.
Advance Notice: For significant changes, we provide at least 30 days' notice before the effective date. Users may object or close their accounts if they do not accept updated terms.

REFLECT: Continued use of sudbury-casino-ca.com constitutes acceptance of the current Privacy Policy. Users are encouraged to review this policy regularly for updates.