This Privacy Policy sets out how personal information is collected, used, disclosed, retained, and protected in connection with access to and use of Gateway Casinos services in Canada. By using the services, you acknowledge that you have read and understood this Privacy Policy. The policy applies to all personal information held, regardless of the format in which it is stored.
Questions about this Privacy Policy or requests to exercise privacy rights can be directed to the Privacy Officer using the contact details provided in section 12.
1. Scope of this Privacy Policy
This Privacy Policy applies to personal information collected through the Gateway Casinos websites, account registration processes, customer support interactions, and any other points of contact between users in Canada and the service.
This Privacy Policy does not apply to third-party websites or services that may be linked from the platforms. Those third parties are responsible for their own privacy practices and data handling.
2. Information Collected
Personal information is collected to provide services, verify identity, comply with legal obligations, and maintain account security. The categories of personal information that may be collected include:
- Full legal name and date of birth
- Government-issued identification details, collected for identity verification and age confirmation
- Contact information, including email address, phone number, and mailing address
- Account credentials and login activity records
- Transaction records associated with the account
- Device and technical data, including IP address, browser type, and session data collected automatically when the services are accessed
- Communications sent to customer support
Personal information is not collected beyond what is reasonably required for the purposes described in this Privacy Policy.
3. Purposes of Collection and Use
Personal information is collected and used for the following purposes:
- Establishing and managing user accounts
- Verifying identity and confirming that users meet the minimum age requirement to access the services
- Complying with applicable Canadian federal and provincial laws, including anti-money laundering obligations and responsible gaming requirements
- Responding to inquiries and providing customer support
- Detecting and preventing fraud, unauthorized access, and other security incidents
- Fulfilling legal obligations imposed by regulatory authorities
Personal information is not used for purposes that are incompatible with those listed above without first obtaining consent or as otherwise permitted by law.
4. Legal Basis and Consent
Where required by Canadian privacy law, the collection and use of personal information is based on user consent. By registering an account with Gateway Casinos, you consent to the collection and use of personal information as described in this Privacy Policy.
Consent may be withdrawn at any time, subject to legal or contractual restrictions. Withdrawal of consent may affect the ability of the service to continue to provide access or functionality.
In certain circumstances, personal information may be collected or used without consent where permitted or required by law, including for fraud investigation or compliance with a legal obligation.
5. Disclosure of Personal Information
Personal information is not sold to third parties. Personal information may be disclosed in the following circumstances:
- To service providers that assist in operating the services, under contractual obligations that require protection of personal information and restrict use to specified purposes
- To regulatory authorities, law enforcement agencies, or courts when required by applicable law or a valid legal order
- To successor entities in the event of a merger, acquisition, or reorganization, provided that the receiving entity agrees to handle personal information in a manner consistent with this Privacy Policy
- With the explicit consent of the individual for any other purpose
Where personal information is disclosed to service providers located outside Canada, appropriate contractual protections are implemented. However, personal information transferred outside Canada may be subject to the laws of the jurisdiction in which it is held.
6. Retention of Personal Information
Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Account records and transaction data may be retained for a minimum period following account closure to satisfy legal and regulatory obligations.
Once the applicable retention period has expired, personal information is securely destroyed or anonymized.
7. Security Measures
Administrative, technical, and physical safeguards are implemented to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures are reviewed and updated as appropriate in response to changes in technology and risk.
No method of transmission or storage is entirely secure, and absolute security cannot be guaranteed. In the event of a privacy breach that poses a real risk of significant harm, affected individuals and the relevant privacy authority will be notified as required by law.
8. Your Privacy Rights
Under applicable Canadian privacy legislation, individuals have the right to:
- Request access to the personal information held about them
- Request correction of inaccurate or incomplete personal information
- Withdraw consent to the collection or use of their personal information, subject to legal limitations
- File a complaint with the relevant privacy authority if they believe their privacy rights have been violated
To exercise these rights, a written request should be submitted to the Privacy Officer. Responses will be provided within the timeframe required by applicable law.
9. Cookies and Automated Data Collection
The websites use cookies and similar tracking technologies to support the technical operation of the services and to collect session data. Browser settings may be configured to refuse cookies; however, this may affect the functionality of certain parts of the services.
Automated decision-making processes that produce legal or similarly significant effects on users are not used without human review.
10. Complaints and Regulatory Escalation
If a privacy concern is not resolved to the satisfaction of the individual, a complaint may be escalated to the applicable privacy authority. Depending on the province or territory of residence, the relevant authority may be:
| Province or Territory | Relevant Authority |
|---|---|
| Ontario | Information and Privacy Commissioner of Ontario |
| British Columbia | Office of the Information and Privacy Commissioner for BC |
| Alberta | Office of the Information and Privacy Commissioner of Alberta |
| All other provinces and territories | Office of the Privacy Commissioner of Canada |
11. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in practices or applicable law. When material changes are made, the updated Privacy Policy will be posted on the website and the date of last revision will be indicated.
Continued use of the services following the posting of an updated Privacy Policy constitutes acceptance of the revised terms.
12. Contacting the Privacy Officer
Questions, concerns, or requests related to this Privacy Policy or the handling of personal information can be directed to the Privacy Officer at:
Gateway Casinos - Privacy Officer
Email: privacy@gatewaycasinos.com
Mailing Address: Gateway Casinos, Privacy Officer, Canada
Requests will be acknowledged and responded to within the timeframe required under applicable Canadian privacy law.