Privacy Policy

Last updated: 10 August 2026

This policy explains what personal information MGE DIGITAL CANADA INC. collects about you, why we collect it, who we share it with, how long we keep it and what you can require us to do with it. It applies to this website, to your player account and to the support channels we operate.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law in Ontario. Where gambling regulation requires something different from what we would otherwise choose, the regulation prevails, and we say so below rather than leaving you to infer it.

1. Who is responsible for your information

MGE DIGITAL CANADA INC., Ontario Corporation Number 2864039, incorporated on August 31, 2021 and registered at 22 Adelaide Street West, Suite 3400, Toronto, Ontario, M5H 4E3, Canada, is the organisation accountable for the personal information described in this policy.

We have designated a Privacy Officer who is accountable for our compliance. Their contact details are in section 13.

2. What we collect

2.1 Identification and account information

• Legal first and last name.
• Date of birth.
• Residential address, including city, province and postal code.
• Email address and telephone number.
• The password you choose — stored only as a cryptographic hash that cannot be reversed.
• Where electronic verification is inconclusive: a government-issued photo identity document and, if needed, a document confirming your address.
• The results of identity, age and address verification checks.

2.2 Financial information

• Deposit and withdrawal records: amounts, dates, methods and outcomes.
• Payment method details in the form we receive them. Full card numbers are handled by our payment partners; we hold identifiers such as the card type and last four digits, not the full number.
• Account balance and transaction history.
• Information gathered to meet anti-money-laundering obligations, including source-of-funds information where required.

2.3 Gaming and behavioural information

• Games opened, stakes, results and session times.
• The responsible gaming limits you set, and changes you make to them.
• Cooling-off and self-exclusion records.
• Indicators derived from your play that are used to identify possible gambling-related harm. This is a regulatory expectation: an operator is required to look, not merely to offer tools and hope.

2.4 Technical information

• IP address, and the geolocation result derived from it and from your device.
• Device type, operating system, browser and language settings.
• Log-in times, session identifiers and security events such as failed sign-in attempts.
• Pages visited on this site and the actions taken on them.

2.5 Correspondence

• Messages you send to support, and our replies.
• Complaints, the investigation record and the outcome.
• Notes of any conversation about your account or your play.

3. Why we collect it, and on what basis

Under PIPEDA we may collect, use and disclose personal information only for purposes a reasonable person would consider appropriate, and generally with your knowledge and consent. Some processing is instead required or permitted by law. Our purposes are:

4. Information you cannot decline to give

Most of what we collect is not optional, and we would rather be direct about that than present a choice that does not exist.

We cannot open an account without your name, date of birth and address, because we cannot verify your age or identity without them, and we are not permitted to let you play unverified. We cannot process a deposit or a withdrawal without the associated financial information. We cannot let game content load without checking your location. If you withdraw consent to this processing, we cannot continue to provide the service, and your account will be closed and your balance returned.

Marketing is the exception. It is genuinely optional, it is off unless you switch it on, and declining it changes nothing else about your account.

5. Cookies and similar technologies

Cookies are small files stored by your browser. We also use comparable technologies such as local storage. We group them as follows.

Your browser lets you block or delete cookies. Blocking strictly necessary cookies will stop you from signing in or completing registration. The age and location answer is stored in your browser’s local storage, not sent to us as a profile.

6. Who we share information with

We do not sell personal information, and we do not share it for anyone else’s marketing. We disclose it only as described here.

• Identity and age verification providers. To confirm that you are who you say you are and old enough to play. They receive the details needed for that check and the result comes back to us.
• Payment partners and financial institutions. To process deposits and withdrawals and to meet their own regulatory duties.
• Geolocation providers. To confirm that you are physically in Ontario when game content is opened.
• Game suppliers. To deliver the games themselves and to resolve queries about a specific round.
• The provincial regulator and the entity through which internet gaming is conducted in Ontario. Where they require information from us, including for audits, investigations and player protection.
• Law enforcement and financial intelligence authorities. Where we are required to report or to respond to a lawful demand.
• Self-exclusion registers. Where a province-wide programme applies, so that an exclusion is effective beyond this single operator.
• Professional advisers and service providers. Hosting, security, customer support tooling, auditors and lawyers, bound by confidentiality and permitted to use the information only for the service they provide to us.
• An acquirer. If the business is sold or reorganised, subject to equivalent protection continuing to apply.

7. Transfers outside Canada

Some of our service providers process information outside Canada, including in the United States and the European Union. Where that happens, the information may be accessible to the courts, law enforcement and national security authorities of that country under its own laws. We tell you this because PIPEDA expects an organisation to be transparent about it rather than to bury it.

We remain accountable for information we transfer. We use contractual and organisational measures intended to give a comparable level of protection, and we assess providers before engaging them. You may ask our Privacy Officer where a particular category of information is processed.

8. How long we keep information

We keep personal information only as long as we need it for the purpose it was collected for, or as long as the law requires — whichever is longer. Gambling and anti-money-laundering legislation imposes minimum retention periods that we cannot shorten at your request.

When information is no longer needed it is deleted or irreversibly anonymised.

9. How we protect information

• Encryption of traffic between your device and our servers.
• Passwords stored only as cryptographic hashes, never in a readable form.
• Access limited to staff who need it for their role, and logged.
• Parameterised database queries and output escaping, to reduce injection and scripting risks.
• Protections against cross-site request forgery on every form that changes anything.
• Rate limiting and monitoring on registration and sign-in.
• Client addresses stored as salted hashes for rate limiting, rather than in plain text.
• Staff training on the handling of personal information.
• Assessment of service providers before we engage them.

No system is perfectly secure. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required, and tell you what happened and what you can do.

10. Your rights

You may:

• Ask what we hold. Request access to your personal information, an account of how it has been used, and the third parties it has been disclosed to. We respond within 30 calendar days, or tell you why we need longer.
• Correct it. Ask us to fix information that is inaccurate or incomplete. Where a correction affects a verification decision, we may need to re-run the check.
• Withdraw consent. Withdraw consent to processing that relies on it, at any time, subject to legal and contractual restrictions. Withdrawing consent to the processing described in section 4 means we can no longer provide the service.
• Opt out of marketing. At any time, without giving a reason and without affecting your account.
• Complain. To our Privacy Officer, and then to the Office of the Privacy Commissioner of Canada.

We may ask you to verify your identity before acting on a request — otherwise the process itself could be used to obtain your information. There is no charge for a routine request.

Access may be limited where the law requires it: for example where disclosure would reveal information about another person, would compromise a fraud or anti-money-laundering investigation, or is subject to legal privilege. Where we withhold something, we will tell you that we have and on what general ground.

11. Marketing and how to stop it

We send marketing only to people who have actively opted in. The consent box during registration is separate from the mandatory ones, it is unticked by default, and leaving it unticked has no effect on your registration. We do not treat use of the service, or acceptance of these terms, as consent to marketing.

You can withdraw consent at any time in your account settings, through the unsubscribe link in any message, or by writing to our Privacy Officer. We act on withdrawal promptly and keep a record of it so that the preference is not lost.

We never send marketing to a self-excluded player, regardless of any consent given beforehand. Marketing is not shown on public pages of this site.

12. Information about young people

This service is not directed at anyone under 19 and we do not knowingly collect their personal information. Where a registration fails the age check, the details submitted are discarded rather than retained.

If you believe someone under 19 has provided information to us, contact our Privacy Officer and we will investigate and delete it.

13. Contacting our Privacy Officer

For any question about this policy, to make a request under section 10, or to complain about how we have handled your information:

Privacy Officer
MGE DIGITAL CANADA INC.
22 Adelaide Street West, Suite 3400, Toronto, Ontario, M5H 4E3, Canada
Email: [PRIVACY OFFICER EMAIL TBD]

We acknowledge privacy requests promptly and respond substantively within 30 calendar days. If we need longer, we will tell you before that period ends, explain why, and give a date.

14. Complaining to the Privacy Commissioner

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada. You do not need our permission and you do not need to complain to us first, though it is usually quicker if you do.

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec, K1A 1H3
Toll-free: 1-800-282-1376
Website: priv.gc.ca

Complaints about how we run the gaming service itself, rather than about privacy, go through our Complaints and Procedures instead.

15. Changes to this policy

We may update this policy to reflect changes in the law, in regulatory requirements or in how the service works. The “Last updated” date at the top always shows the current version.

Where a change materially affects how we use your information, we will tell you by email and through your account before it takes effect, and — where the change relies on your consent — we will ask for it rather than assume it.