Privacy Policy

The Foundation of Digital Trust

In the modern era of iGaming, data is as valuable as the currency used to play. At PlayNow Canada, we recognize that when you perform a Login or engage in our Games, you are entrusting us with sensitive personal information. We take this responsibility with the utmost seriousness. As a provincially regulated entity, we operate under a transparent framework where privacy is not an afterthought—it is a core feature of our architecture.

This Privacy Policy is designed to inform you about how we handle your “digital footprint.” Whether you are playing in British Columbia, Manitoba, or Saskatchewan, our 2026 security protocols are synchronized to provide a unified, fortress-like defense for your data.

1.1 Regulatory Compliance and Legal Framework

Our data practices are not arbitrary; they are mandated by the highest levels of Canadian law. We operate in strict adherence to:

• PIPEDA (Federal): The gold standard for how private-sector organizations must handle personal information.
• Provincial Privacy Acts: Specific statutes governing data in participating provinces (e.g., FIPPA in BC).
• CASL (Canada’s Anti-Spam Legislation): Ensuring that your communication preferences are respected and that you are never subjected to unsolicited marketing.

1.2 Authoritative Privacy Resources in Canada

To understand your rights as a Canadian citizen and the standards we uphold, we encourage you to visit these authoritative regulatory bodies:

Information Collection – What We Know

2.1 Explicit Data Collection

During the Sign Up process, we collect information that is strictly necessary for legal and operational purposes:

• Identification: Full legal name, date of birth (to verify 19+ or 18+ status), and government ID numbers.
• Contact Information: Physical address, email, and phone number (to verify provincial residency).
• Financial Details: Verified bank account information for EFT withdrawals and masked credit card data.

2.2 Implicit and Technical Data Collection

To maintain the security of the platform and prevent unauthorized access, we collect:

• Geolocation Data: Crucial for confirming that you are physically within BC, MB, or SK at the time of play.
• Device Fingerprinting: IP addresses, browser types, and operating system versions to detect fraudulent login attempts.
• Behavioral Data: Patterns of play used exclusively for our Responsible Gaming AI (e.g., detecting signs of stress or addiction).

Interactive Visual – Data Encryption Strength

The following chart illustrates the evolution of our data security layers. In 2026, PlayNow Canada utilizes a “Zero-Trust” architecture, ensuring that every request for data is verified, regardless of its origin.

How We Use Your Information

4.1 Operational Necessity

We do not sell your data. We use it to:

• Process your deposits and withdrawals through verified Canadian financial institutions.
• Provide customer support through 24/7 channels.
• Administer our loyalty programs and provincial lottery draws.

4.2 Proactive Protection (Responsible Gaming)

One of the most innovative uses of data at PlayNow is the protection of our players. Our GameSense AI analyzes anonymized play data to identify behaviors that correlate with problem gambling. If the system flags a risk, we use your contact data to provide a “wellness check” or suggest a cooling-off period.

Data Retention and Your “Right to be Forgotten”

5.1 How Long We Keep Your Information

At PlayNow Canada, we do not believe in perpetual data storage. We adhere to a “Purpose-Driven Retention” model. We keep your personal information only as long as:

• Your account remains active.
• It is required to fulfill the specific purposes outlined in Part 1 (e.g., providing access to Games).
• It is mandated by Canadian federal or provincial law (e.g., Anti-Money Laundering statutes require certain records to be kept for 7 years).

5.2 Data Deletion Protocols

Once your data is no longer required for legal or operational purposes, it undergoes a secure destruction process. This includes “cryptographic erasure” for digital records and professional shredding for any physical documentation. If you choose to close your account, you can request a final data audit to see exactly what remains for statutory reasons.

Third-Party Disclosures and Partner Standards

6.1 Who We Share Data With

We do not sell, rent, or trade player lists. However, to provide a modern iGaming experience, we partner with specialized service providers. Your data is only shared with:

1. Financial Institutions: To process Interac e-Transfers and bank withdrawals.
2. Identity Verification Services: To ensure every Login is legitimate and performed by the account owner.
3. Regulatory Bodies: Such as the BCLC or LGCA for provincial compliance audits.
4. Security Firms: To provide 24/7 threat monitoring and DDoS protection.

6.2 The “Equivalent Protection” Guarantee

Every partner we work with must sign a Data Processing Agreement (DPA) that guarantees a level of protection equivalent to our own. If a partner operates outside of Canada, we ensure they meet the rigorous standards of PIPEDA and the GDPR.

Cookies and Digital Tracking in 2026

7.1 Transparent Tracking

Cookies are essential for the Indwin7 Register or PlayNow session to remain secure across different pages. However, we believe in “Minimalist Tracking.”

• Essential Cookies: Required for technical stability and geolocation verification.
• Performance Cookies: Anonymized data used to fix bugs and improve game load speeds.
• Marketing Cookies: Only activated if you provide express consent during your first visit.

7.2 Managing Your Preferences

You can adjust your cookie settings at any time via the “Privacy Dashboard” in your account profile. Furthermore, our site respects the “Global Privacy Control” (GPC) signal sent by modern browsers, automatically opting you out of non-essential tracking.

Children’s Privacy and Age Verification

8.1 Strict Age Gate

Our services are exclusively for adults. We do not knowingly collect information from anyone under the legal gambling age (19+ in BC/SK, 18+ in MB).

• Active Verification: We use third-party databases to confirm your age during registration.
• Parental Guidance: We encourage parents to use monitoring software like Net Nanny or BetBlocker to prevent underage access to gaming content.

8.2 Remediation for Minor Data

If we discover that a minor has bypassed our security and provided personal data, we will immediately delete that information and permanently block the associated device ID from our servers.

Security Breach Protocols and Incident Response

9.1 Proactive Threat Neutralization

In the 2026 digital landscape, a passive defense is insufficient. PlayNow Canada utilizes a Security Operations Center (SOC) that operates 24/7/365. Our systems employ “Active Deception” technology and “Honey Pots” to identify and neutralize attackers before they reach any sensitive user databases.

9.2 The “Seven-Step” Breach Protocol

In the highly unlikely event that our security layers are compromised, PlayNow Canada follows a strict, legally mandated incident response plan:

1. Containment: Affected servers are immediately isolated from the main network.
2. Audit: A deep-forensic analysis is performed to identify exactly what data was accessed.
3. Regulatory Notification: Within the hours required by PIPEDA, we notify the Office of the Privacy Commissioner of Canada.
4. User Notification: We provide transparent, direct communication to affected players via email and in-app alerts.
5. Remediation: We offer free identity theft protection and credit monitoring services to impacted individuals.
6. Law Enforcement: Full cooperation with the Royal Canadian Mounted Police (RCMP) cybercrime division.
7. System Hardening: We perform a complete architectural review to prevent recurrence.

Employee Access and Data Ethics

10.1 The “Principle of Least Privilege”

At PlayNow, even our employees do not have unfettered access to your data. We operate under the Principle of Least Privilege (PoLP). This means:

• Segmented Access: A customer support agent can see your contact history but cannot view your full bank account details or encrypted password.
• Audit Logs: Every instance of an employee accessing a user profile is logged, timestamped, and subject to periodic review by our Internal Audit team.
• Background Checks: All staff members with data access must pass high-level security clearances and provincial gaming background checks.

10.2 Mandatory Privacy Training

Data protection is a culture, not just a set of rules. Every PlayNow employee undergoes mandatory, semi-annual privacy and cybersecurity training. Failure to adhere to these strict internal privacy standards results in immediate termination and potential legal action.

International Data Transfers and Jurisdictional Integrity

11.1 Sovereignty of Canadian Data

While many offshore platforms store your data in “gray-market” jurisdictions with weak privacy laws, PlayNow Canada ensures your data remains under the protection of the Canadian legal system. We utilize Sovereign Cloud Infrastructure, meaning our primary data centers are physically located on Canadian soil.

11.2 Global Service Standards

When we utilize global tools (such as specific game engine analytics), we ensure that the data is stripped of all Personally Identifiable Information (PII) before it leaves the country. We cross-reference our standards with the following international frameworks to ensure we remain a global leader in iGaming privacy:

Final Declaration of Rights and Contact Information

12.1 Managing Your Privacy Profile

You have the power to control your data. By navigating to the “Privacy Dashboard” after your Login, you can:

• Opt-Out: Stop all non-essential data collection for marketing purposes.
• Data Portability: Download a machine-readable copy of your personal data file.
• Account Locking: Use our Responsible Gaming tools to temporarily or permanently stop data processing related to new bets.

12.2 Contacting our Data Protection Officer (DPO)

If you have questions, complaints, or specific requests regarding your information, our dedicated Privacy Team is ready to assist.

• Email: privacy@playnow.ca
• Mailing Address: PlayNow Privacy Office BCLC Kamloops Office 74 West Seymour Street Kamloops, BC V2C 1E2

12.3 Conclusion of the 2026 Privacy Policy

By maintaining an active profile on PlayNow Canada, you acknowledge that you have read and understood this Privacy Policy. We are proud to be the most trusted gaming brand in Canada, and we will continue to invest in the technologies and legal frameworks required to keep your digital identity safe.