Privacy Policy

This Privacy Policy explains how Gambiva Casino (“Gambiva”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information when you visit gambivacasino.co, create an account, use our gaming and payment services, contact customer support, participate in promotions, or otherwise interact with our platform.

We are committed to handling personal information in a transparent, fair, and secure manner. For users in Canada, this Privacy Policy is designed to reflect the requirements of applicable privacy and data protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where relevant, substantially similar provincial private-sector privacy laws such as those in British Columbia, Alberta, and Quebec. Where our services are offered to players in Ontario or interact with Ontario-specific regulated frameworks, we also seek to align our data handling practices with applicable gaming integrity, security, and player protection expectations.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the website or submit personal information to us.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

our website and mobile-optimized pages;.
player registration and account verification processes;.
deposits, withdrawals, bonuses, promotions, and loyalty features;.
customer support communications by email or live chat;.
responsible gambling and account protection tools;.
fraud prevention, anti-money laundering, and security monitoring systems; and.
cookies, analytics tools, and similar technologies.

This Privacy Policy applies to both prospective users and registered players, subject to local legal restrictions and the availability of services in a particular province or territory.

2. Applicable Canadian Privacy Framework

When Gambiva Casino handles personal information in the course of commercial activity in Canada, we aim to comply with the core privacy principles recognized under PIPEDA, including accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, individual access, and compliance challenge procedures.

In Canada, privacy law can vary by province. In particular:

PIPEDA generally applies to private-sector organizations engaged in commercial activities across Canada, especially where information crosses provincial or national borders.
British Columbia, Alberta, and Quebec each have private-sector privacy legislation that may apply to certain in-province processing activities.
In the gaming context, additional operational standards or contractual obligations may apply depending on the province, including Ontario’s regulated market structure involving iGaming Ontario (iGO) and the Alcohol and Gaming Commission of Ontario (AGCO).

Nothing in this Privacy Policy is intended to limit any statutory privacy rights that may apply under applicable law.

3. What Personal Information We Collect

We may collect the following categories of personal information, depending on how you use our services:

3.1 Information you provide directly

Full name.
Date of.
Residential.
Email.
Telephone.
Username and.
Government-issued identification.
Payment account.
Source of funds or wealth information where legally.
Communications sent to customer.
Information submitted in connection with promotions, surveys, or.

3.2 Information collected automatically

When you use the website, we may automatically collect:

IP.
Device type and operating.
Browser type and language.
Date and time of.
Pages viewed and on-site.
Referral URLs and campaign data.
Cookie identifiers and similar technical data.
Geolocation indicators derived from IP or device.
Session logs and security.

3.3 Gaming and transactional information

We may collect and generate records relating to:

Account creation and login.
Deposits and.
Preferred currency, including CAD account activity where.
Payment methods used, such as Interac e-Transfer, Interac Online, iDebit, InstaDebit, Visa, Mastercard, or supported crypto.
Betting, wagering, and gameplay.
Bonuses, free spins, and promotion redemption.
Turnover, wagering progress, and withdrawal restrictions linked to bonus.
Self-exclusion, cooling-off, limit-setting, and safer gambling.
Identity verification and anti-fraud review.

3.4 Information from third parties

We may receive personal information from third parties, including:

identity verification providers;.
payment processors and fraud screening providers;.
analytics and marketing partners;.
customer relationship management platforms;.
game suppliers and platform providers;.
affiliates and referral partners, where lawfully permitted; and.
regulators, law enforcement, or dispute resolution bodies where required.

4. Why We Collect Personal Information

We collect and use personal information only for legitimate and identified purposes, including:

creating and administering player accounts;.
verifying identity, age, and eligibility to use the services;.
processing deposits, withdrawals, chargeback reviews, and payment reconciliation;.
delivering games, promotions, free spins, and bonus features;.
monitoring compliance with our Terms and Conditions and bonus rules;.
detecting and preventing fraud, collusion, abuse, money laundering, and other unlawful activity;.
meeting legal, regulatory, tax, accounting, audit, and licensing obligations;.
responding to customer support requests and complaints;.
providing responsible gambling tools and intervention measures;.
improving website functionality, security, and user experience;.
sending service messages, security notices, and, where permitted, marketing communications; and.
establishing, exercising, or defending legal claims.

We do not collect more personal information than is reasonably necessary for these purposes.

5. Legal Basis and Consent

Where Canadian law requires consent, we rely on your knowledge and consent for the collection, use, or disclosure of personal information, except where otherwise permitted or required by law.

Consent may be expressed, for example when you register, upload identity documents, select communication preferences, or submit information through forms. Consent may also be implied where appropriate under applicable law and where the purpose would be reasonably understood in the circumstances.

Please note that certain processing activities are necessary for us to provide gambling services safely and lawfully. If you do not provide required information, we may be unable to open your account, process transactions, verify your identity, or continue offering services.

Subject to legal and contractual restrictions, you may withdraw consent for certain uses of your personal information by contacting us. However, withdrawal of consent does not affect processing already carried out and may limit or end your ability to use some or all services.

6. Age and Eligibility Controls

Our services are intended only for individuals who are legally permitted to participate in online gambling in their jurisdiction. We do not knowingly collect personal information from minors or anyone below the lawful gambling age in the relevant province or territory.

We may use age verification, identity checks, document review, and risk-based monitoring to confirm eligibility. If we believe an account has been opened by an underage or otherwise ineligible person, we may suspend or close the account and take any action required by law, contract, or internal policy.

7. Identity Verification, AML, and Security Checks

To comply with legal obligations and protect the integrity of our platform, we may collect and process personal information for know-your-customer (KYC), anti-money laundering (AML), anti-fraud, and security purposes.

This may include:

verifying identity documents and address information;.
confirming payment method ownership;.
reviewing deposits, withdrawals, account behavior, and linked accounts;.
screening for suspicious or restricted activity;.
retaining records required for audit and compliance purposes; and.
reporting or disclosing information where required under applicable laws related to money laundering, terrorist financing, fraud prevention, or gaming regulation.

These checks may be carried out before account activation, before withdrawals, during ongoing monitoring, or when activity triggers enhanced review.

8. Cookies and Similar Technologies

We use cookies, pixels, tags, SDKs, and similar technologies to operate the website and improve our services.

These technologies may be used for:

essential website functions, such as login security and session management;.
remembering preferences, including language and device settings;.
measuring traffic, page performance, and player journeys;.
affiliate attribution and campaign effectiveness;.
security monitoring and abuse prevention; and.
personalizing content or marketing where permitted.

Some cookies are necessary for the website to function properly and cannot be disabled through our systems. Other cookies may be optional depending on your location and the applicable legal standard.

You can manage cookies through your browser settings. Disabling certain cookies may affect site functionality.

9. Marketing Communications

If permitted by law, we may use your contact information and account activity to send promotions, bonus offers, free spin campaigns, product updates, and other marketing materials.

Marketing may be delivered by email, onsite messaging, SMS, push notifications, or other available channels, subject to your preferences and applicable law. Ontario players or other users in jurisdictions with stricter promotional rules may receive communications that are tailored to local restrictions.

You can opt out of marketing communications at any time by using the unsubscribe function in the message, adjusting your account settings, or contacting customer support. Even if you opt out of marketing, we may still send non-promotional service communications such as security alerts, verification requests, transaction notices, or important policy updates.

10. Responsible Gambling and Player Protection

We may process personal information to support responsible gambling measures and player protection obligations. This may include monitoring gambling patterns, applying account limits, reviewing affordability indicators where appropriate, enabling cooling-off periods, and administering self-exclusion requests.

If you are in Canada and need support related to gambling harm, resources may be available through provincial or national support services, including ConnexOntario at 1-866-531-2600 and the Problem Gambling Helpline at 1-888-230-3506, where relevant to your location.

Where necessary, we may use personal information to investigate risky or harmful play, contact a player about safer gambling concerns, or restrict account access in line with applicable legal or regulatory obligations.

11. When We Share Personal Information

We do not sell personal information in the ordinary meaning of the term. However, we may disclose personal information to trusted third parties where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

payment processors, banks, and alternative payment method providers;.
identity verification, fraud prevention, and cybersecurity providers;.
hosting, cloud storage, customer support, CRM, and IT service providers;.
gaming platform providers and software suppliers;.
analytics, affiliate, and marketing service providers, where permitted;.
auditors, professional advisers, and corporate group entities;.
regulators, licensing bodies, law enforcement authorities, courts, or government agencies; and.
prospective buyers, investors, or transaction advisers in the event of a merger, restructuring, financing, or sale, subject to appropriate safeguards.

We require service providers to process personal information only on authorized instructions and to protect it with suitable confidentiality and security measures.

12. Cross-Border Transfers

Your personal information may be stored or processed outside your province or outside Canada, including in jurisdictions where our affiliates, platform providers, payment processors, cloud hosts, or support providers operate.

When personal information is transferred across borders, it may become subject to the laws of the destination jurisdiction and may be accessible to courts, regulators, or law enforcement in that jurisdiction.

Where required by applicable law, we implement reasonable contractual, organizational, and technical safeguards to protect personal information during cross-border processing. By using the services or submitting personal information to us, you understand that international transfers may occur as part of our business operations.

13. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, tax, accounting, security, anti-fraud, dispute resolution, and recordkeeping purposes.

Retention periods may vary depending on the nature of the information and applicable obligations. For example, account, transaction, identity verification, and compliance-related records may be retained for a longer period where required under gambling, financial crime, or audit rules.

When personal information is no longer required, we will securely delete, anonymize, or irreversibly aggregate it, unless continued retention is permitted or required by law.

14. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, misuse, alteration, or destruction.

These safeguards may include:

encrypted connections and secure transmission protocols;.
access controls and role-based permissions;.
system monitoring, logging, and anomaly detection;.
secure data backups and business continuity procedures;.
staff confidentiality obligations and training; and.
vendor due diligence and contractual security requirements.

No method of internet transmission or electronic storage is completely secure. While we take reasonable steps to protect personal information, we cannot guarantee absolute security.

15. Accuracy of Information

We take reasonable steps to ensure that personal information used for significant decisions or ongoing account administration is as accurate, complete, and up to date as necessary for the purposes for which it is used.

Players are responsible for notifying us of changes to their contact details, payment information, or other relevant account information. We may request updated documents or information where needed to maintain accurate records.

16. Your Privacy Rights

Subject to applicable law, you may have the right to:

request access to personal information we hold about you;.
request correction of inaccurate or incomplete personal information;.
withdraw consent to certain processing activities, where consent is the legal basis;.
request information about how your personal information has been used or disclosed;.
complain about our privacy practices; and.
request deletion or restriction in limited circumstances where such rights are available under applicable law.

These rights are not absolute. We may need to retain or continue using certain information to comply with legal obligations, prevent fraud, complete transactions, enforce agreements, or protect the rights and safety of others.

To exercise your rights, please contact us using the details in the “Contact Us” section below. We may need to verify your identity before fulfilling your request.

17. Breach Response

If we become aware of a breach of security safeguards involving personal information, we will assess the incident promptly and take reasonable steps to contain, investigate, and remediate it.

Where required by applicable law, we will notify affected individuals and/or relevant authorities if a breach creates a real risk of significant harm or otherwise triggers a legal reporting obligation. We may also maintain internal records of security incidents and remedial actions as required by law.

18. Third-Party Websites and Services

Our website may contain links to third-party websites, payment services, software providers, or social media platforms. This Privacy Policy does not apply to third-party services that we do not own or control.

We encourage users to review the privacy policies of any third-party services they access through links or integrations. We are not responsible for the privacy, security, or content practices of third parties.

19. Quebec and Bilingual Considerations

Canada includes both English- and French-speaking audiences, and players in Quebec may expect access to information in French. Where required or appropriate, Gambiva Casino may provide privacy-related communications, notices, or customer support materials in English and/or French.

If a translated version of this Privacy Policy is made available, the version designated by us as controlling will prevail to the extent permitted by law in the event of inconsistency, unless local law requires otherwise.

20. Provincial Gaming Context

Online gambling in Canada is regulated differently across provinces. In Ontario, the market operates under a provincial framework involving iGaming Ontario and AGCO standards. In British Columbia, gambling services are offered through provincial structures involving BCLC. In other parts of Canada, access models and operator status may differ.

Because gaming regulation is provincial, some privacy, advertising, player protection, recordkeeping, and verification obligations may depend on the player’s location, the service used, and the operational model under which the service is offered. We may therefore apply province-specific rules, controls, or disclosures where appropriate.

21. International Users and GDPR-Style Standards

Although this Privacy Policy is intended for Canada-facing operations, Gambiva Casino may apply privacy practices influenced by broader international standards, including GDPR-style principles such as transparency, purpose limitation, data minimization, and security. This does not mean that the GDPR automatically applies in every case, but it reflects our commitment to recognized privacy best practices where appropriate.

If you access the services from outside Canada, local laws in your jurisdiction may also apply to how personal information is handled. In such cases, we may adapt our practices, notices, or user rights procedures as required.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory expectations, business operations, technology, security practices, or service features.

When we make material changes, we may provide notice through the website, by email, through the player account interface, or by other appropriate means. The “Last Updated” date at the top or bottom of the policy may also be revised.

Your continued use of the services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised version, to the extent permitted by applicable law.

23. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or the handling of your personal information, please contact:

Gambiva Casino.

Email: [email protected].

When contacting us, please provide enough detail for us to identify your account and understand your request. To protect your privacy and security, we may ask for information necessary to verify your identity before responding.

24. Complaint Options

If you are not satisfied with our response to a privacy request or complaint, you may have the right to raise the matter with the appropriate privacy regulator or oversight body, depending on your location and the applicable law. In Canada, this may include the Office of the Privacy Commissioner of Canada or a relevant provincial privacy authority where provincial private-sector law applies.

We encourage users to contact us first so that we have an opportunity to address the concern promptly and fairly.