Privacy Policy

At TonyBet Casino, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have in relation to your data. We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy legislation. By using our website and services at tonybet-casinocanada.com, you consent to the practices described in this policy. We encourage you to read this document in full so you understand exactly how your data is handled. If you have any questions or concerns, our data protection team is available via the contact details at the bottom of this page.

Information We Collect

We collect information that you provide directly to us when you create an account, make a deposit, request a withdrawal, contact our support team, or participate in promotions. This includes your full name, date of birth, email address, phone number, residential address, payment information, and identity verification documents. We also collect information automatically when you use our platform, including your IP address, browser type and version, operating system, device identifiers, pages visited, time spent on each page, referral URLs, and clickstream data. If you use our mobile-optimized website, we may also collect information about your device model and mobile network. We use cookies and similar tracking technologies to collect some of this information automatically. We do not collect any information from individuals who have not visited our website or created an account with us.

How We Use Your Data

We use the personal information we collect for several core purposes. First, to provide and maintain our services, including processing your deposits and withdrawals, managing your account, and delivering the games and features you use. Second, to verify your identity and comply with our legal obligations under anti-money laundering (AML) and Know Your Customer (KYC) regulations. Third, to communicate with you about your account, transactions, promotions, and service updates. Fourth, to improve our platform by analyzing usage patterns and feedback. Fifth, to detect and prevent fraud, security breaches, and other harmful activity. Sixth, to meet our responsible gambling obligations by monitoring player behaviour and intervening when necessary. We will never use your personal data for purposes that are incompatible with those described above without first obtaining your explicit consent. We process your data on the legal bases of contractual necessity, legitimate interest, legal obligation, and where applicable, your consent.

Data Sharing & Third Parties

We do not sell your personal information to third parties under any circumstances. We may share your data with trusted service providers who help us operate our platform and deliver our services. These include payment processors (for handling deposits and withdrawals), identity verification providers (for KYC compliance), game software providers (for delivering casino games), email service providers (for transactional and promotional communications), and analytics providers (for understanding how our platform is used). All third-party service providers are contractually obligated to handle your data securely and only for the purposes we specify. We may also disclose your personal information if required by law, court order, or regulatory request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described here.

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you interact with our website. We use strictly necessary cookies to ensure the basic functionality of our platform, including session management and security features. We use performance cookies to collect anonymous data about how visitors use our website, helping us identify areas for improvement. We use functionality cookies to remember your preferences, such as language settings and display options. We may also use marketing cookies to deliver relevant promotional content based on your interests. You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of our website. For more detailed information about the specific cookies we use, you may contact our support team.

Data Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS encryption. Our servers are hosted in secure data centres with physical access controls, fire suppression systems, and redundant power supplies. We maintain strict access controls so that only authorized personnel can access personal data, and only on a need-to-know basis. We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential threats. Our payment processing systems comply with PCI DSS (Payment Card Industry Data Security Standard) requirements. While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely secure. We encourage you to take your own precautions, such as using strong unique passwords and enabling two-factor authentication on your account.

Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have several important rights regarding your personal data. You have the right to know what personal information we hold about you and to request access to that information. You have the right to challenge the accuracy and completeness of your data and to have it corrected if necessary. You have the right to withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. You have the right to file a complaint with the Privacy Commissioner of Canada if you believe your privacy rights have been violated. To exercise any of these rights, please contact our data protection team using the details provided in the Contact Us section below. We will respond to access requests within 30 days as required by PIPEDA. There is no fee for submitting an access request, though we may charge a nominal fee for extensive or repetitive requests. We may require you to verify your identity before processing any request to ensure the security of your data. For more information about your rights under PIPEDA, visit the Office of the Privacy Commissioner of Canada.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Account information and transaction records are retained for a minimum of 5 years after account closure, as required by anti-money laundering regulations. Identity verification documents are retained for the same period. Marketing preferences and communication logs are retained until you withdraw consent or request deletion. Automatically collected technical data such as server logs and analytics data is retained for up to 24 months. When personal data is no longer needed, we securely delete or anonymize it so that it can no longer be associated with you. If you request account closure, we will retain only the minimum data required by law and delete everything else within 90 days of the closure date.

Children's Privacy

Our services are strictly intended for individuals who are of legal gambling age in their jurisdiction. We do not knowingly collect personal information from anyone under the age of 19 (or the applicable minimum age in their Canadian province). If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and close the associated account. Any winnings generated by an underage player will be voided. We encourage parents and guardians to monitor their children's online activity and to use parental control tools to prevent access to gambling websites. If you believe a minor has provided us with personal information, please contact our support team immediately so we can take appropriate action. Organizations like GamCare and BeGambleAware offer resources to help families discuss online safety and gambling risks.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please do not hesitate to get in touch with our data protection team. You can reach us by email at [email protected] or through our 24/7 live chat support on the website. We aim to respond to all privacy-related inquiries within 5 business days. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. We are committed to resolving any privacy concerns promptly and transparently.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify registered players via email and post a prominent notice on our website. The "Last updated" date at the bottom of this page indicates when the policy was most recently revised. We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of the TonyBet Casino Canada platform after any changes to this policy constitutes your acceptance of the updated terms. If you do not agree with any revisions, please stop using our services and contact us to request account closure and data deletion.

Last updated: March 2026