1. Who We Are & Who This Policy Covers
This Privacy Policy applies to all users of Betpanda Casino (betpanda-casino-canada.com) — Canadian players who register, deposit, play, or simply browse. "We", "us", and "our" refer to the operator of this platform. "You" and "your" refer to you as a registered player or website visitor.
We are committed to protecting your personal data in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. PIPEDA sets the baseline for how private-sector organisations in Canada may collect, use, and disclose personal information in commercial activities. Our practices meet or exceed PIPEDA requirements, and we undergo regular privacy audits to confirm compliance. For questions about your data, contact our privacy officer directly at [email protected].
2. What Data We Collect
We collect personal data in three categories: data you give us directly, data we collect automatically as you use our platform, and data we receive from third-party service providers.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID | Registration & KYC |
| Contact Data | Email address, mailing address, phone number | Registration |
| Financial Data | Payment method details, transaction history, deposit/withdrawal records | Payment processors |
| Gaming Data | Game history, session durations, bet sizes, wins/losses, bonus usage | Automated platform logs |
| Technical Data | IP address, browser type, device ID, operating system, login timestamps | Automated collection |
| Verification Data | ID document scans, proof of address, selfie photos for identity verification | KYC process |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer interactions |
We do not collect sensitive categories of personal data (such as health information, racial or ethnic origin, political opinions, or biometric data) except where explicitly required for identity verification purposes. We do not purchase data from third-party data brokers. All data we hold about you comes either directly from you or from the payment and verification services you use when transacting with us.
3. How We Use Your Data
Every piece of data we hold serves a specific purpose. We do not collect data speculatively. Here is what we use your data for, and why.
Account management
Running your account, processing deposits and withdrawals, applying bonuses, resolving support queries.
Identity & age verification
Confirming you are who you say you are, meeting KYC requirements, and complying with age-gating obligations under applicable gambling regulations.
Fraud prevention & security
Detecting unusual account activity, preventing money laundering, blocking fraudulent transactions, and identifying multiple-account abuse.
Regulatory compliance
Meeting obligations under applicable gambling licences, anti-money laundering (AML) regulations, and PIPEDA.
Responsible gaming monitoring
Identifying potential problem gambling patterns and proactively reaching out to players who may benefit from our protection tools.
Marketing communications
Sending promotional emails and offers — only if you have opted in and only until you opt out.
Platform improvement
Analysing aggregated, anonymised usage data to improve game selection, loading performance, and the overall player experience.
We do not sell your personal data to any third party, full stop. We do not share your data for purposes outside those listed above. If we want to use your data for a new purpose not covered here, we will update this policy and notify you before doing so.
4. Legal Basis for Processing
Under PIPEDA, we must have a valid reason for collecting and using your personal data. We rely on the following legal bases depending on the type of processing: contractual necessity (processing required to provide you with the service you have signed up for — account management, payment processing, KYC); legal obligation (processing required to comply with AML regulations, gambling licence requirements, and tax reporting obligations); legitimate interests (fraud prevention, security monitoring, and responsible gaming analysis — where these interests do not override your privacy rights); and consent (marketing communications — you can withdraw consent at any time).
Where we rely on consent for marketing, withdrawing that consent is straightforward — click the unsubscribe link in any marketing email, or contact [email protected]. Withdrawing marketing consent does not affect your account or your ability to use the platform in any way. We will continue sending transactional emails (deposit confirmations, withdrawal notifications, security alerts) regardless of marketing consent, because those are necessary for running your account.
5. Data Sharing — Who Sees Your Data
We share your data only with parties who have a genuine need for it, and only to the extent necessary. We never sell data, never share data for advertising purposes with third parties, and never transfer data to parties outside the scope below.
| Recipient | What Is Shared | Why |
|---|---|---|
| Payment processors (Visa, MC, Interac) | Payment data, transaction amounts, billing address | Processing deposits and withdrawals |
| KYC / identity verification services | ID documents, selfie, address verification data | Age and identity verification |
| Game software providers | Player ID (anonymised), session data | Providing licensed game content |
| Regulatory bodies & licensing authorities | Account data, transaction records as required by law | Regulatory compliance, licence conditions |
| Fraud prevention services | IP address, device fingerprint, transaction patterns | Detecting and preventing fraud and money laundering |
| IT infrastructure providers | Encrypted data stored on their servers | Hosting and operating the platform securely |
| Legal and compliance advisors | Relevant account information in dispute or legal proceedings | Legal advice and compliance support |
All third-party processors are bound by data processing agreements that require them to maintain security standards consistent with or exceeding our own. We do not permit any third party to use your data for their own marketing or commercial purposes. When data is transferred to processors outside Canada, we ensure adequate protections are in place through contractual safeguards.
6. Data Retention
We retain your personal data for as long as your account is active and for a period after closure as required by applicable law. In practice, this means: account and identity data is retained for 5 years after account closure (AML and gambling regulatory requirements); financial transaction records for 7 years after the transaction date (tax and AML obligations); gaming session logs for 3 years; and communications records (support chats, emails) for 3 years.
When the retention period expires, data is securely deleted or anonymised. We run quarterly data reviews to ensure we are not holding data beyond its required retention period. If you request deletion of your data and we have no legal obligation to retain it, we will delete it within 30 days of your request. Where a legal retention obligation applies, we will explain what data must be retained and for how long.
7. Security Measures
We use industry-standard security infrastructure to protect your data. All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256. Our servers are hosted in Tier 3+ data centres with physical security controls, redundant power, and 24/7 monitoring. Access to personal data is restricted to authorised staff on a strict need-to-know basis, governed by role-based access controls and logged for audit purposes.
We maintain a formal incident response plan. In the event of a data breach that creates a real risk of significant harm to players, we will notify the affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA's mandatory breach notification rules. Notification will be made without undue delay — in practice, within 72 hours of becoming aware of a qualifying breach.
Your own account security matters too. We strongly recommend enabling two-factor authentication (available in Account Settings), using a unique password for your Betpanda Casino account, and not sharing your login credentials with anyone. We will never ask you for your password — if anyone contacts you claiming to be from Betpanda Casino and asks for your password, it is a phishing attempt and you should report it to us immediately.
8. Your Rights Under PIPEDA
PIPEDA grants you a clear set of rights over your personal data. Here is what you can request and how we handle each:
Right of Access
You can request a copy of all personal data we hold about you. We will provide it within 30 days of a verified request, in a portable, readable format.
Right to Correction
If any data we hold is inaccurate or incomplete, you can request a correction. We will update the data and notify any third parties to whom we have disclosed the incorrect data.
Right to Withdrawal of Consent
For processing based on consent (marketing), you can withdraw consent at any time. Withdrawal does not affect any processing that occurred before you withdrew consent.
Right to Deletion
You can request deletion of data we hold about you. Where no legal retention obligation applies, we will delete it within 30 days. Where an obligation exists, we will explain the specific retention requirement.
Right to Lodge a Complaint
If you are not satisfied with how we handle your personal data, you may lodge a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.
To exercise any of these rights, email [email protected] with the subject line "Privacy Request — [Your Request Type]". We'll verify your identity before processing the request and respond within 30 days. There is no charge for standard requests.
9. Cookies & Tracking
We use cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files placed on your device when you visit our website. We use three categories: strictly necessary cookies (required for the platform to function — session management, login state, security tokens — you cannot opt out of these), functional cookies (remembering your language preferences and account settings between sessions), and analytics cookies (aggregated, anonymised traffic analysis to understand how players use the platform — these can be declined).
We do not use advertising or behavioural tracking cookies. We do not participate in cross-site tracking networks. Our analytics are first-party only — we do not share browsing data with advertising networks or data brokers. When you first visit our platform, you'll be presented with a cookie consent banner. You can update your cookie preferences at any time via the Cookie Settings link in our footer.
Some of the third-party services we use (payment processors, game providers) may place their own cookies on your device when you interact with their services embedded in our platform. Those cookies are governed by those providers' own privacy policies. We list the third-party services we use and links to their privacy policies in our full Cookie Policy, available on request from [email protected].
10. Contact Our Privacy Team
Any question about how we handle your data, any privacy rights request, or any concern about a potential data breach — direct it to our privacy team. We are committed to responding to all privacy enquiries within 30 days. For urgent security concerns (suspected unauthorised account access, phishing attempts), contact us immediately via live chat so we can act within minutes rather than days.
This policy was last reviewed in January 2026. We update it when our practices change or when regulatory requirements evolve. Material updates will be communicated to registered players by email. The most current version is always available at this URL. For everything else we offer Canadian players, visit Betpanda Casino Canada.
Privacy Contact Details