Privacy Policy

Version: 1.0  |  Last Updated: June 18, 2025

This Privacy Policy describes how Casino Days (“we,” “us,” or “our”), operating through osbbc.ca, collects, uses, stores, and shares personal information about you when you visit our website or use our services. Please read this policy carefully alongside our Terms and Conditions and Responsible Gaming Policy.

By creating an Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

1.1. Our Commitment to Privacy

Casino Days is committed to protecting the privacy of all individuals who interact with our Platform. We handle personal data responsibly, transparently, and in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1.2. Scope

This Privacy Policy applies to all personal information collected through:

• The Casino Days website at osbbc.ca;
• Our mobile applications (where available);
• Customer support communications;
• Marketing and promotional activities.

This Policy does not apply to third-party websites, payment processors, or software providers that may be accessible from the Platform. You should review the privacy policies of those third parties independently.

2. Data We Collect

2.1. Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Register an Account: Full name, date of birth, email address, postal address, telephone number, username, and password;
• Complete KYC Verification: Government-issued ID, proof of address documents, and payment method verification;
• Make Transactions: Payment method details, transaction amounts, and deposit/withdrawal history;
• Contact Support: Contents of your communications with our support team;
• Participate in Promotions: Bonus preferences, survey responses, and competition entries.

2.2. Information Collected Automatically

When you use the Platform, we automatically collect certain technical and behavioural data, including:

• Device Information: IP address, browser type and version, operating system, device identifiers;
• Usage Data: Pages visited, games played, session duration, click-stream data, search queries;
• Location Data: General geographic location inferred from IP address;
• Cookies and Tracking Data: As described in Section 6 of this Policy.

2.3. Information from Third Parties

We may receive personal information about you from third parties, including:

• Identity and fraud verification providers;
• Payment processors and financial institutions;
• Marketing and analytics partners;
• Responsible gambling databases and self-exclusion registries.

3. How We Use Your Data

3.1. Service Delivery

We use your personal information primarily to provide and manage the services you have requested, including:

• Creating and maintaining your Account;
• Processing deposits and withdrawals;
• Verifying your identity and eligibility (KYC);
• Providing customer support and responding to enquiries.

3.2. Legal and Regulatory Compliance

• Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations;
• Detecting and preventing fraud, cheating, and other prohibited conduct;
• Enforcing self-exclusion and responsible gambling obligations;
• Maintaining records as required by applicable law.

3.3. Marketing and Communications

With your consent, we may use your contact details to send you promotional materials, bonus offers, newsletters, and information about new games and features. You may withdraw consent and opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email;
• Updating your communication preferences in your Account settings;
• Contacting us at privacy@osbbc.ca.

3.4. Analytics and Platform Improvement

We use aggregated and anonymised data to analyse usage patterns, improve Platform functionality, develop new features, and enhance our overall service offering. Where data is fully anonymised, it ceases to be personal information and may be used without restriction.

3.5. Responsible Gaming

We may process your gambling activity data to identify signs of problem gambling and to apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion in accordance with our Responsible Gaming Policy.

4. Legal Bases for Processing

4.1. Consent

Where required, we process your personal data based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4.2. Contractual Necessity

Much of our data processing is necessary for the performance of our contract with you — specifically, to provide the services described in our Terms and Conditions. Without this processing, we cannot provide an Account or deliver gaming services.

4.3. Legal Obligation

Certain processing activities, particularly those relating to KYC verification, AML compliance, and fraud prevention, are undertaken to comply with legal obligations imposed under applicable Canadian law.

4.4. Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. Such legitimate interests include fraud prevention, service improvement, and direct marketing to existing customers.

5. Data Sharing & Third Parties

5.1. Service Providers

We share personal data with carefully selected third-party service providers who process data on our behalf, including:

• Payment processing companies and financial institutions;
• Identity verification and KYC service providers;
• Cloud hosting and IT infrastructure providers;
• Customer support platform providers;
• Email and SMS communication providers;
• Analytics and fraud detection platforms.

All service providers are contractually required to process data securely, solely for the purposes specified, and in compliance with applicable privacy law.

5.2. Legal Disclosures

We may disclose your personal information to governmental authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or regulatory direction, or where disclosure is necessary to protect the rights, property, or safety of Casino Days, our Players, or the public.

5.3. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any changes to the applicable privacy terms.

5.4. No Sale of Data

Casino Days does not sell, rent, or trade your personal information to third parties for their own independent marketing or commercial purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit. Casino Days uses cookies and similar technologies (such as web beacons and pixel tags) to enhance your user experience and gather analytical data.

6.2. Types of Cookies We Use

6.3. Managing Cookies

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. Please note that disabling strictly necessary cookies may impair Platform functionality. Your browser’s help section provides instructions for managing cookies on your specific browser.

7. Data Security

7.1. Security Measures

Casino Days implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted;
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis;
• Firewalls and Intrusion Detection: Our infrastructure is protected by industry-standard security tools;
• Regular Security Audits: We conduct periodic reviews of our security practices and systems.

7.2. Data Breach Notification

In the event of a personal data breach that poses a risk of harm to affected individuals, Casino Days will notify the relevant supervisory authority and affected Players in accordance with applicable legal obligations and within legally prescribed timeframes.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal obligations. Standard retention periods are as follows:

8.2. Deletion

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised. Where deletion is not immediately possible due to technical constraints, data will be isolated and protected from further processing until deletion is complete.

9. Your Rights

9.1. Rights Under Applicable Privacy Law

Subject to applicable Canadian privacy law, you have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal information we hold about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations;
• Right to Withdraw Consent: Withdraw consent for processing based on consent at any time;
• Right to Object: Object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: Request a machine-readable copy of data you have provided;
• Right to Complain: Lodge a complaint with the applicable privacy supervisory authority.

9.2. Exercising Your Rights

To exercise any of the above rights, please contact our Privacy Officer at:

• Email: privacy@osbbc.ca

We will respond to all legitimate requests within 30 days. In complex cases, this period may be extended by a further 30 days, with notice provided to you. We may need to verify your identity before processing any request.

10. International Data Transfers

10.1. Cross-Border Processing

Some of our service providers and partners are located outside of Canada. Where personal data is transferred to countries that may not provide the same level of data protection as Canada, we ensure appropriate safeguards are in place, such as contractual clauses that require the recipient to protect personal data to the same standard as applicable Canadian law.

10.2. Your Consent to Transfer

By using our Platform, you acknowledge and consent to the potential transfer of your personal data to service providers located in other countries, subject to the safeguards described above.

11. Minors

11.1. No Services for Minors

The Platform is strictly intended for individuals aged 18 years or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that personal data has been inadvertently collected from a minor, we will promptly delete such information and close the associated Account.

11.2. Parental Controls

We strongly encourage parents and guardians to utilise available parental control tools and filtering software to prevent minors from accessing online gambling platforms. More information is available on our Responsible Gaming page.

12. Changes to This Policy

12.1. Policy Updates

Casino Days reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via email notification or prominent notice on the Website prior to the changes taking effect. The “Last Updated” date at the top of this page will be revised accordingly.

12.2. Continued Use

Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, please discontinue use of the Platform and contact us to request Account closure.

13. Contact Information

13.1. Privacy Enquiries

For all privacy-related enquiries, requests, and complaints, please contact our Data Protection Officer (DPO):

• Email: privacy@osbbc.ca
• Subject Line: “Privacy Request – [Your Name]”

13.2. General Support

For general Account and service enquiries:

• Email: support@osbbc.ca
• Live Chat: Available on the Platform

13.3. Supervisory Authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca or the applicable provincial privacy commissioner.