Privacy Policy

1. Introduction to Privacy Excellence

At Tooniebet, we recognize that privacy is not just a regulatory requirement but a fundamental right of our Canadian players. Operating in the evolving landscape of Canadian iGaming, Tooniebet is dedicated to maintaining the highest standards of data integrity. This document serves as a detailed roadmap of how we handle “Personal Information”—defined as any information that identifies you as an individual.

2. Legal Compliance and Canadian Standards

Tooniebet adheres to the Personal Information Protection and Electronic Documents Act (PIPEDA). Furthermore, as we provide services across various provinces, we monitor local regulations, such as those set by iGaming Ontario (iGO) and the Alcohol and Gaming Commission of Ontario (AGCO), to ensure that our data processing activities meet or exceed regional expectations.

Key Canadian Authorities & Compliance Resources

3. Interactive Data Flow Visualization

Transparency is at the heart of Tooniebet. Below is a breakdown of how we prioritize the data we collect to maintain a secure environment for our users.

4. Detailed Information Collection

Tooniebet collects information to ensure we can provide a personalized and secure gaming experience. This process is divided into three main categories:

4.1. Information Provided by You

When you create an account at Tooniebet, you provide us with:

• Identity Data: Legal name, gender, and date of birth (to ensure you are of legal age).
• Contact Data: Physical address, email address, and mobile number.
• Financial Data: Necessary details for processing deposits and withdrawals, such as Interac details or credit card fragments.

4.2. Automatically Collected Information

As you navigate our platform, our systems automatically log:

• Device Information: Type of hardware, operating system, and unique device identifiers.
• Connection Data: IP addresses, geolocation (to comply with provincial licensing), and timestamps.
• Usage Patterns: Which games you play, the duration of your sessions, and your interaction with UI elements.

4.3. Information from Third Parties

We may receive data from external sources, including credit reference agencies and identity verification services, to fulfill our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Canadian law.

5. The Purpose of Data Processing

Tooniebet does not sell your data. We use your information for the following strictly defined purposes:

1. Service Delivery: Managing your bets, processing your wins, and maintaining your account balance.
2. Regulatory Compliance: Meeting our obligations to Canadian financial and gaming authorities.
3. Customer Support: Responding to your inquiries via live chat or email.
4. Risk Management: Detecting and preventing bonus abuse, collusion, and money laundering.
5. Marketing Communication: If you have opted in, we send tailored offers that match your playstyle.

6. Security Architecture and Data Encryption

Tooniebet employs military-grade security protocols to ensure that your sensitive information remains confidential. All data transmitted between your device and our Canadian servers is encrypted using Secure Socket Layer (SSL) technology (version TLS 1.2 or higher).

Technical Safeguards:

• Firewall Protection: Our databases are stored behind advanced firewall systems that prevent unauthorized access.
• Access Control: Only employees with a specific “need-to-know” basis are granted access to personal player data.
• Data Masking: Sensitive financial information, such as credit card numbers, is masked, ensuring that even our staff cannot view the full details.

7. Know Your Customer (KYC) & Identity Verification

Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) in Canada, Tooniebet is legally required to verify the identity of its users. This process is a cornerstone of our Privacy Policy as it involves the handling of sensitive documents.

• Identity Proof: A copy of a valid Canadian Passport, Driver’s License, or Provincial ID.
• Address Proof: Recent utility bills or bank statements (not older than 3 months).
• Source of Wealth: In certain high-volume cases, we may request documentation proving the origin of funds to ensure legal compliance.

8. Responsible Gaming and Data Analysis

We use data to protect you. By analyzing patterns of play, Tooniebet can identify potential signs of problem gambling. This data-driven approach allows us to intervene early and provide support resources.

Canadian Support & Self-Exclusion Resources

9. Cookies and Tracking Technologies

Tooniebet uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

1. Essential Cookies: Required for logging in and navigating the secure areas of the site.
2. Performance Cookies: Help us understand which pages are most popular and where users encounter errors.
3. Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns in the Canadian market.

Note: You can manage your cookie preferences through your browser settings, though disabling essential cookies may impact site functionality.

10. Your Rights as a Data Subject

In accordance with Canadian privacy laws, you have specific rights regarding your data at Tooniebet:

• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
• Right to Deletion (Right to be Forgotten): You can request the deletion of your data, provided there are no legal or regulatory requirements (such as AML laws) forcing us to retain it.
• Right to Withdraw Consent: You can opt-out of marketing communications at any time via your account settings.

11. International Data Transfers

While Tooniebet primarily operates for the Canadian market, we may use service providers located outside of Canada (e.g., in Europe or the USA). In such cases, we ensure that the data transfer is protected by “Standard Contractual Clauses” or other legal mechanisms that guarantee an equivalent level of protection to Canadian standards.

12. Data Breach Notification Protocol

Despite our advanced security measures, Tooniebet maintains a rigorous Data Breach Response Plan. In the unlikely event of a security compromise that poses a real risk of significant harm to our Canadian players, we adhere to the following steps:

1. Immediate Containment: Our technical team identifies the source of the breach and isolates the affected systems within minutes of detection.
2. Assessment of Risk: We evaluate the sensitivity of the compromised data (e.g., financial details vs. email addresses).
3. Mandatory Notification: Under PIPEDA requirements, Tooniebet will notify the Office of the Privacy Commissioner of Canada (OPC) and the affected individuals as soon as feasible.
4. Remediation: We provide affected users with clear instructions on how to protect themselves, such as password resets or credit monitoring services.

13. Mobile Application Privacy Specifics

If you access Tooniebet via our dedicated mobile application for iOS or Android in Canada, additional data points may be collected to ensure app stability:

• Push Notifications: We request permission to send you updates about your account, security alerts, and exclusive Canadian bonuses. You can revoke this in your device settings.
• Biometric Data: If you enable Touch ID or Face ID for login, please note that Tooniebet does not store your biometric patterns. These are processed locally on your device’s secure enclave.
• App Analytics: We use tools like Firebase to track crash reports and latency issues specifically on Canadian mobile networks to optimize performance.

14. Children’s Privacy: Strict Underage Policy

Tooniebet has a zero-tolerance policy regarding underage gambling. Our services are strictly prohibited for anyone under the age of 19 (or 18 in Alberta, Manitoba, and Quebec, depending on provincial law).

• Verification Gates: We use sophisticated age-verification software that cross-references Canadian public records to confirm a user’s age during registration.
• Data Deletion: If we discover that personal information has been inadvertently collected from a minor, we will purge that data from our servers immediately and terminate the account.
• Parental Controls: We encourage parents to use filtering software like Net Nanny or CyberSitter to prevent minors from accessing iGaming platforms.

15. Marketing and Communication Preferences

We believe in “Privacy by Design.” At Tooniebet, you are never automatically signed up for marketing spam.

• Opt-In Basis: You must explicitly check a box to receive promotional SMS or emails.
• Granular Control: Within your Tooniebet “Profile Settings,” you can choose to receive only “Security Alerts” while disabling “Bonus Offers.”
• Unsubscribe Rights: Every marketing email sent to a Canadian inbox contains a clear “Unsubscribe” link at the bottom, which is processed within 24 hours.

16. Detailed Breakdown of Canadian Privacy Laws (PIPEDA vs. Provincial)

Tooniebet operates under a complex web of Canadian regulations. Understanding these helps you know your rights:

• PIPEDA: This federal law sets the ground rules for how private-sector organizations collect, use, and disclose personal information in the course of for-profit, commercial activities across Canada.
• BC PIPA & Alberta PIPA: In British Columbia and Alberta, provincial laws may take precedence over PIPEDA. Tooniebet ensures its policies are “substantially similar” to these provincial acts to ensure full compliance.
• Law Enforcement Requests: We only disclose player data to Canadian law enforcement (e.g., RCMP) when presented with a valid warrant or court order related to criminal investigations or anti-money laundering efforts.

17. Accuracy and Updating Your Information

Tooniebet strives to keep your personal data accurate and up-to-date. As a player, you have a responsibility to inform us of any changes:

• Self-Service Updates: You can update your phone number and communication preferences directly through the “My Account” portal.
• Critical Updates: For changes to your legal name or registered residential address, you will be required to submit new verification documents to our compliance team to maintain the integrity of your KYC status.