About this privacy document

This policy explains how personal information is collected, processed, protected, disclosed, and destroyed in connection with the online services. It sets out the purposes for using personal data and the safeguards applied to protect it. Processing relies on informed consent, contractual necessity, and legal obligations under Canadian law. By using the site, the user consents to the practices described in this document. JB Casino updates this policy as required by law and operational changes.

What information is collected and how it is protected

The service collects only the information needed to deliver lawful gaming services and support.

Personal information collected

  • Identity and verification data: name, date of birth, government-issued ID, proof of address, age verification records.
  • Contact details: email, phone number, mailing address.
  • Account information: username, credentials (stored in hashed form), preferences, self-exclusion status.
  • Financial and transactional data: payment card tokens, bank details provided to payment processors, deposits, withdrawals, wagers, wins/losses, tax and AML records.
  • Device and technical data: IP address, device identifiers, operating system, browser type, language, network data, approximate geolocation.
  • Usage data: login times, page views, game interactions, session metrics, complaints and support tickets.
  • Responsible gambling data: limits, time-outs, risk indicators, interactions made for player protection.
  • Marketing data: communication preferences and consent records.

Purposes for collection

  • Provide account services, process transactions, verify age and identity, and enable gameplay.
  • Prevent fraud and money laundering, detect unauthorised activity, and ensure platform security.
  • Meet regulatory and reporting duties, including FINTRAC obligations.
  • Improve products, support users, perform analytics, and manage responsible gambling tools.

Security measures

  • Encryption in transit and at rest for sensitive records.
  • Role-based access controls, multi-factor authentication, and least-privilege permissions.
  • Network segmentation, logging, and continuous monitoring.
  • Vendor due diligence and contractual data protection obligations.
  • Regular audits, staff training, and a documented incident response plan.

User rights (subject to applicable law)

  • Access: request a copy of personal information held.
  • Correction: ask to rectify inaccurate or incomplete data.
  • Deletion: request erasure where permitted by law and retention duties.
  • Portability and restriction: where available by jurisdiction.
  • Withdraw consent for non-essential processing.
  • Complain to a privacy regulator (OPC; Alberta OIPC; BC OIPC; Commission d’accès à l’information in Québec).

Compliance statement

  • The operator adheres to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial private-sector laws (Alberta PIPA, BC PIPA, Québec Law 25), as well as gaming and anti-money laundering requirements.

How the service uses personal information

Processing is lawful, limited to identified purposes, and proportionate to the services provided.

Main uses

  • Account creation, authentication, and customer support.
  • Payment processing, withdrawals, chargeback handling, and tax reporting.
  • Game delivery, bet settlement, dispute handling, and service continuity.
  • Security, fraud prevention, AML/ATF monitoring, sanctions screening, and KYC checks.
  • Personalisation of content and settings, responsible gambling tools, and service optimisation.
  • Analytics and performance measurement using de-identified or aggregated data where possible.
  • Marketing communications based on consent and opt-out choices.

Legal bases and safeguards

  • Consent: marketing preferences, some cookies, optional features.
  • Contract: account setup, gameplay, and payment execution.
  • Legal obligations: AML/ATF, record-keeping, and regulatory reporting.
  • Legitimate business purposes: security, prevention of misuse, and quality improvement, balanced against user privacy.

Accessing, correcting, and deleting information

Users can exercise privacy rights using the contact details below. A request may require identity verification. Responses are provided within statutory timelines, generally within 30 days, subject to lawful extensions.

How to act on rights

  • Access: request a copy of personal information and the purposes of processing.
  • Correction: identify the data to change and provide supporting documentation if needed.
  • Deletion: request erasure where allowed by law; certain records must be retained to meet legal and audit duties (for example, AML/ATF or tax).
  • Consent management: change marketing and cookie preferences at any time.

Operational notes

  • Using the platform includes consent to reasonable security checks, identity verification, and payment processing by approved providers.
  • Certain changes (for example, legal name updates) may require supporting documents.

Contact for privacy requests

  • Email: [email protected]
  • If a user is unsatisfied, a complaint can be escalated to the appropriate Canadian privacy regulator.

Protection of minors’ information

This site is intended for adults aged 18 or older, or a higher age if required by provincial law. The operator cannot verify age without suitable documents and may request proof at any time.

If a parent or guardian believes a minor has provided personal information

  • Contact the Privacy Office at [email protected].
  • The account will be reviewed, access will be blocked, and information will be deleted where permitted by law.
  • Any funds will be handled in accordance with legal and regulatory rules.

Cross-border processing of personal data

Personal information may be stored or processed outside Canada where service providers operate. Using the site constitutes consent to international transfers.

Safeguards for transfers

  • Contracts require comparable protection, confidentiality, and breach notification duties.
  • Technical controls limit access through encryption, access management, and logging.
  • Due diligence and periodic assessments of third-party practices.

Users should note that foreign laws may allow access by courts, law enforcement, or regulators in those jurisdictions.

Cookies and similar technologies

Cookies are small files placed on a device to store settings and identify a browser. The site uses cookies and similar technologies for statistics, behaviour analysis, personalisation, and service improvement.

Types and purposes

  • Essential: security, authentication, and core features.
  • Functional: preferences and user settings.
  • Analytics: site performance, error diagnostics, aggregated metrics.
  • Advertising (where permitted): measure reach and manage frequency.

Retention

Cookie lifetimes vary by type and purpose; non-essential cookies are kept for up to 1 year unless deleted earlier by the user.

Controls

Manage preferences via the cookie banner and browser settings. Blocking some cookies may affect functionality.

Acceptance and updates to this policy

Use of the services signifies full acceptance of this privacy policy. The current version posted on the site prevails over any prior version.

Material changes will be posted on this page and, where required, notified through the account channel. Continued use after the effective date of changes indicates acceptance of the updated policy, subject to consent where required.

Sharing information with third parties

Personal information may be shared in limited situations:

  • Service providers: hosting, payment processing, identity verification, data storage, analytics, customer support, anti-fraud tools.
  • Legal and regulatory: gaming regulators, FINTRAC, tax authorities, court orders, or lawful requests.
  • Business operations: dispute resolution, insurers, auditors, professional advisors.
  • Compliance and safety: investigate suspected fraud, protect users and the platform.

Scope and transparency

  • A current list or categories of key providers is maintained on the site or available on request.
  • Providing information to enable these services constitutes consent, subject to opt-out where permitted.
  • Recipients must use the information only for the agreed purpose and protect its confidentiality.

Updated: