BetWhale Casino Privacy Policy

This Privacy Policy explains how BetWhale Casino collects, uses, shares and protects your personal information when you use our services at betwhale.ca. We process your data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the relevant Canadian provincial privacy laws, and the requirements of our licensing authorities. By creating an account, you consent to the processing described in this policy. You can exercise your rights under PIPEDA at any time by contacting [email protected].

1. Who We Are

BetWhale Casino, operated by Wonder Play Company N.V., is the controller of the personal information processed under this Privacy Policy. For questions about this policy or to exercise your privacy rights, write to [email protected]. We respond to verified requests within 30 days of receipt; complex requests may be extended once, with notice to you within the first 30 days.

2. What Data We Collect

2.1 Information You Provide Directly

During registration and the ongoing operation of your account, you provide us with personal data including your full legal name, date of birth, residential address, telephone number, email address and account currency preference. For KYC verification you submit a government-issued photo ID, a recent proof of address, payment-instrument documentation and a verification selfie.

2.2 Transaction and Activity Data

We record every deposit, withdrawal, wager, win and bonus event associated with your account. This information forms the basis of your activity report and is required for compliance with anti-money-laundering rules and the audit obligations imposed by our licensing authorities.

2.3 Technical Data

We collect IP addresses, browser types, operating systems, device identifiers, time-zone settings, language preferences and session log files. This technical data helps us secure your account, identify fraud patterns and diagnose performance issues.

If you choose to log in using a third-party social provider, we receive a limited subset of information from that provider — typically your name and email address. We do not link social profiles to your gambling activity without your explicit consent.

3. How We Use Your Data

To create, verify and operate your player account, including identity and age verification at the KYC stage.
To process deposits and withdrawals, including communication with payment-service providers and crypto wallet infrastructure.
To meet our compliance obligations under anti-money-laundering laws and the rules of our licensing authorities.
To notify you about service updates, policy changes and — with your consent — promotional offers.
To detect signs of problem gambling and reach out to you with relevant resources where patterns warrant it.
To investigate and prevent fraud, account takeover, collusion and other forms of platform abuse.

We do not sell your personal data to third parties under any circumstances. We share data only with the following categories of recipients, and only to the extent necessary for the purposes outlined in this policy:

Payment service providers (card processors, e-wallet operators, crypto payment infrastructure) for the execution of deposits and withdrawals.
Identity verification providers for the discharge of our statutory KYC obligations.
Game studios and platform vendors, limited to the data necessary for technical delivery of your game session.
Regulatory authorities (the Government of Anjouan licensing body, the Kahnawake Gaming Commission and other competent authorities) on lawful request or for audit purposes.
Independent testing laboratories that audit our gaming integrity and security systems.
Legal and forensic advisors where there is a suspicion of unlawful activity or in connection with formal disputes.

5. Your Rights

Right of access: request a copy of the personal data we hold about you.
Right of correction: request that we correct inaccurate or incomplete data.
Right of deletion: request that we delete your personal data, subject to legal retention obligations.
Right to restrict processing: ask us to limit how we process your data while a correction or objection is being resolved.
Right to object: object to processing based on legitimate interest or direct marketing.
Right to data portability: receive a structured, machine-readable copy of the data you have provided to us.
Right to withdraw consent: where we process data on the basis of your consent, you may withdraw it at any time.
Right to lodge a complaint: raise concerns with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.

6. How We Protect Your Data

256-bit SSL/TLS encryption for all communication between your device and our servers.
Encryption of stored data using industry-standard algorithms, particularly for KYC documents and payment information.
Role-based access controls; only authorised personnel with a defined business need can access personal data.
Two-factor authentication available on your account and mandatory for administrative access by our staff.
Regular security audits and penetration tests conducted by independent specialists.
Segregated data environments for payment information, identity verification documents and operational data.

7. Cookies

BetWhale uses cookies to support the operation of the site and — with your consent — to personalise your experience and analyse traffic. Functional cookies (session, language preference, login) are always active because they are necessary for the platform to operate. Analytical and marketing cookies are activated only after your explicit consent through the cookie banner on first visit. You can change your cookie preferences at any time using the “Cookie Preferences” link in the footer, or by adjusting your browser settings.

8. Data Retention

We retain your personal data for as long as your account is active and for a further period required by law — typically five to seven years after account closure, in line with anti-money-laundering and tax retention requirements. KYC documents are stored in encrypted form and accessed only by authorised compliance staff. Marketing preferences are retained for as long as your consent stands; analytical cookies are deleted in line with your browser session settings.

9. Minors

BetWhale services are restricted to players aged 19 and older. We do not knowingly collect personal data from anyone below that age. If we discover that a minor has opened an account, we will close it immediately, reverse any related transactions under audited procedures, and delete the associated data subject only to the legal retention periods.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Significant changes will be notified to you by email or through an account dashboard notification. The date of the latest revision is noted at the foot of this page; previous versions are available on request.

11. Contact Us

For all privacy-related questions or to exercise any of your rights under this policy, contact our data protection team at [email protected]. Canadian residents may also lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca. We respond to verified privacy requests within 30 days of receipt.