PRIVACY & COOKIE POLICY
Current Version: 20260210 (Click here for document history)

Current Version: 20260210 (Click here for document history)
This Privacy and Cookie Policy (hereafter, the “Policy”) is incorporated into and forms a part of the Terms & Conditions (the “Terms and Conditions”). To the extent any conflict or inconsistency exists between this Policy and the terms of the Terms and Conditions, this Privacy & Cookie Policy shall take precedence.
A. What does this Policy govern?
Please read this Policy carefully as it sets out how we collect, use, disclose and retain or otherwise process your personal information we collect through our products and services, including our website at ggpoker.ca (the “Website”) and the poker, casino and live dealer products (the “Games”) that we make available on the Website, as well as the GGPoker.ca mobile application (collectively, our “Services”).
It explains what types of personal information is collected from our customers, how it may be used, and how you can ask us questions about our privacy practices.
If you do not want us to collect, use, or share your information in the ways described in this Policy, please do not use the Services. By using the Services, you consent to the collection and use of your information (including personally identifiable information) by us as identified herein, in compliance with this Policy and the terms and conditions for the Services.
B. Who we are and how we are governed
Our Services are operated by NSUS Limited (hereinafter referred to as ““we”, "us","our" or "Company") under the brand name of GGPoker.ca and we are committed to protecting the personal information entrusted to us by our players. We protect your personal information in accordance with all applicable law, including Personal Information Protection and Electronic Documents Act (“PIPEDA”), Ontario’s Freedom of Information and Protection of Privacy Act (“FIPPA”), Canada’s Anti-Spam Legislation and other applicable laws (collectively the “Acts”).
This Policy forms part of the Player Terms and Conditions at https://ggpoker.ca/terms-conditions/ (the “Terms and Conditions”) and specifically deals with the handling and treatment of player data.
This Website and other online Services operate under and pursuant to the Operating Agreement are being offered by the Company under the brand name “GGPoker.ca” as part of the open and regulated iGaming market conducted and managed by iGaming Ontario (http://www.igamingontario.ca/en). In the course of providing the Services (i) the Company collects, uses and discloses personal information on behalf of and as agent to iGaming Ontario; and (ii) the Company collects personal information in accordance with and under the authority of FIPPA, Ontario Regulation 722/21 made under the Alcohol and Gaming Commission of Ontario Act, and the Operating Agreement entered into between the Company and iGaming Ontario.
C. Definitions
If not otherwise defined elsewhere in this Policy, the following terms when used in this Policy shall have the meanings set out beside them.
Cookies – A packet of data sent by a web server to a browser, which is returned by the browser each time it subsequently accesses the same server, used to identify the user, or track their access to the server.
Device – piece of portable electronic equipment that can connect to the internet, such as a smartphone, tablet, or laptop computer.
FIPPA – Freedom of Information and Protection of Privacy Act, which provides a right of access to records held by public bodies and regulates how public manage personal information.
HIO – Person who currently holds or has held within the last 5 years the specific office or position of head of an international organization.
iGO – Internet Gaming of Ontario, working with the Government of Ontario and the Alcohol and Gaming Commission of Ontario (AGCO) to establish an online gaming market that helps protect consumers how game through private companies (Operators).
PCMLTFA – The Proceeds of Crime (Money Laundering) and Terrorist Financing Act implements specific measures to detect and deter money laundering and financing of terrorist activities to facilitate the investigation or prosecution of money laundering and terrorist financing offences.
PEP – Politically Exposed Person is an individual who has a high-ranking job in government or some other type of political position.
Payment Service Provider – financial entity that is authorized to process transactions between Player and GGPoker.ca
Processing – the collection, use, disclosure, transfers, storage, and other processing of personal information.
SMS – text messaging service component of most telephone, internet, and mobile devices.
Third Party – An individual or entity that is involved in a transaction but is not one of the principles and, thus, has a lesser interest in the transaction.
Our Services are not directed to individuals under the age of 19. We will not knowingly collect personal information about individuals under the age of 19. We do not allow individuals under the age of 19 to create accounts, make purchases or enter contests or promotions. If a parent or guardian becomes aware that his or her child under the age of 19 has provided us with personal information, the parent or guardian may contact us at the details set out below in the “Contacting the Company” section to have such personal information deleted.
“Personal information” means information about an identifiable individual. We limit our collection of personal information to that which is required for the purpose identified in this Policy (or otherwise made apparent to you.
In general, the Company collects the following types of personal information:
You can visit GGPoker’s Website and download its mobile applications without registering for an Internet Gaming account. However, products and services available through GGPoker websites and mobile applications require that you register for an Internet Gaming account. Should you choose to register for an Internet Gaming account, the Company will process your personal information in the course of administering your account. The following types of information may be collected throughout your registration for, and use of, an Internet Gaming account:
Please be advised that certain information such as name, date of birth, address and citizenship are mandatory for the players to provide us for purposes including legal, provision of services, and anti-money laundering efforts.
We will collect certain of the above personal information, and if provided by you, your business telephone number, employer’s name, and employer’s address for the purposes of complying with our anti-money laundering obligations under applicable law. If you attest that you are a Politically Exposed Person (“PEP”) the Head of an International Organization (“HIO”), or a family member or a close associate of a PEP or HIO, as those terms are defined in the Terms and Conditions, you will be required to provide additional information such as your source of funds, your source of wealth, the nature of your connection to the PEP or HIO if you are a family member or close associate of a PEP or HIO, the office or position of the PEP/HIO, the PEP or HIO organization/institution name and, if you are a family member or close associate of a PEP or HIO, the nature of the relationship between the family member and close associate of the PEP or HIO. Such information is collected on behalf of iGaming Ontario and may be shared with other Operators as part of enterprise level player monitoring.
The Company uses the personal information it collects for a variety of purposes set out in this Policy. When we collect personal information for other reasons, we provide a ‘“Notice of Collection” which explains the specific purposes of collection for a given program, service, or offering. In general, the most common purposes for collection of personal information by the Company can be organized into three main categories:
For program, service, or product administration – in order to provide you with service you have requested or to administer your participation in a particular program, we may use personal information. That may include using personal information for the following purposes:
To analyze and improve upon our products, services, programs, offerings, and processes – in addition to day-to-day administration of the services you engage with, we may also use personal information to assist us in evaluating and improving our products, services, programs, offerings, and processes. That may include using personal information for purposes such as:
To help the Company comply with applicable law and to maintain the integrity of operations – in certain circumstances, the Company may be permitted or required to collect, use or disclose personal information so that it can comply with applicable law, or to maintain the integrity of its business. That could include using personal information for purposes such as:
In general, and in addition to other processing as described throughout this Policy, the processing of personal information for administering Internet Gaming accounts can be organized into four main phases:
A. Registration & Account Activation – when you choose to register for an account, the Company will collect certain identity, employment, and contact information. This information will be used to administer your account throughout your use of the Internet Gaming service, to confirm your eligibility for registration, and for anti-fraud and legal compliance purposes. Additionally, the Company will seek to confirm that the device you use to register is located in Ontario, as the Company’s Internet Gaming service is only available to persons residing in Ontario and who use the service while physically located in Ontario.
Prior to account activation, the Company will seek to verify the identity of a registering individual. In order to conduct identity and age verification we may search for your details using third party agencies like Credit Reporting Agencies. If your identity cannot be verified with the information you provided at registration, we may require that you submit additional information or proof of identity and proof of address prior to the completion of registration. To confirm your identity with the additional information provided, the Company shares some of the information you provide with a third party identity verification service called Jumio. Access to this additional information will only be provided to the Company personnel who require such access to complete the identity verification process. The information will be retained in a manner consistent with this Policy and the Company ’s internal retention and information security procedures.
B. Use of the Service – after registration and account activation, you will be able to securely log into GGPoker’s Internet Gaming service. When you log in, GGPoker will seek to confirm that the device you are using is located in Ontario, as the Company’s Internet Gaming service is only available to persons residing in Ontario and who use the service while physically located in Ontario. Additionally, information about your use, such as transaction data, responsible gambling settings, and play history, will be retained and used to provide you access to your overall account history, for responsible gambling purposes including monitoring, analyzing and communicating with you about your use of the Internet Gaming service, and for purposes as otherwise described throughout this Policy. Furthermore, during the game within the game-client, we may display a country flag next to your avatar based on your country of citizenship that you would provide to us during account registration process.
C. Purchasing and Withdrawals – while logged in to your Internet Gaming account, you will have the option to purchase certain Company products and services. Should you choose to do so, the Company will collect payment card information and payment through its third party secure payment providers. Transaction information will be processed to provide you access to a history of your transactions, for anti-fraud purposes, for compliance with applicable law and regulation, and as otherwise described throughout this Policy.
Should you choose to withdraw funds from your Internet Gaming account, the Company will collect bank account information from you to process your withdrawal requests. This information will be shared with the Company’s partner financial institution to process your withdrawal request. Where permitted or required for compliance with applicable law, including the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, the Company may collect additional information a third party identity verification service.
In addition, you will be required to upload supporting documentation to confirm your withdrawal information. Access to uploaded supporting documentation will only be provided to the Company personnel who require such access to complete the withdrawal process. The documentation will be retained in a manner consistent with this Policy and the Company’s internal retention and information security procedures.
D. Inactivity & Deletion – in certain circumstances as described in the Terms and Conditions, your account may be deemed inactive or dormant. In such circumstances, personal information will be retained in accordance with applicable law and record retention requirements. After the applicable retention period for records containing personal information has elapsed, the records are securely disposed of in accordance with applicable regulations.
In addition to the processing as described above, your personal information associated with your Internet Gaming account may be processed in circumstances unique to you. Examples of such processing include:
To provide Internet Gaming products and services, your personal information may be shared with third party service providers assisting the Company in the administration of Internet Gaming. Examples of such third parties include:
From time to time, the Company may share personal information with service providers or vendors acting on its behalf to enable them to perform specific types of processing and other specialized services.
For example, the Company may partner with third parties to offer contest entrants a prize, and those third parties may require personal information in order to deliver that prize to the rightful contest winners. Service providers and vendors may collect, use, and disclose personal information on the Company’s behalf as described in this policy.
Service providers and vendors who process personal information on behalf of the Company are contractually obliged to protect the privacy of the Company customers and to only process personal information for the specific purpose(s) for which the Company provides instruction or permission. We require our service providers to provide reasonable and necessary assistance to the Company and iGO to allow the Company and/or iGO to respond to individual requests, such as for access, correction, or deletion of personal information.
We limit the disclosure of your personal information to those circumstances described in this Policy, and only disclose personal information in accordance with our Operating Agreement and applicable laws. Our service providers may be located in the USA, or other foreign jurisdictions. In the event personal information is transferred to the USA or other foreign jurisdiction, the storage and other processing may be subject to the laws of that jurisdiction and may be disclosed to or accessed by the courts, law enforcement and governmental authorities in accordance with those laws.
The Company may disclose personal information to law enforcement, regulators, and other third parties in response to a search warrant to other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise may be required or permitted by applicable Canadian, U.S. or other law or legal process. Your personal information may also be disclosed where necessary for the establishment, exercise or defence of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.
Additionally, we may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of the Company or as part of a corporate reorganization or other change in corporate control.
Finally, we may disclose your personal information where we are otherwise required or permitted by law to do so.
Personal information collected by the Company is retained only as long as required for the purposes identified in this Policy, subject to retention for the period prescribed by Operating Agreement, any relevant iGO policy and regulation, and applicable laws. After the applicable retention period for records containing personal information has elapsed, the records are securely disposed of in accordance with our retention and disposition policy and schedule and applicable regulations.
The Company has implemented physical, administrative, and technological security measures to protect the personal information in its custody and under its control. Access to personal information at the Company is restricted to individuals who require such access to perform their duties, such as our customer support Team, finance team, platform manager, and heads of operations, information, compliance and privacy. These people have restricted access to personal information on a need-to-know basis and are required to take reasonable measures to ensure that unauthorized persons cannot view or access your personal information. Furthermore, the Company imposes information security requirements on third party vendors and service providers to whom personal information is disclosed. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. The Company therefore does not warrant, represent, or guarantee the absolute security of personal information in our custody or under our control.
You play a role in security as well. In order to protect your account, we strongly recommend that you do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication (such as letters, phone calls or email messages). If you become aware of any unauthorized access to or use of your account, you are required to notify us immediately (see the Contacting the Company section below). For general information on how to protect your information online, please refer to the resources posted by the Information and Privacy Commissioner of Ontario at https://www.ipc.on.ca/privacy-individuals/ensuring-your-privacy-is-protected/.
You have the right to request access, deletion and correction of your personal information. There are a number of ways to exercise these rights.
If you have an account, you may log in to access and update certain personal information stored with your account. For assistance, please contact the Company Support Centre at help@ggpoker.ca.
You can also request access to your personal information and when you do so, the Company will make reasonable efforts to catalogue and summarize the personal information related to you that is in its custody or under its control.
You may also request that we delete your Personal information that is in our custody or under our control.
Please be advised that all access and deletion requests received by GGPoker are subject to exceptions, exclusions, and exemptions provided under the applicable laws. The Company may refuse to share or delete information if it falls under any such exception, exclusion or exemption, or if the Company is otherwise not required to disclose or delete.
The Company will use reasonable efforts to ensure your personal information is up-to-date and accurate. We ask that you update your information through your account whenever your information is incomplete, out-of-date or otherwise changes. You can also request the correction of any personal information in the Company’s custody or under its control. If, in the Company’s sole and absolute discretion, the correction cannot be made, you may require that a statement of disagreement be attached to the information reflecting any correction that was requested but not made.
You may request access, updating and corrections of inaccuracies in your personal information in our custody or control by emailing or writing to us at the contact information set out below. We may request certain personal information for the purpose of verifying the identity of the individual seeking access to his or her personal information records.
GGPass is a service offered to provide You with a Single Sign-On for enhanced onboarding and account management across other platforms within the GGNetwork. Please note that at present the full functionality of GGPass Service is not available in Ontario. GGPass is only limited to sign-on service in Ontario and cannot be used across other platforms within the GGNetwork. In the event full functionality of GGPass Service becomes available in Ontario, you will be informed and your express consent will be obtained accordingly.
The Company maintains an incident breach management policy that is updated regularly which contains a plan to be implemented when it becomes aware of a data breach.
“Data breach” means any incident of security, loss of control, system or human failure, error or issue that leads to, or results in, the destruction, loss, alteration, unauthorised disclosure of, or access to, personal information, whether deliberate or inadvertent, and affects the confidentiality, integrity or availability of the respective data.
The incident breach management policy sets out steps and procedures to be followed in case such a data breach occurs:
In addition to any information that you choose to submit to us, we or selected third parties may use a variety of technologies that store or access information already stored on your personal computer, laptop, tablet or mobile phone (each a “device”) whenever you visit or interact with our Internet Gaming website or applications.
A cookie is a text file placed on a device when a user visits a website. Cookies can be temporary (i.e. session) or permanent (e.g., persistent). They can also be first party (i.e., placed by us) or third party (i.e., placed by a third party advertiser or advertisements server).
Cookies that may be used to store or access information already stored by the Company on your device include but are not limited to:
| Provider | Name | Description |
|---|---|---|
| ggpoker.ca | ajs_anonymous_id, ajs_user_id | Generates a universally unique ID (UUID) to identify viewers. |
| Various cookies created by Google Analytics | List can be found here: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage Google’s free Google Analytics opt-out tool is available at: https://support.google.com/analytics/answer/181881?hl=en | |
| _fbp | Policy can be found here: https://www.facebook.com/policies/cookie | |
| Hotjar | Various cookies created by Hotjar | List can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookie |
| Cloudflare | Various cookies created by Cloudflare | List can be found here: https://developers.cloudflare.com/fundamentals/get-started/cloudflare-cookies |
The Company uses both session cookies (used only during your visit and expire when you close your browser) and persistent cookies (stored on your device for longer than just your visit) on its Internet Gaming website. Cookies used by the Company collect certain information about your device, such as its IP Address, operating system and browser specifications, but do not collect personal information such as your name or email address. Additionally the Company may place bots/trackers in its marketing emails sent to you for tracking player behaviour with respect to such email.
The Company installs First Party cookies on devices that access its websites unless the browser used by the device has disabled the installation of cookies. The first party cookies the Company installs ensure the website functions as intended, and in some circumstances are necessary for the Company to provide services requested by website visitors. For example, enabling first party cookies is required to log in to your Company’s Internet Gaming account, as first party cookies are used to support the log-in process.
The Company also installs Third party cookies on devices that access its websites unless the browser used by the device has disabled the installation of cookies. Third party Cookies are used by the Company to analyze and improve the performance of our websites, offerings, and advertisements. The Company uses web analytics services, including Google Analytics, to understand the interests of our visitors, to market our products and services, and for other internal business purposes.
You can learn more about data collection and use via Google Analytics by visiting https://policies.google.com/technologies/ads?hl=en-US, and can make use of Google’s free Google Analytics opt-out tool at https://support.google.com/analytics/answer/181881?hl=en.
You can opt out of the installation of cookies, or delete cookies that were previously installed, by updating your settings in the browser you use to visit GGPoker websites. Please note, however, that cookies allow for optimal functionality of GGPoker websites, and are required for some features of our websites to operate. By using the Company’s websites and applications, you consent to the installation of cookies by or on behalf of the Company as described in this Policy
Interest-Based Advertising/Advertising Cookies
We work with third-parties such as ad networks and other advertising companies that use their own tracking technologies (including cookies and pixel tags) on our Website and other websites and apps in order to provide you with tailored advertisements across the Internet. This is a common marketing practice referred to as interest-based or online behavioural advertising. These companies may collect information about your activity across your different devices on our Website and third-party websites and apps (such as web pages you visit and your interaction with our advertising and other communications) and use this information to make predictions about your preferences, develop personalized content and deliver ads that are more relevant to you on third party websites. This information may also be used to evaluate our online advertising campaigns.
Opting-out of Interest-Based Advertising: For more information about interest-based advertising on your desktop or mobile browser and to understand your options, including how you can opt-out of receiving interest-based ads from third-party advertising companies participating in the Digital Advertising Alliance of Canada (DAAC) Self-Regulatory Program for Online Interest-Based Advertising, please visit the DAAC website at http://youradchoices.ca/choices.
To learn more about interest-based advertising in mobile apps and to understand your options, including how you can opt out of this type of advertising by third-party advertising companies that participate in the DAAC’s AppChoices tool, please download the version of AppChoices for your device at https://youradchoices.ca/appchoices/.
Important Notes About your Opt-Out:
In some cases, our websites provide links to other sites created and maintained by other public and/or private sector organizations. We provide these links solely for your information and convenience. The Company is not responsible for the privacy practices of websites not administered by or on behalf of the Company.
The Company reserves the right to modify this policy at any time, so please review it frequently. Whenever we do so, we will post the updated version on our websites along with the last updated date. The current Policy supersedes any prior policies. Your continued use and access of our Services after the date a revised Policy is posted constitutes your acceptance of that Policy. If you do not agree with our Policy, please refrain from accessing or using our Services. If we make material changes to this Policy, we will take reasonable steps to ensure you are made aware of them and may ask you to refresh your acceptance of the revised Policy.
This Policy and all related matters are governed by the laws of Ontario and the federal laws applicable therein.
We make this Policy available on our Website. If you have any questions or concerns about this Policy, please contact our Privacy Officer at data-protection@ggpoker.ca.
Additionally, if you wish to make a complaint, you can make one through our complaints process, which can be found in our Terms and Conditions of Use (complaints@ggpoker.ca).