Mr Fortune Casino Canada Privacy Policy

This Privacy Policy document outlines the data protection practices of Mr Fortune Casino in its operations serving players in Canada. The policy exists to inform users of how their personal information is collected, used, disclosed, and protected in the course of providing gaming services. It explains the legal and administrative framework governing data processing, including compliance with applicable privacy legislation. The document details procedures for account management, transactional security, and regulatory obligations. It is intended to provide transparency regarding the handling of player information and the lawful bases for processing such data. Users are advised to review this policy to understand their rights and the operator's responsibilities.

Data Collection and Categories of Personal Information

Mr Fortune Casino collects personal information necessary to establish, manage, and maintain a player account and to provide gaming services. This collection occurs during registration, account verification, financial transactions, and through general interaction with the platform. The information is categorized for clarity regarding its purpose and handling.

The primary categories of data processed include identification and contact details provided during registration. This encompasses full name, date of birth, residential address, email address, and telephone number. For verification and regulatory compliance, the casino collects copies of government-issued identification, proof of address documents, and, where necessary, source of funds information.

Financial and transactional data is processed to facilitate deposits and withdrawals. This includes payment method details, transaction histories, account balances, and records of gameplay activity. Technical data is automatically generated and collected, including IP address, device identifiers, browser type, operating system, and log data pertaining to website access and usage patterns.

Communication records are retained, including correspondence with customer support, chat logs, and records of telephone calls. Marketing preference data is also stored, reflecting a player's choices regarding promotional communications. For responsible gaming purposes, data related to player activity, account limits, and self-exclusion requests is maintained.

Purposes of Processing and Legal Foundations

Personal data is processed for specific, explicit, and legitimate purposes as required for service delivery and legal compliance. Each processing activity is conducted under a recognized legal basis as defined by applicable privacy law.

The processing of identification and contact data is fundamental for account creation and management. This enables access to the gaming platform, personalized account features, and customer service. The legal basis for this processing is the performance of the contract between the player and Mr Fortune Casino. Verification of identity and age is a legal obligation under Canadian gaming regulations and anti-money laundering laws, constituting a separate legal basis for processing.

Processing financial data is necessary to execute deposit and withdrawal transactions, which is part of the contractual service. It is also required for fraud prevention, which constitutes a legitimate interest of the operator. Technical data is processed for network security, to prevent system abuse, and to ensure platform functionality and stability, which are also legitimate interests.

Data is used for regulatory reporting, auditing, and compliance with legal orders. This processing is based on legal obligation. Communications are processed to provide customer support and maintain a record of interactions, based on both contractual performance and legitimate interest. Marketing communications are sent only where consent has been provided, which serves as the legal basis for such processing. Players may manage preferences or withdraw consent at any time through their account settings.

Data Storage, Safeguards, and Retention Periods

Mr Fortune Casino implements technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Data is stored on secure servers in controlled environments with restricted physical and electronic access.

Security measures include encryption technologies for data in transit and at rest, particularly for sensitive financial and identification information. Firewalls, intrusion detection systems, and regular security assessments are employed to protect the technical infrastructure. Access to personal data is strictly limited to authorized personnel who require it to perform their duties, and all such personnel are bound by confidentiality obligations.

Data retention periods are determined by the purpose for which the information was collected and relevant legal or regulatory requirements. Account data and transactional records are retained for a minimum period as mandated by Canadian gaming and financial regulations, typically several years after account closure. Technical logs are retained for a shorter duration necessary for security monitoring and troubleshooting.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with an identifiable individual. Archived data may be retained for longer periods only when required for the establishment, exercise, or defense of legal claims or for ongoing regulatory compliance purposes.

Player Rights and Request Procedures

Individuals residing in Canada have certain rights regarding their personal information under privacy legislation. Mr Fortune Casino has established procedures to facilitate the exercise of these rights in a verifiable manner.

Players have the right to request access to their personal data held by the casino. This includes confirmation of whether data is being processed and a copy of the data itself. The right to rectification allows players to request correction of inaccurate or incomplete personal data. Under certain conditions, players may request the erasure of their personal data, also known as the right to be forgotten.

Players may request restriction of processing, which limits how their data is used, or object to processing based on legitimate interests. The right to data portability allows players to receive their provided personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. Players can also object to processing for direct marketing purposes at any time.

To exercise any of these rights, a player must submit a verifiable request via the designated contact channel specified in this policy. The casino is required to verify the identity of the requester to a reasonable degree of certainty before actioning any request, which may involve requesting additional information. The casino will respond to requests within the timeframe stipulated by law. There is no fee for exercising these rights unless a request is manifestly unfounded or excessive. Players have the right to lodge a complaint with the relevant privacy commissioner in their province of residence if they believe their rights have been infringed.