1. Who We Are and the Laws We Follow
Delta iGaming Inc. ("we") operates the Delta Casino online casino and bingo platform for players in Alberta, as an operator registered with the Alberta Gaming, Liquor and Cannabis Commission (AGLC). We are the organization responsible for the personal information described in this policy.
We handle personal information in line with the Alberta Personal Information Protection Act (PIPA), the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies (for example to information that crosses provincial or national borders), Canada’s anti-spam legislation (CASL) for marketing messages, the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), and the AGLC standards and requirements for iGaming operators.
2. Responsible Organization and Privacy Contact
Delta iGaming Inc., trading as Delta Casino, 233 Speers Road, Unit 2, Oakville, ON L6K 2E9, Canada.
Our Privacy Officer is accountable for compliance with this policy: Privacy@deltabingo.com, phone +1 905-842-8070. Requests concerning Alberta players can also be sent to ab.privacy@deltabingo.com. Full contact details are in section 16.
3. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account and contact data | Legal name, date of birth, residential address, email, mobile number, password (stored only as a one-way hash), Terms acceptance record, marketing choice | You, at registration and in your account |
| Identity and age verification (KYC) | Document type, number and expiry; name and date of birth on the document; image or scan of the document; verification result and date; proof of address or of payment-method ownership when requested | You; verification providers |
| Location data | Device latitude/longitude and accuracy at game start and during play; IP address | Your device, with your permission |
| Financial and transaction data | Deposits, withdrawals, method, account-holder name, amounts, dates, references, status, bonus credits and removals; source-of-funds information when required | You; payment processors; our cashier |
| Gaming data | Game, round ID, stake, result, win, balance after each round, session times and play time | Our game server |
| Responsible gambling data | Limits and their usage, reality-check setting, Fit to Play answers, cooling-off and self-exclusion records | You; our systems |
| AML and fraud data | Transaction-monitoring flags, results of checks, reports we are required to make | Our systems; service providers |
| Communications | Support messages, complaints, contact-form messages | You |
| Technical data | IP address, browser and device type, pages requested, session cookie | Your browser |
4. Your Gaming Account
We use account data to open and run your account, confirm your email, sign you in securely, keep one account per person, show your balance and history, process deposits and withdrawals, and send service messages that the law or your account requires. We compare a new registration’s name and date of birth, email and phone with existing accounts and with our self-exclusion register, using one-way hashed values for the register.
5. Identity and Age Verification
Before your first deposit we verify your identity and that you are 18 or older. You provide a government photo ID — driver’s licence, passport or Alberta ID card — whose name and date of birth must match your account. The document image is stored on our secured servers outside the public web area, with access limited to authorized compliance staff, and is used only for verification, preventing duplicate accounts and fraud, and our anti-money laundering obligations. We may also check your details with identity-verification providers.
6. Location Data
Real-money play is allowed only while you are physically in Alberta. With your permission, your browser sends us your device location when you start a game and about every 25 minutes while you play. We check it against the Alberta border, keep the result for your session (30 minutes), and record the check (approximate coordinates rounded to about 1 km, accuracy, inside/outside) in a compliance log. We do not track your location at any other time, and we do not use it for marketing. If you refuse location access, you can still use your account but cannot play for real money.
7. Payments and Transaction History
We record every deposit, withdrawal and bonus movement with its reference, method, amount, date and status, and keep your game history round by round. Card and online-banking credentials are handled by the payment processor; we do not receive or store your full card number, CVV or banking password. We check that the account-holder name on a payment method matches your account.
8. Anti-Money Laundering, Fraud Prevention and Player Protection
We process account, KYC and transaction data to meet our obligations under the PCMLTFA and FINTRAC guidance: verifying identity, monitoring transactions (for example large transactions of $10,000 or more within 24 hours, rapid repeated deposits, and withdrawals after little play), keeping records, and reporting suspicious and large transactions to FINTRAC. We use the same data, together with device and location data, to prevent fraud and duplicate accounts.
We process responsible gambling data to apply your limits, breaks and self-exclusion, to show reality checks and to identify signs of gambling harm so we can contact you or restrict the account. Some of these checks are automated; you can ask the Privacy Officer how a decision about your account was made and ask for it to be reviewed by a person.
9. Marketing
We send marketing emails only if you gave separate, optional consent, which you can withdraw at any time in My Account → Profile & security or through the unsubscribe link in every message. Marketing stops automatically and your consent is switched off when you start a cooling-off break or self-exclude, and we never send marketing to anyone under 18 or on our exclusion register. We do not use marketing or advertising cookies (see the Cookie Policy).
10. Who We Share Information With
We do not sell personal information. We share it only as needed with:
- Regulators and regulated systems: the AGLC and the Alberta iGaming Corporation (AiGC), for oversight, market management, complaint escalation and the AGLC Self-Exclusion Program;
- FINTRAC and law enforcement, where the PCMLTFA or other law requires;
- Payment processors and banks, to make deposits and withdrawals;
- Identity-verification and fraud-prevention providers;
- Our technology and hosting providers, including our platform technology partner Strive Gaming, and our email delivery provider, who act only on our instructions;
- Professional advisers (lawyers, auditors) under confidentiality.
Service providers are bound by contract to protect the information and use it only for the services they provide to us. Some may process information outside Alberta or Canada; where they do, it may be accessible to authorities there, and we require protection comparable to Canadian law. You can ask the Privacy Officer about providers outside Canada.
11. Cookies and Browser Storage
We use essential cookies for age confirmation, your cookie choice and your signed-in session, and, only with your consent, functional browser storage that remembers recently viewed games. We do not use analytics or advertising cookies. The full list is in the Cookie Policy; you can change your choice at any time with Cookie Settings in the footer.
12. How Long We Keep Information
| Information | Retention |
|---|---|
| Account, KYC documents, transaction and game records | While the account is open and for at least 5 years after it is closed or after the last transaction, as the PCMLTFA requires |
| Self-exclusion records and register entries | For the exclusion term and for 5 years after it ends |
| Location check log | 2 years |
| Support messages and complaints | 3 years after the case is closed |
| Server logs with IP addresses | Up to 90 days |
| Cookies and browser storage | As listed in the Cookie Policy |
When information is no longer needed, we delete it or make it anonymous.
13. Security
The platform is served only over HTTPS. Passwords are stored as one-way hashes; every request that changes data needs a session-bound security token; KYC documents and account data are kept outside the public web area with access limited to authorized staff; and payment credentials stay with the payment processor. Use a strong, unique password and log out on shared devices. If a breach creates a real risk of significant harm, we notify you and the Information and Privacy Commissioner of Alberta as PIPA requires.
14. Your Rights
Under PIPA and PIPEDA you can:
- ask whether we hold personal information about you and get a copy of it;
- ask us to correct information that is inaccurate or incomplete;
- ask how your information has been used and to whom it has been disclosed;
- withdraw consent, for example to marketing, subject to legal and contractual limits (we cannot stop processing that the law requires, such as AML records);
- complain to us and to the regulator.
Send requests to the Privacy Officer (section 16). We may need to confirm your identity and generally reply within 45 days. If you are not satisfied, you can complain to the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or, under PIPEDA, the Office of the Privacy Commissioner of Canada (priv.gc.ca).
15. Minors
Our services are only for adults 18+. We do not knowingly collect information from minors. If we learn that an account belongs to someone under 18, we close it and keep only the records the law requires.
16. Contact Information
Privacy Officer
Delta iGaming Inc., 233 Speers Road, Unit 2, Oakville, ON L6K 2E9, Canada
- Email: Privacy@deltabingo.com
- Alberta privacy requests: ab.privacy@deltabingo.com
- Phone: +1 905-842-8070
Player support
online-support-alberta@deltacasino.com · Daily, 8:00 AM – 2:00 AM Mountain Time (MT), or the contact form.
17. Changes to This Policy
We update this policy when our services or the law change; the date at the top shows the latest version. If a change affects how we use information you have already given us, we email account holders before it takes effect and, where the law requires, ask for consent again.