Privacy Policy

Effective date: 1 September 2026 · Last updated: 1 September 2026

1. Who is responsible for your data

Apollo Entertainment Ltd, company registration C 45483, registered office 8, Villa Seminia, Suite 2, Sir Temi Zammit Avenue, Ta' Xbiex XBX 1011, Malta, is the organisation responsible for the personal information collected through this site.

Questions, access requests and complaints about personal data go to our Privacy Officer at privacy@ontariocaptaincooks.casino. Appointing an accountable individual is a requirement of Canadian federal privacy law, and this is that contact.

2. What personal information we collect

Account information

Your name, date of birth, residential address, email address, telephone number where provided, username and password, and your account preferences including any limits you set.

Identity verification (KYC) information

Copies of government-issued identity documents, proof of address documents, and the results of identity and age checks. Where a third-party verification provider is used, the outcome of its check and any reference number it returns.

Payment and financial information

The payment methods you use, transaction amounts, dates and reference numbers, and confirmation that a method belongs to you. We do not store full card numbers — card details are handled by the payment provider.

Location and geolocation data

This one deserves its own explanation. Because real-money play is restricted to people physically inside Ontario, we collect and process data that indicates where you are: IP address, and signals from your device and network connection used by the geolocation check.

This is collected at login and while you are playing. It is used for the specific purpose of confirming you are inside the province, and for detecting attempts to disguise location using a VPN, proxy or similar tool. Checks are also retained as evidence of regulatory compliance.

Device and cookie data

Device type, operating system, browser, language, and identifiers set by cookies and similar technologies. See the Cookie Policy for the full picture.

Play and transaction history

Games played, stakes, outcomes, balances, session times and login history, along with deposits and withdrawals.

Responsible gambling data

Limits you set and changes to them, cooling-off periods, self-exclusion status including registration with BetGuard, and interactions relating to responsible gambling.

Communications

Emails and support correspondence, and your marketing preferences.

3. Why we process it

We process personal information to:

• Provide the service — opening and running your account, processing play, deposits and withdrawals.
• Verify identity and age — confirming you are who you say you are and that you are 19 or older.
• Confirm your location — establishing that you are physically in Ontario when you play.
• Prevent fraud — detecting duplicate accounts, third-party payments, collusion, bot use and attempts to circumvent location checks.
• Meet regulatory obligations — requirements set by the AGCO and iGaming Ontario, including responsible gambling and record-keeping.
• Meet anti-money-laundering obligations — including reporting to FINTRAC where required.
• Support responsible gambling — operating limits, cooling-off periods and self-exclusion, and identifying patterns that may indicate harm.
• Communicate with you — service messages, and marketing where you have consented.
• Improve the service — analytics, where you have allowed analytics cookies.

4. Our legal basis

We operate under the Personal Information Protection and Electronic Documents Act (PIPEDA), which is built on consent supported by the principles of accountability, identified purpose, limited collection, limited use and disclosure, and openness.

Some processing does not depend on your consent because it is required by law or by the regulator: identity and age verification, geolocation checks, anti-money-laundering obligations, and record-keeping. If you withdraw consent for these, we cannot continue to offer you an account.

Marketing communications are sent only with your express consent, as required by Canada’s Anti-Spam Legislation (CASL), and every message includes a way to unsubscribe.

5. Who we share it with

We do not sell your personal information. We share it only where necessary:

• The AGCO and iGaming Ontario — where required for regulatory supervision, audit or investigation.
• FINTRAC — where a report is required under anti-money-laundering law.
• BetGuard — information necessary to operate the centralised Ontario self-exclusion programme.
• Payment providers and banks — to process deposits and withdrawals.
• Identity verification providers — to carry out KYC checks.
• Geolocation service providers — to confirm you are in Ontario.
• Game suppliers — the minimum needed to deliver a game session.
• IT, hosting and support providers — under contract and only on our instructions.
• Law enforcement, courts and other authorities — where legally required.

Service providers act on our instructions and are bound by contract to protect the information and to use it only for the purpose we specify.

6. Storage and cross-border transfer

Personal information may be stored and processed on servers located outside Canada, including in the European Union and the United Kingdom, by us and by our service providers.

Where information is processed in another country it may be accessible to the courts and law enforcement of that country under its laws. We use contractual and organisational safeguards comparable to the protection required under PIPEDA, and we remain accountable for information transferred to a provider for processing.

7. How long we keep it

We keep personal information only as long as necessary for the purpose it was collected for, or as long as the law requires — whichever is longer. Regulatory and anti-money-laundering rules set minimum retention periods that we cannot shorten at your request.

• Account, KYC and transaction records — retained for the life of the account and then for the period required by gaming and anti-money-laundering law, which is measured in years rather than months.
• Geolocation check records — retained as evidence of compliance for the period required by the regulator.
• Self-exclusion records — retained for at least the duration of the exclusion, and afterwards so that it can be enforced.
• Support correspondence — retained while needed to handle the matter and any subsequent complaint.
• Marketing preferences — retained until you withdraw consent, and then as a record that you did.

When a retention period ends, information is securely deleted or anonymised.

8. How we protect it

We use encryption in transit, access controls limiting staff access to what their role requires, logging and monitoring, and contractual security obligations on providers. Payment card details are handled by payment providers rather than stored by us.

No system is completely secure. Choose a strong, unique password, do not reuse it elsewhere, and tell us immediately if you think someone else has accessed your account.

9. Your rights

Under PIPEDA you may:

• Access the personal information we hold about you, and be told how it has been used and to whom it has been disclosed.
• Correct information that is inaccurate or incomplete.
• Withdraw consent for processing that relies on consent, subject to legal and contractual limits — withdrawing consent for verification or geolocation means we can no longer offer you an account.
• Withdraw marketing consent at any time, using the unsubscribe link or by writing to us.
• Complain about how your information has been handled.

A note on deletion. PIPEDA does not provide a general right to erasure in the way that European law does. We will delete information we are not required to keep, but gaming, anti-money-laundering and self-exclusion obligations require certain records to be retained for a set period regardless of a deletion request. Where we cannot delete something, we will tell you why.

Write to privacy@ontariocaptaincooks.casino. We respond within 30 days. We may need to verify your identity first, so that we are not disclosing your information to someone else.

10. Cookies and marketing

Cookies and similar technologies are covered in full in the Cookie Policy. Strictly necessary cookies are always active; functional, analytics and marketing cookies are off until you allow them, and you can change your choices at any time.

Commercial electronic messages are sent only with your express consent under CASL, always identify the sender, and always include an unsubscribe mechanism that we act on promptly.

11. Minors

This site is not intended for anyone under 19, and we do not knowingly collect personal information from anyone under that age. Where we discover that an account belongs to a person under 19, we close it and delete the associated personal information except where a record must be retained by law.

If you believe someone under 19 has provided us with personal information, contact privacy@ontariocaptaincooks.casino.

12. Complaints and the supervisory authority

Raise a privacy concern with our Privacy Officer at privacy@ontariocaptaincooks.casino. We will investigate and respond in writing.

If you are not satisfied with the outcome, you may complain to the Office of the Privacy Commissioner of Canada (OPC), which oversees compliance with PIPEDA.

13. Changes to this policy

We may update this policy to reflect changes in law, regulation or how the service works. The effective date at the top of the page will change, and where an update is material we will notify account holders by email or on signing in.