At Wildz Casino, transparency is very important to us, and we take your privacy extremely seriously. We appreciate that you are trusting us with your personal information (“PI”) and we want to be transparent about how we use it, in accordance with the laws of Ontario and Canada.
Rootz LTD is committed to protecting your PI and processing it in compliance with applicable laws – notably: the Freedom of Information and Protection of Privacy Act (‘FIPPA’), the Personal Information Protection and Electronic Documents Act (‘PIPEDA’), Ontario Regulation 722/21 made under the Alcohol and Gaming Commission of Ontario Act, the Operating Agreement (may also be mentioned as ‘OA’) signed with iGaming Ontario (‘iGO’) and the iGO Privacy Directive, the Maltese Data Protection Act (Chapter 586 of the Laws of Malta) as well as the various subsidiary legislation issued under the same – the ‘DPA’; The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – the ‘GDPR’, as well as any other applicable laws.
If you have any questions, please contact us at [email protected].
- Who we are and how to contact us
- Why we collect PI
- Where we get your PI from
- PI we collect
- How we use PI
- How we communicate with you
- How PI is shared
- Your rights to access and control your PI
- Promoting Safety and Security
- International Operations and Transfers of PI
- Privacy Compliance
Rootz Ltd, a Maltese company, is committed to protecting your PI and processing it in compliance with applicable laws. These applicable laws include the Freedom of Information and Protection of Privacy Act (‘FIPPA’), the Personal Information Protection and Electronic Documents Act (‘PIPEDA’), Ontario Regulation 722/21 made under the Alcohol and Gaming Commission of Ontario Act, the Operating Agreement (may also be mentioned as ‘OA’) signed with iGaming Ontario (‘iGO’) and the iGO Privacy Directive and any other applicable laws (collectively referred to hereinafter as the “Applicable Laws”).
Rootz Ltd has custody of your PI and provides you with the Services. Under the Applicable Laws, Rootz Ltd is operating on behalf of, and as an agent to iGO, and all such PI remains under the control of iGO, and Rootz Ltd collects, uses and discloses all such PI accordingly and in compliance with all Applicable Laws. Your PI will at all times be the property of Rootz Ltd, however the use and processing of your PI by Rootz Ltd will be subject to iGO’s control and the terms of the OA, which requires that Rootz Ltd’s collection, use, disclosure, retention and/or disposal of such PI must be in accordance with Part III of FIPPA.
We have an employee who is in charge of all data protection matters within the company, our data protection officer. If you are seeking to exercise any of your statutory rights or have any questions in relation to our policies and procedures, please contact our data protection officer at [email protected]. You may also contact us at:
Ewropa Business Centre
Level 3 - 701, Dun Karm Street
Birkirkara BKR 9034
2. Why we collect PI
We need to process your PI in order to provide you with our Services. We will only ever ask you for the minimum amount of information that we need, and we only ever use it for lawful purposes.
When you register for an account with the Website, you enter into a contract with us, as set out in our Terms and Conditions. For us to be able to keep up our end of the contract and provide you with access to our Services, we need to process some PI about you. We will always make it clear which PI is mandatory, and which PI you can decide not to give us if you don’t want to. If there are pieces of PI that are mandatory, and you don’t want to provide to us, then you will not be able to hold an account on the Website and use our Services. We use your information to:
- Help you create, operate and manage your personal profile, allowing you to access our games and services;
- Manage loyalty points and reward schemes;
- Protection of your personal profile and account;
- Process your bets and transactions, including your use of credit/debit cards and online payment systems;
- Provide customer support and service updates;
- Analyse user trends and improve the services we provide; and
- Monitor and guard against the registration of multiple accounts.
Some of the PI we process about you is also necessary for us to comply with the legal and regulatory obligations that we have as a gaming company, such as licensing requirements, responsible gaming and Anti Money Laundering (AML) Regulations. This information is processed in order to:
- Carry out age and identity verification checks;
- Verify source of income and/or source of wealth;
- Carry out due diligence checks;
- Monitor and investigate transactions and game play in order to prevent and detect fraud, money laundering, problem gambling and other irregular gaming activities;
- Consult self-exclusion registers and manage problem gambling;
- Manage registration of duplicate accounts and individuals from jurisdictions where gambling is prohibited.
We will not knowingly solicit from, and our Website and Services are not intended for, persons under 19 years of age (‘Minors’). We will not collect PI from Minors, and if a parent or guardian becomes aware that his or her Minor child has provided us with PI, the parent or guardian may contact us to have such Minor’s PI deleted by sending an email to our Data Protection Officer (“DPO”) at [email protected] requesting the deletion of the Minor child’s PI, including any documents provided by the Minor child. In case we cannot verify the relationship between the person making the request and the alleged Minor child from these documents, we have the discretion to request additional information and documentation verifying this information on a case-by-case basis.
Where we have your consent, we will contact you about news, promotions and bonuses. We will only ever contact you for these reasons if we have your prior consent to do so. You have full control over whether and how we get in touch through the settings in your account. You can access and change these settings at any time.
Where you voluntarily disclose sensitive information to us which we feel may impact your rational decisions, such as when you are speaking with us in chats or emails, we may take the decision to block you from our Services for your own safety.
3. Where we get your PI from
The majority of the PI that we collect about you is the PI you provide to us yourselves. However, sometimes we also get PI about you from other sources.
Under our AML obligations, we are required to carry out due diligence checks that confirm information about you. In some circumstances, we may also need to verify your source of income and/or source of wealth. We work with reputable external companies who work with the gaming industry to carry out these checks, and they provide a report which contains PI about you and your background.
In some circumstances, payment service providers may supply us with a small amount of PI when they carry out a transaction for you so that we can connect transactions to you as a player.
4. Information We Collect
When you use our Services, we collect the following types of PI:
Information you provide us
Some PI is required to create an account to allow you to use our Services, such as your name, physical address, physical location, personal numeric code (e.g. Social Insurance Number), email address, password, date of birth, age, gender, telephone number, ID number fiscal code (e.g. tax filing number) and documentary evidence confirming all such PI. This is important data for our compliance with applicable gambling and PI protection laws, regulations and guidelines, including Know Your Client (“KYC”) and Anti-Money Laundering (“AML”) regulatory requirements. This is the only PI you have to provide to create an account with us.
In view of the strict legal obligations imposed upon us, we also ask for occupation, source of wealth and source of income. There might be situations in which you are also asked to provide documentary evidence to prove that you are only using legitimate funds.
Government-Issued Photo Identification
Copies of identification documents, usually photo ID, issued by a federal, provincial or territorial government or by a foreign government that is equivalent to a Canadian document.
To help improve your experience or enable certain features of the Services, you may choose to provide us with additional PI, such as your game play preferences and payment transaction history.
If you contact us or participate in a survey, contest, or promotion, we collect the PI you submit such as your name, contact information, and message.
Information from Third-Party Services
If you choose to connect your account on our Services to your account on another service, we may receive PI from the other service.
Payment and Card Information
In order to receive payments, you must provide certain PI for identification and verification, such as your name, credit, debit or other card number, card expiration date, and CVV code. This information is encrypted and sent to your card network, which upon approval sends back a token, which is a set of random digits for engaging in transactions without exposing your card number. For your convenience, we store the last four digits of your card number and your card issuer’s name and contact information.
Device, Connection and Location Information
We will derive your approximate location from your IP address, collecting connection details and information with regard to your device, software or hardware that may identify you, such as your device’s unique identifiers (e.g. UDID, IMEI and MAC address), browser fingerprinting, IP address and geolocation data.
When you access or use our Services, we receive usage data. This includes information about your interaction with the Services, for example, when you view or search content, create or log into your account, play a game, collect or use bonuses or loyalty points, as well as information with respect to your transactions, deposits, balances, bets, withdrawals and winnings.
We also collect data about the devices and computers you use to access the Services, including IP addresses, browser type, language, operating system, the referring web page, pages visited, location, and cookie information.
Our Websites use “cookies”. A “cookie” is a piece of software, which may be sent to your computer. Cookies enable us to collect information about how our Websites and services are being used and to manage them more efficiently.
5. How we use PI
We use the PI we collect for the following purposes:
Provide and Maintain the Services
Using the PI we collect, we are able to deliver the Services to you and honour our Terms of Service contract with you. For example, we need to use your PI to provide you with your player dashboard, provide you with game suggestions and (with your consent) any other relevant marketing promotions.
Improve, Personalize and Develop the Services
We use the PI we collect to improve and personalize the Services and to develop new ones. For example, we use the PI to troubleshoot and protect against errors; perform data analysis and testing; conduct research and surveys; and develop new features. We also use segmentation to split our players into groups based on their gaming behaviour. We do this to help us understand how people use the Services and to help us develop our marketing approach, including bonuses and promotions.
When you allow us to collect location PI, we use that information to provide and improve features of the Services. For example, we may present to you your favourite games or games that you might be interested in at the top of our games content, based on the preferences you set, your place of residence and your game play data. We also use location information to determine your eligibility to use the Services.
We are required to take a number of steps to meet the rules around Anti-Money Laundering (AML) Counter-Terrorist Financing and fraud and other unlawful activities. In order to do this, we employ programs that monitor player behaviour and alert us to suspicious or fraudulent transactions. Where suspicious transactions are flagged, we escalate these to the responsible entities, including the iGO, which passes the information to the necessary regulators and enforcement bodies. As part of our licence, we also have obligations around responsible gaming. In order to do this, we employ a system which flags any gambling patterns or behaviours exhibited by a player that could indicate problem gambling. When the system flags a player, one of our responsible gaming team members reviews the account and where necessary will reach out to the player for a discussion on their game play and provide information and advice.
Third Party Websites
No third party is permitted to link any other website to our Website without obtaining our prior written consent.
6. How we Communicate with you
We use your information when needed, to send you notifications regarding the Services subject to having obtained your consent to send same, and respond to you when you contact us. We also use your information to promote new features or products that we think you would be interested in. You can control marketing communications and most notifications regarding the Services by using your notification preferences in your account settings or via the “Unsubscribe” link in an email.
Use of E-Mail for Communications
All e-mail messages are routinely scanned for viruses. In the case of e-mails, we may reject, delay or remove content from e-mails due to their nature, content or attachments, which may disrupt our systems or because they may pose security issues such as viruses. We may also filter out e-mails which contain certain content on the basis that the content is offensive, or the e-mail is unwanted or spam. In certain circumstances this may unfortunately result in “innocent” e-mails being affected, but we do try and reduce such occurrences.
Please be aware, however, that information sent through the Internet may technically be transmitted across international borders even where sender and receiver of information are located in the same country. Consequently, PI relating to you may be transmitted via a country having a lower level of data protection than that existing in your place of residence.
7. How Information is Shared
For External Processing
There are some circumstances where we need to share your PI with third party recipients in order to provide our Services. When we carry out any sharing with third parties, we always ensure that there is an appropriate contract in place, that the information being shared is transferred securely and that we only share the minimal amount of your information that we need to. We will never sell your information to any other third parties.
Third parties we work with include payment service and game providers, analytics services, identity verification, KYC and AML related services, social media platforms, website performance and security systems affiliates and other partners who process data for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures. These partners provide us with services globally, including for customer support, information technology, payments, marketing, data analysis, research, and surveys.
When you Agree or Direct us to Share
You may direct us to disclose your PI to others, such as when you use our community features like the “Races”. For certain information, we provide you with privacy preferences in account settings and other tools to control how your information is visible to other users of the Services. Just remember that if you choose to participate in a “Race”, information like your first name will be visible to all other participants.
Analytics and Advertising Services Provided by Others
We may share non-personal information that is aggregated or disidentified so that it cannot reasonably be used to identify an individual. We may prepare such information for research or statistical purposes.
We do not transfer your PI to any third parties for marketing purposes or for any other purposes other than listed above.
For Legal Reasons or to Prevent Harm
- for the purpose of preventing, investigating, detecting, prosecuting or suppressing fraud or any other criminal offences, and for the purpose of cooperating with law enforcement agencies, banks or other investigatory bodies in connection with such matters;
- where it is necessary as a matter of national or public security;
- in the interest of national budgetary, monetary or taxation matters that can arise;
- to protect and defend our rights and property or that of users of the Services;
- to protect against abuse, misuse or unauthorized use of our Services;
- to protect the personal safety or property of users of our Services (e.g. if you provide false or deceptive information about yourself or attempt to pose as someone else, we shall disclose any information we may have about you in our possession so to assist any type of investigation into your actions);
- for any purpose that may be necessary for the performance of any agreement you may have entered into with us; and
- as may be required under any law.
Our policy is to notify you of a legal process seeking access to your PI, such as search warrants, court orders, or subpoenas, unless we are prohibited by law from doing so. In cases where a court order specifies a non-disclosure period, we provide delayed notice after the expiration of the non-disclosure period.
For Business Reasons
8. Your Rights to Access and Control your PI
We provide you with account settings and tools to access and control your PI, as described below, regardless of where you live.
Accessing and Exporting PI
You have a number of rights that you can exercise when it comes to your PI. These rights include:
- Having access to the PI that we hold about you;
- Being able to rectify PI we have about you that is incorrect;
- In very limited circumstances, having your PI deleted;
- In some circumstances, have the use of your PI restricted or “paused”;
- Have your PI provided to you in a digital format and where possible transferred to another organization.
By logging into your account, you can access much of your PI, including your dashboard.
If you would like to exercise any of these rights, you should email us at [email protected] from your registered email address and provide:
- Your name
- Contact details
- Your registered email
- Full details of your request
In some circumstances, we may request that you provide us with identity documents so that we can verify your identity. We will carry out your request, to the extent that it is possible to do so and in compliance with our legal obligations.
Editing and Deleting PI
Your account settings let you change your PI. For instance, you can edit the profile data you provide or delete your account if you wish by contacting us at [email protected]. However, certain PI that is necessary to check eligibility to access the Website and use the Services, such as date of birth or age, cannot be deleted.
You can obtain a copy of your PI through your account on the Website. For your protection, you will be required to provide proof of your identity to obtain such copies. You should include adequate information to identify yourself and such other relevant information that will reasonably assist us in fulfilling your request. If you would like to close your account, you can also contact Customer Services. If you would like to close your account, this could be done through your personal account. We will comply with such requests unless we have a legitimate ground not to delete the data.
If you choose to terminate your account, we will retain your PI only for as long as necessary for the purposes set out in this policy and in compliance with the PI Retention section below.
We have a legal obligation due to AML and KYC regulations to retain all personal account data, obtained for customer due diligence purposes, such as your name and address and all documentation gathered during registration and payment processes for a period of 5 years after you close your account. You may also wish to note that this period may be extended by a further 5 years when such extension would be considered necessary for the purposes of the prevention, detection, analysis and investigation of money laundering or funding of terrorism activities by the Financial Intelligence Analysis Unit and/or the Financial Transactions and Reports Analysis Centre of Canada (“FINTRAC”), relevant supervisory authorities or law enforcement agencies.
Customizing or Restricting your Data Use
We provide you with account settings and tools to control your data use. For example, through your privacy settings, you can limit how your information is visible to other users of the Services; using your notification settings, you can limit the notifications you receive from us.
If you need further assistance regarding your rights, please contact us at [email protected], and we will consider your request in accordance with applicable laws. You also have a right to lodge a complaint with IGO.
We keep your account information, like your name, email address and password, for as long as your account is in existence because we need it to operate your account.
If you require more information about our Data Retention Policy, please email us at [email protected].
We use the PI we collect to promote the safety and security of the Services, our users, and other parties. For example, we may use the PI to authenticate users, facilitate secure payments, protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and policies.
For PI, we rely on several legal bases to process the data. These include when you have given your consent, which you may withdraw at any time using your account settings and other tools; when the processing is necessary to perform a contract with you, like the Terms & Conditions; and our legitimate business interests, such as in improving, personalizing, and developing the Services, marketing new features or products that may be of interest, and promoting safety and security as described above.
We work hard to keep your PI safe and make all reasonable efforts to safeguard the confidentiality of PI that we process. We regularly review and enhance our technical, physical and managerial procedures to ensure that your PI is protected. These cover areas such as access control, authentication, audit, monitoring, alarms, data storage and backup and transmission standards. This is to ensure there is no unauthorized access or modifications to PI, no improper use or disclosure, or unlawful destruction or accidental loss.
Our security policies, rules and technical measures are dedicated to the protection of the PI that we have under our control. All our employees and third-party data processors, who have access to and are associated with the processing of PI, are further obliged to respect the confidentiality of this PI and are subject to a code of conduct which requires them to adhere to privacy principles.
11. International Operations and Transfers of PI
12. Privacy Compliance
Making a complaint
If you are unhappy with how your PI has been handled, please email [email protected], detailing:
- Your name
- Your contact details
- Your registered email
- Full details of the complaint that you have
We will then look into your complaint and investigate whether your PI has been handled appropriately and in line with this privacy notice, our legal obligations and our internal policies and procedures. We will then contact you regarding the outcome of the investigation and any steps that have been taken as a result.
If you are unhappy with our resolution of your complaint, you may request a copy of your case file, which we shall provide, in order to escalate the complaint to iGO. We will aid iGO in the investigation and handling of your complaint, all in accordance with the iGO’s Customer Care and Dispute Resolution Policy pursuant to section 24.02 of the OA.
Translations of this privacy notice
We have translated our privacy notice from English into the official languages of the countries that we provide our services to. We have done this to ensure that all of our customers are clear about how we use PI.
Changes to this Policy
We will notify you before we make material changes to this policy and give you an opportunity to review the revised policy before deciding if you would like to continue to use the Services.