This Privacy Policy describes how personal information of visitors and patrons of Brantford Casino, located in Brantford, Ontario, Canada, is collected, used, disclosed, and protected. The policy is intended to comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
The Privacy Policy applies to all personal information collected at the casino facility, through related services, and via any digital platforms operated in connection with the casino. By visiting the property or using the services, you acknowledge that you have read and understood this Privacy Policy.
1. Information Collected
Personal information is collected only to the extent necessary to provide gaming and related services, comply with regulatory requirements, maintain security, and operate loyalty or similar programs. The types of personal information that may be collected include the following.
1.1. Identification Information
Name, date of birth, government-issued identification numbers, residential address, telephone number, and email address. This information is collected for purposes that include age and identity verification, account creation, regulatory compliance, and anti-money laundering obligations.
1.2. Financial Information
Credit card details, payment information, transaction history, and banking details provided when conducting financial transactions at the property or when participating in gaming or related activities.
1.3. Gaming Activity
Records of gaming participation, wagers placed, winnings, loyalty program enrollment and activity, and stated preferences related to gaming and associated services.
1.4. Security and Surveillance Data
Images and video footage captured by security cameras throughout the property, including gaming floors, entrances, exits, and other public areas. Voice recordings may be collected in specific circumstances for security, customer service, and dispute resolution purposes.
1.5. Device and Technical Information
When digital services are used, information such as IP addresses, device identifiers, browser type, and geolocation data may be collected.
2. Use of Personal Information
Personal information is used for the purposes described below.
2.1. Service Provision
- Verification of identity and age
- Processing of payments and other transactions
- Management of gaming and customer accounts
- Administration of loyalty and similar programs
- Provision of customer support and related services
2.2. Legal and Regulatory Compliance
- Compliance with gaming and licensing regulations
- Fulfillment of anti-money laundering and anti-terrorist financing obligations
- Implementation of responsible gaming obligations
- Tax reporting and other record-keeping duties required by federal and provincial authorities
- Responses to lawful requests from regulators and other authorities
2.3. Security and Fraud Prevention
- Monitoring and maintenance of the security of the property and systems
- Prevention, detection, and investigation of fraud, theft, and other prohibited or unlawful activities
- Protection of the safety of patrons, employees, and other persons on the premises
2.4. Marketing and Communications
Subject to applicable law and where consent has been obtained where required, personal information may be used to send promotional materials, newsletters, and information about events and services. You may withdraw consent to receive marketing communications at any time, as described in Section 4.
2.5. Operational Purposes
- Analysis of usage patterns and trends
- Improvement and development of services, facilities, and operations
- Internal reporting, planning, and business management
- Research, including aggregated and de-identified analyses
3. Disclosure of Personal Information
Personal information may be disclosed to third parties in the circumstances described below, in each case only to the extent reasonably necessary for the relevant purpose or as required by law.
3.1. Service Providers
Personal information may be disclosed to third-party service providers that support technical, payment processing, hosting, marketing, security, and other operational functions. Such providers are required by contract to protect personal information and to use it only for the purposes for which it has been disclosed.
3.2. Law Enforcement and Regulatory Authorities
Personal information may be disclosed to law enforcement agencies, gaming regulators, tax authorities, and other governmental or regulatory bodies where required or authorized by applicable law, including in response to lawful requests, court orders, or regulatory investigations.
3.3. Financial Institutions
Payment and transaction information may be shared with banks, payment processors, and other financial institutions for the purpose of processing deposits, withdrawals, chargebacks, and other financial transactions, as well as for fraud prevention and regulatory compliance.
3.4. Legal Proceedings
Personal information may be disclosed when necessary to establish, exercise, or defend legal claims, to pursue available remedies, or to protect the rights, property, or safety of the business, its patrons, employees, or third parties, in accordance with applicable law.
4. Consent
Meaningful consent is obtained for the collection, use, and disclosure of personal information, except where otherwise permitted or required by law. Consent may be express (verbal or written) or implied through actions, such as providing personal information voluntarily, entering the premises, or using services or digital platforms.
You may withdraw consent to the collection, use, or disclosure of personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect the ability of the service to provide certain products or services. To withdraw consent, contact the Privacy Officer using the contact information in Section 10.
5. Data Retention
Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected or as required or permitted by law. Retention periods vary depending on the type of information and applicable legal, regulatory, and operational requirements.
- Gaming transaction records, identification documents, and surveillance footage are retained in accordance with gaming regulations and internal policies.
- Marketing-related data is retained until consent is withdrawn or a deletion request is received, subject to legal and regulatory obligations.
When personal information is no longer required, it is securely destroyed, deleted, or anonymized in accordance with established data retention and destruction procedures, subject to any legal requirements to retain specific records.
6. Security Safeguards
Physical, administrative, and technical safeguards are implemented to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include, but are not limited to:
- Restricted access to personal information based on a need-to-know principle
- Secure storage for physical records and controlled access to facilities
- Use of technical controls for electronic records, including firewalls and access controls
- Encryption of sensitive data during transmission, where appropriate
- Regular review and updating of security measures
- Training programs for employees on privacy and data protection obligations
Although reasonable safeguards are in place, no method of transmission over the internet or method of electronic or physical storage is entirely secure. Absolute security of personal information cannot be guaranteed.
7. Access and Correction
You have the right to request access to personal information held about you and to request correction of any information that is inaccurate or incomplete, subject to applicable legal restrictions.
Access or correction requests must be submitted in writing to the Privacy Officer using the contact information in Section 10. A response will be provided within a reasonable period, typically within 30 days, unless an extension is permitted by law.
In some circumstances, access to certain information may be limited or refused, for example where disclosure would reveal personal information about another individual, where information is subject to legal privilege, or where restrictions are imposed by law. If a request is refused, written reasons for the refusal will be provided, subject to legal limitations.
There is no fee for submitting an access request. A reasonable fee may be charged to cover costs of locating, retrieving, and copying records if the request is extensive. You will be notified in advance of any such fee.
8. Responsible Gaming and Privacy
Responsible gaming programs, including self-exclusion and similar measures, require the collection and use of certain personal information to implement and enforce restrictions.
If you choose to self-exclude from gaming activities or enroll in a responsible gaming program, your personal information will be used to:
- Record and manage your self-exclusion or program enrollment
- Enforce access and participation restrictions associated with the program
- Provide information about support resources where applicable
This information is handled in a confidential manner and is shared only to the extent necessary to administer and enforce responsible gaming measures, in accordance with applicable laws and regulations.
9. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in legal or regulatory requirements, operational practices, or services. The most current version of the policy will be made available at the property and provided upon request.
Continued access to the property or use of services after an updated Privacy Policy has been made available will be deemed acceptance of the revised policy, to the extent permitted by applicable law.
10. Contact Information
Questions, concerns, or complaints regarding this Privacy Policy or the handling of personal information, as well as requests to access or correct personal information or to withdraw consent, should be directed to:
Privacy Officer
Brantford Casino
100 Wellington Square
Brantford, ON N3T 5R7
Canada
All complaints will be reviewed and investigated as appropriate, and a response will be provided within a reasonable time frame.
If you are not satisfied with the response or proposed resolution, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator for further guidance.
This Privacy Policy is effective as of the date of publication and applies to all personal information collected, used, or disclosed by Brantford Casino from that date forward, unless otherwise indicated.