Policy Statement
iGaming Ontario (“iGO”, “we”, “us” and/or “our”) has a mandate to conduct and manage prescribed online lottery schemes (“igaming”) to players physically present in the Province of Ontario through authorized private internet gaming operators (“Operators”) who offer their services as agents of iGO. iGO develops, undertake and provide online gaming, promotes responsible gaming, and conducts and manages the market the operations in accordance with applicable laws.1
This privacy policy (the “Policy”) governs the collection, use, disclosure, retention of Personal Information by iGO and its Operators, as applicable, and sets forth the Personal Information that may from time to time be collected from Users, how it can be used, with whom it can be shared and for which purposes.
iiGO operates with integrity, efficiency, and in the best interests of the Government of Ontario and Ontarians while protecting Personal Information. This Policy provides direction and guidance on how iGO collects, discloses and uses Personal Information. Personal Information collected by iGO or Operators on behalf of iGO is collected in accordance with Ontario’s Freedom of Information and Protection of Privacy Act (“FIPPA”) and other applicable laws as may apply (FIPPA and other applicable laws collectively the “Applicable Laws”). All affected individuals should review this Policy on a regular basis and satisfy themselves that they have taken or are taking such actions as may be required to comply with this Policy.
The nature of iGO’s services or Applicable Law may change from time to time and as such, it may be necessary to amend this Policy to address such changes. We reserve the right to update, modify or supplement this Policy without prior notice. We encourage anyone who has any questions about the Policy to contact @email or 647-302-6589.
iGO strongly believes in protecting the privacy of the Personal Information that we obtain for business purposes. iGO values the trust that is placed on us to responsibly manage the Personal Information that we may encounter while we conduct business in Ontario.
This Policy and the policies of Operators are designed to assist us in fairly and effectively controlling and managing Personal Information collection, use, disclosure and retention and to maintaining the accuracy, confidentiality, and security of User Personal Information. In that regard, iGO and all our employees and Operators who handle Personal Information are required to comply with this Policy, FIPPA and iGO’s privacy requirements.
We are committed to compliance with this Policy in an open and transparent manner. We are further committed to complying with Applicable Laws that may apply to the Personal Information over which iGO or Operators may have custody or control.
iGaming Ontario Website(s)
By using this site, the service, or voluntarily providing Personal Information to iGO while using any feature of the Site or service, you consent to iGO using and disclosing your personal information in accordance with Applicable Laws.
When you voluntarily provide us with Personal Information you consent to our collecting it and using it pursuant to this Privacy Policy.
Scope and Application
Personal Information collected by iGO or Operators is collected, used, disclosed or retained in accordance with this Policy, Applicable Laws and our records retention policies. Personal Information may be collected when you:
- Visit our website
- Communicate with us or an Operator
- Register an account with an Operator
- Participate in Operator offerings
While we will make reasonable efforts to ensure Personal Information under our control is correct, ultimately you are obligated to ensure your Personal Information is kept accurate, complete, and up to date. You may contact either us or the Operator (depending on who has possession of your information) to provide any updates or corrections you would like to make regarding your Personal Information. After the applicable retention period for records containing Personal Information has lapsed, the records will be securely disposed of in accordance with iGO’s policies and Applicable Laws.
In some cases, Operator websites may link to other websites not conducted or managed by iGO. Information shared with these sites will be governed by their respective privacy policies and terms of services. Links to Third Party websites do not constitute an endorsement or approval by iGO.
Disclosure of Personal Information
We may share your Personal Information in our possession with our affiliates and Operators, and our affiliates and Operators may share such Personal Information in their possession with us.
In certain circumstances we, or Operators as applicable, may provide your Personal Information to Third Parties without notice to you, subject to Applicable Laws. We may share your Personal Information with government authorities, law enforcement agencies, or other Third Parties:
- if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, to protect and defend our rights or property
- if we determine, in our sole discretion, that there is a violation of our terms, policies, guidance documents or the applicable law, to prevent fraud or other illegal activity.
Cookies and Analytics
When you visit our website or an Operator’s website, cookies are used to operate and administer services and improve your experience. A “cookie” is a piece of information sent to your browser by the sites you visit. You may set your browser to accept or reject cookies or to notify you if a cookie is offered. Refusing a cookie may affect services offered to you.
iGO and Operators may use online analytical tools that use cookies and other similar software to analyze how users use services.
Security Measures
We have implemented physical, procedural, and technological security measures to protect the Personal Information under our custody and control. Access to Personal Information is restricted to individuals who require such access to perform their duties. Furthermore, we impose information security requirements on our Operator with whom User Personal Information may be collected, used, disclosed or retained. iGO therefore does not warrant, represent, or guarantee the absolute security of Personal Information under our control or under the control of our Operators.
Location of Data
Any Personal Information collected, used or disclosed while providing and administering any igaming services may be stored by Operators outside the Province of Ontario or Canada and is retained in accordance with its records retention policies.
Ten Privacy Principles
iGO is committed to apply these ten privacy principles as outlined by the Canadian Standards Association (CSA) Model Code2 to the best of its abilities to all information collected, used, disclosed and retained by iGO and its Operators.
Principle 1
We are accountable for the Personal Information that we collect.
We are committed to ensuring that we comply with the Privacy Directive and these Privacy Principles whenever iGO, Operators or other entities acting on behalf of iGO, collect and, or use your Personal Information.
Principle 2
We will ensure that iGO or Operators tell you the purpose(s) before collecting your information.
Only Personal Information for purposes directly associated with authorized activities can be collected. We only collect Personal Information from Users when they provide information directly to us or our Operators. Before we collect any Personal Information, we will explain why we are collecting it.
Principle 3
We require your knowledge and consent to collect, use and/or disclose your Personal Information except in limited and specific circumstances, and as permitted by law.
For example, we reserve the right to collect, use or disclose any information as needed
- to satisfy any law, regulation, or legal responsibility
- to protect our legitimate business interests
- to fulfill your requests, or
- to cooperate in any law enforcement investigation or an investigation on a matter of public safety.
Except in such specific circumstances, you may withdraw your consent to our use of your Personal Information at any time.
Principle 4
We only collect information necessary for the purposes we told you about when we collected it.
We will only collect information necessary to meet a purpose that we told you about. We will collect this information lawfully and fairly.
Principle 5
We will limit how we use or disclose your information.
If we do collect any Personal Information from you, we will use it only for its identified purposes. We will not disclose it without your knowledge. We retain Personal Information only as long as necessary to meet the identified purpose(s).
iGO does not sell, transfer, or disclose Personal Information to entities. iGO reserves the right to use or disclose any information as needed to satisfy any law, regulation, or legal request, to protect legitimate business interests, to fulfill your requests, or to cooperate in any law enforcement investigation or an investigation on a matter of public safety.
Principle 6
We will seek to use information that is as accurate as possible.
You have the right to request the correction of any Personal Information in iGO’s custody or under its control. If, in iGO’s sole and absolute discretion, the correction cannot be made, you may file a statement of disagreement to be attached to the information reflecting any correction that was requested but not made.
Principle 7
We will endeavor to keep your Personal Information secure, to the best of our abilities, using commercially reasonable standards.
We have implemented generally accepted standards and safeguards to prevent loss or theft, unauthorized access, use, disclosure, copying or modification of information. However, despite these precautions, iGO cannot guarantee that unauthorized persons will not obtain access to your Personal Information.
Principle 8
We will be open about our policies and practices.
Principle 9
You have a right to access your Personal Information.
You have the right to request access to Personal Information. Upon request, iGO will make reasonable efforts to provide the Personal Information related to you that is in its custody or under its control. In that regard, an access request must be made in writing and must be delivered to the following:
Privacy Office
iGaming Ontario
4711 Yonge St, Suite 602
Toronto, Ontario M2N 6K8
Email: @email
You have the right to request deletion of any Personal Information in iGO’s custody or under its control. If this information cannot be deleted, you will be informed of this decision.
Principle 10
You have a right to challenge our compliance.
Should you wish to make a complaint or inquiry related to your Personal Information please contact iGO’s privacy office at:
Privacy Office
iGaming Ontario
4711 Yonge St, Suite 602
Toronto, Ontario M2N 6K8
Email: @email
Glossary
“Personal Information” as defined in Section 2(1) of FIPPA, Personal Information is recorded information about an identifiable individual (that is, a natural person). This can include, but is not limited to:
- an individual’s biographical details (name, sex, age, race)
- an individual’s biological details (face, fingerprints, blood type,etc.),
- nationality, religion, marital status,
- education, medical or criminal history, financial
- information, identifying numbers, for example, Social Insurance Numbers,
- an individual’s contact details (personal address, phone etc.)
- personal opinions and views.
The term "Personal Information" as defined by FIPPA refers to any recorded data about a person who can be identified from that data. Typically, iGO and its Operators might collect diverse categories of personal information, each depending on why it's collected or whether there is a legal obligation for its collection. These categories include:
- Identifying details like your complete name, your driver's license number or any other official identification number
- Demographic data such as your gender or age
- Methods of contacting you, like your email address or phone number
- Location data like your physical address or the IP address used by your device to access services
- Professional data like your job title or the sector you're employed in
- Financial or banking data like your account details for payments or withdrawals
- Transactional data such as your history of play or payment, your interactions with customer service, or any other data related to transactions between you, the Operator, and iGO.
“Third Party” means a person or entity that is not a party to an agreement with either iGO or an Operator for providing Eligible iGames in Ontario.
“User” or “Users” “you” or “your” refers to, depending on the context, (1) any person who accesses the iGO website and/or (2) is involved in a commercial relationship with an Operator who is authorized by iGaming Ontario to provide services. By extension, if a User is involved in a commercial relationship with an Operator (i.e., is a Player), then such User of the Operator is a User of iGaming Ontario, who has control over the Player Personal Information.
When Operators collect personal information from Players, they provide a “Notice of Collection” which explains the specific purposes of collection for a given program, service, or offering. In general, the most common purposes for iGO or an Operator’s collection of Personal Information are:
- to offer services you have requested and to administer your participation in those activities
- to provide customer service, facilitate payments, winnings and redemptions
- to respond to customer requests, inquiries, comments, and concerns
- as described in the Notice of Collection as provided by the Operator.
1Ontario Regulation 722/21 under the Alcohol and Gaming Commission of Ontario Act, 2019