3. Information Collected
3.1 Categories of Personal Information
River Cree Resort & Casino may collect the following categories of personal information:
- Identity information, including full legal name, date of birth, and government-issued identification details required for age and identity verification.
- Contact information, including mailing address, email address, and telephone number.
- Account information, including username, account history, and records of activity conducted through the services.
- Financial information, including payment details necessary to process transactions, subject to applicable anti-money laundering and financial compliance requirements.
- Device and usage data, including IP address, browser type, operating system, and session activity logs collected automatically when users access the website.
3.2 Minimum Age Requirement
The services are intended exclusively for individuals who have reached the legal gambling age in their jurisdiction. Individuals under the age of 18 must not use the services or provide any personal information. River Cree Resort & Casino does not knowingly collect personal information from minors. If it becomes known that personal information has been collected from a person under the minimum age, that information will be deleted without delay.
- Purposes of Collection and Use
Personal information collected by River Cree Resort & Casino is used for the following purposes:
- To establish, verify, and manage user accounts in accordance with regulatory requirements.
- To verify the age and identity of users as required under applicable gaming and anti-money laundering regulations.
- To process and record transactions in connection with the use of the services.
- To comply with legal obligations, including reporting requirements imposed by gaming regulators and law enforcement authorities.
- To communicate with users regarding their accounts, including notifications related to account status, security, and policy changes.
- To investigate and help prevent fraudulent, unlawful, or unauthorized activity.
- To maintain records as required by applicable law and regulatory retention obligations.
Personal information is not used for purposes beyond those described above without a valid legal basis or renewed consent, as required under PIPEDA.
- Consent
Personal information is collected only with the knowledge and consent of the individual concerned, except where collection without consent is permitted or required by law. Consent is typically obtained at the time of account registration. Users may withdraw consent at any time, subject to legal and contractual restrictions. Withdrawal of consent may affect the ability to provide services to the user.
Marketing communications, where applicable, are sent only to users who have actively opted in to receive them. Users may withdraw consent to receive marketing communications at any time by contacting the company through the channels specified in Section 12 of this policy. Requests to withdraw marketing consent will be processed within 10 business days in accordance with Canada’s Anti-Spam Legislation (CASL).
- Disclosure of Personal Information
River Cree Resort & Casino does not sell personal information to third parties. Personal information may be disclosed in the following circumstances:
- To service providers and processors who assist in operating the services, including identity verification providers and technology vendors, under contractual obligations of confidentiality.
- To gaming regulators, law enforcement agencies, or other government authorities when required by law, court order, or regulatory directive.
- To other parties when disclosure is necessary to protect the rights, safety, or property of River Cree Resort & Casino, users, or the public, or to investigate suspected fraudulent or illegal activity.
All third parties who receive personal information from River Cree Resort & Casino are required to handle that information in a manner consistent with applicable privacy law and the purposes for which it was originally collected.
- Data Retention
Personal information is retained for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Where personal information is no longer required for these purposes, it is deleted or anonymized in a secure manner.
Certain regulatory and statutory obligations may require retention of specific categories of information for defined periods, which may limit the ability to fulfill deletion requests in full.
- Security Measures
River Cree Resort & Casino implements technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols.
- Secure storage with access controls limiting data access to authorized personnel only.
- Multi-factor authentication requirements for staff accessing personal data systems.
- Audit logging to record access to personal information.
No security system is entirely impenetrable. In the event of a data breach that poses a risk of significant harm, River Cree Resort & Casino will take appropriate steps in accordance with applicable legal notification requirements.
- User Rights
Under PIPEDA and applicable provincial law, users have the right to:
- Request access to the personal information held about them by River Cree Resort & Casino.
- Request correction of inaccurate or incomplete personal information.
- Request deletion or restriction of personal information in circumstances permitted by law.
- Object to certain uses or disclosures of personal information.
- Withdraw consent to the collection or use of personal information, subject to legal limitations.
Requests related to personal information rights must be submitted in writing to the privacy contact identified in Section 12. River Cree Resort & Casino will respond to access and correction requests within 30 days, as required under PIPEDA. Requests that cannot be fulfilled in full due to legal or regulatory constraints will be accompanied by a written explanation.
- Cookies and Automated Data Collection
The website may use cookies and similar tracking technologies to collect device and usage data for the purposes of operating and improving the website, maintaining session security, and fulfilling legal obligations. Users may configure their browser settings to refuse cookies; however, doing so may affect the functionality of certain areas of the website.
- Changes to This Policy
River Cree Resort & Casino reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to users through the website or by direct notification where required. Continued use of the services following notification of changes constitutes acceptance of the revised policy.
- Contact Information
Questions, concerns, or requests related to this Privacy Policy or the handling of personal information may be directed to:
Privacy Officer
River Cree Resort & Casino
Enoch, Alberta
Canada
Users who are not satisfied with the response to a privacy concern have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.