Privacy Policy

01Introduction

This Privacy Policy explains how Golden Nuggel Casino (“we”, “us”, “our”) collects, uses, discloses and protects personal information when you visit goldennuggelcasino.slonik.store, create an account or play casino games available to players located in Alberta, Canada. It applies to information you give us directly, information generated when you use the site and information we receive from service providers acting on our behalf.

Online gaming in Alberta is a regulated activity. Some of the information described here is collected because the law or the regulator requires it — for example, to confirm your age and identity, to make sure you are physically in Alberta when you play and to detect money laundering. Where that is the case, we say so, because it also means you cannot opt out of that processing while keeping an active account.

We handle personal information in line with the Alberta Personal Information Protection Act (PIPA), the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and FINTRAC guidance, and the requirements set by Alberta Gaming, Liquor and Cannabis (AGLC) and Alberta iGaming Corporation (AiGC). Please read this policy together with our Terms and Conditions and Cookie Policy.

02Data Controller

The organization responsible for the personal information described in this policy is the operator of the platform. The reference operator for the Alberta market and its registration details are set out below; fields marked “To Be Verified” are still being confirmed against corporate documents and will be updated when confirmed.

We have designated a privacy officer who is accountable for our compliance with PIPA and with this policy. The privacy officer reviews access and correction requests, answers questions about how we handle information and investigates complaints. Contact details are repeated in the Contact Information section.

03Personal Information Collected

We collect only the information we need to run a regulated casino account in Alberta, keep it secure and meet our legal obligations. The table below summarizes each category, why we use it, the basis on which we process it and how long we keep it. Later sections explain each category in more detail.

We do not knowingly collect information from anyone under 18. If we learn that a minor has tried to register, we close the registration and delete the information we do not have to keep for legal reasons.

04Account Registration

When you register, we ask for your full legal name, email address, date of birth, residential address and a password. Your password is stored only as a one-way hash, so our staff cannot read it. You also confirm that you are 18 or older and accept our Terms and Conditions; marketing consent is a separate, optional checkbox.

We use registration details to create your account, to check that you are eligible to play in Alberta, to prevent duplicate accounts and to contact you about your account, security notices and changes to our terms. Each person may hold only one account, and we compare new registrations against existing records and against the self-exclusion lists we are required to honour.

05Identity Verification

Before you can deposit or withdraw, we must confirm your identity and age (“know your customer”, or KYC). Depending on the method, you may be asked to upload government-issued photo ID, proof of address or to complete an electronic check against trusted databases operated by identity verification providers.

Verification data is used only to confirm who you are, to meet our obligations under AGLC standards and the PCMLTFA, and to protect you and other players against identity theft and fraud. Documents are transmitted over encrypted connections, stored with restricted access and are not used for marketing. We may repeat verification if your details change, if a payment needs additional checks or if the law requires enhanced due diligence.

06Financial Information

When you make a deposit or withdrawal, we process the payment method you choose (for example, Interac e-Transfer, a debit or credit card or online banking), the amount in CAD, the date and time, and the outcome of the transaction. Full card numbers are handled by our payment processors under industry security standards; we keep only the limited details needed to identify the method on your account.

We review financial transactions to detect fraud, chargebacks, unusual patterns and possible money laundering. Where the PCMLTFA requires it, we keep transaction records for the prescribed period and may report certain transactions to the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC). We are not permitted to tell you when such a report has been made.

07Gaming Activity

Each time you play, our systems record the game, the stake, the result, the balance before and after, and the start and end of your session. These records are needed to settle bets correctly, to resolve disputes, to show you your own history in the account area and to report to the regulator and the market entity as required.

We also look at gaming activity to protect players. Changes in behaviour — such as much longer sessions, rapidly increasing deposits or repeated cancelled withdrawals — can be signs of harm. When we see them, we may contact you, suggest tools such as limits or breaks, or restrict the account. See Responsible Gambling Data below.

08Geolocation Data

Real-money online gaming on this platform is available only to players who are physically located in Alberta. Before you can play, and from time to time during play, we run a location check using your device’s location services (with your browser’s permission) and network information.

If you decline location access or the check cannot confirm you are in Alberta, you can still browse the site and manage your account, but real-money play stays unavailable. You can withdraw location permission at any time in your browser or device settings.

09Device Information

When you use the site, our servers automatically receive technical information such as your IP address, browser type and version, operating system, device type, language settings and the pages you request, together with timestamps. This happens on any website and is needed to deliver pages to your device.

We use device and log data to keep accounts secure (for example, to detect logins from unusual devices), to prevent fraud and multiple accounts, to fix errors and to understand the performance of the site. Logs are kept for a limited period and then deleted or reduced to aggregated statistics that no longer identify you.

10Cookies

We use essential cookies to keep you signed in, to protect forms against cross-site request forgery, to remember that you have confirmed your age and to store your cookie choice. Functional, analytics and marketing cookies are set only if you allow them in the cookie banner or settings.

The full list of cookies, their purposes and durations is in our Cookie Policy. You can change your choice at any time.

Cookie Settings

11Analytics

If you accept analytics cookies, we collect information about how the site is used — which pages are opened, how long they take to load and where errors happen. We use this information in aggregated form to improve navigation, performance and accessibility.

Analytics are not used to make decisions about individual players and are not used to build advertising profiles. If you do not accept analytics cookies, the site works in the same way and no analytics data is collected through cookies.

12Marketing

We send marketing messages only if you gave express consent, for example by ticking the optional box at registration. Each message includes a way to unsubscribe, and you can also change your preference in your account or by writing to us. Service messages about your account, security and legal changes are not marketing and are sent regardless of this choice.

Gambling marketing in Alberta must follow AGLC advertising standards. We do not send marketing to anyone who is self-excluded, has taken a break from play, or is under 18, and we do not sell your personal information to third parties for their own marketing.

13Third-Party Services

Some parts of the service are provided by specialist companies acting on our behalf. They include:

• Game studios and live dealer providers — they stream games and receive the minimum information needed to run a session, such as a pseudonymous player identifier, stakes and results.
• Payment processors and banks — they process deposits and withdrawals and carry out their own fraud and AML checks.
• Identity and age verification providers — they check the information and documents you submit.
• Geolocation providers — they help determine whether a device is located in Alberta.
• Hosting, email and customer support tools — they store data and deliver messages on our instructions.

Service providers may use personal information only to perform services for us, must protect it with safeguards comparable to ours and must return or delete it when the service ends. When you open a third-party feature, the provider may also set cookies governed by its own policy, as explained in the Cookie Policy.

14Data Sharing

Apart from the service providers above, we disclose personal information only where it is necessary or required by law:

• Regulatory access: AGLC and AiGC may access player, transaction and gaming records to supervise the market, audit game integrity, enforce self-exclusion and investigate complaints.
• Anti-money laundering: reports to FINTRAC and information requested under the PCMLTFA.
• Law enforcement and courts: where we receive a valid legal request, such as a warrant or court order, or where disclosure is needed to prevent fraud or protect someone’s safety.
• Fraud prevention: limited information shared with payment providers and other regulated operators to detect and prevent fraud, where the law allows it.
• Corporate changes: if the business is reorganized or transferred, information may pass to the successor, which must continue to protect it under this policy.

We do not sell personal information.

15International Data Transfers

The reference operator is based in United States, and some of our service providers may store or process information outside Alberta or outside Canada. When information is processed in another country, it is subject to that country’s laws and may be accessible to its courts and authorities.

As PIPA requires, we tell you about this so that you can ask questions. Our privacy officer can explain which categories of service providers process information outside Canada and for what purposes. We use contracts and security measures to make sure your information receives a comparable level of protection wherever it is processed.

16Data Retention

We keep personal information only as long as it is needed for the purpose it was collected for, or as long as the law requires. Because gaming in Alberta is regulated, many records — identity verification, transactions, gaming history and self-exclusion records — must be kept for a set period even after you close your account. The retention column in the table above shows the rule that applies to each category.

When the retention period ends, information is securely deleted or anonymized so it can no longer be linked to you. Self-exclusion records are kept for at least as long as the exclusion lasts, so that the exclusion can be enforced.

17User Rights

Under PIPA and, where it applies, PIPEDA, you have the right to:

• ask whether we hold personal information about you and receive a copy of it;
• ask how it has been used and to whom it has been disclosed;
• ask us to correct information that is inaccurate or incomplete;
• withdraw consent to optional processing, such as marketing or non-essential cookies;
• complain to us and, if you are not satisfied, to the Office of the Information and Privacy Commissioner of Alberta.

Send your request to privacy@goldennuggelcasino.slonik.store. We may ask you to confirm your identity before releasing information. PIPA sets a time limit for responding to access requests, and we will tell you if we need to extend it. Some information may be withheld where the law allows, for example records connected to a FINTRAC report or an ongoing investigation. Withdrawing consent to processing that is required by law, such as identity verification, means we cannot keep your account open.

18Data Security

We protect personal information with administrative, technical and physical safeguards appropriate to its sensitivity. These include encrypted connections (HTTPS) for all pages, hashed passwords, access controls so that staff see only what their role requires, monitoring for suspicious logins and regular review of our security practices.

You can help by using a unique password, keeping your login details private and signing out on shared devices. If we become aware of a breach of security safeguards that creates a real risk of significant harm, we will notify the Information and Privacy Commissioner of Alberta and the affected individuals as PIPA requires.

19Responsible Gambling Data

When you set deposit, loss or time limits, take a break or self-exclude, we store those settings and the dates they start and end. We use this information to apply the controls on your account, to stop marketing during a break or exclusion and to prevent a new account being opened during an exclusion.

We may also analyze gaming and payment patterns to identify possible signs of gambling harm and to reach out with information about our responsible gambling tools and support services. Self-exclusion information may be shared with AGLC where required to enforce exclusion programs in Alberta. This information is never used to encourage you to play more.

20Contact Information

Questions, access and correction requests or complaints about privacy can be sent to our privacy officer at privacy@goldennuggelcasino.slonik.store. For general account questions, write to support@goldennuggelcasino.slonik.store or use our contact form.

Postal enquiries: Privacy Officer, GNOG CAN Ltd., To Be Verified, Boston, Massachusetts, To Be Verified, United States.

If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta. Questions about the regulation of online gaming can be directed to Alberta Gaming, Liquor and Cannabis (AGLC).

21Policy Updates

We may update this policy when our services, our service providers or the law change. The date at the top of this page shows when it was last revised. If a change significantly affects how we use your personal information, we will tell you by email or by a notice when you sign in before the change takes effect.

Where a change requires your consent — for example, a new optional use of your information — we will ask for it and will not apply the change to you until you agree.