WinBerry Canada Privacy Policy
WinBerry is committed to protecting the personal information of players in Canada. This Privacy Policy explains what data is collected, how it is used, and the rights available to users under Canadian privacy legislation. The policy applies to all interactions with the WinBerry platform, including account registration, gameplay, deposits, withdrawals, and customer support communications.
Personal data collected by WinBerry · Purposes of data processing · Cookies and tracking technologies · Player rights under Canadian law · Exercising your privacy rights · Data security measures · Frequently asked questions
Personal data collected by WinBerry
WinBerry collects personal information necessary to operate the platform, verify player identity, and comply with regulatory requirements. Data collection occurs at multiple points during the player relationship.
Registration data: Full name, date of birth, residential address, email address, phone number, and chosen account credentials are collected when a player creates an account.
Identity verification data: Government-issued identification documents, proof of address, and in some cases source of funds documentation are required to complete the WinBerry registration process.
Financial data: Payment card details, bank account information, e-wallet credentials, and transaction histories are processed when players make deposits or request withdrawals through the WinBerry deposits and withdrawals.
Gameplay data: Betting history, game preferences, session durations, and wagering patterns are recorded during platform use.
Technical data: IP addresses, device identifiers, browser type, operating system, and geolocation information are automatically collected when accessing the platform.
Communication data: Records of customer support interactions, chat logs, and correspondence are maintained for quality and dispute resolution purposes.
Purposes of data processing
Personal data is processed for specific, legitimate purposes directly related to operating a regulated online gaming platform. Each processing activity has a defined legal basis under Canadian privacy law.
Account management: Personal information enables the creation, maintenance, and administration of player accounts, including authentication and password recovery.
Regulatory compliance: Identity verification and transaction monitoring fulfill anti-money laundering obligations and responsible gambling requirements applicable to gaming operators serving Canadian players.
Payment processing: Financial data enables the execution of deposits, withdrawals, and the detection of fraudulent transactions or unauthorized account access.
Service improvement: Aggregated and anonymized gameplay data helps optimize platform functionality, game offerings, and user experience.
Marketing communications: Where explicit consent has been obtained, contact information may be used to send promotional offers related to WinBerry welcome bonus and platform updates. Players may withdraw this consent at any time.
Legal obligations: Data may be retained and disclosed when required by court orders, regulatory investigations, or applicable Canadian laws.
Cookies and tracking technologies
Cookies are small text files stored on a player’s device that enable essential platform functionality and improve user experience. WinBerry uses several categories of cookies with distinct purposes.
Essential cookies: These cookies are strictly necessary for platform operation. They enable secure login sessions, remember language preferences, and maintain shopping basket functionality. Essential cookies cannot be disabled without impairing core platform features.
Functional cookies: These remember player preferences such as display settings, timezone, and previously selected payment methods. They enhance convenience but are not strictly required for platform access.
Analytics cookies: These collect information about how players interact with the platform, including pages visited, time spent on site, and navigation patterns. Data is aggregated and used to identify technical issues and optimize performance.
Marketing cookies: Where consent is provided, these cookies track player activity to deliver relevant promotional content and measure advertising effectiveness.
Players can manage cookie preferences through browser settings. Most browsers allow users to block or delete cookies, though this may affect platform functionality. The platform’s cookie banner provides granular control over non-essential cookie categories upon first visit.
Player rights under Canadian law
Canadian players have specific privacy rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation. WinBerry respects and facilitates the exercise of these rights.
Right of access: Players may request a copy of all personal information held about them. This includes account details, transaction records, verification documents, and any correspondence.
Right to correction: Inaccurate or incomplete personal information can be corrected upon request. Players should promptly update outdated contact or address information through account settings.
Right to withdrawal of consent: Where processing relies on consent, players may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.
Right to challenge compliance: Players who believe their personal information has been handled contrary to PIPEDA may file a complaint with the Privacy Commissioner of Canada.
Right to know about breaches: In the event of a security breach posing a real risk of significant harm, affected players will be notified as required by Canadian breach notification rules.
Quebec residents have additional rights under the Act Respecting the Protection of Personal Information in the Private Sector, including the right to data portability and automated decision-making transparency.
Exercising your privacy rights
Submitting a privacy request requires verification of identity to prevent unauthorized access to personal information. WinBerry processes legitimate requests within the timeframes mandated by Canadian law.
Contact method: Privacy requests should be submitted through the customer support portal or by email to the designated privacy contact provided in account settings. Include the registered email address and specific details of the request.
Verification process: Requesters must confirm their identity using account credentials or by providing documentation that matches the information on file. This protects against fraudulent or unauthorized requests.
Response timeline: PIPEDA requires organizations to respond to access requests within 30 days. Complex requests may require additional time, but players will be notified of any extensions and the reasons.
No fee for standard requests: Access requests are processed at no charge under normal circumstances. WinBerry may charge a reasonable fee for manifestly unfounded or excessive requests.
Limitations: Certain information may be withheld where disclosure would reveal personal information about third parties, violate legal privilege, or compromise ongoing investigations.
Data security measures
WinBerry implements technical and organizational safeguards appropriate to the sensitivity of personal information processed. Security measures are reviewed and updated regularly to address emerging threats.
Encryption: All data transmitted between player devices and WinBerry servers uses TLS encryption. Sensitive data at rest is encrypted using industry-standard protocols.
Access controls: Employee access to personal information is restricted on a need-to-know basis. Role-based permissions ensure staff can only access data relevant to their job functions.
Authentication: Player accounts are protected by password requirements and optional two-factor authentication. Failed login attempts trigger security alerts and temporary account lockouts.
Monitoring: Automated systems monitor for suspicious activity, including unusual login patterns, rapid transaction attempts, and potential account compromise.
Third-party vendors: Payment processors and other service providers with access to personal information are contractually required to maintain equivalent security standards and data protection practices.
Retention: Personal information is retained only as long as necessary for the purposes collected or as required by regulatory obligations. Transaction records and identity verification documents may be retained for periods specified by anti-money laundering regulations even after account closure.
Frequently asked questions
Players can submit a data access request through customer support using the email associated with their account. WinBerry will verify identity and provide the requested information within 30 days as required by PIPEDA. The response will include account details, transaction history, and any stored verification documents.
Personal information is shared only with payment processors necessary to complete transactions, identity verification providers, and regulatory authorities when legally required. WinBerry does not sell personal information to third parties for marketing purposes.
Transaction records and identity verification documents are retained for periods required by anti-money laundering regulations, which may extend several years beyond account closure. Other personal information is deleted or anonymized when no longer needed.
Players can withdraw consent for marketing communications at any time through account settings or by clicking the unsubscribe link in any promotional email. Essential service communications regarding account status or regulatory matters will continue regardless of marketing preferences.
In the event of a security breach posing real risk of significant harm, WinBerry will notify affected players and the Privacy Commissioner of Canada as required by Canadian breach notification rules. The notification will describe the breach, potential consequences, and steps taken to address it.