Running an online casino means holding real information about real people, and Vinyl Casino would rather tell you plainly what we hold than bury it in clauses. This page covers what we collect from Canadian players, why we need it, and what you can ask us to do with it. Read it before you register rather than after something goes wrong.
Some of this data we collect because you give it to us, and some because the law requires us to have it. Identity and payment records in particular are not optional for a licensed operator. Where we have a choice about collecting something, we try to keep it to what the service actually needs.
What we collect
The categories below cover essentially everything that reaches us:
- Identity details such as your name, date of birth, and the username on your account
- Contact details including your email address and billing address
- Transaction records covering deposit and withdrawal IDs, dates, amounts, and the payment method used, though we do not store full card numbers
- Verification documents supplied for identity, address, and payment ownership checks
- Technical data such as IP address, device type, browser and version, and operating system
- Activity data covering logins, pages visited, gameplay history, and communications with our support team
- Marketing preferences, including any consent you have given or withdrawn
Correspondence through email, live chat, or the contact form is retained as a record of what was said and when. That protects both sides when a dispute arises months later. Support conversations are treated as part of your account history rather than deleted after the ticket closes.
Why we hold it
Most of it exists so the account works, meaning registration, deposits, gameplay, payouts, and support. Verification data exists because our licence and anti-money laundering obligations require identity checks before funds move. Technical data helps us keep the platform secure and diagnose faults that players report.
We also process data to meet legal obligations, including record retention and cooperation with lawful requests from regulators or law enforcement. Marketing messages are a separate matter entirely and depend on consent you can withdraw at any point. Withdrawing marketing consent does not close your account or affect your ability to play.
Who sees it
Access inside the company is limited to staff who need it for their role, and that access is logged. Outside the company, information reaches payment providers, verification services, game studios, and technical suppliers who work under contract with us. Each is bound to use the data only for the service they provide to us.
Disclosure to regulators, law enforcement, or anti-fraud bodies happens where a lawful basis exists, particularly around laundering or fraud investigations. We do not sell personal data, and we do not hand it to advertisers as a product. When data crosses a border to reach a supplier, protections travel with it under our contracts.
How long we keep it
Account and transaction records are retained for the periods our licence and anti-money laundering obligations set, which typically means years rather than months after an account closes. Verification documents are kept on the same footing, because a deleted record would leave us unable to demonstrate the check was done. Retention is a legal requirement here, not a preference.
Data no longer needed for any of those purposes is deleted or anonymised. A self-exclusion record is a specific exception, since the whole point is that it survives an account closure and stops a new one. That record stays for as long as the exclusion applies.
Your rights in Canada
Federal privacy law, the Personal Information Protection and Electronic Documents Act, gives you rights over the information we hold about you. You can ask for a copy of your personal data, ask us to correct anything inaccurate, and withdraw consent where processing rests on it. Requests go to our support address and are answered within the time the law allows.
Where a request conflicts with a retention duty we can explain why, and we will say so rather than simply refusing. Quebec residents have additional rights under provincial law, and other provinces have their own privacy statutes covering some situations. Complaints can be taken to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d’accès à l’information.
Security and cookies
Data is protected through access controls, encryption in transit, and monitoring for unauthorised access. No system is beyond reach, so we would rather describe the measures than promise perfection. If a breach occurred that posed a real risk to you, notification obligations apply and we would meet them.
Cookies and similar technologies keep sessions active, hold your preferences, and help us see how the site performs. You can control cookies through your browser settings, blocking them outright or clearing them once set. Blocking essential cookies will break parts of the site, including staying logged in, so expect that trade-off.
