GDPR Compliance

Effective Date: January 1, 2025

1. Introduction

While canadianjackpotplay.com is primarily a Canadian social gaming platform, we recognize that some of our users may be covered by the European Union's General Data Protection Regulation (GDPR). We are committed to protecting the privacy rights of all users, including those in the EU and EEA.

2. Legal Basis for Processing

We process personal data based on the following GDPR-compliant legal grounds:

🍁 Our Legal Bases:

  • Consent (Article 6(1)(a)): Age verification and cookie consent for social gaming
  • Legitimate Interest (Article 6(1)(f)): Platform security, fraud prevention, and service improvement
  • Legal Obligation (Article 6(1)(c)): Age verification requirements and responsible gaming compliance
  • Contract Performance (Article 6(1)(b)): Providing our free social gaming services

3. Your GDPR Rights

If you are covered by GDPR, you have the following rights regarding your personal data:

🔍 Right of Access

Request confirmation of data processing and access to your personal information on our social gaming platform.

✏️ Right to Rectification

Correct inaccurate personal data or complete incomplete gaming profile information.

🗑️ Right to Erasure

Request deletion of your personal data when no longer necessary for social gaming purposes.

⏸️ Right to Restrict Processing

Limit processing of your data while we address accuracy or lawfulness concerns.

📋 Right to Data Portability

Receive your gaming data in a structured format or transfer it to another service.

❌ Right to Object

Object to data processing based on legitimate interests (may limit platform access).

4. Social Gaming Data Categories

Under GDPR, we process the following categories of personal data:

Data We Collect:

  • Identity Data: Username, age verification status (18+ requirement)
  • Gaming Data: Virtual achievements, leaderboard positions, social points (no real value)
  • Technical Data: IP address, browser type, device information
  • Usage Data: Gaming preferences, platform interaction, session duration
  • Communication Data: Support inquiries and community interactions

⚠️ Important: All gaming achievements and virtual winnings have no real-world monetary value

5. Exercising Your GDPR Rights

To exercise any GDPR rights, contact us with the following information:

📧 Rights Request Process:

  1. Email: support@canadianjackpotplay.com
  2. Subject: GDPR Rights Request - [Right Type]
  3. Include: Username, verification details, specific request
  4. Response Time: Within 30 days (may extend to 60 days for complex requests)

We may need to verify your identity to process requests securely

6. Age Verification & GDPR

Our age verification system complies with GDPR requirements:

  • Lawful Basis: Legal obligation for age-restricted social gaming content
  • Minimal Data: Only collect necessary age verification information
  • Secure Storage: Age verification cookies protected with encryption
  • Under 18 Protection: Immediate redirect to Google, no data collection
  • Retention Limits: Age verification stored only as long as necessary

7. Cookie Consent & GDPR

Our cookie system provides GDPR-compliant consent management:

🍪 GDPR Cookie Compliance:

  • Clear Information: Detailed cookie policy explaining all uses
  • Genuine Choice: Accept or decline options (decline redirects to Google)
  • Granular Control: Essential vs. analytics cookie categories
  • Withdrawal: Easy to withdraw consent by clearing browser data
  • No Pre-ticked Boxes: No automatic consent assumption

8. Data Retention Under GDPR

We retain personal data only as long as necessary:

  • Active Gaming Accounts: While account remains active and engaged
  • Inactive Accounts: 2 years of inactivity, then automatic deletion
  • Age Verification: 1 year from last verification
  • Support Communications: 3 years for service quality purposes
  • Legal Compliance Data: As required by applicable laws

9. International Data Transfers

If we transfer data outside the EEA, we ensure appropriate safeguards:

  • Adequacy Decisions: Only to countries with adequate protection
  • Standard Contractual Clauses: EU-approved transfer mechanisms
  • Additional Safeguards: Encryption and access controls
  • Transfer Impact Assessments: Regular review of transfer risks

10. Data Breach Procedures

In case of a personal data breach affecting GDPR-covered individuals:

🚨 Breach Response:

  • Detection: Immediate breach identification and containment
  • Assessment: Risk evaluation within 24 hours
  • Authority Notification: Report to supervisory authority within 72 hours
  • Individual Notification: Direct notice if high risk to rights and freedoms
  • Documentation: Maintain records of all breach incidents

11. Data Protection Officer

While not legally required to appoint a DPO, we have designated responsible personnel:

  • Contact: support@canadianjackpotplay.com
  • Subject Line: GDPR/DPO Inquiry
  • Responsibilities: GDPR compliance monitoring and user rights
  • Independence: Direct access to management for privacy matters

12. Supervisory Authority Rights

You have the right to lodge a complaint with a supervisory authority:

📋 Complaint Process:

If unsatisfied with our response to your GDPR concerns:

  • Contact your local EU data protection authority
  • File complaints in your EU member state of residence
  • Visit the European Data Protection Board website for authority contacts
  • This right exists alongside any other administrative or judicial remedies

13. Social Gaming & GDPR Considerations

Special considerations for our social gaming platform:

  • Virtual Economy: All gaming assets have no real-world value under GDPR
  • Community Features: Leaderboards use pseudonymized data where possible
  • Age-Appropriate: 18+ requirement ensures adult consent capacity
  • Entertainment Purpose: Clear communication that this is social gaming only
  • Responsible Gaming: Built-in protections aligned with GDPR privacy principles

14. Updates to GDPR Compliance

We regularly review and update our GDPR compliance measures:

  • Annual privacy impact assessments
  • Regular staff training on GDPR requirements
  • Monitoring of regulatory guidance and court decisions
  • User notification of material policy changes
  • Continuous improvement of privacy protections

15. Contact for GDPR Matters

📧 GDPR Contact Information:

Email: support@canadianjackpotplay.com

Subject Line Options:

  • GDPR Rights Request - [Access/Rectification/Erasure/etc.]
  • GDPR Complaint - [Your Concern]
  • GDPR General Inquiry - [Topic]

Include your username and specific request details for faster processing