1. Introduction
This Privacy Policy describes how personal information of players and visitors is collected, used, retained, and disclosed in connection with casino and betting services offered under the Dakota Dunes Casino brand. The purpose of this document is to set out user rights and the obligations of the company under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
By registering an account or continuing to use the service, you acknowledge that you have read and understood this Privacy Policy. Users who do not agree with these terms must not use the service or submit personal information.
This Privacy Policy may be updated from time to time. When material changes are made, notice will be provided through the contact information associated with your account or by a notice on the website. Continued use of the service after such notification constitutes acceptance of the revised policy.
2. Information Collected
Personal information is collected only to the extent necessary to operate the service, verify identity, process transactions, and comply with legal and regulatory obligations. This may include, but is not limited to:
- Full legal name, date of birth, and residential address
- Government-issued identification documents
- Contact details, including email address and phone number
- Financial information required for account funding and withdrawal processing
- Records of gaming activity and transaction history
- Device and connection data collected automatically when accessing the service
Personal information is not collected beyond what is reasonably required for the purposes described in this Privacy Policy.
3. Purposes of Collection and Use
Personal information collected in connection with Dakota Dunes Casino may be used for the following purposes:
- Creating and managing player accounts
- Verifying identity in accordance with Know Your Customer (KYC) requirements
- Processing deposits and withdrawals and preventing fraudulent transactions
- Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
- Communicating regarding account matters, including security alerts and policy updates
- Sending promotional communications where consent has been provided, subject to the right to withdraw consent at any time
- Fulfilling reporting obligations to regulatory and law enforcement authorities where required by law
4. Legal Basis for Processing
Collection and use of personal information are generally based on user consent provided at the time of account registration or when updated terms are accepted. Certain processing activities are carried out on the basis of legal obligation, including identity verification, transaction monitoring, and regulatory reporting. Where processing is required to fulfill a contractual obligation to the user, that contractual obligation serves as the applicable legal basis.
5. Identity Verification
Before processing withdrawals or transactions above specified thresholds, identity verification is required. This process may involve submission of:
- A valid government-issued photo identification document
- Proof of current residential address, such as a recent utility bill or bank statement
- In some cases, confirmation of the payment method used
Documents submitted for verification are stored securely and retained only for as long as required by applicable law or regulatory obligation. Verification requirements apply equally to all account holders and are not subject to waiver.
6. Disclosure of Personal Information
Personal information is not sold to third parties. Disclosure of personal information to third parties occurs only in the following circumstances:
- To payment processors, financial institutions, and identity verification service providers engaged to support operations, each of whom is bound by confidentiality obligations
- To game technology providers and hosting services that process data on behalf of the company under data processing or service agreements
- To regulatory authorities, including provincial gaming regulators and law enforcement agencies, where disclosure is required by law, court order, or regulatory obligation
- To any successor entity in the event of a merger, acquisition, or transfer of the business, subject to equivalent privacy protections
Where services are provided under agreements with provincial gaming bodies, gaming and transactional data may be shared with those bodies in accordance with applicable licensing obligations.
7. Data Security
Technical and organizational measures are applied to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include, as applicable:
- SSL/TLS encryption for data transmitted between user devices and the platform
- Encrypted storage of personal and financial records
- Access controls limiting data access to authorized personnel only
- Audit logging of access to sensitive information
No transmission over the internet or method of electronic storage is entirely without risk. Users are responsible for maintaining the confidentiality of account credentials and for notifying the company without undue delay if unauthorized access to an account is suspected.
8. Data Retention
Personal information is retained for as long as an account remains active and for such additional periods as are required by applicable law or regulatory obligation. When personal information is no longer required for any lawful purpose, it is disposed of using secure methods designed to prevent unauthorized recovery or access.
9. Your Rights
Under PIPEDA and applicable provincial law, users have the following rights in relation to personal information held in connection with Dakota Dunes Casino:
- Right of access: The right to request a copy of the personal information held and information about how it is used and disclosed.
- Right of correction: The right to request correction of inaccurate or incomplete personal information.
- Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time, subject to legal or contractual restrictions. Withdrawal of consent may affect the ability to use certain services.
- Right to unsubscribe: The right to opt out of marketing communications at any time. Opt-out requests will be processed within ten business days in accordance with Canada’s Anti-Spam Legislation (CASL).
To exercise these rights, users should contact the Privacy Officer using the contact details provided in Section 11 of this Privacy Policy.
10. Minors
The services described in this Privacy Policy are available only to individuals who have reached the legal gambling age in their province or territory of residence, which is 18 or 19 years of age depending on jurisdiction. Personal information is not knowingly collected from individuals below the applicable legal age. If it becomes apparent that an account has been registered by a minor, the account will be closed and the associated personal information will be deleted without undue delay, subject to any legal retention requirements.
11. Contact and Complaints
Questions about this Privacy Policy, requests to exercise privacy rights, or concerns about the handling of personal information should be directed to the Privacy Officer. Contact details are available on the Dakota Dunes Casino website.
If the response to a privacy inquiry or complaint is not satisfactory, users have the right to file a complaint with the Office of the Privacy Commissioner of Canada, which has authority to investigate complaints regarding the handling of personal information by private-sector organizations subject to PIPEDA.