Privacy Policy
This Privacy Policy explains how ecuabet-casino-canada collects, uses, discloses, and protects personal information of players and website visitors of https://ecuabet-casino-canada.com. It applies to individuals in Canada who interact with our site or services (including browsing, registering, depositing, wagering, or contacting support). Effective date: October 31, 2025.
Who We Are
OBSERVE
Operator: VS Services Ltd., the licensed operator referenced on ecuabet.com, operating ecuabet-casino-canada exclusively via https://ecuabet-casino-canada.com for Canadian-facing information.
- Legal entity: VS Services Ltd. (Ltd.)
 - Registration No.: 15728 (Anjouan, Union of the Comoros)
 - Gaming licence: ALSI-132405045-FI3, Government of the Autonomous Island of Anjouan (active as of 2025-10)
 - Registered/legal address: Not publicly specified by the operator at the time of publication
 
EXPAND
For privacy accountability under Canadian law (PIPEDA and substantially similar provincial laws), ecuabet-casino-canada designates a privacy contact responsible for compliance oversight.
REFLECT
- Privacy contact/DPO function: Data Protection Team, VS Services Ltd.
 - How to contact: Use the contact tools provided on https://ecuabet-casino-canada.com or write to "Data Protection Team, VS Services Ltd., Anjouan, Union of the Comoros". We will publish a dedicated email/postal address on this page once available.
 - Global references: You may also consult the global privacy notice at https://www.ecuabet.com/page/politica-de-privacidad for additional corporate details.
 
What Personal Data We Collect
OBSERVE
- Identity and contact: full name, date of birth, address, email, phone, account identifiers, verification documents (KYC).
 - Account and behavioral: registrations, login timestamps, game sessions, betting and transaction history, preferences, clicks, support interactions, responsible-gaming settings.
 - Payment and financial: deposit/withdrawal details, partial card or wallet identifiers, bank transfer references, AML/KYC screening results.
 - Technical: IP address, device and OS, browser, language, time zone, performance/diagnostic logs.
 - Cookies/identifiers: session IDs, persistent cookies, analytics and advertising tags, similar technologies (pixels, SDKs).
 
EXPAND
We may derive risk scores, fraud indicators, geolocation approximations, and marketing segments from the above data.
REFLECT
We collect information directly from you, automatically via our site/app, and from third parties (payment providers, identity verification partners, anti-fraud vendors, and affiliates) consistent with this Policy.
Legal Basis for Processing
OBSERVE
- Consent (PIPEDA/GDPR/LFPDPPP): for optional uses (e.g., marketing communications, certain cookies, cross-border transfers where required).
 - Contractual necessity: to open/operate your account, process deposits/payouts, deliver games, and provide support.
 - Legitimate interests/Reasonable purposes: to secure services, prevent fraud/abuse, ensure integrity of gaming systems, perform analytics and service improvement (balanced against your privacy expectations).
 - Legal obligations: KYC/AML screening, recordkeeping, responding to lawful requests by competent authorities and regulators of our licensing jurisdiction.
 
EXPAND
Where provincial privacy laws apply (AB PIPA, BC PIPA, Quebec Law 25), we rely on comparable grounds and provide transparency, access, and correction rights consistent with those statutes.
REFLECT
You may withdraw consent for non-essential purposes at any time, without affecting prior lawful processing or uses required to provide the service or meet legal duties.
Purpose of Processing
OBSERVE
- Service delivery: account creation, identity verification, game access, payments, support, responsible-gaming tools.
 - Safety and integrity: fraud, abuse, bonus misuse, and money-laundering prevention; security monitoring; incident response.
 - Compliance: AML/KYC checks, sanctions screening, auditing, regulatory reporting.
 - Analytics and improvement: performance measurement, product optimization, troubleshooting, user experience enhancement.
 - Marketing (with consent): offers, newsletters, promotions, and personalization; frequency capping and campaign effectiveness.
 
EXPAND
We may aggregate or anonymize data for statistical reporting or product research.
REFLECT
We do not use personal information for automated decisions producing legal or similarly significant effects without appropriate safeguards and your rights to contest such decisions where required by law.
Disclosure & Sharing
OBSERVE
- Payments and banking: acquirers, PSPs, card schemes, banks, and payout partners to process transactions.
 - Service providers: KYC/AML and identity verification vendors, anti-fraud systems, cloud hosting/CDNs, analytics, customer support tools, IT security providers.
 - Regulators and authorities: our licensing authority in Anjouan and competent law enforcement pursuant to lawful requests.
 - Affiliates/marketing networks: only with your consent and subject to applicable laws and preference controls.
 - Corporate events: business transfers, mergers, or restructuring, subject to confidentiality and continuity of protections.
 
EXPAND
Disclosures are limited to the stated purposes, under contracts imposing confidentiality, security, and use limitations.
REFLECT
We do not sell personal information. We may share de-identified or aggregated data that does not identify you.
International Transfers
OBSERVE
Your information may be processed in, or transferred to, jurisdictions outside your province or Canada, including the Union of the Comoros (Anjouan), Ecuador, Colombia, the United States, EU/EEA member states, and other locations of our service providers.
EXPAND
- Safeguards (Canada): contractual and organizational measures ensuring comparable protection, vendor due diligence, access restrictions, and encryption.
 - Safeguards (EU/EEA users): Standard Contractual Clauses and transfer impact assessments; where a U.S. recipient participates in the EU-U.S. Data Privacy Framework, we may rely on it.
 - Safeguards (Mexico): compliance with LFPDPPP transfer requirements, including consent where required or reliance on statutory exceptions.
 
REFLECT
Cross-border data may be accessible to foreign courts, law enforcement, and national security authorities according to local laws. We remain accountable for personal information handled on our behalf by third parties.
Data Retention
OBSERVE
- Account and identity (KYC): for the life of the account and 5 years after closure, or longer if required for AML/recordkeeping.
 - Transaction and betting records: 7 years from the date of the record for compliance and audit.
 - Support communications: 3 years after resolution, unless needed for legal claims.
 - Technical logs: 12-24 months depending on security and diagnostics needs.
 - Marketing data: until you opt out or after 24 months of inactivity, whichever occurs first.
 - Cookies: per-cookie duration (see Cookies section).
 
EXPAND
We may retain minimal data to maintain suppression lists and comply with legal holds. When retention ends, data is securely deleted or anonymized.
REFLECT
Deletion may be postponed where necessary to establish, exercise, or defend legal claims, or meet regulatory obligations.
Your Rights
OBSERVE
For individuals in Canada (PIPEDA and substantially similar provincial laws):
- Access: obtain confirmation and a copy of personal information we hold, including a description of uses and disclosures.
 - Correction: request rectification of inaccurate or incomplete information.
 - Consent management: withdraw consent for non-essential processing (e.g., marketing) at any time.
 - Challenge compliance: raise concerns about our privacy practices.
 
EXPAND
Additional alignment for other jurisdictions, if applicable to you:
- GDPR (EEA/UK): rights of access, rectification, erasure, restriction, objection (including to profiling/marketing), and data portability; right to lodge a complaint with a supervisory authority.
 - Mexico (LFPDPPP): ARCO rights-Access, Rectification, Cancellation, and Opposition; ability to revoke consent as permitted by law and object to processing for specific purposes.
 
REFLECT
- How to exercise: submit a request via the contact tools on https://ecuabet-casino-canada.com or by writing to the Data Protection Team (see Who We Are). We may request identity verification.
 - Response times: we aim to respond within 30 days (may extend where permitted; we will inform you of reasons and timing).
 - Fees: requests are free of charge unless manifestly unfounded, excessive, or repetitive, in which case a reasonable fee or refusal may apply as allowed by law.
 - Limits: some rights may be restricted by legal, regulatory, or privilege constraints (e.g., AML, fraud prevention, or proprietary information).
 - Marketing: you can opt out of email/SMS marketing at any time using in-message links or by contacting us.
 
Cookies & Tracking Technologies
OBSERVE
- Session cookies: essential for login, navigation, and security; expire when you close your browser.
 - Persistent cookies: remember preferences, maintain sessions, and support performance; remain for a defined duration.
 - Third-party cookies/tags: analytics (e.g., traffic measurement), advertising (with consent), fraud prevention, and CDN performance.
 
EXPAND
- Functional: core site features and user settings.
 - Analytics: usage statistics and service improvement.
 - Advertising: personalized or interest-based ads (only where permitted and with your consent).
 
REFLECT
- Controls: manage cookies via your browser settings and our on-site privacy/cookie controls (where available).
 - Ad choices (Canada): opt out of interest-based advertising at https://youradchoices.ca/choices/.
 - Blocking some cookies may affect site functionality.
 
Data Security
OBSERVE
- Encryption: TLS 1.2+ for data in transit; industry-standard encryption for sensitive data at rest.
 - Access controls: role-based access, least privilege, MFA for administrative access, secure key management.
 - Monitoring and testing: logging, anomaly detection, periodic vulnerability scans and security assessments.
 - Organizational measures: security and privacy training, background checks where appropriate, vendor due diligence.
 - Incident response: documented procedures for detection, containment, investigation, and remediation.
 
EXPAND
We align our controls with recognized standards (e.g., ISO/IEC 27001, SOC 2) where appropriate. Formal certifications may not apply to all systems or vendors.
REFLECT
Where a breach under Canadian law creates a real risk of significant harm, we will keep records, notify the Office of the Privacy Commissioner of Canada and affected individuals, and inform relevant third parties as required.
Complaints & Contacts
OBSERVE
- Contact us first: Use the contact tools on https://ecuabet-casino-canada.com or write to "Data Protection Team, VS Services Ltd., Anjouan, Union of the Comoros". Please describe your concern and include relevant details.
 - Our process: We acknowledge within 7 business days and aim to resolve within 30 days. Complex matters may require additional time; we will keep you informed.
 
EXPAND
- Canada (OPC): If unresolved, you may contact the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca, Toll-free 1‑800‑282‑1376, 30 Victoria Street, Gatineau, Quebec K1A 1H3.
 - EU/EEA (if applicable): You may contact your local supervisory authority; see the EDPB directory: https://edpb.europa.eu/about-edpb/board/members_en.
 - Mexico (if applicable): Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI): https://www.inai.org.mx/.
 
REFLECT
We commit to fair, timely handling of complaints and will document outcomes and corrective actions where appropriate.
Updates
OBSERVE
Last updated: October 2025. Version: 1.0 (CA).
EXPAND
- Change notifications: We will notify you of material changes via email (if available), account dashboard alerts, and/or prominent website banners.
 - Advance notice: For significant changes (e.g., new purposes, new categories of disclosures), we will provide at least 30 days' notice and, where required, seek renewed consent.
 - Changelog (material changes will be summarized):
    
- 2025-10-31: Initial Canadian-facing privacy policy; clarified international transfers and PIPEDA breach notification; added cookie/ad choices controls.
 
 
REFLECT
Your continued use of ecuabet-casino-canada after the effective date constitutes acceptance of the updated policy. If you object to changes, you may adjust preferences, withdraw marketing consent, or request account closure subject to applicable terms.
Regional Compliance Note: This Policy is intended to meet Canada's PIPEDA (and substantially similar provincial laws where applicable) and aligns with GDPR and Mexico's LFPDPPP for users in those regions. In case of conflict, the law of your location prevails to the extent applicable. All references to "ecuabet-casino-canada" and "we/us" are to VS Services Ltd. acting via https://ecuabet-casino-canada.com.