- Introduction
This Privacy Policy describes how personal information is collected, used, disclosed, retained, and protected by Rideau Carleton Casino, operated under Gateway Casinos & Entertainment Limited, in connection with casino and entertainment operations in Canada.
Handling of personal information is carried out in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal private-sector privacy law that governs the collection, use, and disclosure of personal information in the course of commercial activity across Canada. Where substantially similar provincial privacy legislation applies, the requirements of that legislation are followed.
This Privacy Policy applies to all individuals whose personal information is processed in connection with land-based casino operations, loyalty programs, marketing activities, and any related online channels.
- Definition of Personal Information
For the purposes of this Privacy Policy, “Personal Information” means any information about an identifiable individual. This does not include business contact information, such as a person’s name, title, business address, or business telephone number, where that information is collected, used, or disclosed solely in connection with that individual’s business responsibilities.
- Accountability
Gateway Casinos & Entertainment Limited has designated a Privacy Officer who is responsible for overseeing compliance with this Privacy Policy and with applicable Canadian privacy legislation. The Privacy Officer is the primary point of contact for privacy-related inquiries, access requests, correction requests, and complaints.
Privacy Officer contact details:
- Email: [email protected]
- Phone: 604-296-5077
- Mailing Address: 100-4400 Dominion Street, Burnaby, BC V5G 4G3, Canada
If a concern about the handling of personal information is not resolved to an individual’s satisfaction, the individual has the right to contact the Office of the Privacy Commissioner of Canada.
- Purposes of Collection
Personal information is collected only for purposes that a reasonable person would consider appropriate in the circumstances. These purposes include, but are not limited to:
- Verifying the identity and age of individuals accessing casino facilities
- Administering loyalty and rewards programs
- Complying with anti-money laundering (AML) obligations and other legal requirements
- Conducting responsible gambling assessments and interventions where applicable
- Communicating with individuals regarding their accounts, inquiries, or requests
- Fulfilling regulatory reporting obligations to applicable gaming authorities
- Maintaining the security and integrity of gaming operations
The purposes for which personal information is collected are identified at or before the time of collection.
- Consent
Meaningful consent is obtained before or at the time personal information is collected, except where the law permits or requires collection without consent. The form of consent sought may vary depending on the sensitivity of the information and the circumstances of collection.
An individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect the ability of the casino or the operator to provide certain services or to fulfill certain obligations. Individuals are informed of the implications of withdrawing consent before doing so.
- Limiting Collection
Personal information collected is limited to what is necessary to fulfill the identified purposes. Information is not collected indiscriminately or beyond what is required for operations and legal obligations.
- Use, Disclosure, and Retention
Personal information is used and disclosed only for the purposes for which it was collected, or as permitted or required by law. Personal information is not sold to third parties.
Personal information may be disclosed to:
- Regulatory authorities and law enforcement agencies as required by applicable law
- Service providers acting on behalf of the company, under contractual obligations of confidentiality and data protection
- Other parties where the individual has provided consent
Personal information is retained only for as long as necessary to fulfill the identified purposes or as required by law, including for tax, legal, or regulatory purposes. When personal information is no longer required, it is destroyed, erased, or de-identified using appropriate methods.
- Accuracy
Reasonable steps are taken to ensure that personal information is accurate, complete, and up to date for the purposes for which it is used.
If an individual becomes aware that information held about them is inaccurate or incomplete, a correction request may be submitted as described in Section 10.
- Safeguards
Personal information is protected using security safeguards appropriate to the sensitivity of the information. These measures are designed to protect against unauthorized access, collection, use, disclosure, copying, modification, disposal, or destruction.
All employees and service providers with access to personal information are subject to confidentiality obligations. Access to personal information is restricted to those who require it to perform their duties.
In the event of a privacy breach that poses a real risk of significant harm, affected individuals and the Office of the Privacy Commissioner of Canada are notified in accordance with PIPEDA’s breach notification requirements.
- Individual Access and Correction
Upon written request, an individual is informed of the existence, use, and disclosure of their personal information and is provided with access to that information, subject to limited exceptions permitted by law.
Requests to access or correct personal information, or questions or complaints about privacy practices, should be directed to the Privacy Officer using the contact details provided in Section 3.
Responses to access and correction requests are provided within a reasonable timeframe, generally within 30 days of receipt. If a request cannot be fulfilled, the reason is provided in writing.
- Openness
This Privacy Policy is available to any individual upon request. Information about privacy practices is intended to be readily accessible.
- Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in practices or applicable law. The current version of this Privacy Policy governs the handling of personal information. Individuals are encouraged to review this document periodically.
- Contact
All privacy inquiries, access requests, correction requests, and complaints should be directed to the Privacy Officer:
- Email: [email protected]
- Phone: 604-296-5077
- Mailing Address: Gateway Casinos & Entertainment Limited, 100-4400 Dominion Street, Burnaby, BC V5G 4G3, Canada