Privacy Policy
How Aurora Lotto collects, uses, discloses and protects your personal information (PIPEDA and Québec Law 25).
-
1. 1. Our commitment and accountability
We respect your privacy and are accountable for the personal information in our custody. We handle it in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Québec residents, the Act respecting the protection of personal information in the private sector as modernized by Law 25. Our Privacy Officer oversees compliance, maintains our governance policy, and responds to questions, access requests and complaints.
-
2. 2. Personal information we collect
We collect information you provide at registration and during play — name, date of birth, address, email, phone, province and account preferences. To meet legal and security obligations we also collect identity and address verification documents, payment details, transaction and play history, responsible-gambling settings, communications with support, and technical data such as device, browser, IP address, approximate location and cookie identifiers. Some of this is sensitive information collected only with your consent and for the purposes below.
-
3. 3. How we collect it
We collect personal information directly from you when you register, play, contact us or update your settings; automatically through cookies and similar technologies when you use the site (see our Cookie Policy); and from trusted third parties such as identity-verification and payment partners, and, where permitted, fraud-prevention and regulatory sources.
-
4. 4. Why we use it
We use personal information to create and manage your account; verify identity, age and location; process play, deposits and withdrawals; meet KYC/AML and other regulatory obligations; provide responsible-gambling tools and interventions; detect and prevent fraud and secure the service; provide support; personalize and improve the site; and, with your consent, send promotional communications. We rely on consent, contractual necessity and legal obligations as our bases for processing.
-
5. 5. Consent
We obtain your consent to collect, use and disclose personal information, except where the law allows or requires otherwise. Consent is sought in clear terms, separately for purposes where required, and is express for sensitive information. You may withdraw consent at any time, subject to legal and contractual limits; withdrawing consent necessary to operate your account may mean we can no longer provide the service.
-
6. 6. Marketing communications
Marketing messages are optional and sent only with your consent, in line with Canada's Anti-Spam Legislation (CASL). Every message includes an easy unsubscribe link, and you can change your preferences in your account at any time. Withdrawing marketing consent does not affect service messages necessary to operate your account.
-
7. 7. Disclosure to third parties
We do not sell your personal information. We disclose it only as needed: to vetted service providers acting on our behalf (identity verification, payment processing, hosting, analytics, customer support) under contracts that require equivalent protection; to regulators, law-enforcement and other authorities where required or permitted by law; to responsible-gambling and self-exclusion programs; and to protect our rights, prevent fraud, or in connection with a corporate transaction.
-
8. 8. Transfers outside your province
Some service providers may process information outside your province or outside Canada. Before such a transfer, we conduct a privacy assessment and put safeguards in place to ensure an adequate level of protection. As required by Québec Law 25, Québec residents are informed of transfers outside Québec and the assessment conducted.
-
9. 9. Retention and destruction
We keep personal information only as long as necessary for the purposes for which it was collected and to meet legal, regulatory and accounting retention requirements (including gaming and AML record-keeping). When it is no longer required, it is securely destroyed or anonymized in accordance with our retention schedule.
-
10. 10. Security and breach notification
We protect your information with physical, organizational and technological safeguards, including encryption in transit, access controls on a need-to-know basis, logging and monitoring. No system is perfectly secure; if a confidentiality incident creating a risk of serious harm occurs, we will notify affected individuals and the appropriate authorities (the Office of the Privacy Commissioner of Canada and, in Québec, the Commission d'accès à l'information) as required by law, and keep a register of incidents.
-
11. 11. Automated processing and profiling
We use automated tools to help verify identity, detect fraud, and identify responsible-gambling risks. Where a decision is based exclusively on automated processing and significantly affects you, you have the right, under Québec Law 25, to be informed and to submit observations to a member of our staff who can review the decision.
-
12. 12. Your rights
Subject to legal limits, you may access the personal information we hold about you, ask us to correct it, withdraw consent, and request deletion. Québec residents also have rights to data portability and to de-indexing in certain cases. To exercise your rights, contact our Privacy Officer using the details on the Contact page; we will respond within the timeframes set by law. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d'accès à l'information (CAI).
-
13. 13. Minors, cookies and changes
Our services are intended for adults of legal gambling age; we do not knowingly collect information from minors. We use cookies and similar technologies as described in our Cookie Policy, where you can manage your choices. We may update this Privacy Policy to reflect changes in our practices or the law; the effective date is shown below and material changes will be communicated to you.