Parimatch Canada Privacy Policy and Data Protection

This document establishes the official Privacy Policy governing the collection, processing, retention, and disclosure of personal information by Parimatch in connection with regulated online gaming services offered to residents of Canada. The purpose of this policy is to ensure absolute transparency regarding the handling of user data in strict compliance with applicable federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act. Parimatch acts as a data controller responsible for ensuring that all data processing operations adhere strictly to lawful processing principles. User data is systematically gathered, processed, and maintained to facilitate valid account management, verify identity, process financial settlements, and fulfill mandatory regulatory obligations imposed by gaming authorities. Appropriate technical and organizational measures are deployed across all systems to protect stored information against unauthorized access, alteration, disclosure, or destruction, thereby safeguarding the integrity of personal records throughout their lifecycle.

Categories of Personal Data Collected and Processed

To establish and administer user accounts, Parimatch collects several distinct categories of personal information from individuals located in Canada. Registration details comprise full legal names, residential addresses, dates of birth, valid email addresses, and telephone numbers. Identification data includes government-issued photographic identification documents, utility bills, and bank statements submitted during mandatory verification procedures. Transactional information encompasses financial history, payment card details, bank account identifiers, deposit records, and withdrawal logs associated with platform usage. Technical data involves Internet Protocol addresses, browser types, operating systems, device identifiers, and connection timestamps captured automatically during platform interaction. Compliance-related records consist of audit trails, correspondence with support personnel, self-exclusion logs, and documentation concerning source of wealth or funds required under anti-money laundering frameworks.

Purposes of Data Processing and Associated Legal Bases

Personal data collected by Parimatch is utilized exclusively for defined operational and administrative purposes. Identity verification procedures and age validation checks are executed to prevent underage participation and unauthorized access. Transactional data processing ensures the accurate settlement of deposits, withdrawals, and wagers in accordance with financial regulations. Security monitoring and risk management protocols rely on technical data to detect fraudulent activity, unauthorized account access, and technical failures. Regulatory compliance activities involve maintaining statutory records and reporting suspicious transactions to relevant Canadian authorities. Account operations depend on the ongoing processing of contact and identification records to provide user support and administer terms of service. These data processing activities are grounded in specific legal bases, which include the necessity of processing for the performance of a contract, compliance with legal obligations to which the operator is subject, and the pursuit of legitimate interests in maintaining platform integrity, provided such interests are not overridden by user privacy rights where applicable through explicit consent.

Data Storage Architecture, Security Protocols, and Retention Schedules

Personal information is stored within secure server infrastructure located in designated data centers complying with recognized industry standards. Technical safeguards include encryption protocols for data in transit and at rest, firewalls, and multi-factor authentication mechanisms. Access to personal records is restricted exclusively to authorized personnel whose administrative duties require such access, subject to strict confidentiality obligations and role-based permissions. Data retention periods are determined by statutory requirements, anti-money laundering legislation, and corporate governance policies. Financial records and identification documentation are retained for a minimum period following account closure as mandated by Canadian financial and regulatory statutes. Upon the expiration of applicable retention periods, personal data is permanently deleted, anonymized, or securely archived in accordance with established data destruction procedures.

Player Rights and Data Access Request Procedures

Registered users residing in Canada hold specific legal rights concerning their personal data maintained by Parimatch. Individuals possess the right to request access to their stored personal information, obtain confirmation of processing activities, and receive a copy of the data undergoing processing. Users may request the correction of inaccurate or incomplete records and demand the restriction of processing under specific statutory conditions. Where processing is based on consent, users may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Individuals may also object to processing operations based on legitimate interests and request data portability where technically feasible. To exercise any of these rights, formal requests must be submitted through designated administrative channels. Parimatch requires verification of the applicant's identity prior to fulfilling any data access or modification request to ensure the protection of personal records against unauthorized disclosure.