Privacy Policy

This Privacy Policy explains how Playfina, operated on playfinabet-ca.com, collects, uses, stores, shares, and protects personal information relating to players, prospective players, and website visitors in Canada. A privacy policy is required to inform individuals of how their information is handled, the legal grounds relied upon, the choices available to them, and the safeguards applied when online casino services are provided. This Privacy Policy applies whenever you visit the website, create an account, use casino services, contact support, participate in promotions, or otherwise interact with Playfina through playfinabet-ca.com. It is effective as of 6 November 2026.

Who We Are

For the purposes of operating Playfina on playfinabet-ca.com, the operator identified in the available corporate information is Dama N.V., a Curaçao-incorporated entity of the legal entity type N.V.. Based on the information currently available to Playfina, Dama N.V. is the operator company and parent company associated with this website. The operator jurisdiction is listed as Curaçao, and the available source materials indicate that online gambling services are offered under a Curaçao framework; however, the specific legal address, company registration number, tax identification number, issuing authority, and licence number have not been specified in the source data currently available for publication on playfinabet-ca.com.

Important regulatory note for Canadian users: Playfina is directed at users in Canada through playfinabet-ca.com, but gambling regulation in Canada is not uniform across all provinces, and certain provincial regimes, including Ontario, may impose local restrictions or separate regulatory expectations. Use of the website remains subject to applicable local law.

Operator name: Dama N.V.
Entity type: N.V.
Operator jurisdiction: Curaçao
Parent company: Dama N.V.
Official website for this policy: https://playfinabet-ca.com
Legal address: not specified in currently available source materials
Company registration number: not specified
Licence number: not specified

Privacy requests and data protection enquiries for Playfina should be sent to the operator's data protection function through the contact channels made available on playfinabet-ca.com. Because the currently available source data does not specify a named Data Protection Officer, direct DPO email address, or telephone number, users should use the website's privacy/support contact route and clearly mark the subject line "Data Protection Request" or "Privacy Complaint" for proper routing.

Privacy contact channel: website contact/support route on playfinabet-ca.com
DPO or privacy department email: not specified
Phone number: not specified
Postal mailing address: not specified in available data

What Personal Data We Collect

Playfina may collect personal information that you provide directly, information generated through your use of playfinabet-ca.com, and information received from verification, payment, security, analytics, and marketing partners. The categories of data collected depend on how you use the website, whether you open an account, and whether legal verification checks are required.

Identity and contact data: full name, date of birth, residential address, e-mail address, telephone number, username, account ID, and copies of documents submitted for age, identity, address, or payment verification.
Account and profile data: registration details, preferences, language settings, bonus participation, support history, VIP status, and communications with customer service or account managers, including interactions with departments such as VIP support where applicable.
Technical data: IP address, browser type, operating system, device identifiers, login timestamps, geolocation signals derived from IP, crash reports, authentication logs, and security event logs.
Payment and financial data: deposit and withdrawal history, masked payment instrument details, transaction references, payment method type, billing information, and records needed to process payouts, reversals, chargebacks, and fraud screening.
Gaming and behavioral data: betting history, stake size, wins and losses, game session records, clickstream data, page visits, search behavior, promotion responses, responsible gambling markers, and risk indicators used to detect abuse or unusual activity.
Compliance data: KYC/AML records, source-of-funds information where required, self-exclusion status, sanctions screening results, duplicate account checks, and regulator or law-enforcement correspondence where applicable.
Cookies and similar technologies: session cookies, persistent cookies, local storage, pixels, SDK-like tracking tools, consent records, and third-party analytics or advertising identifiers, subject to your choices and applicable law.

Legal Basis for Processing

Playfina processes personal information only where there is an appropriate legal ground to do so. Because playfinabet-ca.com is made available to users in Canada while the operator is associated with Curaçao, the legal basis analysis may involve Canadian privacy principles, contractual necessity, legitimate business interests, and compliance duties arising from gambling, anti-fraud, consumer protection, and record-keeping obligations.

Consent: We may rely on your consent for optional marketing communications, certain non-essential cookies, promotional personalization, and other processing activities where consent is the most appropriate basis. You may withdraw consent at any time for future processing, without affecting prior lawful processing.
Performance of a contract: Processing is necessary to create and administer your account, verify your eligibility, provide casino services, process deposits and withdrawals, apply bonuses, settle bets, respond to service requests, and enforce the website terms.
Legitimate interests: We may process information to secure the website, prevent fraud, investigate abuse, improve products and user experience, maintain internal reporting, defend legal claims, conduct analytics, and ensure business continuity, provided such interests are not overridden by your rights and freedoms.
Compliance with legal obligations: We may process and retain data to satisfy age verification, KYC/AML requirements, anti-fraud controls, sanctions checks, accounting obligations, tax and financial reporting duties, complaint handling, and lawful requests from courts, regulators, or enforcement bodies.

Canadian privacy note: where Canadian law requires meaningful consent, reasonable purposes, limited collection, and appropriate safeguards, Playfina interprets this policy consistently with those principles. In the event of a direct legal conflict, mandatory applicable law will prevail.

Purpose of Processing

Playfina uses personal information for specific, documented, and proportionate purposes connected with operating playfinabet-ca.com.

Providing casino services: to register accounts, authenticate users, enable gameplay, administer bonuses, process payments, and provide customer support.
Compliance and verification: to confirm age and identity, carry out KYC/AML checks, assess source-of-funds information where necessary, apply self-exclusion measures, and comply with legal or regulatory obligations.
Security and fraud prevention: to detect chargeback abuse, multiple accounts, suspicious betting patterns, account takeover attempts, prohibited use, collusion, and other unlawful or high-risk activity.
Service improvement: to troubleshoot errors, monitor performance, understand product usage, develop new features, and improve navigation, payments, and support processes.
Marketing and promotions: to send promotional e-mails, bonus offers, newsletters, and personalized campaign content where permitted by law and, where required, based on your consent or unsubscribe preferences.
Analytics and business administration: to generate statistics, prepare internal reports, manage supplier relationships, audit operations, and maintain records.
Legal protection: to establish, exercise, or defend legal claims, handle disputes, and document decisions affecting accounts or transactions.

Disclosure & Sharing

Playfina does not sell personal information in the ordinary sense of transferring customer data for unrestricted third-party use. Personal information may, however, be disclosed where this is necessary for operation of playfinabet-ca.com, compliance, security, or lawful business administration.

Payment partners and financial intermediaries: to process deposits, withdrawals, fraud screening, reversals, and transaction monitoring.
Identity, KYC, and AML providers: to verify age, identity, address, source-of-funds indicators, sanctions exposure, and risk flags.
Technology and hosting providers: including cloud services, customer support systems, analytics platforms, security vendors, and website infrastructure providers that process data on our instructions.
Corporate affiliates and operational partners: including entities involved in operating the Playfina brand on playfinabet-ca.com, where access is needed for support, compliance, payments, security, or administration.
Regulators, courts, law enforcement, and public authorities: where disclosure is required by law, legal process, regulatory inquiry, fraud investigation, or to protect legal rights and public safety.
Advertising and analytics networks: where consent is obtained for non-essential tracking or personalized advertising, data may be shared with marketing, attribution, and campaign measurement partners.
Professional advisers: lawyers, auditors, consultants, and insurers, subject to confidentiality and necessity.
Business transfer counterparties: if a merger, acquisition, restructuring, financing, or asset transfer occurs, data may be disclosed subject to confidentiality and lawful transition safeguards.

All disclosures are intended to be limited to what is relevant and reasonably necessary for the stated purpose.

International Transfers

Because Playfina operates on playfinabet-ca.com with an operator associated with Curaçao and may use international service providers, your personal information may be transferred to, accessed from, or stored in jurisdictions outside your province or outside Canada. These jurisdictions may include Curaçao, other parts of the Caribbean, the European Economic Area, the United Kingdom, and other countries where hosting, payments, compliance screening, analytics, customer support, or security providers are located.

Transfer rationale: international transfers may be required to operate accounts, process payments, verify identity, prevent fraud, host infrastructure, provide customer support, or maintain records.
Transfer safeguards: where appropriate, Playfina may rely on contractual protections, confidentiality obligations, internal access restrictions, due-diligence reviews, vendor security assessments, and data handling terms designed to provide a level of protection comparable to the sensitivity of the information.
Legal process risk: information transferred outside Canada may be subject to foreign laws, court orders, or lawful access requests by authorities in the destination jurisdiction.
Former framework note: references sometimes made in the industry to Privacy Shield should be understood as historical only and not as a current universal safeguard mechanism. Where contractual transfer tools are used, they may include standard contractual clauses or equivalent protective commitments as appropriate to the relationship.

By using playfinabet-ca.com, you acknowledge that cross-border processing may occur as described in this Privacy Policy, subject always to applicable law and reasonable safeguards.

Data Retention

Playfina keeps personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, prevent fraud, and enforce contractual rights. Retention periods may differ depending on account activity, legal requirements, unresolved investigations, or mandatory gambling and financial record-keeping obligations.

Account and identification data: generally retained during the life of the account and for up to 5 years after account closure, unless a longer period is required for legal, regulatory, fraud-prevention, or dispute-resolution purposes.
KYC/AML and verification records: may be retained for 5 to 7 years after the end of the customer relationship or longer if required by applicable compliance obligations, investigations, or legal holds.
Transaction and payment records: may be retained for 5 to 7 years for accounting, audit, anti-fraud, and financial reporting purposes.
Gaming and behavioral records: usually retained for up to 5 years after account closure, unless needed for responsible gambling reviews, fraud investigations, bonus abuse detection, or dispute evidence.
Marketing consent and suppression records: retained until consent is withdrawn and for a reasonable period afterward to maintain unsubscribe and objection records.
Technical logs and security records: retained for shorter periods where feasible, commonly from 30 days to 24 months, depending on their purpose, incident history, and legal necessity.
Complaint files and legal claims data: retained until the matter is closed and for any subsequent limitation period reasonably required to establish, exercise, or defend legal rights.

Deletion may occur after a verified user request, upon expiry of the relevant retention period, when the purpose of processing ends, or after anonymization where retention of fully identifiable information is no longer necessary. Some data cannot be erased immediately where retention is required by law, fraud controls, self-exclusion obligations, or legitimate claim preservation.

Your Rights

Playfina seeks to respect user privacy rights in line with applicable Canadian privacy principles and, where relevant to the processing model or international data handling, standards commonly associated with GDPR-style rights frameworks. The source instruction also requests reference to Mexican privacy concepts; accordingly, where useful for international alignment, this section reflects rights broadly consistent with transparency, access, rectification, cancellation/deletion, opposition, and consent withdrawal principles, while Canadian law and other mandatory applicable law remain controlling.

Right of access: you may request confirmation of whether your personal information is processed and ask for a copy of the data or information about categories, purposes, sources, recipients, and retention logic.
Right to correction: you may request correction of inaccurate, outdated, or incomplete information, especially where errors affect verification, payments, or account administration.
Right to deletion or cancellation: you may request deletion of personal information where retention is no longer necessary, consent has been withdrawn, or processing is unjustified. This right is not absolute and may be limited by legal retention duties, AML/KYC obligations, fraud prevention needs, unresolved disputes, or legal claims.
Right to restrict processing: you may request temporary limitation of certain processing while accuracy, legality, or objections are being reviewed.
Right to object: you may object to processing based on legitimate interests, particularly direct marketing or profiling related to promotions.
Right to data portability: where technically feasible and legally applicable, you may ask for certain data you provided to be supplied in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, including many marketing activities and non-essential cookies, you may withdraw consent at any time for future use.
Marketing opt-out: promotional e-mails may be stopped through the unsubscribe link, account settings where available, or by contacting support.

To exercise your rights, submit a request through the privacy or support contact channel on playfinabet-ca.com and include sufficient identifying information to allow secure verification of your identity. Playfina may request additional information where necessary to authenticate the request and protect account security.

Submit the request: clearly state the right you want to exercise and provide your account details and contact information.
Identity verification: we may request identification or account verification information to avoid unauthorized disclosure.
Assessment: the request will be reviewed in light of contractual duties, legal obligations, fraud-prevention needs, and applicable rights frameworks.
Response timeframe: Playfina aims to respond within 30 days of receiving a verified request. If more time is reasonably needed because of complexity or volume, you will be informed where required by law.
Fees: requests are generally handled free of charge. A reasonable fee may be charged only where permitted by law for manifestly unfounded, repetitive, or excessive requests.

International rights alignment note: references to GDPR-style rights or Mexican privacy concepts are provided for transparency and international consistency only. They do not expand rights beyond what is available under applicable law, contract, and necessary regulatory obligations.

Cookies & Tracking Technologies

Playfina uses cookies and similar technologies on playfinabet-ca.com to operate the website, improve performance, remember preferences, measure traffic, detect fraud, and support marketing where permitted.

Session cookies: temporary cookies that expire when you close your browser. They help with login continuity, page navigation, fraud prevention, and secure session management.
Persistent cookies: cookies stored for a defined period to remember preferences, language, device recognition, consent choices, and repeat-visit functionality.
Third-party cookies: cookies placed by analytics, payment, security, or advertising partners. These may be used to measure site usage, attribute campaigns, prevent fraud, or deliver advertising subject to consent requirements.
Functional cookies: used to enable essential site features such as account login, page stability, language settings, and fraud controls.
Analytics cookies: used to understand how users interact with playfinabet-ca.com, including visited pages, session duration, device/browser information, and conversion patterns.
Advertising cookies: used to support personalized promotions, campaign measurement, affiliate attribution, and remarketing where legally permitted and, where required, based on consent.

You can manage cookies through your browser settings, device controls, or any cookie preference tool made available on playfinabet-ca.com. Disabling certain cookies may affect website functionality, login persistence, payment flow, personalization, or service performance. If an internal cookie management panel is available, your most recent choices recorded there will govern non-essential cookie use on that device/browser combination.

Data Security

Playfina applies technical, organizational, and procedural measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or unlawful disclosure. No online system can guarantee absolute security, but playfinabet-ca.com is expected to use safeguards appropriate to the volume and sensitivity of gambling, payment, and verification data.

Encryption in transit: data transmitted between your device and the website should be protected using TLS 1.2 or higher or an equivalent secure transport protocol.
Encryption at rest: sensitive stored data may be protected through encryption, tokenization, hashing, masking, or equivalent safeguards depending on the data type and processing environment.
Access control: access to personal information is restricted on a need-to-know basis using role-based permissions, authentication controls, logging, and internal confidentiality obligations.
Account protection: security features may include password controls, suspicious login detection, device monitoring, and multi-factor authentication where made available or required for high-risk actions.
Monitoring and audits: systems may be subject to vulnerability management, security reviews, logging, anomaly monitoring, and periodic internal or external assessments.
Staff training: relevant personnel should receive privacy, security, anti-fraud, and incident-handling training proportionate to their roles.
Incident response: Playfina maintains procedures to investigate security events, contain incidents, assess risk, notify affected parties or authorities where legally required, and remediate identified weaknesses.

References to frameworks such as ISO 27001 or SOC 2 describe recognized security standards that may inform vendor or organizational controls where applicable; however, no certification is expressly confirmed in the currently available source data for publication on playfinabet-ca.com.

Complaints & Contacts

If you have a privacy concern, want to question how your information has been processed, or believe your rights have been affected, you may submit a complaint to Playfina through the contact routes available on playfinabet-ca.com. Because the currently available source data does not specify a direct DPO e-mail address, phone line, online feedback form URL, or postal address, users should use the website support/privacy channel and clearly label the communication as a privacy complaint.

Privacy complaint route: support or contact channel on playfinabet-ca.com
DPO e-mail: not specified
Phone: not specified
Postal address: not specified
Website: https://playfinabet-ca.com

Step 1 - Submit your complaint: describe the issue, include your account details, relevant dates, screenshots or transaction references, and the remedy sought.
Step 2 - Verification and acknowledgment: Playfina may verify identity and aims to acknowledge receipt within a reasonable period, typically within 5 to 10 business days.
Step 3 - Investigation: the complaint will be reviewed by the relevant privacy, compliance, security, or support personnel depending on the issue.
Step 4 - Response: a substantive response is generally targeted within 30 days of receipt of a verified complaint, subject to complexity and legal requirements.
Step 5 - Escalation: if you are dissatisfied, you may escalate internally through a follow-up complaint marked "Escalation - Privacy" and request senior review.

External supervisory options for Canadian users: if you believe your privacy concern has not been handled appropriately, you may contact the Office of the Privacy Commissioner of Canada or, where relevant, your provincial privacy authority.

Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca
Contact information: available through the official OPC website's complaint and contact pages

International authority note: where cross-border processing implicates other privacy regimes, affected users may also have the right to complain to a competent authority in the relevant jurisdiction. The source request mentioned Mexican and EU authorities; however, because Playfina is specifically directed to Canada through playfinabet-ca.com, users should generally begin with the Canadian privacy authority or the authority applicable to their place of residence and the relevant processing context.

Updates

Last updated: November 2026

Playfina may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, security measures, technology, service offerings, or complaint procedures relating to playfinabet-ca.com. When changes are material, users will be informed through one or more appropriate channels.

Email notifications: where a valid e-mail address is available and the change materially affects privacy rights or processing practices.
Website banners or pop-up notices: for prominent visibility on playfinabet-ca.com.
Account dashboard alerts: where user account messaging functionality is available.
Policy revision posting: the updated version will be posted on the website with a revised "Last updated" date.

For significant changes, Playfina aims to provide at least 30 days' advance notice where reasonably practicable and legally required, especially if the update materially changes how personal data is collected, used, shared, or transferred. If you object to a material change, you may stop using the website and, subject to legal and contractual restrictions, request account closure and exercise any applicable privacy rights.

Changelog of material changes:

November 2026: policy version updated for 2026 timing alignment; clarified Canadian privacy positioning, cross-border transfer wording, rights request timelines, cookie controls, complaint escalation routes, and notice period for significant changes.