Privacy Policy
This Privacy Policy explains how personal data is collected, used, and protected for players and visitors of highflyer.casino. It applies to all users accessing highflyercasino's services through highflyer.casino's website and associated platforms. Effective date: 1 January 2025.
Who We Are
OBSERVE: The legal operator of highflyer.casino is registered in Alderney and holds relevant licenses for operations in Canada, including Ontario, under licensed jurisdictional oversight.
- Legal Entity: Highflyercasino Ltd (legal entity type: Limited/Ltd), headquartered at First Floor, St Anne's House, Alderney GY9 3UF, Channel Islands.
- Licensing & Regulation:
- Ontario, CA: Licensed by Alcohol and Gaming Commission of Ontario (AGCO), valid until 2025.
- International/Canada (outside Ontario): Licensed by Alderney Gambling Control Commission (AGCC), valid until 2025.
- Certification: iTech Labs RNG and Game Fairness Certification, valid until 2025.
- Contact (Data Protection): Email: [email protected] (attn: Data Protection Department)
- Support Line (CA): 1-888-230-7208 (Toll-free, 12pm-12am daily)
- Live Chat: https://highflyer.casino (24/7 availability)
REFLECT: Users may contact the Data Protection Department at any time via the above channels for privacy-related inquiries.
What Personal Data We Collect
OBSERVE: highflyercasino collects a range of data in order to operate legally, provide gaming services, ensure security, and continuously improve user experience.
- Personal Identification: Full name, date of birth, residential and mailing address (if specified), nationality, e-mail address, and phone number.
- Account & Transaction Data: Username, account preferences, player ID, password (hashed), gaming activity history, deposit and withdrawal records, payment card and e-wallet details (as per requirements of payment partners).
- Technical Data: IP address, device details (browser, operating system), access times, session logs, location data (for regulatory compliance), and device identifiers.
- Behavioral Data: Betting and transaction history, page views, feature interaction records, clicks, gaming session analytics.
- Cookies & Tracking: Session and persistent cookies, analytics cookies, third-party cookies, tracking pixels, similar technologies.
EXPAND: Additional data may be collected for verification (e.g., copies of ID documents, proof of funds) as required under Canadian and international regulations.
Legal Basis for Processing
OBSERVE: All processing at highflyer.casino is underpinned by prevailing Canadian (including Ontario) and Alderney regulations, with compliance to relevant privacy laws (PIPEDA, provincial requirements, and industry standards).
- Consent:
- Users provide explicit consent by creating an account, accepting terms and privacy policy, and for optional marketing communications.
- Consent is requested for the use of cookies and tracking technologies.
- Contractual Necessity:
- Processing is required to fulfill obligations related to account operation, user authentication, transaction execution (deposits, withdrawals), and provision of casino services.
- Legal Obligations:
- To comply with anti-money laundering (AML) requirements, know-your-customer (KYC) processes, fraud prevention, responsible gaming, tax reporting, and regulatory requests as required by AGCO/AGCC and relevant Canadian authorities.
- Legitimate Interests:
- Ensuring platform integrity, conducting analytics to improve services, and maintaining security across all highflyer.casino offerings operate under legitimate business interests, always balanced with user rights.
REFLECT: highflyercasino ensures that no data is processed beyond what is legally required or reasonably necessary for its stated purposes.
Regional Compliance Note: Legal bases align with PIPEDA/FIPPA and provincial acts; contractual/legal necessity takes precedence for regulatory or financial purposes.
Purpose of Processing
OBSERVE: Personal data is used solely for lawful, transparent, and necessary activities supporting highflyercasino's operations via highflyer.casino.
- Service Provision: Managing user registration, access control, gameplay, transaction processing, and customer support.
- Compliance: Meeting KYC/AML obligations, fraud monitoring, security audits, and regulatory reporting.
- Service Improvement: Analyzing site usage, gathering analytics to optimize site functionality, resolve bugs, and improve user experience.
- Marketing & Communication: Sending promotional offers, service updates, and important notices (only with user's prior consent for marketing).
- Responsible Gambling: Monitoring for at-risk behavior, facilitating self-exclusion, and ensuring compliance with responsible gambling initiatives in Canada.
REFLECT: Data is never processed for unlawful or unspecified purposes, nor sold to unauthorized third parties.
Disclosure & Sharing
OBSERVE: Data disclosure is strictly limited to parties essential to regulatory, operational, and lawful service delivery of highflyer.casino.
- Payment & Financial Partners: Sharing information with banks, payment gateways, and financial service providers solely for processing deposits and withdrawals, identity verification, and fraud mitigation.
- Service Providers: Sharing with contracted partners (IT, hosting, customer support, analytics) who are bound by confidentiality and data protection agreements.
- Regulatory & Legal Authorities: Disclosure as mandated by regulatory requests, audits, legal claims, or law enforcement, including AGCO, AGCC, and other competent authorities.
- Affiliates & Advertising Networks: Data may be shared with affiliates and advertising partners for joint promotions, only if explicit consent is obtained for such sharing (e.g., marketing cookies).
- Corporate Transactions: In the case of merger, acquisition, or business transfer, user data may be transferred subject to applicable legal protections and user notification.
EXPAND: All third-party recipients must demonstrate robust data protection standards equivalent to those practiced by highflyercasino.
REFLECT: No data is sold to unrelated third parties. Any disclosures are documented and auditable to meet CA legal requirements.
International Transfers
OBSERVE: As an internationally licensed online gaming operator (Ontario/CA and Alderney), highflyercasino may transfer data outside Canada for service provisioning (e.g., IT hosting, payment processing in the Channel Islands/EU).
- Countries of Transfer: Alderney (main headquarters), other EEA countries, trusted IT/hosting providers.
- Protective Guarantees:
- Standard Contractual Clauses (SCCs) or similar recognized mechanisms ensuring data receives adequate protection.
- Transfers only to jurisdictions rated as offering adequate protection under Canadian privacy authorities and/or where contractual safeguards are enforceable.
- All partners and affiliates contractually bound to data protection standards consistent with highflyercasino's obligations under Canadian law and the AGCO/AGCC frameworks.
REFLECT: Users are notified in advance where international transfers significantly affect privacy rights, and may request further information regarding transfer mechanisms at any time.
Regional Compliance Note: Adheres to both PIPEDA transborder requirements and AGCO/AGCC international data guidelines.
Data Retention
OBSERVE: highflyercasino has strict data retention policies reflecting regulatory, operational, and user rights considerations.
- Account Data: Retained for the duration of the active user relationship. Upon account closure, core personal data is retained for up to 5 years to meet anti-money laundering, legal dispute, and regulatory audit requirements, after which it is deleted or securely anonymized.
- KYC/AML Documents: Retained for 5 years following the completion of the last transaction or termination, as required by Canadian and Alderney regulation.
- Transactional/Behavioral Data: Retained as needed for financial audits, regulatory reporting, and dispute resolution, but no longer than legally required.
- Marketing Permissions: Records of marketing consent and communications retained until the user withdraws consent or for up to 2 years of inactivity (whichever sooner).
- Cookies: Session cookies retained until session end; persistent or analytics cookies retained for up to 2 years. Cookie-level retention details are listed in the Cookie Policy section.
EXPAND: Data is deleted on user request where legally permissible, except where retention is mandated by law. All deletions are secured via industry best-practice methods. Retention periods are reviewed annually and revised per Canadian regulatory updates.
Your Rights
OBSERVE: Users of highflyercasino via highflyer.casino are endowed with a comprehensive suite of privacy rights under Canadian law and applicable international standards.
- Access: Request a copy of personal data held by highflyercasino.
- Correction: Rectify inaccuracies or incomplete information in user profiles or records.
- Erasure ("Right to be Forgotten"): Request deletion of personal data when it is no longer necessary for legal or operational purposes, subject to statutory retention obligations.
- Restriction: Request that certain data be temporarily or permanently excluded from processing activities.
- Objection: Object to the processing of data for direct marketing, profiling, or analytic purposes (where such processing is not required for contractual or legal obligations).
- Data Portability: Obtain a digital copy of personal data in a machine-readable (structured) format, and require its transfer to another service, where applicable.
- Marketing Withdrawal: Withdraw consent for receiving promotional emails, notifications, or calls at any time via account dashboard or opt-out mechanisms in communications.
REFLECT: Requests may be submitted at any time to the Data Protection Department ([email protected]), or via the support contact points. Responses are typically issued within 30 days. Verification may be required before fulfilling sensitive requests.
Regional Compliance Note: These rights are protected under PIPEDA/FIPPA and relevant provincial privacy statutes.
Cookies & Tracking Technologies
OBSERVE: highflyercasino employs cookies and similar tracking technologies on highflyer.casino to support the website's technical operation, user experience, security, analytics, and marketing (only with consent).
- Types of Cookies/Technologies:
- Session Cookies: Facilitate authentication, navigation, and core site functionality. Deleted when browser is closed.
- Persistent Cookies: Remember user preferences, track language and login for subsequent visits. Retained for up to 2 years unless cleared.
- Third-Party Cookies: Provided by analytics and advertising partners (e.g., Google Analytics), used only where user has given explicit consent.
- Tracking Pixels/Tags: Used in limited cases for analytics and conversion tracking.
- Cookie Purposes:
- Functional: Website navigation, registration, session security.
- Analytics: Understanding user behavior to improve services and support responsible gambling measures.
- Advertising: Only with explicit user consent; supports promotional campaigns and user experience personalization.
- Cookie Management:
- Cookies can be managed or disabled at any time via browser controls or the dedicated cookie settings panel on highflyer.casino.
- Disabling certain cookies may affect website functionality or prevent account usage.
REFLECT: See the dedicated Cookie Policy for full details on types, providers, individual lifespans, and management instructions.
Data Security
OBSERVE: The protection of user data is central to highflyercasino's operational and legal obligations.
- Technical Measures:
- SSL/TLS encryption secures all data transferred between user devices and highflyer.casino servers.
- Personal and financial data is stored using advanced encryption algorithms; access strictly limited by role-based permissions.
- Network firewalls and intrusion detection systems are deployed to monitor for and block unauthorized access attempts.
- Organizational Measures:
- Mandatory staff data protection training and confidentiality agreements.
- Regular data protection audits and vulnerability assessments performed by independent third parties.
- Incident response protocols and breach notification procedures compliant with CA law.
EXPAND: Security controls and policies are reviewed annually or immediately following changes in regulatory environment. User data is never sent over unencrypted channels.
REFLECT: All incidents impacting the security of user data are fully documented, and affected users are notified within the legislated timeframe in CA.
Complaints & Contacts
OBSERVE: highflyercasino provides several channels for privacy-related complaints and data requests for users in CA and all regions of operation.
- Data Protection Officer/Department: Email: [email protected] (preferred); attention: Data Protection Department
- Toll-Free Support: 1-888-230-7208 (Canada, 12pm-12am daily)
- Live Chat: https://highflyer.casino (24/7)
- All inquiries and complaints will be reviewed by the Data Protection Department. Users should provide sufficient information to enable proper identification and investigation.
- highflyercasino will acknowledge receipt of complaints within 5 business days and issue a substantive response within 30 days, unless extensions are justified by legal or regulatory circumstances.
- Unresolved concerns may be escalated to the Office of the Privacy Commissioner of Canada or applicable provincial authority.
REFLECT: Users are encouraged to contact highflyercasino directly to resolve privacy issues as quickly as possible.
Updates
OBSERVE: highflyercasino periodically reviews and updates its Privacy Policy to reflect changes in laws, regulatory guidance, or internal practices. The current version is always available at highflyer.casino.
- User Notification: Material changes to this policy will be announced via email (if available), platform notices upon next login, and posted on the main website page.
- Date of Last Revision: 1 January 2025
- Continued Use: Continued use of highflyercasino services following updates constitutes acceptance of the new terms.
REFLECT: Users are encouraged to review the Privacy Policy regularly. Questions regarding changes may be directed to the Data Protection Department at any time.