Privacy Policy

1. Identity of the Data Controller and Corporate Accountability

The entity responsible for the processing of personal information collected through yourcanadiancasinoguide.com is Bazeli Trading Ltd, a corporate entity registered in the Republic of Cyprus under Registration No. HE 449218 with its registered office at Archiepiskopou Makariou III, 84, Office 1, Larnaca 6017, Cyprus. Under Principle 1 (Accountability) of Schedule 1 of PIPEDA and Section 3.1 of Quebec Law 25, Bazeli Trading Ltd has designated a dedicated Privacy & Data Protection Officer ("DPO") who oversees ongoing compliance with Canadian federal and provincial privacy statutes.

2. Territorial & Regulatory Scope (PIPEDA, Law 25, BC/AB PIPA)

This Privacy Policy applies to all visitors, readers, and users accessing yourcanadiancasinoguide.com from any Canadian province or territory, as well as international visitors. Where provincial privacy legislation in Quebec (Law 25), British Columbia (PIPA), or Alberta (PIPA) has been deemed substantially similar to federal PIPEDA—or imposes stricter consent, privacy impact assessment, or breach notification obligations—Bazeli Trading Ltd applies the higher standard of protection to residents of those jurisdictions.

3. Categories of Personal Information Collected

Because yourcanadiancasinoguide.com is an informational comparison portal and does not offer real-money gambling accounts or process financial transactions, we practice strict data minimization. We collect only the following limited categories of data:

• Voluntarily Sent Email Inquiries (No Server-Side Database Storage of Forms): Our on-site inquiry composers format a mailto: message directly inside your own email client addressed to [email protected]. We do not store form inputs in a web server database; we only receive your name, email address, selected province, and message text if and when you choose to send that email from your mail client.
• Technical & Connection Metadata: When your browser requests a page from our web server, our infrastructure automatically logs standard HTTP request metadata (truncated IP address, browser user-agent string, referring URL, and request timestamp) strictly for security and error diagnostics.
• Provincial Compliance & Consent Flags: We record three non-identifying first-party localStorage flags inside your browser indicating whether you have confirmed meeting your province's statutory gambling age (18+ or 19+), your selected province (defaulting to ON), and your cookie preference mode.

4. Purposes of Processing & Identifying Purposes (PIPEDA Principle 2)

In accordance with Principle 2 of PIPEDA, Bazeli Trading Ltd identifies the specific purposes for which personal information is processed:

1. Age & Jurisdictional Compliance Filtering: To ensure visitors meet the minimum legal gambling age in their province (19+ in ON, BC, SK, Atlantic, Territories; 18+ in AB, MB, QC) and to enforce Ontario AGCO Standard 2.05 inducement restrictions.
2. Responding to Reader & Regulatory Emails: To answer reader questions, provide requested operator audit verification details, and investigate reports of operator payout delays or term changes.
3. Network Security & Abuse Prevention: To detect automated bot traffic, distributed denial-of-service (DDoS) attacks, and unauthorized attempts to compromise Website integrity.
4. Google Ads & Consent Mode Governance: Should Google Ads conversion measurement tags be deployed on landing pages in the future, they will operate strictly under Google Consent Mode v2 and will remain disabled by default unless a user explicitly grants consent via our Cookie Banner.

5. Lawful Basis & Meaningful Consent Standards (PIPEDA Principle 3 & Law 25)

Under PIPEDA, the Guidelines for Obtaining Meaningful Consent issued by the Office of the Privacy Commissioner of Canada (OPC), and Section 14 of Quebec Law 25, we obtain explicit, informed, and granular consent before processing personal correspondence or setting any optional storage. You may withdraw your consent at any time by clicking the "Manage Cookie Preferences" link in our footer or by emailing [email protected].

6. Provincial Regime Selection (Client-Side Storage)

To comply with Canadian provincial gambling regulations—specifically the requirement to enforce Ontario's regulated iGaming market rules (AGCO / iGaming Ontario Standard 2.05)—our platform relies on our default Ontario compliance view and your explicit provincial selection in our Age & Jurisdiction modal. We never collect GPS coordinates, street addresses, or device hardware serial numbers.

7. Outbound Affiliate Links & Third-Party Operator Redirection

yourcanadiancasinoguide.com contains outbound hypertext links to provincially licensed online gaming operators. When you click an outbound referral link to a commercial Ontario operator, the URL appends a static attribution parameter (?utm_source=yourcanadiancasinoguide.com&utm_medium=affiliate&utm_campaign=on_audit_2026). This parameter contains zero personal information (no name, email, or IP address is embedded in the URL) and is used solely by the receiving operator to recognize that an anonymous visit originated from our publication.

Once you leave yourcanadiancasinoguide.com and land on a licensed operator's domain, any personal, financial, or FINTRAC Know Your Customer (KYC) documentation you subsequently provide to that operator is governed exclusively by that operator's own privacy policy and AGCO / provincial regulatory licence.

8. Cookies, LocalStorage & Browser Tracking Technologies

We utilize strictly first-party browser localStorage keys (specifically yccg_age_verified_v2, yccg_cookie_prefs_v2, and yccg_selected_province_v2) to remember your statutory age confirmation and cookie consent status so you are not repeatedly interrupted on every page load. Our script automatically honours browser Global Privacy Control (GPC) and Do Not Track (DNT) signals. For a complete technical inventory, please consult our separate Cookie Policy.

9. Data Sharing, Sub-Processors & Third-Party Disclosures

Bazeli Trading Ltd never sells, rents, auctions, or trades your email address or personal data to third-party marketing brokers, casino spam lists, or data aggregators. Personal correspondence may only be accessed by:

• Authorized compliance and editorial personnel of Bazeli Trading Ltd bound by strict non-disclosure agreements;
• ISO 27001-certified cloud infrastructure and email hosting sub-processors necessary to deliver our website and respond to your direct support emails;
• Competent Canadian or Cypriot judicial, regulatory, or law enforcement authorities when compelled by a valid court order or statutory subpoena.

10. Cross-Border Data Transfers (Canada, European Union & Cyprus)

Because our corporate publisher, Bazeli Trading Ltd (HE 449218), is headquartered in Larnaca, Cyprus (a Member State of the European Union), email inquiries sent to our compliance desk may be received and processed within Cyprus and the European Economic Area (EEA). In accordance with Quebec Law 25 (Section 17) and PIPEDA cross-border processing guidelines, we rely on the European Commission's adequacy framework between the EU and Canada, alongside Standard Contractual Clauses (SCCs) and TLS 1.3 encryption in transit.

11. Data Retention Schedules & Secure Destruction

In compliance with Principle 5 (Limiting Use, Disclosure, and Retention) of PIPEDA, we retain personal data strictly for the minimum period required to fulfill its stated purpose:

• Reader Contact & Audit Request Emails: Retained for a maximum of 12 months following final resolution of the inquiry, then permanently purged from active and backup mail servers.
• Web Server Security & Access Logs: Rotated and cryptographically overwritten every 90 days.
• Browser LocalStorage Compliance Keys: Stored locally in your own web browser until you clear your browser storage.

12. Information Security & Cryptographic Safeguards (PIPEDA Principle 7)

Bazeli Trading Ltd implements multi-layered administrative, technical, and physical safeguards appropriate to the sensitivity of the information processed. These measures include mandatory HTTPS / TLS 1.3 cryptographic transport encryption across all pages of yourcanadiancasinoguide.com, strict Content Security Policy (CSP) headers, role-based access control with hardware multi-factor authentication (MFA), and routine vulnerability audits.

13. Your Statutory Privacy Rights in Canada & the EEA

Regardless of which Canadian province you reside in, you hold enforceable statutory rights regarding your personal information:

• Right of Access & Portability: To request confirmation of whether we hold personal correspondence from you and to receive a structured copy within 30 calendar days.
• Right of Rectification: To demand correction of any inaccurate, incomplete, or equivocal personal data.
• Right to Erasure & De-Indexation (Law 25 / GDPR): To request permanent deletion of your email correspondence from our records.
• Right to Withdraw Consent: To revoke previously granted consent at any time without penalty.
• Right to Lodge a Regulatory Complaint: If you are dissatisfied with our handling of a privacy request, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca, the Commission d'accès à l'information du Québec (CAI), the OIPC of British Columbia or Alberta, or the Office of the Commissioner for Personal Data Protection in Cyprus.

14. Protection of Minors & Statutory Age Restrictions (18+ / 19+)

yourcanadiancasinoguide.com is strictly prohibited to individuals under the statutory legal gambling age in their respective jurisdiction (19+ in Ontario, British Columbia, New Brunswick, Newfoundland and Labrador, Nova Scotia, Prince Edward Island, Saskatchewan, and the Territories; 18+ in Alberta, Manitoba, and Quebec). We do not knowingly collect, solicit, or store personal data from minors. If we discover that a minor has sent correspondence to our email desk, that record is purged immediately upon detection.

15. Data Breach Notification Protocol (PIPEDA Mandatory Reporting)

In accordance with Division 1.1 of PIPEDA (Breaches of Security Safeguards) and Quebec Law 25, Bazeli Trading Ltd maintains an incident response register for all security events. Should a security breach ever occur that presents a "real risk of significant harm" (RROSH) to any individual, we will notify affected individuals directly and report the incident to the Office of the Privacy Commissioner of Canada and relevant provincial commissioners as soon as feasible (and within 72 hours under applicable EU/Quebec standards).

16. Policy Amendments & Direct Privacy Officer Contact

We review and update this Privacy Policy at least once every twelve months or whenever Canadian federal or provincial privacy legislation changes. The revision date at the top of this page reflects the latest active version. For any privacy inquiries, access requests, or data erasure dispatches, please contact our Data Protection Officer at: