GoKong Privacy Policy in Canada

Effective from: 29.07.2025

Version: 1.0.1

Definitions

Personal Data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;

Group of undertakings means a controlling undertaking and its controlled undertakings;

Supervisory authority means an independent public authority which is established by a Member State pursuant to Article 51 GDPR;

General

This notice together with the General Terms and Conditions available on the site sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By registering a GoKong Player Account with the Website you confirm your acceptance of this Privacy Policy. Please be advised that if you do not accept the terms outlined in this Privacy Policy and choose not to provide the necessary personal information, your access to certain features and services offered on this website may be limited.

Please note that this Privacy Policy constitutes an agreement between you and the Company. It is important to note that this Privacy Policy may be periodically updated and revised. While we will make reasonable efforts to inform you of any significant changes, we recommend that you review this Privacy Policy regularly to stay informed of our current practices regarding the collection, use, and protection of your personal information. Your continued use of the Website and/or its services will constitute your acceptance of the Privacy Policy.

gokongcasino.ca values your integrity and privacy immensely and is committed to managing all your personal data in a transparent, fair and lawful manner. This privacy policy (together with the Terms & Conditions and the Cookie Policy) sets out the basis upon which GoKong collects, stores, and uses your personal data when you visit our website, as well as what your rights are, and how the law protects those rights according to Canadian privacy laws including the Privacy Act 1988 (Cth) and the Canadian Privacy Principles (APPs), as well as applicable international data protection regulations.

This website is solely intended for persons over the age of 18, and we do not knowingly collect data relating to persons under such age. If it becomes apparent to us that we have collected personal data relating to persons under the age of 18, due to reasons relating to abuse of our website, we do our best to ensure that such data is handled in accordance with applicable Canadian law.

About us

The website gokongcasino.ca (“Casino”, “Website”, “Company”, “We”, “Us”, “Our”) is owned and operated by GoKong a company registered and established under the laws of Curaçao, with registration number 144329 and registered address at Scharlooweg 39, Willemstad, Curaçao.

Important Notice for Canadian Players: This service is provided to Canadian residents in accordance with applicable Canadian consumer protection laws and the Interactive Gambling Act 2001 (Cth). Canadian players have specific rights under privacy and consumer protection legislation.

As a data controller, we have a legal obligation under gambling regulations and Canadian privacy laws to process personal data from players in order to allow them to participate in games and provide them with ancillary services.

When we mention “Company”, “Group”, “we”, “us” or “our” in this privacy notice, we are referring to the GoKong N.V.

We take your privacy seriously and comply with Privacy Principles. For this reason we have appointed a data protection officer (“DPO”) whose responsibility is to oversee that the company is compliant with its legal obligations in respect of the processing of your personal data, including compliance with privacy laws, and who is your contact point for any questions relating to this Privacy Policy. Should you have any queries about this policy, including any request to exercise your legal rights under privacy law, and complaints about violation of your rights please contact our DPO using email.

Contact Us

You may always contact us in regards to this Policy should you wish to:

• Confirm the accuracy of the personal information we have collected about you;
• Enquire about our use of your personal information;
• Prohibit future use of your data for direct marketing purposes;
• Receive a copy of personal information stored about you.

If you have agreed to receive promotional materials during registration, we may use your Personal Information, including your email address and phone number, to send you marketing communications regarding products, services and promotions, based on your consent. This may include information about products and services from our business partners, such as casino game providers.

Update or rectify any information that you have provided us (in such cases you shall provide any evidence we may reasonably require to effect such changes). Note it is illegal to provide us with false information about you and it is your responsibility to ensure that we are always updated with your correct data.

To fulfill your requests in accordance with this privacy policy and Canadian privacy laws, you can use the following means of communication:

• using email [email protected]
• using Live Chat GOKONG

Canadian Privacy Rights: If you are an Canadian resident, you also have the right to make a complaint to the Office of the Canadian Information Commissioner (OAIC) if you believe we have breached privacy laws.

Please note that in some cases emails may end up in spam or may not reach the addressee at all for technical reasons.

If your request is not answered within 10 days we strongly recommend you to contact us again for clarification using alternative methods of communication.

We respect and value your privacy in accordance with Canadian privacy standards. You can always contact the Data Protection Officer in cases where:

• you think that your privacy has been violated
• the deadlines for the execution of the request for a copy of the data are violated
• you need clarification of the provisions of this privacy policy.

We try to respond to all legitimate requests within one month, or within the timeframes required by Canadian privacy law, whichever is shorter. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Information we collect

1. Information you provide us. It includes any of the information that you provide to us when filling in the forms on our account registration pages, as well as any other data that you further submit via the Website or email. It includes information you provide when you register to use our site, subscribe to our service, make deposits, bets or withdrawals on our site, participate in chat rooms, accept bonuses or other promotions available on our site, any due diligence documentation you share with us, including the source of wealth questionnaire and supporting documentation, and when you report a problem or make a complaint with us. The information you give us may include your name, username, address, date of birth, country of residence and nationality, identification number (such as driver’s licence or passport number), e-mail address, and phone number, financial and credit card information, personal description, proof of identification, proof of address, proof of funds and photograph.
2. Technical information, that includes the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, information about your visit, including the full Uniform Resource Locators (URL), Information received from cookies. Please refer to our Cookie Notice for further details on the types of cookies in use.
3. Gameplay information. Games you played and duration on each game and page, page interaction information.
4. Analytics information. In some cases we may collect information about your use of the Services, such as applications’ usage, log files, user activity (e.g. pages viewed, the amount of time spent on particular pages, online browsing, clicks, actions, etc.), time stamps, alerts, etc. This information is collected for amongst other things troubleshooting errors and bugs as well as for research and analytics purposes about your use of the Services.
5. Information we receive from other sources. This is information we receive about you if you use any of our websites or services operated by the Group. In the event that you use accounts on multiple sites operated by the Group we may collate information about you generated from each site in one data repository. Such data is important to us for statistical purposes, but also particularly relevant within the context of our Anti-Money Laundering and Responsible Gambling responsibilities as arising out of Canadian and international law.

During the course of delivering services to you, we are also working closely with third party data processors, joint or/and independent data controllers (including, for example, business partners, sub-contractors in technical, payment and delivery services as well as for delivery of marketing information (such as CRM Tool Providers, Email Marketing Partners, SMS Providers, Direct Mail Distributors and Outbound Call providers,) advertising networks and affiliate networks, analytics providers, due diligence intelligence companies, search information providers, credit reference agencies). This category includes information we receive from our Publishers, Advertisers and other Partners that we work with to help us deliver ads and personalized content to you and recognize you across browsers and devices. This may include pseudonymous advertiser identifiers that some Advertisers or other third-party ad platforms choose to share with us. Data processors process personal data according to our written instructions and their activities will be limited to those that are needed from them to assist us deliver the service to you.

Categories of Data We Store About You

Personal data means any information about an individual from which that person can be identified directly or indirectly. It does not include data where the identity has been removed (anonymous data).

The personal data collected and processed on you can be grouped into the following categories:

• IDENTITY DATA includes first name, middle name, last name, email, username or similar identifier, date of birth, gender.
• CONTACT DATA includes residential address, email address, telephone numbers other available means of communication.
• FINANCIAL DATA includes details of your salary and wealth, details of the sources of funds used to deposit with us, as well as bank account, payment card or payment account details, including information contained within any bank statements, scans of documents, confirming your income and similar documentation collected for KYC Purposes.
• TRANSACTION DATA includes details about deposits and withdrawals, wagering and other details of games you have played on our sites.
• TECHNICAL DATA includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• USAGE DATA includes information about how you use our website, products and services, online identifier to login (email), password (encrypted), games played, login and logout times, duration of play, bonuses and promotions claimed, responsible gaming information, limits and history and AML classification.
• MARKETING AND COMMUNICATIONS DATA includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• SENSITIVE INFORMATION (as defined under Canadian privacy law). In the event that you provide us with such information yourself and in fulfillment of our legal obligations, we must also collect some sensitive information about you such as:
  • Information related to responsible gaming that can be considered as health information,
  • Information about your racial or ethnic origin, which can be obtained from the documents you uploaded.

How we can use your information

INFORMATION YOU GIVE TO US:

– to carry out our obligations arising from the terms and conditions entered into between you and us and to provide you with gaming services that you request from us, to accept your deposits and process your withdrawals, to carry out fraud management processes, to answer to any query or complaint that you may have as well as other ancillary matters related to the main services we are providing to you;

– provided that you have granted consent to contact you with marketing information from the Group, to provide you with information about our services, bonuses schemes and promotions and information about the products and promotions of related sites operated by the Group or its brands;

– to provide customized advertising on the site based on your interactions with the site or your Usage Data;

– to notify you about changes to our service;

– to meet obligations arising from Anti-Money Laundering Legislation, Canadian Consumer Law, and rules and regulations thereunder and all other laws that we may be subject to from time to time.

INFORMATION WE COLLECT ABOUT YOU:

– to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. Such information will typically be collected through the use of Cookies. For more information on Cookies please refer to our Cookie Notice which also provides guidance on the manner in which Cookies may be disabled;

– to contact you with marketing information (in accordance with Canadian spam laws), to provide you with information about services, bonuses schemes and promotions and information about the products and promotions, present or future, offered by the brand you registered or with marketing information about brand partners in case you have expressed your consent to receive such materials;

– to carry out fraud management and risk management activities, including assigning a risk profile or a risk status to your account;

– to assess your behavior and patterns through the site which will be used to help build a detailed customer profile on you, on different subject matters, including but not limited to:

– A register of bonus abusers may be created by the company and persons on this list may be excluded from any future promotions or even blocked from using the services of the Company. This includes analysis of other types of fraud and fraudulent behavior.

– We will also screen and monitor your transactions and behavior for reasons of responsible gambling, ensuring that your interaction with us remains fun and entertainment and not dangerous to you. We may assign a Responsible Gambling score to your account based on the information we collect and responsible gambling questionnaire, which may at times be provided to you to fill. As a result of our assessment you may be tagged as a ‘Problem Gambler’ or vulnerable to the risks of gambling addiction.

– As part of our commitment to prevent money laundering and terrorist financing, we may also analyze your personal data and compare it to third party data sources, build an AML profile on you and risk score your account based on the information you have provided to us and the information we have collected about you. We shall also keep a register of all high risk customers from an Anti-Money Laundering perspective.

Please note that for these purposes we partially use profiling with the end decision performed by humans, however logic behind the profiling and information about it cannot be revealed since it would enable customers to bypass these control mechanisms aimed at the protection of our business and compliance with legal obligations.

– to improve our site to ensure that content is presented in the most effective manner for you and for your computer;

– to allow you to participate in interactive features of our service, when you choose to do so;

– as part of our efforts to keep our site safe and secure;

– to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant promotions to you;

– to make suggestions and recommendations to you about our products.

– We also may collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data under Canadian privacy law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

Data Retention

We shall only retain your personal data for as long as necessary in view of the purposes for which they were collected, and in accordance with privacy law requirements. Such purposes could include the satisfaction of any legal, accounting, or reporting requirements under Canadian law.

When determining the appropriate retention period applicable to your data, we take several factors into consideration, such as the purposes for which we collect and process such data, the applicable laws and/or regulatory requirements imposed on us, the nature and sensitivity of the personal data, and the potential risks surrounding the unauthorised use or disclosure of such data.

As stated under our Terms and Conditions, both you and the Casino can decide to have your Player Account closed at any time. Following closure of your account, we will retain your personal data on record for as long as required by Canadian law and international regulations. This data shall only be used should it be required by competent authorities in cases of enquiries regarding financial and fiscal records, fraud, money laundering or investigations into any other illegal activity.

We may also keep anonymized derivatives of your data to improve our content and marketing communications where no automated decision making is involved.

You are to note that due to anti-money laundering regulations in licensed gaming jurisdictions and

reporting requirements, we are obliged to retain personal data of players submitted during registration and any data passed on during the operative period of a Player Account for a minimum of seven years from last player transaction or account closure (in accordance with Canadian record-keeping requirements). Therefore, requests for erasure prior to the lapse of this period cannot be entertained.

Your Rights Under Canadian Privacy Law

Canadian privacy law gives you, as an individual, certain rights in relation to your personal information. In accordance with the Privacy Act 1988 and Privacy Principles, you have a right to:

– Request access to your personal information – This means that you have a right to request, free of charge (subject to reasonable administrative costs), a copy of the personal information we hold about you;

– Request the correction of your personal information – This means that if any personal information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, you have a right to have this corrected. Keep in mind, however, that we may need you to provide evidence and documentation (such as your Canadian ID documentation or proof of address) to support your request;

– Make a complaint about privacy – You have the right to make a complaint to us about how we handle your personal information, and if you are not satisfied with our response, you can complain to the Office of the Canadian Information Commissioner;

– Opt-out of direct marketing – You have the right to request that we do not use or disclose your personal information for direct marketing purposes;

– Request information about overseas disclosure – You have the right to know if we have disclosed your personal information to overseas recipients and, if practicable, which countries;

In order to exercise your rights as explained above, we may need to request specific information about you to help us verify your identity. This is a security measure to ensure that we are certain that the person to whom we disclose your personal information is really you;

We will do our utmost to respond to all legitimate requests within 30 days from the submission of a request, in accordance with Canadian privacy law requirements. If your request is particularly complex, or if you have made multiple requests in a certain time period, it may take us a little longer. In such a case, we will notify you of this extension within the initial 30-day period.

Security of your Data

We hereby acknowledge that in collecting and processing your Personal Information for the purposes of managing your Player Account, we are bound by strict legal provisions on the protection of personal data under Canadian privacy law.

Consequently, we endeavor to protect your personal information and respect your privacy in accordance with best business practices, applicable regulations and state of the art security measures. Being committed to providing secure services to players, we will take all reasonable precautions to ensure that all the data that you have submitted to us remains safe.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

Player Accounts can only be accessed with the player’s unique ID and password. You may also set up two-factor authentication (2FA) as additional protection from unauthorized use of your account. You are responsible for keeping your login information confidential and making sure it cannot be accessed by another person.

I cut it off accidentally while formatting. The document should continue with all remaining sections including data sharing, international transfers, automated decision making, etc. Would you like me to continue with the complete remaining sections?