Privacy Policy

Version: 1.0  |  Last Updated: October 29, 2026

1. Introduction

Welcome to Best Online Casinos Canada, accessible at tapascanmore.ca (the "Site," "we," "us," or "our"). We are committed to protecting the privacy and personal information of every visitor and registered user. This Privacy Policy explains what personal data we collect, how we use it, the legal bases on which we rely, with whom we may share it, and the rights available to you.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. This document should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall framework governing your use of the Site.

If you do not agree with any part of this Privacy Policy, please discontinue use of the Site immediately.

2. Data We Collect

We collect personal information in several ways, depending on how you interact with the Site. The categories below outline what we may collect and from which source.

2.1. Information You Provide Directly

When you register an account, subscribe to our newsletter, submit a contact form, or participate in any interactive feature of the Site, you may provide us with:

• Identity data: full name, username, or display name.
• Contact data: email address, mailing address, and telephone number.
• Account credentials: password (stored in hashed format) and security questions.
• Age verification data: date of birth or government-issued ID details, as required to confirm you are at least 18 years of age.
• Correspondence data: the content of messages you send us, including support tickets and feedback submissions.
• Payment-related data: where applicable, information about your preferred payment method (e.g., Interac e-Transfer, Visa, Mastercard, PayPal, Neteller, Paysafecard, InstaDebit, iDebit, MuchBetter, Neosurf, Bitcoin, or bank transfer). We do not store full card numbers or banking credentials directly; such details are handled by PCI-DSS-compliant payment processors.

2.2. Information Collected Automatically

When you visit the Site, certain technical data is collected automatically through cookies, log files, and similar tracking technologies:

• Device data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage data: pages visited, time spent on each page, links clicked, search terms entered on the Site, and referring URLs.
• Location data: approximate geographic location derived from your IP address (country and province level only).
• Session data: session tokens, timestamps, and interaction logs used to maintain a secure browsing session.

2.3. Information from Third Parties

We may receive personal data about you from third-party sources, including:

• Analytics providers that aggregate traffic and behaviour data.
• Advertising networks that share click and conversion data when you arrive at our Site via a paid campaign.
• Social media platforms if you use a social login feature or share our content.
• Identity verification services used to confirm age or residency.

All third-party data is received and processed in accordance with this Privacy Policy and applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.

3. How We Use Your Data

We use your personal information only for specific, clearly defined purposes and to the extent necessary to fulfil each of those purposes. The main purposes are described below.

3.1. Service Delivery and Account Management

We use identity, contact, and account credential data to create and manage your user account, verify your age and eligibility, process any transactions associated with the Site, and provide you with access to the features and content available to registered users.

3.2. Communication and Support

We use your contact data to respond to enquiries submitted via email or the Site's contact form, send transactional notifications (such as account confirmations and password-reset emails), and deliver service-related announcements that are necessary for the ongoing operation of your account.

3.3. Marketing and Promotional Activities

With your explicit consent, we may send you newsletters, bonus offers, and promotional information about online casinos featured on the Site. You may withdraw consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.

3.4. Site Improvement and Analytics

Usage data and device data help us understand how visitors interact with the Site, identify technical issues, test new features, and improve overall user experience. Analytics are carried out in aggregated or pseudonymised form wherever practicable.

3.5. Legal Obligations and Compliance

We may process and retain your personal data to comply with applicable Canadian laws, respond to lawful requests from government authorities, enforce our Terms & Conditions, and protect the legal rights and safety of the Site, its users, and third parties.

3.6. Responsible Gaming Monitoring

In line with our Responsible Gaming Policy, certain usage patterns may be reviewed to identify indicators of problematic behaviour. This processing is carried out in the interest of user welfare and public health, and is subject to appropriate safeguards.

4. Legal Bases for Processing

We process your personal data only where a valid legal basis exists under applicable privacy law. The following bases apply to our processing activities:

Where we rely on legitimate interests, we have carried out a balancing test to confirm that those interests are not overridden by your rights and freedoms. You may request information about any such balancing test by contacting us at [email protected].

5. Data Sharing & Third Parties

We do not sell your personal information to third parties. We may, however, share your data in limited circumstances as described in this section.

5.1. Service Providers and Data Processors

We engage trusted third-party companies to help us operate the Site and deliver services on our behalf. These include hosting and cloud infrastructure providers, email distribution platforms, payment processors, analytics services, and identity verification partners. Each service provider is bound by a data processing agreement requiring them to handle your data only on our documented instructions and to maintain appropriate security standards.

5.2. Advertising and Affiliate Partners

The Site operates within the iGaming affiliate marketing industry. As such, we may share limited technical data (such as click identifiers and anonymised user segments) with online casino operators and advertising networks for the purpose of tracking referrals and measuring campaign performance. Such sharing does not include your full name, email address, or any sensitive personal data unless you have given specific consent.

5.3. Legal Disclosure

We may disclose your personal information to law enforcement agencies, regulatory bodies, courts, or other public authorities when required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of the Site, its users, or the public.

5.4. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. We will provide reasonable notice before your data becomes subject to a materially different privacy policy.

5.5. No Sale of Personal Data

We affirm that we do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. All data sharing is limited to what is necessary for the purposes set out in this Privacy Policy.

6. Cookies & Tracking Technologies

The Site uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) to enhance your browsing experience, remember your preferences, and collect analytics data.

6.1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Site to function correctly, including session management and security features. These cannot be disabled without affecting core functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and whether you have acknowledged our cookie banner.
• Analytics Cookies: Placed by services such as Google Analytics to collect aggregated data about traffic patterns, page views, and user behaviour, enabling us to improve the Site.
• Advertising and Tracking Cookies: Used by our affiliate and advertising partners to attribute visits and conversions. These may track your activity across other websites.

6.2. Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through the cookie consent banner displayed on your first visit to the Site, or via your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain categories of cookies may affect the functionality and personalisation features of the Site.

For more information about controlling cookies in your browser, visit your browser's official help documentation. To opt out of Google Analytics tracking specifically, you may install the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

7. Data Security

We take the protection of your personal information seriously and implement a range of technical and organisational security measures designed to prevent unauthorised access, disclosure, alteration, or destruction of your data.

7.1. Technical Measures

• Transport Layer Security (TLS): All data transmitted between your browser and the Site is encrypted using industry-standard TLS protocols.
• Password hashing: Account passwords are stored using strong cryptographic hashing algorithms and are never held in plain text.
• Access controls: Access to personal data is restricted on a need-to-know basis, with role-based permissions enforced for all personnel and systems.
• Regular vulnerability assessments: We conduct periodic security reviews and patch management processes to address identified vulnerabilities promptly.

7.2. Organisational Measures

All personnel who handle personal data are subject to confidentiality obligations and receive regular privacy awareness training. We maintain internal policies and procedures for incident response, including a data breach notification protocol that complies with applicable Canadian requirements. In the event of a breach that poses a real risk of significant harm to individuals, we will notify the relevant supervisory authority and affected users without undue delay.

Despite our best efforts, no method of data transmission or electronic storage is entirely secure. We encourage you to use a strong, unique password for your account and to notify us immediately at [email protected] if you suspect any unauthorised access to your account.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

8.1. Retention Periods

• Account data: Retained for the duration of your account and for a reasonable period thereafter to handle any post-closure enquiries, disputes, or legal claims.
• Transaction and payment records: Retained for a minimum of seven (7) years to comply with applicable financial recordkeeping requirements under Canadian law.
• Marketing consent records: Retained for the period during which consent is active, plus a reasonable period after withdrawal to demonstrate compliance.
• Technical and log data: Typically retained for up to twelve (12) months, after which it is deleted or anonymised.
• Support correspondence: Retained for up to three (3) years from the date of last contact, unless a longer period is required by law or for the defence of legal claims.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures, so that it can no longer be associated with any identifiable individual.

9. Your Rights

As a resident of Canada, you have a number of rights with respect to your personal information under applicable privacy legislation, including PIPEDA and relevant provincial laws. We are committed to honouring those rights promptly and without undue barriers.

9.1. Right of Access

You have the right to request confirmation of whether we hold personal data about you and, if so, to receive a copy of that data together with information about how it is used, with whom it is shared, and how long it is retained. We will respond to access requests within thirty (30) days, or advise you if an extension is required.

9.2. Right to Correction

If any of the personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. Where we cannot make the requested correction, we will note your challenge alongside the record. You may update basic account information directly through your account settings, or by contacting us at [email protected].

9.3. Right to Withdraw Consent

Where we process your personal data on the basis of consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal. You can unsubscribe from marketing emails using the link provided in each message, or by writing to us at [email protected].

9.4. Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you object to processing based on legitimate interests and that interest does not override your rights. We will assess each erasure request individually. Where deletion is not possible — for example, because of a legal retention obligation — we will inform you of the reason.

9.5. Right to Object and Restrict Processing

You may object to the processing of your personal data for direct marketing purposes at any time, with no requirement to provide justification. You may also request restriction of processing in circumstances where you contest the accuracy of the data, where processing is unlawful but you prefer restriction to erasure, or where we no longer need the data but you require it for legal claims.

9.6. Right to Data Portability

Where technically feasible and where processing is carried out by automated means on the basis of consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit that data directly to another controller where this is technically possible.

9.7. Right to Lodge a Complaint

If you believe we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca. We nonetheless encourage you to contact us first so that we can attempt to resolve your concern directly and promptly.

9.8. How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to [email protected]. Please include sufficient information to allow us to verify your identity before processing your request. We will not charge a fee for legitimate requests unless they are manifestly unfounded or excessive, in which case we will inform you in advance.

10. International Data Transfers

The Site's infrastructure and some of our third-party service providers are located outside of Canada. As a result, your personal data may be transferred to, stored in, or processed in countries other than Canada, including the United States and countries within the European Economic Area (EEA).

When your personal data is transferred outside Canada, we take steps to ensure that an adequate level of protection is maintained. These steps may include:

• Transferring data to countries that have been recognised by the Government of Canada as providing an adequate level of protection comparable to PIPEDA;
• Entering into data processing agreements that incorporate model contractual clauses or equivalent safeguards;
• Relying on binding corporate rules or other approved transfer mechanisms where applicable.

You acknowledge that your information may be subject to the laws of the jurisdiction where it is stored or processed, including lawful requirements by foreign governments, courts, law enforcement, or regulatory agencies to disclose personal data. Where such transfers occur, we will apply the safeguards described above to protect your information to the greatest extent possible under those laws.

For further information about the specific safeguards applied to international transfers, please contact us at [email protected].

11. Minors

The Site is intended exclusively for individuals who are at least 18 years of age, which is the applicable minimum legal age for online gambling in Canada. We do not knowingly collect personal information from individuals under the age of 18.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data from our records. If you are a parent or guardian and believe that a person under 18 has provided us with personal information without your consent, please contact us promptly at [email protected] so we can investigate and take corrective action.

For tools and resources to help prevent underage gambling, please refer to our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered on the Site. Any changes will be effective immediately upon publication of the revised Privacy Policy at tapascanmore.ca/privacy-policy.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — we will provide additional notice, such as a prominent announcement on the Site or a notification email to registered users. The "Last Updated" date at the top of this document will always indicate when the most recent revision was made.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Site after the publication of any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please do not hesitate to contact us using the details below.

We aim to acknowledge all privacy-related correspondence within five (5) business days and to provide a substantive response within thirty (30) days. Where a request is complex or we have received a high volume of requests, we may extend this period by an additional thirty (30) days, and we will notify you accordingly.

13.1. Responsible Gaming Support Resources

If you or someone you know is experiencing difficulties related to gambling, the following Canadian organisations provide free, confidential support:

• Responsible Gambling Council (RGC): 1-416-499-9800 — responsiblegambling.org
• Centre for Addiction and Mental Health (CAMH): 1-800-463-2338 — camh.ca
• Gamblers Anonymous Canada: 1-909-931-9056 — gamblersanonymous.org
• GamTalk (online peer support): gamtalk.org
• Canadian Centre on Substance Use and Addiction (CCSA): ccsa.ca
• ConnexOntario (Ontario residents): 1-866-531-2600, available 24/7 — connexontario.ca

For a comprehensive list of responsible gaming tools, including deposit limits, session reminders, and self-exclusion options, please visit our dedicated Responsible Gaming page.