Personal information is collected to provide and support the online services, meet legal duties, and keep users safe.

Information collected

• Identity and contact details: name, date of birth, address, email, telephone number.
• Account details: username, preferences, responsible gambling settings, verification status.
• Verification data: ID documents, proof of address, and biometric images where required by law and consented to.
• Payment and transaction data: payment method identifiers, limited card references (such as tokens), deposits, withdrawals, wagers, outcomes, balances.
• Device and technical data: IP address, browser, operating system, device identifiers, language, time zone, security logs.
• Geolocation data where permitted and needed for compliance.
• Communications: chat, email, and support records.
• Risk and compliance data: sanctions and watchlist screening results, fraud flags.

Why this information is collected

• To operate accounts and deliver requested services.
• To verify identity, confirm age, and meet anti-money laundering requirements.
• To process payments and handle withdrawals.
• To prevent fraud, ensure security, and manage platform integrity.
• To comply with applicable laws and regulatory obligations.
• To provide support and resolve disputes.

Protection measures

• Encryption in transit and at rest, secure key management, and TLS for websites.
• Role-based access controls, multi-factor authentication, and least-privilege principles.
• Network segmentation, firewalls, and continuous monitoring.
• Vendor due diligence and data processing agreements.
• Staff training, confidentiality undertakings, and background checks where appropriate.
• Regular security testing and incident response procedures.
• Payment information handled by PCI DSS compliant processors.

User rights

• Access: request a copy of personal data held.
• Correction: ask to fix incomplete or inaccurate information.
• Deletion: request deletion where permitted by law and contractual obligations.
• Consent: withdraw consent for non-essential processing at any time.
• Complaint: contact the Office of the Privacy Commissioner of Canada or a provincial privacy regulator.

Compliance

• The platform manages personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws in Alberta, British Columbia, and Quebec (Law 25). It also applies controls aligned to recognized international standards for data protection where relevant.

Personal data is processed lawfully and transparently for defined purposes:

• Account setup, authentication, and user support.
• Payment processing, withdrawals, and transaction reconciliation.
• Identity verification, age checks, anti-fraud, and anti-money laundering compliance under Canadian law.
• Service delivery for online casino and sportsbook features.
• Responsible gambling tools and monitoring where required.
• Service improvement, quality assurance, and troubleshooting.
• Analytics and statistics to understand performance and user needs.
• Communications about account activity and policy updates.
• Marketing based on consent, with options to opt out at any time.

Processing is based on consent, performance of requested services, legal obligations, or legitimate interests balanced against user privacy.

Users can manage information and exercise rights as follows:

• Access and update: review or edit profile and account settings once signed in.
• Formal requests: email the Privacy Officer at [email protected] to request access, correction, or deletion. Identity verification may be required to protect accounts.
• Timelines: requests are acknowledged and answered within 30 days where feasible. Complex requests may take longer; reasons and timing will be provided.
• Limits: certain information must be kept for legal and regulatory reasons, including anti-money laundering and gaming record-keeping requirements.

By using 1Red, the user consents to security checks for verification and to the processing of payment information by payment service providers for transactions and fraud prevention.

The services are for adults aged 18 or older, or the higher age required by the user’s province or territory. The operator cannot confirm age without identification documents, which may be requested to comply with law. If personal information about a minor is discovered, it will be deleted upon verified request from a parent or legal guardian. Accounts believed to be used by minors will be closed and related information handled according to legal obligations.

Personal information may be stored or processed outside Canada where service providers, affiliates, or partners operate, including the EEA, the United Kingdom, and the United States. Using the site constitutes consent to these international data transfers. Contractual and technical safeguards are applied, such as data processing agreements, Standard Contractual Clauses, transfer risk assessments, and access controls. All partners handling personal data are required to maintain confidentiality and protect information to standards comparable to those described in this policy.

This policy guides how personal information is collected, used, and protected. Where a disclaimer is included, it narrows or clarifies the scope or effect of certain rules to the extent permitted by law. Acceptance can be indicated by signature, click-acceptance, or accession through use of the services. Nothing in this policy limits rights provided by applicable law or lawful obligations to retain or disclose information.

Cookies are small files placed on a device to store or retrieve information when a user visits websites. The service uses cookies and similar tools for:

• Statistics and analytics to measure site performance.
• Behaviour analysis to improve navigation and fix issues.
• Personalization such as remembering preferences and language.
• Security and fraud prevention.

Cookie retention: up to 1 year unless a shorter period is set for a specific cookie. Users can manage or disable cookies through browser settings and any in-site cookie controls. Disabling some cookies may affect functionality that is necessary for the services.

Use of the services signifies full acceptance of this Privacy Policy. If the policy is updated, the current version on the site applies and prevails over prior versions. Continued use after an update indicates agreement to the revised terms. If a user does not agree, the services should not be used. This applies to 1Red users across Canada, subject to local legal requirements.

Personal data may be shared in limited situations:

• Legal and regulatory: requests from regulators, law enforcement, or to comply with court orders and reporting duties.
• Disputes and enforcement: to establish, exercise, or defend legal claims and to enforce agreements.
• Service delivery: payment processors, banks, identity verification and sanctions-screening providers, game studios, hosting and cloud services, analytics, customer support, and anti-fraud services.

The site lists key third parties where feasible, or users will be informed of the purpose and scope before sharing when required by law. Providing data for a specific service is treated as consent to share it with the relevant provider for that purpose, subject to contractual confidentiality and security obligations.

The site may contain links to external websites that operate under their own privacy policies. The operator is not responsible for how those websites collect, use, or disclose information. Users should review the privacy practices of any external site visited and exercise caution before sharing personal data.