By Sherry H. Stewart — Professor & Research Director, Mood, Anxiety, and Addiction Comorbidity (MAAC) Lab, Dalhousie University
Privacy policy pages sit in an odd place in the online casino world — legally required, containing genuinely important information, and almost nobody reads them. When you play at Izzi Casino, the platform holds your verified legal name, date of birth, home address, government ID details, payment method information, transaction history in Canadian dollars, and a detailed record of every game you’ve played and every bet you’ve placed. The privacy policy is the document that governs what Izzi Casino can do with all of it. Canada’s federal privacy framework — PIPEDA (Personal Information Protection and Electronic Documents Act) — sets the baseline rules. Quebec’s Law 25 adds additional requirements for players in that province. Together these frameworks give Canadian players real, enforceable rights over their personal information.
The data Izzi Casino collects from Canadian players
Information you provide directly during registration and verification includes your full legal name and date of birth, Canadian residential address, email address and phone number, government-issued ID details submitted during KYC, payment method information used for CAD deposits and withdrawals, and any communication sent through support channels. This data is collected because it is necessary for Izzi Casino to operate legally — identity verification is a regulatory requirement, and payment data is required to process transactions.
Beyond what you consciously provide, Izzi Casino also collects data produced by how you use the platform:
| Data type | What is captured |
|---|---|
| Device information | Browser version, operating system, device identifiers |
| IP address | Approximate location, ISP, VPN detection |
| Session behaviour | Login times, session duration, navigation patterns |
| Gaming history | Games played, bet amounts, win/loss records, bonus usage |
| Financial behaviour | Deposit frequency, withdrawal patterns, spending trends |
| Support interactions | Chat transcripts, email records, complaint history |
| Cookie data | Preferences, referral source, tracking identifiers |
Why Izzi Casino processes your personal data
Izzi Casino’s privacy policy identifies the lawful basis for each category of data processing — the PIPEDA-compatible requirement that every use of your data has a valid justification:
- Contractual necessity — processing deposits and withdrawals in CAD, managing your account, delivering games and services. Cannot be opted out of without ending use of the platform.
- Legal obligation — identity verification, age confirmation, anti-money-laundering record-keeping, and regulatory reporting. Mandated by licensing conditions and Canadian financial regulations. Player preference has no bearing on whether this processing occurs.
- Legitimate interests — fraud prevention, security monitoring, and platform optimization. Izzi Casino has a recognized interest in protecting its systems and other players from fraudulent activity.
- Consent — marketing communications, personalized promotions, and non-essential cookie tracking. Required under Canada’s Anti-Spam Legislation (CASL) and can be withdrawn at any time without affecting your ability to use the platform.
Who Izzi Casino shares your data with
| Recipient | Purpose | Opt-out available |
|---|---|---|
| Payment processors | Transaction processing in CAD | No — required for service |
| KYC / identity verification providers | Age and identity confirmation | No — regulatory requirement |
| Licensing and regulatory authorities | Compliance reporting | No — legal obligation |
| Fraud detection providers | Security and anti-fraud systems | No — legitimate interest |
| Marketing technology platforms | Promotional campaigns | Yes — via consent settings |
| Analytics providers | Platform performance analysis | Partially — via cookie settings |
| Responsible gambling monitoring services | Player protection obligations | No — licensing requirement |
Izzi Casino does not sell personal data to unaffiliated third parties for their independent commercial use. The sharing that occurs is either operationally necessary, legally required, or subject to consent controls you can manage through account settings and cookie preferences.
Your rights as a Canadian player under PIPEDA
Canadian privacy law gives you a defined set of enforceable rights over the personal data Izzi Casino holds about you:
- The right to know what personal data Izzi Casino holds about you and why
- The right to access a copy of your personal data
- The right to request correction of inaccurate or incomplete information
- The right to withdraw consent for marketing and non-essential processing
- The right to request deletion of data where no legal retention obligation applies
- The right to be notified of any data breach that poses a real risk of significant harm
- The right to complain to the Office of the Privacy Commissioner of Canada
Rights requests at Izzi Casino are submitted through the platform’s support channels or directly to the designated data protection contact. Izzi Casino is required under PIPEDA to respond within 30 days with a substantive response. If a request is declined, the legal basis for that decision must be explained. For Canadian players in Quebec, additional rights under Law 25 include the right to data portability and enhanced requirements around consent for automated decision-making processes that affect your account.
How long Izzi Casino keeps your data
| Data category | Retention period | Basis |
|---|---|---|
| Identity documents | 5 years post account closure | AML regulatory requirement |
| Transaction records | 5–7 years | Financial and legal compliance |
| Gaming activity logs | Account lifetime plus regulatory minimum | Licensing conditions |
| Marketing preferences | Until consent withdrawn | Consent-based processing |
| Support communications | 3 years post resolution | Dispute reference |
| Cookie and analytics data | Up to 13 months | Analytics standard |
After applicable retention periods expire, Izzi Casino is required to securely delete or irreversibly anonymize the data so that it can no longer be linked back to an identifiable individual.
Security measures protecting your data
Izzi Casino applies technical and organizational security measures consistent with the sensitivity of the data it holds. SSL/TLS encryption protects all data in transit between your device and Izzi Casino’s servers. Payment data is handled under PCI-DSS standards that keep raw financial information out of the casino’s direct systems through tokenization. Access to personal data within the organization is controlled on a need-to-know basis with role-based permissions. Security audits and penetration testing are conducted on a regular schedule, and incident response procedures comply with PIPEDA’s breach notification requirements.
