Privacy Policy

This Privacy Policy outlines how club-house-casino-canada, operated via club-house-casino-ca.com, collects, uses, discloses, and protects personal information of players and website visitors. This policy applies to all individuals who access or use the casino's services and website features. Effective date: November 6, 2025.

Who We Are

OBSERVE: Club-house-casino-canada is operated by Dama N.V., a registered legal entity under Curaçao law, providing online gaming services to Canadian clients (excluding Ontario) via club-house-casino-ca.com.
EXPAND: For privacy and data protection, the operator's identity, address, and contact points must be transparent and accessible.

• Legal Operator: Dama N.V., incorporated in Curaçao, headquartered at Kaya Richard J. Beaujon Z/N, Curaçao.
• Registration: Dama N.V. holds Curaçao gaming licenses 8048/JAZ2020-013 (Antillephone N.V.) and OGL/2023/174/0082 (Curaçao GCB), both valid through 2025. Specific company registration and tax identification numbers are available on request.
• Data Protection Contact: The Data Protection Officer (DPO) can be reached at support@club-house-casino-ca.com or info@club-house-casino-ca.com.
• Website: club-house-casino-ca.com

What Personal Data We Collect

OBSERVE: The following categories of data are collected to operate club-house-casino-ca.com in compliance with CA and international standards.
EXPAND: Collection covers both direct personal identifiers and technical, transactional, and behavioral data.
REFLECT: Data is processed strictly for lawful purposes outlined in this policy.

• Personal Data: Full name, date of birth, residential address, email, phone number, copies of identity documents (for KYC/AML verification).
• Account and Transaction Data: Username, account history, balances, deposits, withdrawals, payment card and e-wallet information, transaction records.
• Technical Data: IP address, device type, browser version, operating system, unique device identifiers, server logs, geolocation (as permitted by law).
• Behavioral Data: Betting and gaming history, website navigation, clickstream data, session duration, interaction logs.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, third-party analytics and advertising cookies, pixel tags, and similar technologies (see section: Cookies & Tracking Technologies).
• Correspondence: Support tickets, emails, live chat transcripts, and feedback submitted via website forms.

Legal Basis for Processing

OBSERVE: Data processing is strictly aligned with lawful grounds as required by CA, Curaçao, and applicable international privacy regulations.
EXPAND: Each processing activity is mapped to one or more legal bases.
REFLECT: Data is not processed beyond the lawful and intended scope.

• User Consent: Explicit consent is obtained for marketing, cookies, and certain processing activities. Consent may be withdrawn at any time.
• Contractual Necessity: Data is processed to establish, manage, and fulfill user agreements (account operation, processing deposits and withdrawals, customer support).
• Legal Compliance: Processing is mandatory for anti-money laundering (AML), know your customer (KYC) requirements, regulatory reporting, and fraud detection, as required by Curaçao and Canadian law.
• Legitimate Interests: Data is processed for security monitoring, service improvement, analytics, and protecting the casino's lawful business interests, provided such processing does not override user rights and freedoms.

Purpose of Processing

OBSERVE: Personal information is used solely for defined, legitimate purposes.
EXPAND: Each use case is justified under applicable regulations.
REFLECT: Unlawful or excess processing is strictly prohibited.

• Service Delivery: To provide access to gaming services, manage user accounts, process payments, and deliver customer support.
• Legal Compliance: To fulfill obligations under gaming, anti-fraud, and financial laws (e.g., KYC, AML).
• Service Improvement: To analyze user behavior, optimize website functionality, and enhance player experience.
• Marketing: To send promotional emails, newsletters, and offers, subject to user consent and opt-out rights.
• Security & Fraud Prevention: To monitor, detect, and prevent fraudulent activities, unauthorized access, and security incidents.

Disclosure & Sharing

OBSERVE: Data sharing is limited to necessary cases and always subject to protective agreements.
EXPAND: Third-party recipients are vetted for compliance.
REFLECT: No unauthorized sale or disclosure of personal information occurs.

• Payment and Banking Partners: Data is shared with licensed payment processors and banking partners solely for transaction processing and AML checks.
• Service Providers: Third-party vendors (IT, analytics, customer support) may access data under strict confidentiality and security agreements.
• Regulators and Authorities: Data may be disclosed to Curaçao, Canadian (where applicable), or international regulators in compliance with legal obligations.
• Affiliates and Advertising Networks: Data is shared for marketing purposes only with user consent and subject to data protection agreements.
• Corporate Transactions: In the event of mergers, acquisitions, or restructuring, data may be transferred to successor entities, with advance notice provided to users.

International Transfers

OBSERVE: As an international operator, club-house-casino-canada may transfer data across borders.
EXPAND: Transfers are made only when adequate safeguards are in place.
REFLECT: User data is never transferred to jurisdictions lacking sufficient data protection.

• Transfer Scope: Personal data may be transferred to Curaçao (primary operations), EEA, and other countries where service providers are located.
• Protection Mechanisms: Standard Contractual Clauses (SCCs), data processing agreements, and, where applicable, compliance with international frameworks such as ISO 27001 are used to ensure data protection.
• User Rights: Users are informed of cross-border transfers and may contact the DPO to inquire about specific safeguards.

Regional Compliance Note: All transfers comply with CA, Curaçao, and applicable international data transfer laws effective in 2025.

Data Retention

OBSERVE: Data is retained no longer than necessary for the purposes for which it was collected.
EXPAND: Retention periods are determined by legal, regulatory, and operational requirements.
REFLECT: Data deletion is performed securely and in accordance with user rights.

• Personal Data: Retained for the duration of the user's account and up to five (5) years after account closure, unless otherwise required by law (e.g., AML/financial obligations).
• Payment and Transaction Data: Retained for at least five (5) years post-transaction to comply with financial regulations.
• Behavioral and Technical Data: Retained for up to three (3) years for analytics and security purposes, unless extended by regulatory requirements.
• Deletion Criteria: Data is deleted upon user request (where permitted), expiration of retention periods, or when no longer required for processing purposes.

Your Rights

OBSERVE: Users of club-house-casino-ca.com have robust data rights under Canadian (PIPEDA), European (GDPR), and relevant international privacy standards.
EXPAND: Rights are clearly explained and accessible. Procedures for exercising rights are transparent and free-of-charge.
REFLECT: The following user rights are guaranteed in 2025:

1. Access: Request a copy of personal data held by club-house-casino-canada.
2. Correction: Request rectification of inaccurate or incomplete data.
3. Deletion ("Right to be Forgotten"): Request deletion of personal data, subject to regulatory retention obligations.
4. Restriction of Processing: Request limitation of processing in specific circumstances (e.g., contesting accuracy).
5. Objection: Object to processing based on legitimate interests or direct marketing purposes.
6. Data Portability: Receive personal data in a portable, commonly used format and transfer it to another provider.
7. Withdrawal of Consent: Withdraw consent for marketing or non-essential processing at any time.

• How to Exercise Rights: Submit requests via support@club-house-casino-ca.com or info@club-house-casino-ca.com. All requests are processed within 30 days, free of charge, except where excessive or unfounded.
• Legal Limitations: Some rights may be restricted by legal retention requirements (e.g., AML laws).

Regional Compliance Note: This policy is fully aligned with CA privacy requirements (PIPEDA), GDPR principles, and international best practices effective 2025.

Cookies & Tracking Technologies

OBSERVE: Club-house-casino-ca.com uses cookies and similar technologies to enhance user experience and site security.
EXPAND: Users are informed of cookie types and management options.
REFLECT: Consent is obtained for non-essential cookies.

• Session Cookies: Temporary cookies required for basic site operations and user authentication.
• Persistent Cookies: Remain on the user's device to remember preferences and login information for future visits.
• Third-Party Cookies: Set by analytics and advertising partners (e.g., Google Analytics) for traffic analysis and marketing, used with user consent.
• Cookie Management: Users can manage or disable cookies via browser settings or through internal website controls (where available). Disabling cookies may impact site functionality.

Data Security

OBSERVE: Club-house-casino-canada implements industry-leading security measures to protect all personal data.
EXPAND: Security practices align with ISO 27001 and SOC 2 standards.
REFLECT: All staff are trained in data protection and incident response.

• Encryption in Transit and at Rest: All data transmissions are secured using TLS 1.2+ encryption; stored data is protected by strong encryption algorithms.
• Access Controls: Multi-factor authentication and strict access policies limit data access to authorized personnel only.
• Regular Security Audits: Periodic internal and external audits are conducted to identify and remediate vulnerabilities.
• Incident Response: Formal procedures are in place for data breach detection, notification, and mitigation, including prompt user and regulatory authority notification where required by law.
• Staff Training: Employees receive ongoing training in data protection, security best practices, and regulatory compliance.

Complaints & Contacts

OBSERVE: Transparent, accessible complaint procedures are provided for all data subjects.
EXPAND: Multiple contact channels and escalation paths are available.
REFLECT: All complaints are handled promptly and with full regulatory oversight.

1. Contact the DPO: Submit complaints or data protection inquiries to support@club-house-casino-ca.com or info@club-house-casino-ca.com. (Online feedback forms may be introduced in 2025.)
2. Complaint Procedure: Upon receipt, the DPO will acknowledge the complaint within five (5) business days. Investigation and response will be completed within thirty (30) days. All actions are documented for accountability.
3. Escalation: If unsatisfied, users may escalate complaints to the Curaçao Data Protection Authority or relevant Canadian authority. For EU data subjects, escalation to an EU supervisory authority is available.

• Curaçao Data Protection Authority: Kaya Richard J. Beaujon Z/N, Curaçao, curacao-gcb.com
• Office of the Privacy Commissioner of Canada: 30 Victoria Street, Gatineau, Quebec, K1A 1H3, Canada, priv.gc.ca, Tel: 1-800-282-1376

Updates

OBSERVE: This Privacy Policy is reviewed and updated regularly.
EXPAND: Users are notified of material changes with advance notice and options to object.
REFLECT: Version control and changelog ensure transparency.

• Notification Procedures: Users will be informed of significant updates via email, website banners, and account dashboard alerts.
• Advance Notice: Material changes will be announced at least thirty (30) days in advance, allowing users to review, object, or close accounts if desired.
• Version Control: Last updated: November 6, 2025.
• Changelog: Material changes since the previous version include updated contact details, enhanced data protection measures, and revised cross-border transfer information.