1. Introduction & Scope
RoyalAce Canada Ltd. ("RoyalAce," "we," "our," or "us") is committed to protecting the privacy and personal information of every player on our platform. This Privacy Policy explains in detail how we collect, use, disclose, retain, and safeguard your information when you visit royalace.com and use our licensed online casino platform services.
This Policy applies to all users of the RoyalAce Casino platform, including visitors, registered players, and VIP members. By accessing our platform, creating an account, or making a deposit, you acknowledge that you have read and consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of our services immediately.
RoyalAce operates under the iGaming Alberta Act, S.A. 2025, c. I-1.5, and is subject to both federal Canadian privacy law (PIPEDA) and applicable provincial legislation. We are required by law to collect certain personal information as a condition of our AGLC licence and AiGC operating agreement.
2. Information We Collect
Personal Identification Information
- Full legal name, date of birth, gender, and government-issued ID details (required for KYC verification under AGLC regulations)
- Email address, primary phone number, and residential mailing address
- Financial information including payment card details, bank account information, and e-wallet credentials
- Tax identification numbers and Social Insurance Numbers where required by Canadian tax law
- Selfie or video verification images used for biometric identity confirmation
- Source of funds documentation and proof of income where required for AML compliance
Usage, Behavioural & Technical Data
- IP address, geolocation data, browser type, device type, operating system, and screen resolution
- Pages visited, time spent on each page, and clickstream navigation patterns
- Gameplay data including games played, bets placed, session durations, wins, losses, and betting patterns
- Responsible gambling tool usage, including limit settings and cool-off periods activated
- Communication records including live chat transcripts, email correspondence, and phone call recordings
- Cookies, pixels, and similar tracking technologies as described in our Cookie Policy
- Device fingerprint data used for fraud detection and security monitoring
Third-Party Data
- Identity verification results from certified third-party KYC providers
- Credit reference and AML screening data from licensed financial intelligence providers
- Geolocation verification data confirming your physical presence in Alberta
3. How We Use Your Information
- To verify your identity, age, and physical location in compliance with AGLC licensing requirements before permitting any deposit or wager
- To process deposits, withdrawals, and all financial transactions securely and accurately
- To detect, investigate, and prevent fraud, money laundering, underage gambling, and self-excluded player access
- To provide customer support and respond to all inquiries, complaints, and escalations
- To send transactional notifications, account security alerts, and promotional offers (with your consent where required)
- To comply with all legal obligations including AGLC reporting, AML/KYC regulations, and Canadian tax law
- To monitor and enforce responsible gambling limits and tool settings you have activated
- To analyse gameplay and behavioural data to improve our games, platform, and user experience
- To enforce our Terms & Conditions and investigate suspected breaches
- To fulfil obligations to the Independent Integrity Monitor under AGLC Standards and Requirements for Internet Gaming
4. Legal Basis for Processing (PIPEDA & Alberta Privacy Law)
We process your personal data under the following legal bases:
- Performance of a contract — to provide our licensed gaming services as agreed in our Terms & Conditions
- Legal obligation — to comply with AGLC licensing requirements, AML regulations, AiGC reporting obligations, and Canadian tax law
- Consent — for optional marketing communications, which you may withdraw at any time
- Legitimate interests — for fraud prevention, platform security, integrity monitoring, and improving our services
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5. Data Sharing and Disclosure
We may share your personal information with the following categories of recipients, strictly on a need-to-know basis:
- Regulatory authorities: AGLC, AiGC, FINTRAC, and law enforcement agencies as required by law or court order
- Independent Integrity Monitor: as required under AGLC Standards and Requirements for Internet Gaming
- Payment processors: Interac, Visa, Mastercard, Apple Pay, Google Pay and associated financial institutions
- Game providers: licensed studios including NetEnt, Microgaming, Pragmatic Play, Novomatic, and others — limited to the data required to deliver game outcomes
- KYC & identity verification partners: certified third-party providers for age and identity confirmation
- AML screening providers: licensed financial intelligence services for sanctions and PEP screening
- Geolocation services: to verify your physical presence within the Province of Alberta
- Analytics providers: for aggregated, anonymized platform usage statistics only
- Legal and professional advisors: lawyers, auditors, and accountants under strict confidentiality obligations
We never sell, rent, or trade your personal data to third parties for their own marketing purposes. All data sharing agreements include appropriate data protection safeguards.
6. International Data Transfers
Some of our service providers may process your data outside Canada. Where this occurs, we ensure that appropriate safeguards are in place — including contractual clauses, adequacy decisions, or equivalent protective mechanisms — to ensure your data receives protection comparable to Canadian privacy standards.
7. Data Retention
We retain your personal data for as long as your account is active and for a minimum of 7 years after account closure, as required by AGLC licensing conditions, FINTRAC AML regulations, and Canadian financial law. Certain gameplay and transaction records may be retained for up to 10 years where required by tax law. After the applicable retention period expires, your data is securely deleted or irreversibly anonymized. You may request deletion of data not subject to mandatory retention obligations at any time.
8. Your Rights Under PIPEDA
As a Canadian resident, you have the following rights with respect to your personal information:
- Right of access: request a copy of all personal information we hold about you
- Right to correction: request correction of any inaccurate or incomplete information
- Right to withdraw consent: withdraw consent for marketing communications at any time via account settings or by contacting us
- Right to challenge processing: challenge our processing of your data and receive a written response
- Right to deletion: request deletion of personal data not subject to mandatory legal retention requirements
- Right to complain: lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
To exercise any of these rights, contact our Privacy Officer at [email protected]. We will respond within 30 days of receiving a verifiable request.
9. Security Measures
We implement comprehensive, layered security measures to protect your personal information, including: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; two-factor authentication for account access; regular penetration testing by certified third-party security firms; strict role-based access controls limiting staff data access to what is necessary for their role; 24/7 security monitoring and intrusion detection systems; and annual independent security audits.
10. Responsible Gambling & Sensitive Data
Information you provide when using responsible gambling tools — including deposit limits, self-exclusion requests, cool-off period activations, and reality check settings — is treated with the highest level of confidentiality. This data is used solely to enforce your chosen restrictions, comply with our regulatory obligations, and protect your wellbeing. It is never shared with third parties for marketing or analytical purposes, and is retained in accordance with AGLC requirements even after account closure to prevent circumvention of self-exclusion.
11. Changes to This Policy
We review this Privacy Policy at least annually and whenever significant changes occur to our data practices or applicable law. We will notify you of material changes via email and/or a prominent notice on our platform at least 30 days before changes take effect. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Policy.
12. Contact Our Privacy Officer
RoyalAce Canada Ltd.
Suite 800, 10180 — 101 Street NW, Edmonton, AB T5J 3S4
Privacy Officer:
[email protected]
General Support:
[email protected]
Phone: 1-888-2583-542 (24/7)