To let you play, get paid in CAD, and keep things fair and legal, we need a few basics. They prove you’re old enough to gamble in your province/territory (that’s 18 or 19, depending where you live), help us move money securely, block fraud, and follow Canadian privacy and anti-money-laundering rules. Without this, WinSpirit can’t run.
We keep it to essentials: your name, date of birth and a clear photo of government ID; ways to reach you like address, email and phone; your payments and gameplay history (deposits, withdrawals, wagers, wins/losses, bonuses); and a handful of technical notes from your device (IP address, browser, timestamps) so the site stays fast and secure. If you opt in to promos, we store that choice; if you don’t, we don’t send them.
We use it to open and manage your account, verify age/identity, process deposits and cash-outs, keep out bad actors, meet Canadian law (e.g., PIPEDA and AML/ATF rules), improve performance, and-only with your permission-tailor offers to your interests. You can change your marketing preferences any time.
Only partners who help us run WinSpirit: banks and payment processors, KYC/AML and ID-check providers, hosting and security vendors, auditors and legal advisers, and regulators/tax authorities if the law requires. They get only what’s necessary, must protect it, and can’t use it for anything else. We don’t sell your data. Ever.
Mostly in Canada, sometimes in other countries (like the US or EU) if that’s where a secure service sits. Wherever it goes, we require protections comparable to Canadian standards and limit use to running WinSpirit.
Ask to see what we hold about you, fix anything that’s wrong, withdraw consent for optional uses (like marketing), and-where the law allows-ask us to delete certain data. You can also ask how your information has been used or shared. Email [email protected] from your registered address; once we verify it’s you, we aim to respond within about 30 days.
Encryption in transit and at rest, layered firewalls, multi-factor logins, strict access controls, 24/7 monitoring and regular security testing. Only people who need data to do their job can see it. If a breach creates a real risk of significant harm, we’ll notify you and the appropriate Canadian privacy authorities, as required.
As long as needed to run your account and meet legal, tax and regulatory duties-often your account lifetime plus a legally required AML period. When the clock runs out, we securely delete or irreversibly anonymize your data.
If you click through to another website or app, their privacy policy takes over. Give it a quick read before sharing anything there.
WinSpirit is for adults only. We don’t knowingly collect information from anyone under the legal gambling age in their province/territory.
Questions, requests or complaints about privacy? If we can’t resolve your concern, you can contact the Office of the Privacy Commissioner of Canada or your provincial/territorial privacy regulator.