This Privacy Policy outlines the data handling practices of the brand Spaceman for players in Canada. It exists to provide transparency regarding the collection, usage, storage, and disclosure of personal information within the scope of applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA). The policy explains the lawful processing of data necessary for account management, transaction processing, and compliance with regulatory obligations. It details the security measures implemented to safeguard information and establishes the administrative procedures for managing player data. All practices described herein are designed to meet legal standards and ensure accountability in data stewardship. This document serves as the official record of how the brand processes personal data from registration through account closure.
Data Collection and Categories of Personal Information
The brand collects personal data directly from players during registration, account management, and transactional activities. Information is also obtained through automated systems when players interact with the platform, including the game spaceman slot. Categories of data include registration details such as full name, date of birth, email address, residential address in Canada, and telephone number. Identification data comprises government-issued identification documents, such as a driver's license or passport, to verify age and identity as required by provincial licensing authorities. Transactional information includes deposit and withdrawal records, wagering history, payment method details, and financial account information necessary for processing payouts. Technical data encompasses IP addresses, device identifiers, browser type, operating system, and session activity logs collected during gameplay and site navigation. Compliance-related records include correspondence with customer support, self-exclusion requests, responsible gaming interactions, and any data submitted in relation to regulatory audits or anti-money laundering procedures. No data is collected from third-party sources without prior consent or a lawful basis under Canadian privacy law.
Data Usage and Legal Basis for Processing
Personal data is processed for account verification, transaction execution, security monitoring, and regulatory compliance. The legal basis for processing includes consent provided by the player at the time of data submission, contractual necessity for operating player accounts and processing wagers, and legal obligations under Canadian federal and provincial regulations. Legitimate interest is relied upon for fraud prevention, network security, and business administration, provided such interests do not override player privacy rights. Data collected during gameplay, including activity within the spaceman win scenarios, is used to detect irregular patterns or unauthorized access. Transactional data is processed to fulfill payout requests, including those associated with the spaceman no deposit bonus where applicable. Compliance obligations require the retention of identification and transactional records for audit and reporting purposes to gaming authorities. Data is not used for automated decision-making that produces legal effects without human review, unless explicitly authorized by law. All processing is documented and aligned with the principles of purpose limitation and data minimization as set forth in PIPEDA.
Data Storage, Security Measures, and Retention Rules
Personal data is stored on servers located within Canada or jurisdictions recognized as providing equivalent data protection under Canadian law. Encryption standards, including Transport Layer Security (TLS) for data in transit and AES-256 for data at rest, are implemented to protect against unauthorized access. Access controls are structured on a need-to-know basis, with role-based permissions enforced through authentication protocols. Firewalls, intrusion detection systems, and regular security audits are maintained to monitor the integrity of storage environments. Retention periods are determined by regulatory requirements, the nature of the data, and the purpose for which it was collected. Identification data and transactional records are retained for a minimum of five years following account closure, as mandated by anti-money laundering regulations. Technical logs are retained for a period of twelve months unless required for ongoing investigations. Upon expiration of the retention period, data is securely deleted or anonymized through irreversible processes. Archiving procedures follow a documented schedule that ensures no data is retained beyond its legal or operational necessity. The brand does not store payment card details after transaction completion, relying instead on tokenized processing through certified payment partners.
Player Rights and Data Access Procedures
Players in Canada have the right to access their personal data held by the brand, request correction of inaccuracies, and obtain erasure of data where lawful grounds exist. Rights also include the ability to restrict processing, object to processing based on legitimate interests, and request data portability in a structured, commonly used format. All requests must be submitted in writing to the data protection officer or through the designated account management channel. Identity verification is required before processing any request; this may involve confirming account details, providing a copy of government-issued identification, or answering security questions. The brand will respond to requests within thirty calendar days, or within any shorter period prescribed by provincial privacy legislation. If a request is denied, the player will receive a written explanation citing the specific legal exemption or limitation applied. Erasure requests may be subject to exceptions where data is needed for legal compliance, fraud detection, or unresolved disputes. Players may also withdraw consent for processing that relies solely on consent, though this may affect account functionality. Complaints regarding data handling practices may be directed to the Office of the Privacy Commissioner of Canada. No fees are charged for exercising these rights unless the request is manifestly unfounded or excessive, in which case an administrative cost may be applied.