burger icon
Painted Hand Casino
Log In

Privacy Policy

At painted-hand-ca.com, the privacy and protection of your personal information is of paramount importance. This Privacy Policy explains how we collect, use, store, and disclose your data when you interact with painted-hand-casino services. It applies to all players, website visitors, and users of our online gaming platform. The policy is effective as of November 6, 2025, and reflects our ongoing commitment to legal compliance and data security.

Who We Are

OBSERVE: painted-hand-casino operates under painted-hand-ca.com as a non-profit corporation, owned by the 74 First Nations of Saskatchewan and represented by the Federation of Sovereign Indigenous Nations (FSIN). The operator is governed by a 25-Year Gaming Framework Agreement (2002) and the 2021 online gaming amendment, licensed and regulated by the Saskatchewan Liquor and Gaming Authority (SLGA) and Lotteries and Gaming Saskatchewan (LGS).

  • Legal Entity: painted-hand-casino, a non-profit corporation owned by the 74 First Nations of Saskatchewan, under the oversight of the FSIN.
  • Website: https://painted-hand-ca.com
  • Registration & Licensing: Compliant with the 25-Year Gaming Framework Agreement (2002) and 2021 online gaming amendment, regulated by SLGA and LGS.
  • Contact Information: For privacy matters, please address the Data Protection Officer (DPO) via the contact form on our website. If direct DPO contact details are required, please refer to future updates or regulatory notices.

REFLECT: As a CA-based, licensed, and regulated gaming operator, painted-hand-casino ensures all privacy practices are aligned with local, provincial, and federal Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

What Personal Data We Collect

OBSERVE: To deliver secure, compliant, and optimized gaming services, painted-hand-casino collects a range of personal, technical, and behavioral information.

  • Personal Data: Full name, date of birth, email address, telephone number, physical address, government-issued identification, and verification documentation.
  • Technical Data: IP address, device information (operating system, browser type), access logs, session data, and usage timestamps.
  • Payment Data: Bank account details, credit/debit card numbers (processed via secure payment partners), transaction history, and withdrawal/deposit records.
  • Behavioral Data: Betting and gaming history, account preferences, clickstream data, time spent on the site, and interaction logs.
  • Cookies & Similar Technologies: Session cookies, persistent cookies, third-party analytics and advertising cookies, and device fingerprinting technologies.

EXPAND: Data is collected when you register, participate in games, make payments, interact with customer support, or use our website/app. Aggregated and anonymized data may be used for analytics and compliance.

REFLECT: All data collection is strictly limited to what is necessary for service provision, regulatory compliance, and lawful business operations under Canadian law.

Legal Basis for Processing

OBSERVE: painted-hand-casino processes your personal data only when legally justified under applicable Canadian laws and industry standards.

  1. User Consent: We obtain your explicit consent for processing activities not strictly necessary for contract or legal compliance, such as marketing communications.
  2. Contractual Necessity: Data is processed to fulfill our obligations to you, including account creation, service delivery, payment processing, and customer support.
  3. Legitimate Interests: We process data for fraud prevention, IT security, service analytics, and business improvement, provided these interests do not override your fundamental rights.
  4. Legal Obligations: Compliance with regulatory requirements, such as Know Your Customer (KYC), Anti-Money Laundering (AML) checks, and mandatory reporting to authorities.

REFLECT: All processing activities are regularly reviewed to ensure ongoing compliance with PIPEDA, SLGA, LGS, and relevant provincial and federal requirements in Canada.

Purpose of Processing

OBSERVE: Your data is used solely for legitimate, clearly defined purposes.

  • Provision of Casino Services: Enabling account registration, gaming participation, and prize payouts.
  • Service Improvement: Enhancing user experience, optimizing platform functionality, and conducting customer satisfaction surveys.
  • Marketing and Communications: Sending promotional offers, newsletters, and service updates, subject to your preferences and consent.
  • Analytics: Conducting statistical analysis to understand user behavior, detect patterns, and ensure platform integrity.
  • Fraud Prevention and Security: Monitoring and investigating suspicious activities, enforcing terms of service, and complying with regulatory mandates.

REFLECT: painted-hand-casino does not use your data for purposes incompatible with those stated above and adheres to principles of data minimization and transparency.

Disclosure & Sharing

OBSERVE: Data sharing occurs only when necessary, with robust protections in place.

  1. Payment Partners: Data may be shared with trusted financial institutions and payment processors strictly for transaction processing and fraud mitigation.
  2. Service Providers: Third-party IT, analytics, and customer support providers may access data under confidentiality agreements and strict data protection controls.
  3. Regulatory Authorities: Mandatory disclosures to government regulators, including SLGA and LGS, to comply with gaming laws and reporting obligations.
  4. Affiliates: Data may be shared with affiliated entities for lawful marketing or operational purposes, always in accordance with your preferences and legal requirements.
  5. Advertising Networks: Personal data is only shared with advertising networks when explicit consent is provided and in line with applicable privacy laws.

EXPAND: painted-hand-casino never sells your personal data. All third-party transfers are governed by data processing agreements ensuring confidentiality and legal compliance.

REFLECT: Disclosure is limited to the minimum necessary and always subject to Canadian data protection and gaming regulations.

International Transfers

OBSERVE: As a Canadian operator, painted-hand-casino primarily stores and processes data within Canada. In some cases, data may be transferred to trusted partners or service providers in other jurisdictions.

  • Transfer Destinations: Data may be transferred to countries with adequate data protection laws or, where necessary, to jurisdictions covered by contractual safeguards.
  • Protection Guarantees: Standard contractual clauses, data processing agreements, and technical safeguards are employed to protect your data during international transfers.
  • Compliance: All international transfers comply with PIPEDA and other applicable Canadian privacy laws, as well as with regulatory guidance from SLGA and LGS.

REFLECT: You will be notified of any material changes to transfer practices and provided with options to exercise your rights regarding cross-border data movement.

Data Retention

OBSERVE: Data is retained only as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations.

  1. Personal Data: Retained for up to 5 years after account closure or last user activity, as required by regulatory frameworks for gaming and anti-money laundering compliance.
  2. Technical and Behavioral Data: Retained for operational, security, and analytic needs, typically not exceeding 3 years unless extended by law enforcement or regulatory requests.
  3. Payment Data: Retained for a minimum of 7 years to meet financial and audit requirements.
  4. Deletion Criteria: Data is securely destroyed or anonymized upon user request (where permitted), expiration of retention period, or when processing is no longer required.

REFLECT: All retention and deletion practices are regularly audited for compliance with CA law and updated based on regulatory developments.

Your Rights

OBSERVE: painted-hand-casino upholds your rights under Canadian privacy law, with alignment to international standards such as the GDPR where applicable.

  • Right of Access: Request a copy of your personal data held by painted-hand-casino at any time.
  • Right to Correction: Request correction of inaccurate or incomplete personal information.
  • Right to Deletion: Request erasure of your personal data, subject to legal and contractual obligations (e.g., regulatory reporting requirements).
  • Restriction of Processing: Request restricted processing of your data under certain circumstances.
  • Objection to Processing: Object to specific types of processing, such as direct marketing.
  • Data Portability: Request transfer of your personal data in a machine-readable format to another service provider.
  • Withdrawal of Consent: Withdraw consent for non-essential processing activities at any time without affecting the lawfulness of prior processing.

Exercising Your Rights

  1. Procedure: Submit your request through the online contact form at painted-hand-ca.com or by written notice to the DPO (contact details provided upon request or in future updates).
  2. Response Timeframe: Requests are acknowledged within 7 days and fulfilled within 30 days, free of charge unless manifestly unfounded or excessive.
  3. Legal Limitations: Some rights may be restricted where necessary to comply with regulatory, anti-fraud, or contractual obligations.

REFLECT: painted-hand-casino ensures transparent, accessible, and timely facilitation of your data rights in compliance with CA privacy laws and relevant supervisory authority guidance.

Cookies & Tracking Technologies

OBSERVE: painted-hand-casino uses cookies and similar technologies to optimize user experience and ensure platform security.

  • Session Cookies: Enable essential site functions and expire when you close your browser.
  • Persistent Cookies: Remember your preferences and login status for future visits.
  • Third-Party Cookies: Used for analytics (e.g., Google Analytics) and advertising, always subject to your consent and privacy settings.

Cookie Management

  1. Browser Settings: You can manage or disable cookies via your browser's privacy settings at any time.
  2. Internal Panel: painted-hand-ca.com provides an internal cookie management panel for granular control over non-essential cookies.

REFLECT: Information on cookies is available in our Cookie Policy. Disabling cookies may affect certain functionalities of the site.

Data Security

OBSERVE: painted-hand-casino implements state-of-the-art technical and organizational measures to protect your data.

  • Encryption: TLS 1.2+ encryption for data in transit; AES-256 or equivalent encryption for data at rest.
  • Authentication & Access Control: Multi-factor authentication, role-based access restrictions, and regular password audits.
  • Security Audits: Regular penetration testing, vulnerability assessments, and compliance checks in line with ISO 27001 and SOC 2 standards.
  • Staff Training: Mandatory data protection and security awareness programs for all personnel.
  • Incident Response: Comprehensive incident response procedures, including immediate containment, investigation, regulatory notification, and user communication within required timeframes.

REFLECT: Security protocols are continuously updated to address evolving threats and legal requirements. Breaches are reported to Canadian authorities and affected users as mandated by law.

Complaints & Contacts

OBSERVE: painted-hand-casino is committed to resolving all privacy-related concerns promptly and transparently.

  • Contact Channels: Submit complaints or inquiries via the online form at painted-hand-ca.com. DPO contact details will be provided upon request or in updated policy versions.
  • Postal Address: Please refer to our website for the most up-to-date mailing address or request details through customer support.

Complaint Procedure

  1. Step 1: Submit your complaint through our online contact form or in writing to the Data Protection Officer.
  2. Step 2: painted-hand-casino will acknowledge receipt within 7 days and provide a substantive response within 30 days.
  3. Step 3: If you are dissatisfied with the response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada (OPC):
    Office of the Privacy Commissioner of Canada
    30 Victoria Street
    Gatineau, Quebec K1A 1H3
    Toll-free: 1-800-282-1376
    Website: https://www.priv.gc.ca

REFLECT: painted-hand-casino strives for amicable resolution but fully respects your right to escalate concerns to regulatory authorities as provided by Canadian law.

Updates

OBSERVE: This Privacy Policy may be updated to reflect legal, technological, or operational changes.

  • Notification Procedures: Material changes will be communicated via email, website banners, and/or account dashboard alerts at least 30 days in advance of their effective date.
  • Version Control: The current version is identified by the "Last updated" date at the top of this policy. A changelog of material modifications will be provided for your review.
  • User Options: You may object to policy changes or close your account prior to their effective date without penalty.

REFLECT: painted-hand-casino is committed to transparency and user empowerment. Please review this policy regularly for updates.

Last updated: November 6, 2025

  • Changelog (2025-11-06): Policy updated for enhanced CA compliance, clarity on international transfers, and expanded user rights procedures.