burger icon

Privacy Policy

lac-leamy-casino is committed to protecting your personal information and ensuring transparency in how your data is handled. This privacy policy explains how we collect, use, disclose, and protect your information when you visit lac-leamy-ca.com or use our services. The policy applies to all players, website visitors, and users interacting with lac-leamy-ca.com. Effective date: November 6, 2025.

Who We Are

OBSERVE: lac-leamy-casino operates under the regulatory oversight of Loto-Québec, a Crown corporation of the Government of Quebec. All legal and operational activities are conducted in accordance with Quebec and Canadian law.

  • Legal Name & Entity: lac-leamy-casino, operated by Loto-Québec, a provincially owned Crown corporation.
  • Legal Address: 1 Boulevard du Casino, Gatineau, Québec, J8Y 6W3, Canada.
  • Registration Details: Operation legally mandated and regulated by the Government of Quebec via Loto-Québec; additional company registration numbers and tax identification are managed in accordance with provincial requirements.
  • Contact for Data Protection: For all privacy matters, please contact our Data Protection Officer (DPO) or data protection department via the official Loto-Québec website: https://lotoquebec.com/en/about-us. (Email and phone details are available upon request through the official site.)

REFLECT: All privacy-related inquiries are managed centrally by Loto-Québec's designated privacy team to ensure compliance and timely response.

What Personal Data We Collect

OBSERVE: In operating lac-leamy-ca.com, we collect a range of personal and technical data to comply with legal requirements and deliver casino services.

  • Personal Data: Full name, date of birth, identification documents, email address, phone number, mailing and residential address.
  • Technical Data: IP address, device type, browser information, operating system, access logs, and activity timestamps.
  • Payment Data: Banking information, payment card details, transaction history, payout details.
  • Behavioral Data: Betting and gaming history, user interactions, clicks, navigation patterns, responsible gaming activities (e.g., self-exclusion status).
  • Cookies & Similar Technologies: Session cookies, persistent cookies, and third-party cookies for authentication, analytics, and personalized content delivery.

EXPAND: Data collection occurs during account registration, website navigation, participation in promotions, customer support interactions, and financial transactions, ensuring both operational functionality and regulatory compliance.

Legal Basis for Processing

OBSERVE: lac-leamy-casino processes personal data strictly in accordance with Canadian federal and Quebec provincial privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Quebec Act Respecting the Protection of Personal Information in the Private Sector.

  1. User Consent: We obtain explicit consent when you register an account, subscribe to marketing communications, or participate in promotional activities.
  2. Contract Fulfillment: Data is processed as necessary to provide casino services, manage your account, process payments, and fulfill contractual obligations.
  3. Legitimate Interests: We process data for legitimate business interests, including fraud prevention, service improvement, analytics, and ensuring the security of our operations, provided your rights and freedoms are not overridden.
  4. Legal Obligations: We are required to process and retain certain data to comply with anti-money laundering (AML), know-your-customer (KYC), and regulatory reporting requirements mandated by Quebec and Canadian gambling authorities.

REFLECT: All data processing activities are justified by one or more legal bases, with user rights and regulatory obligations consistently balanced.

Purpose of Processing

OBSERVE: Data is processed for specific, defined purposes consistent with our operational and legal obligations.

  • Providing Casino Services: To enable account registration, identity verification, game participation, and payment processing.
  • Improving Services: To analyze user behavior, optimize website functionality, and enhance user experience.
  • Marketing Communications: To send promotional offers and updates, where permitted by user consent.
  • Analytics & Reporting: To monitor system performance, evaluate service usage, and fulfill regulatory reporting requirements.
  • Fraud Prevention & Security: To detect and prevent fraudulent activities, money laundering, and unauthorized access to accounts.

REFLECT: Each processing purpose is strictly aligned with regulatory expectations and is subject to regular review for compliance and necessity.

Disclosure & Sharing

OBSERVE: We only disclose personal data to third parties where required to deliver our services or comply with the law.

  • Payment Partners: Your payment and transaction information may be shared with authorized banking institutions and payment processors for deposits and withdrawals.
  • Service Providers: External vendors providing IT, security, analytics, and customer support services may access data under strict confidentiality agreements.
  • Regulatory Authorities: Data may be disclosed to Quebec provincial regulators and law enforcement agencies to meet legal, licensing, or reporting obligations.
  • Affiliates & Marketing Partners: With your explicit consent, we may share limited information with trusted affiliates and advertising networks for promotional purposes.

EXPAND: All third-party data sharing is governed by contractual safeguards ensuring compliance with Canadian privacy law and industry best practices.

International Transfers

OBSERVE: While lac-leamy-casino primarily processes data within Canada, certain service providers or affiliates may be located or store data outside Canada.

  • Transfer Regions: Data may be transferred to jurisdictions such as the United States or the European Union for technical, operational, or analytical purposes.
  • Protection Measures: We implement recognized data protection safeguards, including standard contractual clauses, data processing agreements, and, where applicable, adherence to frameworks such as the European Commission's adequacy decisions.
  • User Notification: Users will be informed if their data is subject to transfer outside Canada, with the opportunity to object or seek further information regarding protective measures.

REFLECT: All international data transfers comply with PIPEDA and Quebec privacy law, ensuring equivalent levels of data protection are maintained.

Data Retention

OBSERVE: Personal data is retained only as long as necessary for the purposes identified in this policy or as required by law.

  • Personal Data: Retained for no more than five (5) years following account closure, in compliance with regulatory audit and AML requirements.
  • Technical and Behavioral Data: Retained for up to three (3) years from the date of collection or last activity, unless required for ongoing investigations or legal compliance.
  • Payment Data: Retained for at least five (5) years after the transaction to satisfy statutory and regulatory reporting obligations.
  • Deletion Criteria: Data is permanently deleted or anonymized upon user request (where legally permissible), expiration of retention periods, or upon conclusion of the processing purpose.

REFLECT: All retention periods are regularly reviewed and updated to ensure alignment with evolving legal standards and operational needs.

Your Rights

OBSERVE: lac-leamy-casino upholds all user rights as established by Canadian privacy laws and aligns with international best practices, including relevant GDPR principles.

  1. Right of Access: You may request confirmation of whether we process your data and obtain a copy of your personal information held by us.
  2. Right to Rectification: You have the right to correct inaccurate or incomplete personal information.
  3. Right to Deletion: You can request deletion of your personal data, subject to overriding legal requirements (e.g., AML/KYC retention).
  4. Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances.
  5. Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
  6. Data Portability: You may request a structured, commonly used, and machine-readable copy of your personal data.
  7. Withdrawal of Consent: You may withdraw consent for marketing communications or other data uses at any time, without affecting the lawfulness of processing based on consent before withdrawal.
  8. Exercising Rights: Submit your request via the privacy contact form at Loto-Québec's official portal. We will respond within thirty (30) days, free of charge, except in cases of excessive or unfounded requests.

REFLECT: These rights are granted in accordance with PIPEDA and Quebec's Act Respecting the Protection of Personal Information in the Private Sector. Where applicable, GDPR-aligned principles are also observed for international users.

Cookies & Tracking Technologies

OBSERVE: lac-leamy-ca.com uses cookies and similar technologies to enhance user experience and support site functionality.

  • Session Cookies: Temporary cookies deleted when you close your browser, used for essential site functions and security.
  • Persistent Cookies: Remain on your device for a set period to remember preferences and facilitate future access.
  • Third-Party Cookies: Placed by analytics, advertising, or affiliate partners for site analytics and personalized marketing, only with your consent.
  • Purpose: Authentication, site security, analytics, personalization, and targeted advertising (if consented).
  • Managing Cookies: You can manage or disable cookies at any time via your browser settings or (where available) our internal cookie management panel.

REFLECT: Cookie practices are transparently disclosed and managed in compliance with Canadian privacy law and industry standards.

Data Security

OBSERVE: Protecting your personal information is a top priority for lac-leamy-casino. Robust security measures are implemented to safeguard all data processed on lac-leamy-ca.com.

  • TLS Encryption: All data transmissions are secured with TLS 1.2 or higher encryption protocols.
  • Data Encryption: Personal and payment data are encrypted at rest and in transit.
  • Access Controls: Strict access management with multi-factor authentication for all administrative accounts.
  • Regular Security Audits: Periodic internal and external audits are conducted to assess and enhance security posture.
  • Staff Training: All personnel undergo regular data protection and cybersecurity training.
  • Incident Response: Comprehensive incident response plans are in place for timely identification and mitigation of data breaches or security incidents.
  • Compliance: Security practices are aligned with international standards such as ISO 27001 and SOC 2, where applicable.

REFLECT: Security controls are regularly updated to address emerging threats and ensure ongoing compliance with Canadian and international standards.

Complaints & Contacts

OBSERVE: lac-leamy-casino is dedicated to resolving any privacy concerns promptly and transparently.

  1. Primary Contact: Submit privacy-related complaints or inquiries via the Loto-Québec privacy portal: https://lotoquebec.com/en/about-us. (Direct email and phone details available upon request.)
  2. Complaint Procedure:
    • Submit your complaint or concern with sufficient detail describing the issue.
    • Your request will be acknowledged within five (5) business days.
    • A full response will be provided within thirty (30) days, outlining findings and proposed resolutions.
  3. Escalation: If you are unsatisfied with our response, you may escalate your complaint to the Quebec Commission d'accès à l'information (CAI):
    • Website: https://www.cai.gouv.qc.ca/
    • Mail: 500, boulevard René-Lévesque Ouest, bureau 18.200, Montréal (Québec) H2Z 1W7, Canada
    • Phone: +1 888 528-7741
  4. International Users: Where applicable, users in the EU may also contact their local data protection authority for further recourse.

REFLECT: All complaints are handled impartially and in accordance with applicable privacy legislation, with escalation paths clearly defined.

Updates

OBSERVE: This privacy policy is reviewed and updated regularly to reflect changes in legal requirements, technology, or our data practices.

  • Notification Methods: Material updates will be communicated via email (where available), prominent website banners, and within your account dashboard.
  • Advance Notice: For significant changes affecting your rights, we provide at least thirty (30) days' advance notice prior to implementation.
  • User Options: You may object to changes or close your account at any time prior to the effective date of updated terms.
  • Version Control: Last updated: November 6, 2025. All previous policy versions and substantive changes are archived for reference.
  • Changelog:
    • 2025-11-06: Expanded international transfer and security measures; clarified retention periods; updated complaint escalation procedures.

REFLECT: Ongoing transparency and proactive communication are central to our privacy commitment at lac-leamy-ca.com.