Privacy Policy

This Privacy Policy explains the collection, use, disclosure, and protection of personal data by grand-villa-casino as operated on grand-villa-casino-ca.com. It applies to all players and website visitors interacting with grand-villa-casino-ca.com. The policy is effective as of November 6, 2025, and governs the processing of all personal data collected on or after this date in accordance with applicable Canadian laws and industry standards.

Who We Are

OBSERVE: grand-villa-casino is operated exclusively via grand-villa-casino-ca.com and is part of Gateway Casinos & Entertainment Limited, a Canadian corporation. The principal office is located at 4331 Dominion Street, Burnaby, BC V5G 1C7, Canada. Regulatory oversight is provided by the British Columbia Lottery Corporation (BCLC) and Alberta Gaming, Liquor and Cannabis (AGLC).

• Legal Name: Gateway Casinos & Entertainment Limited (majority-owned by The Catalyst Capital Group Inc.)
• Operational Address: 4331 Dominion Street, Burnaby, BC V5G 1C7, Canada
• Contact Email: info@grand-villa-casino-ca.com (general inquiries)
• Support Email: support@grand-villa-casino-ca.com
• Data Protection Contact (DPO): For privacy matters, contact our Data Protection Department via info@grand-villa-casino-ca.com
• Regulatory Jurisdictions: British Columbia (BCLC), Alberta (AGLC)

REFLECT: All data processing activities are performed in accordance with CA privacy and gambling regulations under the oversight of the referenced regulators.

What Personal Data We Collect

OBSERVE: grand-villa-casino-ca.com collects various categories of personal and technical data in order to provide regulated gambling services and comply with legal obligations.

• Personal Identification Data: Full name, date of birth, physical address, e-mail address, phone number, government-issued identification (as required by KYC/AML laws)
• Account and Behavioral Data: Username, account preferences, betting history, transaction logs, communications, session duration, and clickstream data
• Technical Data: IP address, device identifiers, browser type and settings, operating system, access times, and log files
• Payment Data: Bank account information, credit/debit card details (processed via secure payment partners), transaction records
• Cookies and Tracking Technologies: Unique cookies, session identifiers, web beacons, and pixel tags (see "Cookies & Tracking Technologies" below)

EXPAND: The collection of these data categories is essential for regulatory compliance, service provision, fraud prevention, and user experience optimization.

Legal Basis for Processing

OBSERVE: Processing of personal data by grand-villa-casino-ca.com is grounded in multiple legal bases as mandated by federal and provincial Canadian law and standard industry practices.

1. User Consent: Data processing for marketing, analytics, and optional features is based on explicit user consent, which may be withdrawn at any time. Consent is obtained at the point of data collection or through affirmative action (e.g., account creation, newsletter sign-up).
2. Performance of Contract: Data necessary for account operation, provision of gambling services, fulfillment of winnings, and customer support is processed to fulfill the contractual relationship between the user and grand-villa-casino.
3. Legitimate Interests: Processing for purposes such as fraud detection, network and information security, and service analytics is justified by the legitimate interests of grand-villa-casino, provided these do not override user rights and freedoms.
4. Legal Obligations: Compliance with anti-money laundering (AML), know-your-customer (KYC), tax reporting, and regulatory requirements, as enforced by BCLC and AGLC, necessitates the processing and retention of specific personal information.

REFLECT: Where required by law, users are notified of the applicable legal basis for each processing activity and provided with mechanisms to exercise their rights.

Purpose of Processing

OBSERVE: Personal data is processed by grand-villa-casino-ca.com for the following core purposes:

• Provision of Casino Services: To enable user registration, identity verification, account management, wagering, and payouts
• Compliance: To fulfill regulatory, legal, and reporting obligations as required by Canadian authorities
• Service Improvement: To analyze usage patterns, identify technical issues, and enhance the website's performance and features
• Marketing: To send promotional materials, updates, and tailored offers (subject to user consent)
• Analytics: To collect aggregate and anonymized data for service optimization and strategic analysis
• Fraud and Risk Prevention: To detect, investigate, and prevent fraudulent or suspicious activities

REFLECT: Data is never used for purposes incompatible with these stated objectives without explicit user notification and consent.

Disclosure & Sharing

OBSERVE: grand-villa-casino-ca.com may disclose personal data to third parties where necessary to fulfill its contractual, regulatory, and legal obligations.

• Payment Partners: Secure transmission of financial and transaction data to authorized payment processors for deposits and withdrawals
• Service Providers: Engagement of vetted IT, hosting, marketing, analytics, and security vendors under strict confidentiality agreements
• Regulatory Authorities: Mandatory disclosure to BCLC, AGLC, law enforcement, and other governmental agencies for compliance, audits, or investigations
• Affiliates: Limited sharing with corporate affiliates within Gateway Casinos & Entertainment Limited for internal administrative purposes, subject to privacy safeguards
• Advertising Networks: Sharing of user data with advertising partners only with explicit user consent, primarily for targeted marketing and analytics

EXPAND: All third parties are contractually required to maintain the confidentiality and security of personal data and to process it strictly for the specified purposes.

International Transfers

OBSERVE: Personal data collected by grand-villa-casino-ca.com may be stored or processed outside Canada, including in jurisdictions such as the United States and European Economic Area, where service providers or corporate affiliates are located.

• Data Safeguards: All international data transfers are governed by standard contractual clauses and other legally recognized transfer mechanisms to ensure adequate protection consistent with Canadian privacy standards.
• Subprocessor Due Diligence: Vendors and partners outside Canada are subject to rigorous privacy and security assessments prior to data transfer.
• User Rights: Users will be notified if their data is processed in jurisdictions with materially different privacy protections and may object or request further information as permitted by law.

REFLECT: grand-villa-casino-ca.com ensures compliance with all applicable cross-border data transfer requirements and will update users of any significant changes to international data flows.

Data Retention

OBSERVE: Personal data is retained by grand-villa-casino-ca.com only as long as necessary to fulfill the purposes for which it was collected, meet regulatory obligations, and resolve disputes.

• Personal Identification Data: Retained for a maximum of five (5) years following account closure or final transaction, in accordance with CA gambling and anti-money laundering laws
• Transactional and Behavioral Data: Retained for up to five (5) years or as required by regulatory authorities
• Marketing Data: Retained until the user withdraws consent or requests deletion
• Deletion Criteria: Data is deleted upon user request (subject to legal retention requirements), expiration of statutory periods, or once processing purposes have been fulfilled

REFLECT: grand-villa-casino-ca.com implements secure deletion protocols and ensures that all data is irreversibly destroyed or anonymized at the end of its retention period.

Your Rights

OBSERVE: In alignment with GDPR and Canadian privacy laws, users of grand-villa-casino-ca.com are granted the following rights regarding their personal data:

1. Access: Users may request confirmation and a copy of personal data held by grand-villa-casino-ca.com.
2. Rectification: Users can request corrections to inaccurate or outdated personal information.
3. Erasure ("Right to be Forgotten"): Users may request deletion of personal data where processing is no longer necessary, subject to legal retention requirements.
4. Restriction of Processing: Users may request that processing of their data be limited under certain circumstances.
5. Objection: Users can object to processing based on legitimate interests or direct marketing.
6. Data Portability: Users may obtain their data in a structured, machine-readable format and request its transfer to another provider.
7. Withdrawal of Consent: Users may withdraw consent to marketing or non-essential processing at any time without affecting the lawfulness of prior processing.

Procedures for Exercising Rights:

• Submit requests via e-mail to info@grand-villa-casino-ca.com or support@grand-villa-casino-ca.com
• All requests are processed free of charge and responded to within thirty (30) days, unless otherwise required by law
• In certain cases, additional verification may be required to confirm identity before fulfilling requests

REFLECT: These rights are subject to legal limitations as prescribed under Canadian and, where applicable, international regulations. Users are notified of any restrictions and provided with reasons for refusal where applicable.

Regional Compliance Note: While Mexican data protection law is referenced for international harmonization, all processing is primarily governed by Canadian law and standards. Users with cross-jurisdictional concerns may contact our Data Protection Department for further clarification.

Cookies & Tracking Technologies

OBSERVE: grand-villa-casino-ca.com uses cookies and similar technologies to enhance user experience, analyze website performance, and support marketing efforts.

• Session Cookies: Temporary cookies that enable site functions and are deleted when the browser is closed
• Persistent Cookies: Remain on the user's device for a defined period to remember preferences and settings
• Third-Party Cookies: Deployed by analytics and advertising partners (e.g., Google Analytics) with user consent

Purposes: Functional (site operation), analytics (usage statistics), advertising (personalized offers)

• Cookie Management: Users can manage or disable cookies through browser settings or, where available, via an internal cookie management panel on grand-villa-casino-ca.com

REFLECT: Disabling certain cookies may impact user experience or limit access to some website features.

Data Security

OBSERVE: grand-villa-casino-ca.com employs robust security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

• Encryption: All data in transit is secured via TLS 1.2+; sensitive data at rest is encrypted using industry-standard algorithms
• Access Controls: Role-based access, multi-factor authentication, and least privilege principles for staff and partners
• Security Audits: Routine internal and external security assessments, including vulnerability scanning and penetration testing
• Incident Response: Documented procedures for timely detection, reporting, and remediation of security incidents
• Staff Training: Mandatory privacy and security awareness programs for all employees with access to personal data
• Compliance: Adherence to international security standards such as ISO 27001 and SOC 2, where applicable

REFLECT: Regular security reviews ensure continued alignment with evolving legal and technical standards in the Canadian gambling sector.

Complaints & Contacts

OBSERVE: grand-villa-casino-ca.com is committed to addressing all privacy-related inquiries and complaints promptly and transparently.

1. Direct Contact: Users may submit complaints or queries via e-mail to info@grand-villa-casino-ca.com or support@grand-villa-casino-ca.com. Written correspondence may be directed to our principal office at 4331 Dominion Street, Burnaby, BC V5G 1C7, Canada.
2. Complaint Procedure: Upon receipt, complaints are acknowledged within five (5) business days. A substantive response is provided within thirty (30) days, following investigation and, where appropriate, remediation.
3. Escalation Path: If dissatisfied with our response, users may contact the Office of the Privacy Commissioner of Canada (OPC):
   
   • Website: https://www.priv.gc.ca/en/
   • Phone: 1-800-282-1376
   • Mail: 30 Victoria Street, Gatineau, Quebec, K1A 1H3, Canada
4. International Concerns: Users concerned about cross-border data processing may also refer complaints to relevant EU data protection authorities or the Mexican National Institute for Transparency, Access to Information and Personal Data Protection (INAI), as applicable.

REFLECT: grand-villa-casino-ca.com is dedicated to fair and lawful resolution of all privacy complaints and will fully cooperate with supervisory authorities as required.

Updates

OBSERVE: grand-villa-casino-ca.com may amend this Privacy Policy to reflect changes in legal requirements, operational practices, or technological advancements.

• Notification Procedures: Users will be notified of material changes via e-mail, prominent website banners, and account dashboard alerts at least thirty (30) days in advance of the effective date.
• Version Control: The current policy is marked with "Last updated: November 6, 2025."
• Changelog of Material Changes:
  • 2025-11-06: Updated data retention periods and international transfer mechanisms; enhanced explanation of user rights; clarified security measures.
• User Options: Users may object to significant changes or close their accounts without penalty prior to the new policy taking effect.

REFLECT: Continued use of grand-villa-casino-ca.com following updates constitutes acceptance of the revised policy. Users are encouraged to review the Privacy Policy periodically.