Woodbine Online Casino
Last updated: May 2026
1. Who We Are
We are Great Canadian Casino Resort Toronto, operating the Woodbine Online Casino under a licence issued by the Alcohol and Gaming Commission of Ontario. Our registered address is 1133 Queens Plate Drive, Toronto, ON M9W 0G4. We process personal data in compliance with Canada's Personal Information Protection and Electronic Documents Act and applicable Ontario privacy legislation. Questions about this policy can be directed to our privacy team at privacy@woodbinecasino.ca.
2. Information We Collect
We collect personal data through two routes: information you provide directly and information generated through your use of our platform.
Information you provide
- Identity data: full legal name, date of birth, gender
- Contact data: email address, phone number, residential address
- Verification documents: government-issued photo ID, proof of address, payment method documentation submitted during KYC
- Account data: username, password, security questions
- Financial data: deposit and withdrawal history, preferred payment methods
Information generated automatically
- Technical data: IP address, browser type, device identifiers, operating system
- Usage data: pages visited, games played, session duration, click patterns
- Transaction data: deposit amounts, withdrawal requests, bonus activity
- Cookie data: session cookies, preference cookies, analytics identifiers
3. How We Use Your Information
Woodbine Casino Canada uses the data we collect for the following purposes:
- Account management: creating, maintaining, and securing your player account
- Identity verification: completing KYC checks as required by AGCO before processing withdrawals
- Payment processing: handling deposits, withdrawals, and transaction records
- Regulatory compliance: meeting our obligations under Ontario gambling law, including anti-money laundering requirements
- Responsible gambling: monitoring account activity for signs of problem gambling and applying self-exclusion restrictions where applicable
- Platform improvement: analysing usage patterns to improve site performance and game availability
- Communications: sending account notifications, security alerts, and promotional messages where you have opted in
- Fraud prevention: detecting and investigating suspicious account activity
We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
4. Legal Basis for Processing
Woodbine Casino Online processes your personal data on the following legal grounds:
- Contractual necessity: processing required to operate your account and deliver our services
- Legal obligation: processing required to comply with AGCO regulations, anti-money laundering laws, and tax reporting requirements
- Legitimate interests: fraud prevention, platform security, and responsible gambling monitoring
- Consent: marketing communications and non-essential cookies - you may withdraw consent at any time through your account settings
5. Who We Share Your Information With
We do not sell your personal data.
Woodbine Canada shares data only where necessary and with the following categories of recipients:
- Regulatory authorities: AGCO and other Ontario or federal bodies where disclosure is legally required
- Identity verification providers: third-party KYC and fraud detection services operating under data processing agreements
- Payment processors: Interac and e-wallet providers required to complete financial transactions
- Game providers: software studios including Evolution Gaming, Pragmatic Play, and others who power our game catalogue - limited to data necessary for game delivery
- IT and hosting providers: cloud infrastructure and security vendors processing data on our behalf under contractual data protection obligations
- Legal and compliance advisors: where disclosure is required to defend or pursue legal claims
All third parties operating on our behalf are bound by data processing agreements that restrict how they handle your information.
6. Cookies and Tracking Technologies
Woodbine online casino uses cookies and similar tracking technologies across our platform.
Here is what each category does:
- Strictly necessary cookies: enable core functions including login, session management, and security - these cannot be disabled
- Functional cookies: remember your preferences such as language settings and game filters
- Analytics cookies: track aggregated usage patterns to help us improve platform performance - no individually identifying data is shared externally
- Marketing cookies: used only where you have given explicit consent to receive personalised promotional content
You can manage non-essential cookie preferences through the cookie settings panel available on our platform. Withdrawing consent for optional cookies does not affect your ability to use core account features.
7. Data Retention
Woodbine CA retains your personal data for as long as your account remains active and for a minimum of five years following account closure, as required by AGCO and anti-money laundering regulations.
Specific retention periods by data type:
- Identity and verification documents: seven years from account closure
- Transaction records: seven years from the date of each transaction
- Responsible gambling records: seven years from the date of any self-exclusion or intervention
- Marketing preferences: until you withdraw consent or close your account
- Technical and usage logs: 24 months from collection
When retention periods expire, we securely delete or anonymise the data.
8. Data Security
Woodbine Casino Online protects your personal data using the following measures:
- Encryption: 256-bit SSL encryption on all data transmitted between your device and our servers
- Access controls: role-based internal access limited to staff who require the data to perform their function
- Two-factor authentication: available and recommended for all player accounts
- Regular audits: periodic security assessments conducted by independent third-party firms
- Incident response: a documented breach response protocol in place in accordance with PIPEDA notification requirements
In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada within the timeframes required by law.
9. International Data Transfers
Some of our third-party service providers, including game studios and cloud infrastructure vendors, operate outside Canada. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual clauses that require recipient organisations to meet data protection standards equivalent to those applicable in Ontario. Woodbine Canada does not transfer data to jurisdictions that lack adequate legal protections without these safeguards in place.
10. Your Rights
As an Ontario resident, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request that we correct inaccurate or incomplete information
- Withdrawal of consent: withdraw consent for marketing communications or optional cookies at any time
- Complaint: lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or by calling 1-800-282-1376
To exercise any of these rights, contact our privacy team at privacy@woodbinecasino.ca. We will respond within 30 days of receiving your request. Identity verification may be required before we process access or correction requests.
