Privacy Policy

This Privacy Policy explains how goldens-crown-casino-canada, operating via goldens-crown-casino-ca.com, collects, uses, discloses, and protects your personal information. It applies to all players and visitors of goldens-crown-casino-ca.com and related services. This policy is effective as of November 6, 2025, and is designed to ensure compliance with Canadian privacy laws, Curaçao regulatory requirements, and relevant industry standards.

Who We Are

OBSERVE: The operator of goldens-crown-casino-ca.com is a registered legal entity with oversight obligations for user data.
EXPAND: Full corporate identification and contact details are required for transparency and regulatory compliance.
REFLECT: Users must have clear channels to reach the responsible entity for privacy matters.

• Legal Entity: The website goldens-crown-casino-ca.com is owned and operated by Hollycorn N.V., registered in Curaçao with company registration number 144359.
• Registered Address: Scharlooweg 39, Willemstad, Curaçao.
• Gaming License: Licensed and regulated by the Curaçao Gaming Control Board (GCB) under license number OGL/2023/176/0095, valid through 2025.
• Data Protection Contact: For privacy-related inquiries, please use the contact form on goldens-crown-casino-ca.com or direct correspondence to the Data Protection Officer (DPO) via the channels provided on our website.

What Personal Data We Collect

OBSERVE: Canadian and international privacy law requires explicit disclosure of all categories of data collected.
EXPAND: Collection covers user-provided, technical, behavioral, and payment data, as well as cookies.
REFLECT: Transparency in data collection builds user trust and ensures compliance.

• Personal Identification Data: Full name, date of birth, residential address, email address, phone number, and government-issued ID for identity verification (KYC/AML compliance).
• Technical Data: IP address, device identifiers, operating system, browser type, log files, and access times collected automatically when using goldens-crown-casino-ca.com.
• Payment and Financial Data: Bank account numbers, credit/debit card details, transaction histories, and withdrawal/deposit records, as required for processing payments and detecting fraudulent activity.
• Behavioral Data: Betting and gaming history, account activity logs, bonus usage, transaction patterns, user preferences, and clickstream data for analytics and service enhancement.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and third-party cookies to facilitate website functionality, analytics, and advertising (see 'Cookies & Tracking Technologies' for details).

Legal Basis for Processing

OBSERVE: Data processing must be justified under Canadian law, EU GDPR principles (as industry best practice), and Curaçao regulations.
EXPAND: Multiple legal bases apply, including user consent, contract necessity, legitimate interests, and legal obligations.
REFLECT: Users must be informed of the precise grounds for each type of data processing.

• User Consent: Certain data processing activities (such as marketing communications and optional cookies) are performed only with your explicit consent, which can be withdrawn at any time.
• Contractual Necessity: Processing is necessary for the performance of our contract with you, including account creation, service provision, financial transactions, and customer support.
• Legitimate Interests: We process data to prevent fraud, ensure network and information security, analyze website performance, and improve our services, provided these interests are not overridden by your rights and freedoms.
• Legal Obligations: We are required to process certain data for compliance with applicable laws and regulations, such as anti-money laundering (AML), know your customer (KYC), tax reporting, and responsible gambling requirements.

Regional Compliance Note: Where the law requires, your consent is requested before collecting or processing sensitive or optional data.

Purpose of Processing

OBSERVE: Users must be clearly informed of why and how their data is used.
EXPAND: Purposes must cover service provision, legal compliance, marketing, analytics, and security.
REFLECT: Comprehensive listing ensures transparency and supports user rights.

• Service Delivery: To provide, operate, and maintain your account and access to all gaming features on goldens-crown-casino-ca.com.
• Payment Processing: To facilitate deposits, withdrawals, and verify financial transactions securely.
• Regulatory Compliance: To fulfill obligations under AML, KYC, and other applicable laws, including identity verification and age checks.
• Marketing & Promotions: To send you promotional materials, newsletters, and special offers, subject to your consent and preferences.
• Analytics & Service Improvement: To analyze website usage, enhance user experience, and develop new features.
• Fraud Prevention & Security: To detect and prevent fraudulent activities, unauthorized access, and breaches of our terms and policies.

Disclosure & Sharing

OBSERVE: Canadian privacy law mandates disclosure of all third parties and circumstances for sharing personal data.
EXPAND: This includes payment processors, service providers, legal authorities, affiliates, and advertising partners.
REFLECT: Users must know who may access their data and under what conditions.

• Payment Partners: Your data may be shared with banks, payment processors, and financial institutions strictly for the purpose of transaction processing and fraud prevention.
• Service Providers: We may engage third-party vendors for hosting, IT support, analytics, and customer service, subject to strict confidentiality obligations.
• Regulators & Legal Authorities: Data may be disclosed to regulatory bodies (e.g., Curaçao GCB), government agencies, or courts as required by law, regulation, or legal process.
• Affiliates & Corporate Transactions: In case of business transfers, mergers, or reorganizations involving Hollycorn N.V. or its subsidiaries (such as Abo Casino, Boho Casino, SkyCrown Casino), user data may be transferred in compliance with applicable laws.
• Advertising Networks: With your consent, we may share certain data with marketing affiliates or advertising partners to deliver targeted content and promotions.

Protective Clause: We do not sell, rent, or trade your personal information to unrelated third parties for their own marketing purposes.

International Transfers

OBSERVE: Data processed on goldens-crown-casino-ca.com may be transferred outside Canada.
EXPAND: Transfers occur to Curaçao (corporate headquarters), EU/EEA, and other jurisdictions where our service providers operate.
REFLECT: Strong data protection guarantees are implemented in all cross-border transfers.

• Transfer Destinations: Your data may be transferred to and processed in Curaçao, the European Union (EU/EEA), or other countries with adequate data protection frameworks.
• Safeguards: We implement appropriate safeguards such as Standard Contractual Clauses (SCCs), binding corporate rules, and contractual obligations to ensure your data remains protected to a standard comparable to Canadian law.
• Third-Party Compliance: All service providers receiving your data must demonstrate compliance with applicable privacy regulations and undertake to protect your data accordingly.

Regional Compliance Note: By using goldens-crown-casino-ca.com, you consent to the transfer of your personal data as described, subject to applicable legal requirements and your rights outlined below.

Data Retention

OBSERVE: Privacy legislation requires explicit data retention and deletion timelines.
EXPAND: Different categories of data have specific retention periods based on regulatory, contractual, and operational needs.
REFLECT: Users are entitled to know how long their data is stored and under what criteria it may be deleted.

• Personal Data: Retained for the duration of your account's activity and up to 5 years after account closure, in compliance with anti-money laundering (AML) and regulatory obligations.
• Payment Records: Retained for at least 5 years following the completion of each transaction or termination of the business relationship, as required by financial regulations.
• Technical & Behavioral Data: Retained for as long as necessary to fulfill the purposes outlined in this policy or until you request deletion, subject to legal constraints.
• Deletion Criteria: Data is deleted or anonymized upon expiration of the relevant retention period, completion of processing purposes, or upon verified user request unless retention is required by law.

Protective Clause: Data will be securely erased or anonymized in accordance with industry standards and regulatory requirements.

Your Rights

OBSERVE: Users in Canada are entitled to robust privacy rights, with GDPR-alignment as industry best practice.
EXPAND: Rights include access, correction, deletion, restriction, objection, portability, and withdrawal of consent.
REFLECT: Our procedures ensure free-of-charge, timely responses and full regulatory compliance.

1. Right of Access: You may request confirmation of whether we process your personal data and receive a copy of such data.
2. Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
3. Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where processing is no longer necessary or consent is withdrawn, subject to legal retention requirements.
4. Right to Restrict Processing: You may request temporary suspension or limitation of data processing under certain circumstances.
5. Right to Object: You may object to processing based on legitimate interests or direct marketing at any time.
6. Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format for transfer to another service provider.
7. Right to Withdraw Consent: Where processing relies on consent (e.g., marketing), you may withdraw it at any time without affecting the lawfulness of prior processing.

• How to Exercise Rights: Submit requests via the contact form or channels listed on goldens-crown-casino-ca.com. We will acknowledge, assess, and respond to your request within 30 days, free of charge, except in cases of manifestly unfounded or excessive requests.
• Supervisory Authority: If you are dissatisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) or, if applicable, the Curaçao Gaming Control Board or your local data protection authority.

Regional Compliance Note: These rights reflect Canadian privacy law and international best practices; they are not limited to GDPR but harmonized for global compliance.

Cookies & Tracking Technologies

OBSERVE: Users must be informed of cookie usage and management options.
EXPAND: Categorize cookies by type and purpose, provide opt-out mechanisms.
REFLECT: Transparent cookie practices support regulatory compliance and user trust.

• Session Cookies: Temporary cookies essential for secure website navigation and core functionality; deleted after browser session ends.
• Persistent Cookies: Remain on your device for a defined period to remember preferences and enhance user experience.
• Third-Party Cookies: Set by analytics, advertising, or affiliate partners (e.g., Google Analytics) to measure website performance and deliver targeted promotions, subject to your consent.

• Cookie Management: You can manage or disable cookies through your browser settings or, where available, the internal cookie consent panel on goldens-crown-casino-ca.com. Note that disabling certain cookies may affect website functionality.

Data Security

OBSERVE: Security measures must be robust, industry-standard, and clearly described.
EXPAND: Include technical, organizational, and procedural safeguards, referencing international standards where applicable.
REFLECT: Users must be assured of the protection of their personal data against unauthorized access and breaches.

• Data Encryption: All personal information is encrypted at rest and in transit using TLS 1.2+ protocols and advanced cryptographic standards.
• Access Controls: Access to personal data is limited to authorized personnel with multi-factor authentication and strictly enforced role-based permissions.
• Regular Security Audits: goldens-crown-casino-ca.com undergoes periodic security testing and vulnerability assessments to identify and remediate risks.
• Incident Response: We have documented procedures for detecting, reporting, and responding to data breaches, including notifying affected users and relevant authorities as required by law.
• Staff Training: Employees are trained in data protection best practices and subject to confidentiality obligations.
• International Standards: Our security framework aligns with globally recognized standards such as ISO/IEC 27001 and SOC 2, as applicable.

Protective Clause: Despite all reasonable efforts, no online system is completely immune from risks. Users are encouraged to maintain strong, unique passwords and promptly report any suspected unauthorized activity.

Complaints & Contacts

OBSERVE: Provide users with clear, multi-channel options to raise privacy complaints.
EXPAND: Outline complaint procedures, response timelines, and escalation paths to authorities.
REFLECT: User grievances are addressed promptly and transparently, in line with legal obligations.

1. Complaint Submission: Contact our Data Protection Officer (DPO) using the online contact form at goldens-crown-casino-ca.com. Please provide sufficient detail to enable investigation.
2. Procedure: We will acknowledge receipt of your complaint within 7 business days and provide a full response within 30 days, unless an extension is justified by the complexity of the case.
3. Escalation: If you are dissatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC) at https://www.priv.gc.ca/en/contact-the-opc/, or the Curaçao Gaming Control Board at https://www.gamingcontrolcuracao.org/.

• Mailing Address: For postal correspondence, use our registered address: Scharlooweg 39, Willemstad, Curaçao.
• Contact Person: Attention: Data Protection Officer, Hollycorn N.V.

Updates

OBSERVE: Users must be notified of policy changes in a timely and transparent manner.
EXPAND: Specify notification channels, version control, and user rights in the event of significant changes.
REFLECT: Change management ensures ongoing compliance and user awareness.

• Notification Procedures: Material updates to this Privacy Policy will be communicated via email (where available), website banners, and account dashboard alerts.
• Advance Notice: For significant changes, we will provide at least 30 days' advance notice before the new terms take effect.
• User Options: You may object to material changes or close your account before updated terms become effective.
• Version Control: Last updated: November 6, 2025. A changelog of material amendments will be made available upon request.

Protective Clause: Continued use of goldens-crown-casino-ca.com after updates constitutes acceptance of the revised policy, except where prohibited by law.