How Stake Protects Personal Information in Canada

Stake collects several categories of personal information to deliver its casino and sportsbook services to users in Canada. This includes:

• Registration details, such as full name, date of birth, email address, and residential address, used to verify identity and confirm eligibility;
• Payment information, including deposit and withdrawal methods, transaction history, and billing details, required to process financial transactions securely;
• Usage data, such as device type, IP address, browser information, and gameplay activity, collected to maintain platform functionality and detect irregular account behaviour.

Each category reflects the purpose behind data collection, including account verification, regulatory compliance, and the delivery of online gaming and betting services.

Personal information gathered from users supports several operational functions. Collected data allows:

• Management of user accounts, including registration, login authentication, and profile updates;
• Maintenance of platform security through fraud detection and monitoring of suspicious activity;
• Personalization of gameplay recommendations and promotional communications based on user preferences;
• Analysis of usage patterns to improve website performance and service quality;
• Fulfilment of legal and regulatory obligations, including financial crime prevention checks and responsible gambling monitoring.

All processing activities align with applicable Canadian privacy regulations and industry standards for online gaming operators.

Cookies and comparable tracking technologies are used across the platform and associated websites to support core functionality and enhance user experience. These tools help:

• Retain login sessions and account preferences between visits;
• Measure website traffic and analyze usage patterns for performance improvements;
• Deliver relevant content and promotional information based on browsing behaviour.

Users can manage cookie preferences through browser settings, though disabling certain cookies may affect the functionality of some features available on the platform.

Personal information may be shared under specific circumstances to support service delivery and legal compliance. Data may be disclosed to:

• Payment processors and financial institutions to complete deposits and withdrawals;
• Regulatory authorities and law enforcement agencies when required by applicable law;
• Service providers supporting technical operations, customer support, and fraud prevention;
• Professional advisors, including auditors and legal counsel, when necessary for compliance purposes.

All external parties receiving personal information are held to strict confidentiality and data protection obligations consistent with recognized industry standards.

Multiple technical and organizational measures protect personal information from unauthorized access, loss, or misuse. These include:

• Encryption protocols applied to sensitive data during transmission and storage;
• Restricted access controls limiting information availability to authorized personnel only;
• Continuous system monitoring to identify and address potential vulnerabilities.

These measures are reviewed periodically to maintain alignment with current data protection standards and evolving security requirements within the online gaming industry.

Users maintain several rights concerning their personal information, consistent with Canadian privacy legislation. These rights include:

• Accessing a copy of personal information held on file;
• Requesting correction of inaccurate or outdated details;
• Requesting deletion of personal information, subject to legal and regulatory retention requirements;
• Restricting or objecting to certain types of data processing;
• Withdrawing consent for optional data uses, such as marketing communications.

Requests can be submitted through official support channels, and identity verification may be required before any action is taken.

Personal information is retained only for the period necessary to fulfil the purposes outlined in this policy. Retention periods depend on:

• Legal and regulatory obligations applicable to gaming and financial service providers;
• The duration of an active account relationship;
• Requirements related to dispute resolution, audits, or fraud investigations.

Once retention periods expire, personal information is securely deleted or anonymized in accordance with established data management procedures.

External service providers support various operational functions, including payment processing, identity verification, and website analytics. These providers process personal information strictly according to contractual agreements and applicable data protection requirements. Examples include:

• Payment processors facilitating deposits and withdrawals;
• Analytics providers measuring website performance and user engagement;
• Technical support services maintaining platform stability and security.

Personal information shared with external providers remains limited to what is necessary for each specific service function.

Personal information may be transferred to and processed in countries outside Canada, depending on the location of service providers and technical infrastructure. When such transfers occur, safeguards are applied to maintain consistent data protection standards, including:

• Contractual clauses requiring recipients to uphold equivalent privacy protections;
• Assessment of recipient jurisdictions for adequate data protection frameworks;
• Encryption of data during transfer processes.

These safeguards apply regardless of where personal information is processed or stored.

This Privacy Policy may be updated periodically to reflect changes in legal requirements, business practices, or service offerings. Material updates will be communicated through notices on the website or direct communication to registered users. Continued use of the platform after such updates indicates acceptance of the revised terms outlined in the policy.