Privacy Policy

This Privacy Policy explains how AvoCasino, operated by Hazy Ltd under a licence issued by the Offshore Finance Authority of the State of Anjouan, collects, uses, stores, and protects personal information belonging to players who access the platform from Canada. It covers the categories of data we process, the reasons we process them, the role of cookies, how information may be shared with third parties, how long records are retained, and the rights available to account holders. This document applies to all visitors and registered users of the site and to anyone who interacts with our support channels, payment systems, or promotional tools, including bonus features that require identity verification or deposit tracking.

Scope and Acceptance

By visiting the website, creating an account, or using any part of the platform, a user agrees to the collection and processing of personal data as described in this policy. If a visitor does not agree with the terms set out here, they should refrain from registering an account or providing personal information beyond what is strictly necessary to browse publicly available pages. Continued use of the site after any update to this policy constitutes acceptance of the revised terms. This policy should be read together with our general Terms & Conditions, which govern account use, deposits, withdrawals, and bonus eligibility.

Legal Minimum Age and Data Collection from Minors

Registration and account use are restricted to individuals who meet the minimum legal age for online gambling in their province of residence, which is 19 in most Canadian provinces and 18 in Alberta, Manitoba, and Quebec. We do not knowingly collect personal information from anyone below this threshold, and identity verification procedures are designed in part to confirm that an applicant meets this requirement before funds can be withdrawn. Where we have reason to believe an account has been opened by someone under the applicable minimum age, the account is suspended, associated data is reviewed, and appropriate action is taken, which may include closure of the account and return of deposited funds net of any withdrawals already processed. Parents or guardians who believe a minor has accessed the platform are encouraged to contact our support team so the matter can be addressed promptly.

Categories of Personal Data We Collect

We collect information directly provided by users during registration, account management, deposits, withdrawals, and customer support interactions, as well as information generated automatically through use of the platform. The table below summarizes the main categories of data processed and the general purpose behind each category.

We do not request or store more information than is reasonably necessary to operate the account, verify identity where required, process payments, and meet regulatory obligations tied to our licence.

How We Use Personal Data

Personal data is used to create and maintain player accounts, to verify identity and age before withdrawals are approved, and to process deposits and payouts through the payment methods available on the platform, which include Interac e-Transfer, major cards, e-wallets, bank wire transfer, and several cryptocurrencies. Data is also used to monitor account activity for signs of fraud, collusion, or other prohibited behaviour, and to apply the rules attached to any bonus a player chooses to activate, such as wagering requirements, maximum bet limits while a bonus is active, and validity periods. Where a player requests a deposit limit, time-out, or self-exclusion under our responsible gaming tools, the relevant account flags are recorded and applied consistently across the platform. We may also use contact information to send service-related communications, such as security notices or changes to policies, though marketing communications are only sent where permitted and can be opted out of at any time.

Cookies and Similar Technologies

Our website uses cookies and comparable tracking technologies to keep sessions active, remember display preferences, and understand how visitors navigate the platform. Some cookies are strictly necessary for core functions such as logging in and maintaining a secure session, while others are used for analytics purposes to help us understand which pages are visited most often and how long users typically stay on a given section. We do not use cookies to infer sensitive personal characteristics, and cookie data is generally anonymized or pseudonymized before being used for analytical reporting. Users can control or disable cookies through their browser settings, though doing so may affect the functionality of certain features, including the ability to remain logged in or to access parts of the site that depend on session data. Where a dedicated cookie consent mechanism is presented on first visit, choices made there are respected and can typically be changed later through browser settings.

Legal Basis for Processing

We process personal data on several legal grounds, including the performance of the contract formed when a user opens an account and agrees to the Terms & Conditions, compliance with legal and regulatory obligations tied to anti-money laundering and know-your-customer requirements, and legitimate interests in maintaining platform security and preventing fraud. Where consent is the applicable basis, such as for certain optional marketing communications, that consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal. We rely on regulatory obligation as the basis for retaining identity verification records for as long as required by applicable financial crime prevention standards, even after an account becomes inactive.

Sharing of Personal Data with Third Parties

Personal data may be shared with service providers who support the operation of the platform, including payment processors, identity verification providers, and technology partners who help deliver secure hosting and fraud detection services. Our payment agent, Plickon Limited, registered in Cyprus, is involved in processing certain transactions and may receive relevant financial data as part of that role. We may also share information with regulatory authorities, law enforcement, or courts where required by law, or where necessary to protect the rights, property, or safety of the platform, our users, or the public. We do not sell personal data to third parties for their own independent marketing purposes, and any sharing arrangement is limited to what is necessary for the stated purpose.

Data Retention

We retain personal data for as long as an account remains active and for a further period after closure to meet legal, regulatory, and accounting obligations, including anti-money laundering record-keeping requirements that commonly require retention of identity and transaction records for several years. Data connected to unresolved disputes, complaints, or ongoing investigations may be retained beyond standard periods until the matter is fully resolved. Once retention periods expire and no legal obligation to retain data remains, we take reasonable steps to delete or anonymize the information so it can no longer be linked to an identifiable individual.

Security Measures

We apply technical and organizational measures designed to protect personal data against unauthorized access, alteration, loss, or disclosure. These measures include 128-bit SSL encryption across data transmissions, optional two-factor authentication for account access, and internal controls limiting staff access to personal data on a need-to-know basis. KYC and AML checks are used not only for regulatory compliance but also to reduce the risk of identity theft and unauthorized account use. While we take security seriously, no system can guarantee absolute protection against every possible threat, and users are encouraged to use strong, unique passwords and to safeguard their own login credentials.

Bonus-Related Data and Verification

Where a player activates a bonus, certain account and transaction data is used specifically to track compliance with the applicable rules, such as wagering requirements, maximum bet restrictions during an active bonus, and time limits on eligibility. The table below sets out a general summary of the type of data-linked conditions that apply, drawn from the standard bonus terms in effect.

Data collected to enforce these conditions, including wagering progress and game session logs, is retained only for as long as necessary to confirm compliance and resolve any related account queries, after which it is treated under our standard retention rules.

User Rights

Depending on applicable privacy law, users may have rights to request access to the personal data we hold about them, to request correction of inaccurate information, to request deletion of data that is no longer necessary for the purposes it was collected, and to object to certain types of processing, such as direct marketing. Requests of this nature can be submitted through our support channels, available via live chat or email, and are reviewed on a case by case basis, taking into account any competing legal obligations, such as record-keeping requirements tied to financial crime prevention. We aim to respond to legitimate requests within a reasonable timeframe and will explain clearly if a request cannot be fulfilled in full due to a conflicting legal obligation.

Responsible Gaming and Data Used for Player Protection

Account data plays an important role in supporting responsible gaming tools available on the platform, including deposit limits, time-outs, and self-exclusion options ranging from six months to five years. Once self-exclusion is activated, it is treated as irrevocable for the selected period, and account access is restricted accordingly, with relevant flags recorded to prevent circumvention through the creation of new accounts. We encourage all players to review available responsible gaming resources and to reach out to support if they have concerns about their own play or that of someone close to them. Players in Canada can also access independent responsible gambling organizations in their province for confidential advice and support outside of the platform itself.

Restricted Jurisdictions and Cross-Border Data Transfers

Because the platform operates internationally under an Anjouan licence while serving players in Canada, personal data may be processed or stored on servers located outside Canada. Where data is transferred across borders, we take reasonable steps to ensure an appropriate level of protection is maintained, consistent with the standards described in this policy. Users who reside in a jurisdiction where online gambling is restricted or prohibited should not attempt to register an account, and we reserve the right to restrict access or close accounts where residence in a restricted region becomes apparent.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our data practices, legal requirements, or the services offered on the platform. When material changes are made, we take reasonable steps to make the updated policy available on the website so users can review the current terms. Continued use of the platform after an update is published constitutes acceptance of the revised policy, and users who disagree with a material change should stop using the service and may contact support to discuss closing their account.

Contact and Complaints

Questions about this Privacy Policy, requests relating to personal data, or complaints about how information has been handled can be directed to our support team, available through live chat around the clock or by email. We aim to acknowledge inquiries promptly and to provide a substantive response within a reasonable period, taking into account the complexity of the request. If a concern cannot be resolved directly with support, users may also have the right to raise the matter with an applicable data protection authority, depending on their place of residence, though the primary route for resolving day to day questions remains our own support channels. For general information about how bonus terms, payments, and account rules interact with the data practices described here, players can also refer to the operator’s Terms & Conditions and the responsible gaming resources published on the site.