burger icon
Prism Casino
Log In

Privacy Policy

This privacy policy explains how prism-casino, operating exclusively through prism-casino-ca.com, collects, uses, discloses, and protects your personal information. It applies to all players and website visitors who access or use our services from Canada. Effective date: November 6, 2025.

Who We Are

OBSERVE: prism-casino operates under the Virtual Casino Group, with business registration number 3-102-353154 in Costa Rica. The brand's online operations in Canada are exclusively through prism-casino-ca.com. EXPAND: Although registered in Costa Rica, prism-casino is not licensed as a gaming operator under any recognized regulatory authority and is subject to applicable Canadian privacy laws when processing Canadian players' data. REFLECT: For all privacy-related matters, the designated contact is provided below.

Regional Compliance Note: As prism-casino-ca.com targets Canadian users, all personal data is handled in accordance with Canadian privacy laws, including PIPEDA, and international best practices.

What Personal Data We Collect

OBSERVE: prism-casino-ca.com collects a range of information to provide secure and reliable gambling services. EXPAND: Categories of data collected are aligned with PIPEDA and industry standards to ensure lawful and transparent processing. REFLECT: The following types of personal data may be collected:

  • Personal Identification Data: Full name, date of birth, mailing address, email address, and telephone number.
  • Account & Transaction Data: Usernames, passwords, account activity, deposit and withdrawal history, and payment details (including credit/debit card information).
  • Technical Data: IP address, device type, operating system, browser information, access times, and log files.
  • Behavioral Data: Betting and gaming history, session duration, in-game interactions, clicks, and navigation paths.
  • Cookies & Tracking Technologies: Session cookies, persistent cookies, third-party cookies, web beacons, and similar technologies.

Some data is collected directly from you (for example, during registration), while other information is collected automatically when you use the website.

Legal Basis for Processing

OBSERVE: Canadian privacy law (PIPEDA) requires a clear legal basis for data processing. EXPAND: prism-casino-ca.com processes personal data based on the following legal grounds: REFLECT:

  • User Consent: Personal data is processed only with your explicit consent, particularly for account creation and marketing communications. Consent can be withdrawn at any time using the procedures described below.
  • Contract Performance: Processing is necessary for the fulfillment of contractual obligations, including account management, payment processing, and delivery of casino services.
  • Legitimate Interests: Data may be processed to prevent fraud, ensure network and information security, and improve user experience, provided these interests do not override your fundamental rights and freedoms.
  • Legal Obligations: Compliance with anti-money laundering (AML), know-your-customer (KYC), and other statutory requirements may necessitate the collection and retention of certain data.

Where required by law, separate consent will be sought for specific processing activities.

Purpose of Processing

OBSERVE: Personal data is processed only for legitimate purposes directly related to casino operations. EXPAND: These purposes are prescribed by law and industry standards. REFLECT:

  • Provision of Casino Services: To create and manage user accounts, process transactions, and provide customer support.
  • Service Improvement: To analyze usage patterns and feedback for optimizing platform performance and user experience.
  • Marketing Communications: To send promotional offers, newsletters, and updates (subject to your consent).
  • Analytics & Research: To conduct statistical analysis and market research to better understand customer needs.
  • Fraud Detection & Prevention: To monitor user activity for suspicious behavior and protect against illicit activities.

All data processing is limited to the minimum necessary to achieve these purposes.

Disclosure & Sharing

OBSERVE: Data may need to be disclosed to third parties under certain circumstances. EXPAND: All disclosures are evaluated for necessity, compliance, and user protection. REFLECT:

  • Payment Processors & Financial Partners: To facilitate deposits, withdrawals, and payment verification.
  • Service Providers: Trusted vendors providing IT, analytics, marketing, and customer support services under strict confidentiality agreements.
  • Regulatory Authorities: Data may be shared in compliance with applicable legal or regulatory requirements in Canada or in response to lawful requests.
  • Affiliates & Group Companies: With other members of the Virtual Casino Group for internal administrative purposes, subject to equivalent privacy safeguards.
  • Advertising Networks (with Consent): Data shared for targeted advertising purposes only if you have given explicit consent.

Personal data is never sold to third parties. All recipients are contractually bound to maintain the confidentiality and security of your information.

International Transfers

OBSERVE: prism-casino-ca.com operates internationally, with core operations and group offices in Costa Rica. EXPAND: Canadian data protection law requires adequate safeguards for cross-border data transfers. REFLECT:

  • Transfer Destinations: Your personal data may be transferred to and processed in Costa Rica and other countries where service providers or group entities are located.
  • Safeguards: Standard contractual clauses or equivalent legal mechanisms are implemented to ensure your data receives protection equivalent to Canadian standards.
  • Privacy Protections: All international data transfers are subject to contractual, technical, and organizational measures to prevent unauthorized access, disclosure, or misuse.

By using prism-casino-ca.com, you consent to the potential international transfer of your personal information as described above.

Data Retention

OBSERVE: Data retention policies must comply with legal and operational requirements. EXPAND: Retention periods are established in accordance with best practices and statutory obligations. REFLECT:

  • Account Data: Retained for the duration of your active account and up to 5 years after account closure, in line with AML and recordkeeping obligations.
  • Payment & Transaction Records: Maintained for a minimum of 5 years to comply with financial and anti-fraud regulations.
  • Behavioral & Technical Data: Retained for as long as necessary for analytics, fraud prevention, and service improvement, typically not exceeding 3 years.
  • Cookies & Tracking Data: Retention period varies by cookie type and user settings, with session cookies deleted after browser closure and persistent cookies retained up to 24 months.

Data will be deleted or anonymized upon the expiry of retention periods, user request, or when processing is no longer necessary. Exceptions may apply for data required to comply with legal obligations or resolve disputes.

Your Rights

OBSERVE: Under Canadian law (PIPEDA), and in alignment with international standards, users are granted a comprehensive set of data protection rights. EXPAND: Procedures are established to facilitate the exercise of these rights within the specified timeframes and free of charge. REFLECT:

  1. Access: You have the right to request a copy of your personal data held by prism-casino-ca.com.
  2. Correction: You may request correction of inaccurate or incomplete information.
  3. Deletion (Right to Erasure): You may request deletion of your personal data where legally permissible, for example, if processing is no longer necessary.
  4. Restriction of Processing: Processing of your data may be restricted upon request in certain circumstances (e.g., pending verification of accuracy).
  5. Objection: You may object to the processing of your personal data for direct marketing or on grounds relating to your particular situation.
  6. Data Portability: Where technically feasible, you may request to receive personal data in a structured, commonly used, machine-readable format or have it transferred to another provider.
  7. Withdrawal of Consent: You may withdraw consent to marketing communications or other non-essential processing at any time without affecting the lawfulness of prior processing.

Procedures:

  • Submit requests by email to support@prism-casino-ca.com with the subject "Data Protection Request".
  • Requests will be acknowledged within 5 business days and completed within 30 calendar days, unless an extension is justified by complexity.
  • All rights can be exercised free of charge unless requests are manifestly unfounded or excessive.

Regional Compliance Note: While prism-casino-ca.com is not subject to Mexican data protection law, alignment with international best practices (including GDPR) is maintained for Canadian users.

Cookies & Tracking Technologies

OBSERVE: Cookies and tracking technologies are used to enhance website functionality and user experience. EXPAND: Users are informed of the types of cookies and management options. REFLECT:

  • Session Cookies: Temporary cookies used to maintain site functionality during your visit; deleted when you close your browser.
  • Persistent Cookies: Stored on your device for a defined period to remember preferences and login details.
  • Third-Party Cookies: Set by analytics and advertising partners to analyze site usage and deliver targeted ads (only with user consent).

Cookies are used for essential site operations, analytics, personalization, and advertising (with consent). You can manage or disable cookies using your browser settings or the internal cookie management panel available on prism-casino-ca.com.

Disabling certain cookies may affect the functionality of the website or your ability to access some features.

Data Security

OBSERVE: The protection of personal information is a core obligation of prism-casino-ca.com. EXPAND: Industry-leading technical and organizational security measures are implemented to prevent unauthorized access, loss, or misuse. REFLECT:

  • Encryption: All data transmitted between users and prism-casino-ca.com servers is protected by TLS 1.2 or higher. Data at rest is encrypted using industry-standard cryptographic protocols.
  • Access Controls: Strict multi-factor authentication and role-based permissions restrict access to personal data to authorized personnel only.
  • Regular Security Audits: Comprehensive security audits and vulnerability assessments are conducted at least annually.
  • Staff Training: All employees undergo mandatory data protection and security training annually.
  • Incident Response: A formal incident response procedure is in place to promptly address data breaches or security incidents, with affected users notified in accordance with legal requirements.
  • Compliance Standards: Security protocols are aligned with international standards such as ISO 27001 and SOC 2, where applicable.

Despite robust safeguards, no system can guarantee absolute security; users are encouraged to maintain strong passwords and protect their account credentials.

Complaints & Contacts

OBSERVE: Efficient channels are provided for users to raise privacy-related concerns or complaints. EXPAND: Procedures are established for prompt resolution and escalation where necessary. REFLECT:

  • Data Protection Contact: Olivia Tremblay, Data Protection Officer
    Email: support@prism-casino-ca.com
  • Online Feedback: Use the online contact form available on prism-casino-ca.com (when available).
  • Mail: Written complaints may be addressed to the registered office in Costa Rica (see "Who We Are" section for details).

Complaint Procedure:

  1. Submit your complaint via email, online form, or mail, with details of your concern.
  2. All complaints are acknowledged within 5 business days and investigated promptly.
  3. A formal response will be provided within 30 calendar days of receipt.
  4. If you are dissatisfied with the response, you may escalate the matter to the relevant supervisory authority.

Supervisory Authorities:

Regional Compliance Note: For cross-border or unresolved complaints, users may also contact the appropriate authority in their home jurisdiction, if applicable.

Updates

OBSERVE: Users are entitled to timely notice of changes to this privacy policy. EXPAND: Notification methods and user options are prescribed to ensure transparency. REFLECT:

  • Notification Procedures: Significant changes will be communicated via email to registered users, prominent website banners, and account dashboard alerts.
  • Advance Notice: For material changes, at least 30 days' advance notice will be provided prior to the effective date.
  • User Options: Users may object to changes or close their account without penalty if they disagree with the updated terms.
  • Version Control: This policy is identified as "Last updated: November 6, 2025".
  • Changelog: Material changes are summarized and made accessible through the policy changelog on prism-casino-ca.com.

Continued use of prism-casino-ca.com after updates constitutes acceptance of the revised policy.