Privacy Policy

1. General Provisions

This Privacy Policy (the “Policy”) applies to all information that Casino de Montreal (1, avenue du Casino, Montreal, Quebec, H3C 4W7) collects about users during their use of our services.

Personal data processing complies with the Quebec Privacy Protection Act, Quebec Casino Act, Loto-Québec Regulations, and Canadian Federal Privacy Laws. Our organization takes all necessary measures to protect the rights of data subjects.

We collect only essential information to ensure secure service operation, including name, contact information, and transactional data. Data is processed solely to enhance service quality and maintain regulatory compliance, involving activities like collection, organization, storage, and, if required, anonymization.

Casino de Montreal employs data security protocols, such as encryption and access controls, to prevent unauthorized access, loss, or alteration. Users may access, correct, or request deletion of their data as allowed by law.

2. Basic Concepts Used in the Policy

Term	Definition
Personal Data	Any information relating to an identified natural person
Operator	Casino de Montreal, processing personal data
Data Processing	Any action with personal data
Automated Processing	Data processing using computing tools
Confidentiality	Mandatory requirement to protect data from unauthorized access

3. Basic Rights and Obligations of the Operator

Obligations:
The operator processes data per legislation, ensures security, provides access to subjects, blocks/deletes incorrect data, and reports breaches. We implement protection measures and maintain processing records.

Rights:
We can modify the Policy, select processing methods, and deny service if required data is not provided. The operator processes data for business needs and security.

Compliance:
The operator documents processing, conducts assessments, and maintains data retention schedules. Third-party processors operate under contracts with verified compliance.

4. Basic Rights and Obligations of Personal Data Subjects

Personal data subjects have the right to receive information about their data processing, request clarification or deletion, withdraw consent for processing, appeal operator actions, and demand cessation of data processing.

In turn, subjects are obligated to:

Provide accurate data
Report data changes
Comply with casino rules
Not violate the rights of other subjects

5. Principles of Personal Data Processing

Our data processing adheres to six core principles:

First, lawfulness requires all processing to occur on clear legal grounds.
Second, purpose limitation ensures data is processed only for stated and approved purposes.
Third, minimization dictates we collect only necessary data for specified operations.
Fourth, accuracy demands regular updates to maintain data relevance.
Fifth, storage limitation restricts data retention to established periods.
Sixth, security mandates protection measures for all stored and processed data.

These principles form the foundation of our data handling practices and apply to all operations involving personal information.

6. Conditions for Personal Data Processing

Personal data processing is carried out with the subject’s consent, contract with the subject, legislative requirements, necessity to protect vital interests, or performance of public functions. Special categories of personal data are processed only with explicit subject consent, legislative requirements, or necessity to protect vital interests.

7. Procedure for Collection, Storage, Transfer, and Other Types of Personal Data Processing

Collection Methods:
Data collection occurs through direct subject provision, automatic website collection, and third-party receipt with consent.

Storage Periods:

Identification Data: 5 years after last visit
Financial Transactions: 7 years
Loyalty Program Data: participation period plus 2 years
Video Surveillance Records: 30 days
Service Information: work period plus 3 years

Transfer Protocol:
Data transfer occurs to authorized government bodies, contract partners, processing centers, and security services per legislation and contracts. Each transfer follows security protocols and documentation requirements.

These procedures maintain compliance with data protection regulations while ensuring operational efficiency and user privacy.

8. Personal Data Confidentiality

To ensure personal data security, we apply a comprehensive system of technical and organizational protection measures. The system includes firewalls, antivirus protection, intrusion detection systems, encryption tools, and data backup systems.

Component	Purpose
Firewalls	Protection from external threats
Antivirus	Protection from malicious software
Intrusion Detection Systems	Attack identification
Encryption Tools	Protection of transmitted data
Backup Systems	Data preservation

9. Final Provisions

Policy changes are published on the website with 10-day notice. Each amendment includes explanation of modifications. Previous versions are archived in PDF format for 5 years.

Dispute resolution starts with 5-day initial review period, followed by 15-day pre-trial settlement phase. Resolution proposals are documented. Operations comply with Quebec Civil Code, Gaming Control Act, and Federal privacy laws, under Loto-Québec oversight.

The Policy exists in English and French versions with:

Screen-reader format
Mobile version
PDF version
Certified copies
Translations

Contact address: 1, avenue du Casino, Montreal, Quebec, H3C 4W7. Communication occurs through customer service, legal department, and privacy officer.

Document maintains legal status with digital authentication. Updates follow monthly security checks and quarterly compliance reviews. Staff receives privacy training with documented procedures.

Implementation includes incident response, documentation requirements, and performance metrics. Reviews incorporate audit findings and regulatory updates.

The Policy operates under Quebec legislation with established supervisory and judicial procedures, accessible through the official website.