PRIVACY POLICY

This Privacy Policy ("Policy") describes how Corsair Digital Entertainment Ltd ("Company," "we," "us," or "our"), the operator of Captain Jack Casino ("Platform"), collects, uses, stores, shares, and protects personal information obtained from visitors and registered players ("you" or "Player"). Corsair Digital Entertainment Ltd is registered at Scharlooweg 47, Willemstad, Curaçao, and operates under licence number GLH-OCCHKT78902024 issued by Curacao eGaming.

We are committed to protecting the privacy and security of your personal data. This Policy has been drafted to align with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy legislation, as well as applicable provincial privacy laws. By accessing or using Captain Jack Casino, you consent to the collection, processing, and use of your personal information as described in this Policy.

This Policy should be read together with our Terms and Conditions, which govern your use of the Platform.

Captain Jack Casino collects the following categories of personal information:

2.1 Personal Identification Data

Information you provide directly during registration and account verification, including:

• Full legal name, date of birth, and gender
• Residential address and postal code
• Email address and telephone number
• Government-issued identification documents (passport, driving licence, provincial ID) submitted for KYC verification
• Proof of address documents (utility bills, bank statements)
• Payment information including card details, bank account numbers, e-wallet IDs, and cryptocurrency wallet addresses

2.2 Usage and Behavioural Data

Information generated automatically through your interaction with the Platform, including:

• Gaming activity: games played, bet amounts, outcomes, session durations, and game preferences
• Transaction history: deposits, withdrawals, bonus claims, and payment method usage
• Platform navigation: pages visited, links clicked, features used, and time spent on each page
• Search queries entered on the Platform
• Customer support interactions: chat transcripts, email correspondence, and call recordings (where applicable)

2.3 Technical and Device Data

Information collected automatically from your device and browser, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Screen resolution and language preferences
• Unique device identifiers and device fingerprint data
• Referral URLs and landing page data

2.4 Cookie Data

We use cookies and similar tracking technologies (web beacons, pixel tags, local storage) to collect information about your browsing behaviour. For detailed information about the cookies we use, please see Section 8 of this Policy.

Captain Jack Casino processes your personal information for the following purposes:

• Account Management: To create, maintain, and manage your player account; to verify your identity and age; and to communicate with you about your account status, including service notifications, security alerts, and updates.
• Service Delivery: To provide access to our gaming services, process deposits and withdrawals, manage bonus credits, maintain your gaming history, and deliver customer support.
• Regulatory Compliance: To fulfil our legal and regulatory obligations under Curaçao gambling laws, anti-money laundering (AML) regulations, and Know Your Customer (KYC) requirements. This includes verifying player identities, monitoring transactions for suspicious activity, and reporting to regulatory authorities when required.
• Fraud Prevention: To detect, prevent, and investigate fraud, cheating, multi-accounting, bonus abuse, and other prohibited activities. This includes device fingerprinting, IP analysis, behavioural pattern analysis, and cross-referencing with third-party fraud databases.
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, enforce deposit and loss limits, facilitate self-exclusion requests, and ensure compliance with age restrictions.
• Personalization: To tailor your gaming experience by recommending games, presenting relevant bonuses, and customizing the Platform interface based on your preferences and activity.
• Marketing Communications: To send promotional offers, newsletters, and marketing materials where you have opted in to receive them. You may unsubscribe from marketing communications at any time (see Section 7).
• Analytics and Improvement: To analyse Platform usage patterns, measure promotional effectiveness, conduct research, and improve our services, game offerings, and user experience.

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), organizations must obtain meaningful consent before collecting, using, or disclosing personal information. Captain Jack Casino processes your data on the following legal bases:

• Consent: By registering an account and using the Platform, you provide express consent for the collection and use of your personal information as described in this Policy. For marketing communications, we obtain separate opt-in consent.
• Contractual Necessity: Processing that is necessary for the performance of the contract between you and Captain Jack Casino (i.e., the Terms and Conditions) — including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with our obligations under gambling regulations, anti-money laundering legislation, tax laws, and other applicable legal requirements.
• Legitimate Interest: Processing necessary for our legitimate business interests, including fraud prevention, Platform security, analytics, and service improvement, provided these interests do not override your privacy rights.

For more information about PIPEDA and your rights under Canadian privacy law, visit the Office of the Privacy Commissioner of Canada.

Captain Jack Casino does not sell your personal information. We may share your data with the following categories of third parties, strictly for the purposes outlined in this Policy:

• Payment Processors: Banks, card processors (Visa, Mastercard), e-wallet providers (Interac, iDebit, InstaDebit, MuchBetter), and cryptocurrency exchanges that process your financial transactions. These parties receive only the data necessary to complete the transaction.
• Game Providers: Third-party software providers (Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, and others) who supply the games on our Platform. Game providers may receive anonymized usage data and a unique player identifier; they do not receive your personal identification information.
• Identity Verification Partners: Third-party KYC and AML service providers who assist in verifying your identity, age, and address. These partners are contractually bound to use your data solely for verification purposes.
• Fraud Prevention Services: Specialized third-party services that help detect and prevent fraud, including shared industry databases of fraudulent actors and multi-accounting detection services.
• Regulatory Authorities: Curacao eGaming and any other regulatory body that has lawful authority to request player data for compliance, audit, or investigation purposes.
• Law Enforcement: Government agencies and law enforcement bodies where we are legally compelled to disclose data, or where disclosure is necessary to protect the safety of individuals, prevent crime, or enforce our legal rights.
• Analytics Providers: Third-party analytics services that help us understand Platform usage and improve our services. Data shared with analytics providers is anonymized or pseudonymized wherever possible.
• Affiliated Companies: Entities within the Corsair Digital Entertainment Ltd corporate group for administrative, operational, and compliance purposes.

All third parties with whom we share personal data are required to maintain appropriate security measures and are contractually prohibited from using your data for any purpose other than the specific service they provide to us.

Captain Jack Casino retains your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

• Active Accounts: All personal data associated with your account is retained for the entire duration of your active membership.
• Closed Accounts: Following voluntary account closure, we retain your personal data for a minimum of five (5) years to comply with anti-money laundering regulations and regulatory audit requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• Self-Excluded Players: If you have self-excluded, we retain sufficient identifying information indefinitely to ensure you are prevented from reopening an account during the exclusion period.
• Marketing Data: If you withdraw consent for marketing communications, we will cease sending marketing materials within 10 business days. Your unsubscribe preference is retained permanently to prevent future marketing contact.
• Cookie Data: Cookie-related data is retained according to the cookie lifespan specified in Section 8 of this Policy.

When personal data is no longer required, it is securely deleted or anonymized so that you can no longer be identified from it. Anonymized data may be retained indefinitely for statistical and analytical purposes.

As a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) grants you the following rights regarding your personal information:

• Right of Access: You have the right to request access to the personal information we hold about you. We will provide a copy of your data within 30 days of receiving a verified request.
• Right to Correction: You have the right to request correction of any inaccurate or incomplete personal information. You can update most account details directly from your profile settings, or contact our support team for assistance.
• Right to Deletion: You may request the deletion of your personal information, subject to our legal and regulatory retention obligations. Where data must be retained for compliance purposes, it will be restricted from further processing.
• Right to Data Portability: You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format (e.g., CSV or JSON).
• Right to Withdraw Consent: You may withdraw your consent for data processing at any time. Note that withdrawing consent for essential processing (such as identity verification) may result in the inability to use certain Platform features or the closure of your account.
• Right to Opt Out of Marketing: You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any promotional message, or by updating your communication preferences in your account settings. Opting out of marketing does not affect service-related communications.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request." We may require identity verification before processing your request to prevent unauthorized access to your data.

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at 30 Victoria Street, Gatineau, Quebec, K1A 1H3, or by calling 1-800-282-1376.

Captain Jack Casino uses cookies and similar technologies to enhance your experience, analyse traffic, and deliver relevant content. A cookie is a small text file placed on your device when you visit our Platform.

Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Platform to function. These enable account login, session management, security features, and payment processing. They cannot be disabled without impairing core functionality. Lifespan: session to 12 months.
• Functional Cookies: Remember your preferences such as language, currency, display settings, and game favourites. These cookies enhance your experience but are not strictly required. Lifespan: up to 12 months.
• Analytics Cookies: Collect anonymized data about how visitors use the Platform, including pages visited, time on site, bounce rate, and traffic sources. We use this data to identify trends and improve our services. Lifespan: up to 24 months.
• Marketing Cookies: Track your browsing activity to deliver personalized advertisements and measure promotional campaign effectiveness. These cookies may be set by third-party advertising partners. Lifespan: up to 24 months.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, view the cookies stored on your device, and set preferences for specific websites. Please note that disabling essential cookies may prevent you from using certain features of the Platform, including account login and real-money gaming.

Captain Jack Casino employs industry-leading security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption, the same standard used by major financial institutions worldwide.
• Encryption at Rest: Sensitive personal data, including identification documents, payment details, and account credentials, is encrypted using AES-256 encryption when stored on our servers.
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis. All staff handling personal information undergo background checks and are bound by confidentiality agreements.
• Infrastructure Security: Our servers are hosted in secure, SOC 2-compliant data centres with 24/7 physical security, fire suppression, redundant power supplies, and environmental monitoring.
• Monitoring and Intrusion Detection: Continuous monitoring systems and intrusion detection software protect against unauthorized access attempts, DDoS attacks, and other cyber threats.
• Regular Audits: Our security practices are assessed through regular internal audits and periodic third-party penetration testing to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected individuals and the relevant regulatory authorities within the timeframes required by PIPEDA and applicable privacy regulations.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We encourage players to protect their own account security by using strong, unique passwords, enabling two-factor authentication where available, and never sharing login credentials.

Captain Jack Casino is an age-restricted service intended exclusively for adults. Our Platform is not directed at individuals under the age of nineteen (19) (or 18 in Alberta, Manitoba, and Quebec), and we do not knowingly collect personal information from minors.

All players are required to verify their age during the registration and KYC process. If we discover that we have inadvertently collected personal information from an individual below the legal gambling age, we will take immediate steps to delete all associated data and close the account. Any funds deposited by a minor will be returned to the original payment method where possible.

We encourage parents and guardians to monitor their children's internet activity and to use parental control software to prevent minors from accessing online gambling sites. Recommended tools include NetNanny, Cyber Patrol, and built-in browser parental controls.

Captain Jack Casino reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect how we process your personal data, we will provide prominent notice through one or more of the following methods: an email notification to the address associated with your account, a pop-up notification upon your next login to the Platform, or a banner notice on the Platform homepage. Material changes include any expansion of the categories of personal data collected, new purposes for data processing, or changes to third-party data sharing arrangements.

Your continued use of Captain Jack Casino after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should discontinue use of the Platform and contact us to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal information is handled, please contact us:

We aim to respond to all privacy-related enquiries within 30 calendar days. For complex requests or where we require additional verification, we may extend this period by up to 30 additional days, in which case we will inform you of the extension and the reasons for it.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC). The OPC can be reached at: