Privacy Policy

rama-casino ("we", "us", or "our") is committed to protecting the privacy and personal information of all players and visitors to rama-ca.com. This privacy policy explains how we collect, use, disclose, and safeguard your data in accordance with Canadian law and applicable industry standards. This policy applies to all users of rama-ca.com and associated services. Effective date: November 6, 2025.

Who We Are

OBSERVE: rama-casino operates under the brand rama-ca.com, managed by Gateway Casinos & Entertainment Limited, with property ownership by Ontario Lottery and Gaming Corporation (OLG). The main office is located at 5899 Rama Rd, Rama, ON L3V 6H6, Canada.

Registered Operator: Gateway Casinos & Entertainment Limited (Commercial Casino Operator License issued by Alcohol and Gaming Commission of Ontario, AGCO, valid through 2025)
Contact Address: Casino Rama Resort, 5899 Rama Rd, Rama, ON L3V 6H6, Canada
Data Protection Officer (DPO): Sophie Tremblay
Email: [email protected]
Phone: 1-800-832-7529
Contact Form: https://rama-ca.com/contact

EXPAND: While specific company registration and tax numbers are not publicly specified, all data processing activities comply with the requirements of the AGCO and relevant Canadian privacy legislation. REFLECT: All privacy inquiries and requests should be addressed to our DPO as above.

What Personal Data We Collect

OBSERVE: rama-casino collects a range of personal and technical data to operate rama-ca.com and ensure regulatory compliance.

Personal Identification Data: Full name, date of birth, mailing address, email address, telephone number, identification documents (as required for KYC/AML compliance)
Technical and Device Data: IP address, device type, operating system, browser type and version, access times, referring URLs, activity logs
Payment and Transaction Data: Bank account details, payment card numbers (processed via PCI DSS-compliant partners), transaction records, withdrawal and deposit histories
Behavioral and Usage Data: Betting and gaming history, account activities, page navigation, clickstream, preferences, feedback and survey responses
Cookies and Tracking: Session cookies, persistent cookies, third-party analytics cookies, advertising pixels, and similar technologies (see Cookies section)

EXPAND: Certain data is required by law (e.g., for age and identity verification). REFLECT: Failure to provide mandatory information may result in restricted access to rama-ca.com services.

Legal Basis for Processing

OBSERVE: Data processing by rama-casino is based on Canadian legal requirements, contractual necessity, and user consent.

Consent: Where required, we process your personal data based on your informed and explicit consent (e.g., marketing communications, cookies, optional features).
Contractual Necessity: Processing is required to deliver our gaming services, manage your account, process payments, and fulfill our contractual obligations to you.
Legal Compliance: We process data to comply with applicable laws and regulations, including KYC (Know Your Customer), AML (Anti-Money Laundering), and responsible gambling obligations as mandated by AGCO and federal Canadian law.
Legitimate Interests: Data may be processed for security, fraud prevention, analytics, service improvement, and business continuity, provided such interests do not override your fundamental rights and freedoms.

EXPAND: Where consent is withdrawn or not provided, certain non-essential services may be limited. REFLECT: You may withdraw your consent at any time by contacting our DPO.

Purpose of Processing

OBSERVE: rama-casino collects and uses your data exclusively for legitimate purposes related to the operation and improvement of rama-ca.com.

Service Provision: To register and manage your account, verify identity, process deposits and withdrawals, and provide gaming services
Compliance: To meet regulatory requirements, including KYC/AML, fraud detection, and responsible gambling measures
Customer Support: To respond to inquiries, resolve disputes, and provide technical support
Analytics and Service Improvement: To analyze site usage, optimize performance, and enhance user experience
Marketing and Promotions: To send promotional offers and updates (subject to your consent and opt-out rights)
Security: To protect against unauthorized access, fraud, and abuse

REFLECT: All processing aligns with the purposes specified here and is subject to ongoing review for legal compliance.

Disclosure & Sharing

OBSERVE: rama-casino may disclose personal data to third parties under defined circumstances to support rama-ca.com operations and ensure regulatory compliance.

Payment Processors: Securely share payment and banking information with authorized third-party financial institutions for transaction processing (PCI DSS-compliant).
Technical Service Providers: Share technical and usage data with IT service vendors, security auditors, and analytics providers bound by confidentiality agreements.
Regulatory Authorities: Disclose information as legally required to AGCO or other regulators for compliance and reporting (e.g., suspicious activity reports, licensing audits).
Affiliates and Partners: Share data with trusted marketing affiliates or advertising networks only with your explicit consent.
Legal or Business Transfers: Transfer data in the event of corporate restructuring, mergers, or acquisitions, subject to continued protection of your rights.

EXPAND: All third parties are contractually obligated to adhere to strict data protection standards. REFLECT: We do not sell or rent your personal data to third parties for unrelated purposes.

International Transfers

OBSERVE: rama-casino primarily processes data within Canada. However, certain third-party service providers may operate outside Canada (e.g., data hosting, analytics).

Regions of Transfer: Data may be transferred to jurisdictions with adequate data protection laws (e.g., European Union, United States) where necessary for technical support, cloud storage, or regulatory requirements.
Protection Guarantees: International transfers are safeguarded by standard contractual clauses, binding data protection agreements, and, where applicable, adherence to recognized frameworks (e.g., Privacy Shield or successor agreements).

EXPAND: We take all reasonable steps to ensure your personal data remains protected regardless of processing location. REFLECT: You may request further information about international data transfers by contacting our DPO.

Data Retention

OBSERVE: rama-casino retains personal data only as long as necessary for legal, operational, and contractual purposes.

Account Data: Retained for the duration of your active account and up to 5 years after account closure, in compliance with regulatory retention requirements.
KYC/AML Data: Minimum of 5 years post-termination or last transaction, as mandated by Canadian law.
Marketing Data: Retained until consent is withdrawn or the user requests deletion.
Cookies and Technical Data: Retention periods vary by type (see Cookies section), generally no longer than 2 years.

Deletion Criteria: Data will be deleted or anonymized when retention is no longer justified, upon verified user request, or at the conclusion of processing purposes. REFLECT: Exceptions may apply for ongoing legal or regulatory obligations.

Your Rights

OBSERVE: As a user of rama-ca.com, you have robust rights over your personal data in line with the Personal Information Protection and Electronic Documents Act (PIPEDA), AGCO standards, and, where applicable, international frameworks (including GDPR principles).

Right of Access: Request a copy of the personal data we hold about you, free of charge, within 30 days of verified request.
Right to Correction: Request correction of inaccurate, incomplete, or outdated information.
Right to Deletion: Request erasure of your data when it is no longer necessary, except as required by law or legitimate business needs.
Right to Restrict Processing: Request limitation of data processing under certain circumstances (e.g., contesting accuracy, pending a complaint).
Right to Object: Object to processing for direct marketing or based on legitimate interests.
Right to Data Portability: Obtain a copy of your personal data in a structured, machine-readable format and, where feasible, request direct transfer to another provider.
Right to Withdraw Consent: Withdraw consent for non-essential processing (e.g., marketing) at any time without affecting the lawfulness of prior processing.

Procedures: To exercise your rights, contact our DPO using the information provided above. We will respond within 30 days, free of charge, unless requests are manifestly unfounded or excessive. Where legally required, we may request verification of your identity before processing your request.

REFLECT: For users subject to international protections (e.g., GDPR-aligned standards), your rights extend to cross-border data protection mechanisms. For CA users, all requests and complaints are handled in accordance with Canadian law and AGCO guidelines.

Cookies & Tracking Technologies

OBSERVE: rama-ca.com uses cookies and similar technologies to enhance site functionality, analyze traffic, and support marketing activities.

Session Cookies: Temporary cookies essential for secure login and navigation, deleted after session ends.
Persistent Cookies: Remain on your device to remember preferences and support user experience over multiple visits, typically expiring within 1-2 years.
Third-Party Cookies: Set by analytics providers (e.g., Google Analytics), ad networks, and affiliates to measure performance and deliver targeted content.

Cookie Management: You may control and disable cookies via your browser settings or the internal cookie management panel provided on rama-ca.com. Disabling certain cookies may affect site functionality.

REFLECT: Full details of cookie usage are available in our Cookie Policy.

Data Security

OBSERVE: rama-casino implements comprehensive, industry-leading security controls to protect personal data on rama-ca.com.

Encryption: All data transmitted is secured with TLS 1.2+ protocols; sensitive data at rest is encrypted using robust algorithms.
Access Controls: Role-based access, multi-factor authentication, and strict user permissions limit internal data exposure.
Security Audits: Regular third-party audits and penetration testing validate our security posture and compliance with ISO 27001 and SOC 2 standards where applicable.
Staff Training: All staff undergo regular data protection and cybersecurity training, including incident response procedures.
Incident Response: Documented plans enable rapid detection, containment, and notification of any data breaches, with affected users and authorities notified in accordance with legal requirements.

REFLECT: We continually update our security controls to address emerging threats and comply with AGCO, PIPEDA, and recognized international standards.

Complaints & Contacts

OBSERVE: rama-casino is committed to transparent and responsive handling of privacy complaints.

Primary Contact: For all privacy inquiries, data subject requests, or complaints, contact our DPO:
Name: Sophie Tremblay
Email: [email protected]
Phone: 1-800-832-7529
Contact Form: https://rama-ca.com/contact
Mailing Address: Casino Rama Resort, 5899 Rama Rd, Rama, ON L3V 6H6, Canada
Complaint Procedure: Submit your concern using the channels above. We will acknowledge receipt within 5 business days and provide a substantive response within 30 days. If your issue requires further investigation, we will keep you informed of progress and expected timelines.
Escalation: If you are dissatisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada:
Website: https://www.priv.gc.ca/en/
Phone: 1-800-282-1376
Mail: 30 Victoria Street, Gatineau, Quebec, K1A 1H3, Canada
Ontario Regulator (AGCO): https://www.agco.ca/

REFLECT: We are committed to working with both users and regulators to resolve privacy concerns in a timely and effective manner.

Updates

OBSERVE: This privacy policy is subject to change to reflect legal, operational, or technological developments. rama-casino will notify users of material changes via email, website banner alerts, and account dashboard notifications.

Advance Notice: For significant changes, at least 30 days' notice will be provided before new terms take effect.
User Options: If you object to material changes, you may close your account or exercise your data rights as outlined above.
Version Control: Last updated: November 6, 2025
Changelog: All material changes and previous policy versions are archived and available upon request.

REFLECT: Continued use of rama-ca.com after policy updates constitutes acceptance of the revised terms.