Last updated: 2025
1. Introduction
This Privacy Policy explains how personal information is collected, used, disclosed, retained, and protected in connection with access to and use of the Hanover online casino and betting services in Canada. The Policy applies to all individuals who create an account, submit identity documents, contact support, or otherwise interact with the platform.
By using the services, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this document, you should not use the services.
Handling of personal information is carried out in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and any substantially similar provincial privacy legislation that may apply, depending on the province of residence of the user.
2. Information Collected
Personal information is collected only to the extent necessary to operate the services, meet legal and regulatory obligations, and maintain account security. The categories of information collected include the following.
2.1 Account and Identity Information
When an account is registered, the following information is collected: full legal name, date of birth, residential address, email address, and username. This information is required to create and maintain the account and to verify that the user meets the minimum age requirement for use of the services.
2.2 Identity Verification Documents
To comply with applicable know-your-customer (KYC) and anti-money-laundering (AML) obligations, the platform may request copies of government-issued identification, proof of address, and other supporting documents. These documents are processed and retained in accordance with legal obligations and applicable regulatory requirements.
2.3 Financial Information
Information related to deposits, withdrawals, and transaction history is collected as required for payment processing, fraud prevention, and regulatory reporting. Full payment card numbers are not stored on the platform’s systems.
2.4 Betting and Gaming Activity
Records of user activity on the platform are retained, including wagers placed, session durations, and account balance history. This information is used for account administration, monitoring of responsible gaming indicators, and compliance with applicable regulations.
2.5 Technical and Device Information
When the services are accessed, certain technical data is collected automatically, including IP address, browser type, operating system, device identifiers, and session timestamps. This information is used for security monitoring, fraud detection, and improvement of the technical performance of the services.
2.6 Communications
If the user contacts the support team, records of such communications are retained, including message content, timestamps, and any attachments provided.
2.7 Cookies and Tracking Technologies
Cookies and similar technologies are used to maintain session integrity, remember user preferences, and analyze usage patterns. Cookie preferences may be managed through browser settings; however, disabling certain cookies may affect functionality of the services. A separate Cookie Notice is available on request.
3. Use of Personal Information
Personal information is used only for the purposes for which it was collected, for purposes that are consistent with those original purposes and that a reasonable person would expect, or as permitted or required by law. Specific purposes include:
- Account creation, authentication, and management
- Age and identity verification in compliance with applicable law
- Processing of transactions and maintenance of financial records
- Detection and prevention of fraud, money laundering, and unauthorized access
- Monitoring for responsible gaming indicators and application of account controls where required
- Response to customer support inquiries
- Compliance with regulatory reporting obligations
- Communication of service-related notices, including changes to terms or policies
Personal information is not used for purposes unrelated to the above without prior consent from the user, except where required by law.
4. Disclosure of Personal Information
Personal information is not sold to third parties. Disclosure of personal information may occur in the following circumstances.
4.1 Service Providers
Third-party service providers may be engaged to assist with identity verification, payment processing, fraud detection, and provision of technical infrastructure. These providers are contractually required to handle personal information only as directed and in accordance with applicable privacy law.
4.2 Legal and Regulatory Obligations
Personal information may be disclosed to regulatory authorities, law enforcement agencies, or other governmental bodies where required by applicable law, court order, or regulatory direction. This includes disclosures required under AML and counter-terrorist financing (CTF) legislation.
4.3 Business Transfers
In the event of a merger, acquisition, or transfer of business assets, personal information held by the company may be transferred to a successor entity, subject to equivalent privacy protections.
4.4 Consent
Personal information may be disclosed to other parties where explicit consent for such disclosure has been provided by the user.
5. Data Retention
Personal information is retained for as long as necessary to fulfill the purposes described in this Privacy Policy, to maintain accurate account records, and to comply with applicable legal and regulatory retention requirements. Certain categories of information, including identity documents and transaction records, may be subject to mandatory minimum retention periods under AML, KYC, or tax legislation, regardless of account status.
When personal information is no longer required and no legal or regulatory obligation requires its retention, reasonable steps are taken to securely delete or anonymize the information.
6. Your Rights
Subject to applicable law, users have the right to:
- Request access to personal information held about them
- Request correction of inaccurate or incomplete personal information
- Withdraw consent for certain uses of their personal information
Requests to delete personal information will be assessed in light of applicable legal and regulatory retention obligations, which may limit the ability to fulfill such requests in full.
To exercise any of these rights, contact details provided in Section 9 of this document should be used. Responses will be provided within the timeframe required by applicable law.
7. Data Security
Technical and organizational measures are implemented to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include, among others, encryption of data in transit, access controls, and regular security assessments. No method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.
8. Provincial Applicability and Regulatory Oversight
Privacy regulation in Canada operates at both federal and provincial levels. PIPEDA applies to private-sector organizations in provinces that have not enacted substantially similar privacy legislation. In provinces where equivalent provincial privacy laws apply, those laws may govern in place of or alongside PIPEDA.
The Office of the Privacy Commissioner of Canada is the federal oversight body responsible for matters under PIPEDA. If a user believes that their privacy rights have been violated and the concern has not been resolved through the internal process of the company, a complaint may be filed with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca. Depending on the province of residence, a provincial privacy commissioner may also have jurisdiction.
Online gambling regulation in Canada is administered separately from privacy regulation. Provincial gambling authorities and Crown corporations are responsible for licensing and gaming compliance. Privacy oversight and gambling oversight are distinct functions handled by separate bodies.
9. Contact Information
Questions about this Privacy Policy, requests to exercise privacy rights, or reports of privacy concerns may be submitted through the support channels listed on the Hanover website. Inquiries will be acknowledged and responded to within the timeframe required by applicable law.
10. Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in practices, applicable law, or regulatory requirements. When material changes are made, registered users will be notified through the contact information associated with their account or by a notice posted on the website. Continued use of the services following such notification constitutes acceptance of the revised Privacy Policy.