Ollywood 19+
Sign up

Privacy Policy

This Privacy Policy explains how Score Media and Gaming Inc. ("we", "us"), operator of Ollywood Casino, collects, uses, discloses and protects your personal information, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario requirements.

Last updated: 8 June 2026

1. Information we collect

  • Identity & contact: name, date of birth, address, email, phone.
  • Verification (KYC/AML/PEP): government ID, proof of address, occupation, source of funds and (for higher-risk transactions) source of wealth, politically exposed person (PEP) status and sanctions list screening.
  • Account & play: login data, limits you set, gameplay and transaction history.
  • Technical: IP address, device and browser data, cookies (see our Cookie Policy).
  • Responsible-gaming: limit settings, self-exclusion status and related indicators.

2. Why we use it

  • to create and manage your account and provide the Service;
  • to verify your age and identity and meet AML obligations;
  • to confirm you are eligible and located in Ontario;
  • to detect signs of gambling-related harm and apply responsible-gaming tools;
  • to prevent fraud, protect game integrity and keep the Service secure;
  • to comply with legal and regulatory obligations (including the Alcohol and Gaming Commission of Ontario (AGCO) and iGaming Ontario (iGO));
  • with your consent, to send marketing communications.

3. Consent

We collect, use and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. Marketing is based on a separate, explicit opt-in that you can withdraw at any time. Every commercial electronic message we send (including email, SMS and push notifications) identifies Score Media and Gaming Inc. as the sender, includes our mailing address, and provides a working one-click unsubscribe mechanism that processes within 10 business days, consistent with Canada's Anti-Spam Legislation (CASL). Some processing (e.g. KYC/AML and regulatory reporting) is necessary to provide a regulated gambling service and cannot be opted out of while you hold an account. As required by our regulators, we also carry out automated monitoring of play and account activity to detect indicators of gambling-related harm, which may result in responsible-gaming messages, limits or other interventions on your account.

4. Sharing & disclosure

We may share personal information with:

  • service providers acting on our behalf (e.g. identity verification, payments, hosting) under contract;
  • the Alcohol and Gaming Commission of Ontario (AGCO), iGaming Ontario (iGO), the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC), the Canada Revenue Agency, law enforcement and other authorities where required by law or our regulatory obligations (including suspicious- and large-transaction reporting under the PCMLTFA);
  • self-exclusion programs such as BetGuard, to enforce exclusions.

We do not sell your personal information.

5. Storage, transfers & retention

Personal information may be processed or stored by service providers, which could be located outside Ontario or Canada; where this happens, it may be subject to the laws of those jurisdictions, and we use contractual and other measures to ensure a comparable level of protection. Where personal information is transferred outside Canada (for example, to service providers in the US or EU), we provide notice of this and apply contractual safeguards. You may request information about the countries where your data may be processed by contacting our Privacy Officer. We retain personal information only as long as necessary for the purposes described or as required by law. In particular, records required for anti-money-laundering purposes are retained for at least five (5) years after the end of the business relationship or the transaction, in accordance with Canadian law (PCMLTFA/FINTRAC). When no longer required, information is securely deleted or anonymised.

6. Security

We use technical and organisational safeguards including encryption in transit and at rest, role-based access controls, password hashing, multi-factor authentication for privileged systems, intrusion detection, regular penetration testing, and a documented incident response plan, in line with the AGCO Cyber Security Standards. No method of transmission or storage is completely secure, but we work to protect your data. If a privacy breach occurs that creates a real risk of significant harm to you, we will notify the Office of the Privacy Commissioner of Canada and affected individuals, and keep records of breaches, as required by PIPEDA.

7. Your rights

Subject to legal limits, you may request access to the personal information we hold about you and ask us to correct inaccuracies. You may also request a copy of that information in a structured, commonly-used electronic format, where technically feasible. You may withdraw marketing consent at any time. To make a request, contact our Privacy Officer at privacy@ollywoodcasino.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (which oversees PIPEDA) or, where applicable, the Information and Privacy Commissioner of Ontario (IPC).

8. Children

The Service is strictly for adults 19+. We do not knowingly collect personal information from anyone under 19. If we learn that we have, we will delete it.

9. Contact

We are accountable for the personal information in our control. Our designated Chief Privacy Officer oversees compliance with this policy and applicable privacy law (PIPEDA Principle 1 — Accountability), and can be reached at:

Chief Privacy Officer
Score Media and Gaming Inc.
Mail: 190 Liberty Street, Toronto, Ontario M6K 3L5, Canada
Email: privacy@ollywoodcasino.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (which oversees PIPEDA) or, where applicable, the Information and Privacy Commissioner of Ontario (IPC).