Privacy Policy
This Privacy Policy explains how Score Media and Gaming Inc. ("we", "us"), operator of Ollywood Casino, collects, uses, discloses and protects your personal information, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario requirements.
Data controller. Score Media and Gaming Inc., registered with the Alcohol and Gaming Commission of Ontario (AGCO) as an Internet Gaming Operator, Registration No. OPIG1294141. We are the data controller for personal information collected through Ollywood Casino and your account.
Registered office. 125 Queens Quay East, Toronto, Ontario M5A 0Z6, Canada.
Effective Date: 8 June 2026 · Last Updated: 8 June 2026
1. Information we collect
- Identity & contact: name, date of birth, address, email, phone.
- Verification (KYC/AML/PEP): government ID, proof of address, occupation, source of funds and (for higher-risk transactions) source of wealth, politically exposed person (PEP) status and sanctions list screening.
- Account & play: login data, limits you set, gameplay and transaction history.
- Technical: IP address, device and browser data, cookies (see our Cookie Policy).
- Responsible-gaming: limit settings, self-exclusion status and related indicators.
2. Why we use it
- to create and manage your account and provide the Service;
- to verify your age and identity and meet AML obligations;
- to confirm you are eligible and located in Ontario;
- to detect signs of gambling-related harm and apply responsible-gaming tools;
- to prevent fraud, protect game integrity and keep the Service secure;
- to comply with legal and regulatory obligations (including the Alcohol and Gaming Commission of Ontario (AGCO) and iGaming Ontario (iGO));
- with your consent, to send marketing communications.
3. Consent
We collect, use and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. Marketing is based on a separate, explicit opt-in that you can withdraw at any time. Every commercial electronic message we send (including email, SMS and push notifications) identifies Score Media and Gaming Inc. as the sender, includes our mailing address, and provides a working one-click unsubscribe mechanism that processes within 10 business days, consistent with Canada's Anti-Spam Legislation (CASL). Some processing (e.g. KYC/AML and regulatory reporting) is necessary to provide a regulated gambling service and cannot be opted out of while you hold an account. As required by our regulators, we also carry out automated monitoring of play and account activity to detect indicators of gambling-related harm, which may result in responsible-gaming messages, limits or other interventions on your account.
5. Storage, transfers & retention
Personal information may be processed or stored by service providers, which could be located outside Ontario or Canada; where this happens, it may be subject to the laws of those jurisdictions, and we use contractual and other measures to ensure a comparable level of protection. Where personal information is transferred outside Canada (for example, to service providers in the US or EU), we provide notice of this and apply contractual safeguards. You may request information about the countries where your data may be processed by contacting our Privacy Officer. We retain personal information only as long as necessary for the purposes described or as required by law. In particular, records required for anti-money-laundering purposes are retained for at least five (5) years after the end of the business relationship or the transaction, in accordance with Canadian law (PCMLTFA/FINTRAC). When no longer required, information is securely deleted or anonymised.
6. Security
We use technical and organisational safeguards including encryption in transit and at rest, role-based access controls, password hashing, multi-factor authentication for privileged systems, intrusion detection, regular penetration testing, and a documented incident response plan, in line with the AGCO Cyber Security Standards. No method of transmission or storage is completely secure, but we work to protect your data. If a privacy breach occurs that creates a real risk of significant harm to you, we will notify the Office of the Privacy Commissioner of Canada and affected individuals, and keep records of breaches, as required by PIPEDA.
7. Automated monitoring & profiling
To meet our regulatory obligations and to keep play safe, we use automated processing (including profiling) of your account, transaction and gameplay data in two main ways:
- Responsible gaming (RG). As required by the Alcohol and Gaming Commission of Ontario (AGCO) Registrar's Standards for Internet Gaming, we automatically analyse play patterns for indicators of gambling-related harm (such as frequent deposits, escalating spend, long sessions or loss-chasing). This may trigger reality-check messages, responsible-gaming prompts, restrictions on promotions, or limits on your account.
- Anti-money-laundering & fraud (AML). We use automated screening and transaction monitoring to detect fraud, sanctions and politically-exposed-person (PEP) matches, and suspicious activity, consistent with the PCMLTFA/FINTRAC and our AML obligations. This may result in additional verification, holds or regulatory reporting.
These tools support, but do not wholly replace, human judgement: decisions that materially affect you (for example, closing an account or confiscating funds) involve human review. You may ask about the automated processing applied to you, express your point of view, and request human review of a decision by contacting our Privacy Officer at privacy@ollywoodcasino.com.
8. Your rights
Subject to legal limits, you may request access to the personal information we hold about you and ask us to correct inaccuracies. You may also request a copy of that information in a structured, commonly-used electronic format, where technically feasible. You may request deletion of your personal information where permitted by law, although we may need to retain certain records to meet our legal and regulatory obligations (for example, anti-money-laundering records under the PCMLTFA). You may withdraw marketing consent at any time. To make a request, contact our Privacy Officer at privacy@ollywoodcasino.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (which oversees PIPEDA) or, where applicable, the Information and Privacy Commissioner of Ontario (IPC).
9. Children
The Service is strictly for adults 19+. We do not knowingly collect personal information from anyone under 19. If we learn that we have, we will delete it.
10. Contact
We are accountable for the personal information in our control. Our designated Privacy Officer oversees compliance with this policy and applicable privacy law (PIPEDA Principle 1 — Accountability), and can be reached at:
Privacy Officer
Score Media and Gaming Inc.
Mail: 125 Queens Quay East, Toronto, Ontario M5A 0Z6, Canada
Email: privacy@ollywoodcasino.com
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (which oversees PIPEDA) or, where applicable, the Information and Privacy Commissioner of Ontario (IPC).