Privacy Policy

This Privacy Policy explains how f12-bet-casino collects, uses, discloses, and protects personal information when you use the Canadian-facing website https://f12bet-casino-ca.com and related services. It applies to players, prospective players, and visitors from Canada (excluding Ontario) and to any other individual who interacts with our services, including via live chat and email support. By using our services, you acknowledge that your personal information may be processed outside Canada, primarily in Curaçao and other countries as described below. This Privacy Policy is effective as of 1 January 2025 and replaces all prior versions for the Canadian market.

Who We Are

Operator and Legal Identity

The Canadian-facing f12-bet-casino service available at https://f12bet-casino-ca.com is owned and operated by:

Company name: F12 Gaming N.V.
Legal form: Public limited company (N.V.) under the laws of Curaçao
Registered address: Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao
Company registration number: 159643
Gaming licence: 8048/JAZ2022-022 issued under Master Licence 8048/JAZ by Antillephone N.V. on behalf of the Government of Curaçao

F12 Gaming N.V. is the primary data controller for personal information processed in connection with f12-bet-casino, including the operation of the sportsbook, online casino, and associated marketing channels.

Group and Service Providers

We may rely on affiliated and third-party entities to provide payment, technology, and support services, including:

Pix Star Brasil Pagamentos Ltda (Brazil) - payment processing partner for certain transactions.
F12 Gaming (UK-based B2B software provider) - technical and RNG platform provider for our iGaming systems.
Other payment gateways, fraud prevention tools, data-hosting providers, and analytics partners as further described in this Policy.

These entities generally act as our data processors, processing personal information on our instructions and under appropriate contractual safeguards.

Data Protection Contact (DPO)

F12 Gaming N.V. has appointed an internal data protection contact function, including a Data Protection Officer (or equivalent role) responsible for privacy compliance:

Data Protection Contact / DPO: F12 Gaming N.V. - Data Protection Officer
Email: support@f12bet-casino-ca.com (please use "Privacy Request" in the subject line)
Postal address: Data Protection Officer, F12 Gaming N.V., Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao
Online: 24/7 live chat available via the website's support interface

You may contact the DPO or data protection team for any questions about this Policy, your rights, or our handling of personal information.

What Personal Data We Collect

Identification and Contact Data

When you create and use an f12-bet-casino account, we may collect:

Account data: full name, date of birth, residential address, country and province, language and currency preferences.
Contact details: email address (including the address you use to contact support@f12bet-casino-ca.com), alternative contact emails you provide, and any phone number you add voluntarily.
Verification/KYC data: copies or details of government-issued IDs, proof of address, payment ownership documents, and any information required under anti-money-laundering (AML) and know-your-customer (KYC) rules.

Technical and Usage Data

When you visit https://f12bet-casino-ca.com or our global domains (such as https://f12.bet), we automatically collect:

Technical identifiers: IP address, approximate geolocation (country, region), browser type and version, device type and operating system, language settings, time zone and session identifiers.
Log information: login timestamps, pages visited, referral URLs, errors, system messages, and interactions with support (including live chat logs).
Security data: device fingerprints, failed login attempts, and risk scores generated by fraud-prevention tools.

Payment and Transaction Data

In order to process deposits, wagers, and withdrawals, we collect:

Payment details: partial card information (such as card type and last four digits), payment method identifiers (e.g., e‑wallet IDs, PIX keys, bank account references), and transaction tokens from payment processors such as Pix Star Brasil Pagamentos Ltda.
Gaming transactions: deposit and withdrawal history, bonus usage, wagering activity, win/loss records, and account balances.
Financial compliance data: information related to source of funds and source of wealth (where required), AML flags, and internal risk-assessment notes.

Behavioral and Profile Data

We also collect data generated by your interaction with the platform, including:

Gameplay history: games played, stakes, session durations, betting markets and odds, frequency of play, and voluntary limits you set.
Marketing and preference data: newsletter subscriptions, communication preferences, response to promotions, click-through data, and participation in loyalty or VIP programs.
Responsible gambling interactions: self-exclusion requests, cooling-off periods, reality-check confirmations, and any communications related to responsible gambling.

Cookies and Similar Technologies

We use cookies, web beacons, SDKs, and similar technologies to operate and improve our services. These may include:

Strictly necessary cookies: required for login, session management, security, and navigation.
Functional cookies: used to remember language, region, and UI preferences.
Analytics cookies: used to understand how visitors use the site, including aggregated statistics on page views, device types, and conversion funnels.
Advertising and tracking cookies: placed by us or trusted partners to measure campaign effectiveness and to show relevant offers (where permitted by law and your consent).

Further details are provided in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

Consent

We obtain your consent where required by applicable law, including Canadian privacy law (such as PIPEDA and substantially similar provincial laws), GDPR (for users in the European Economic Area), and Mexican privacy laws. Consent may be obtained explicitly (e.g., ticking a box to receive marketing emails) or implied where it is reasonable in the circumstances (for example, to operate your gaming account once you sign up). We rely on consent for:

Sending promotional and marketing communications.
Using certain analytics and advertising cookies that are not strictly necessary.
Processing sensitive or high-risk data, such as copies of identity documents, where local law requires explicit consent in addition to our legal obligations.

You may withdraw your consent at any time, as described in the "Your Rights" section, although this may limit your ability to use some services.

Contractual Necessity

We process personal information as necessary to enter into and perform our contract with you, including our Terms and Conditions and bonus rules. This includes:

Creating and administering your f12-bet-casino account.
Processing deposits, bets, game outcomes, and withdrawals.
Providing customer support via email and 24/7 live chat.
Managing promotions, loyalty programs, and responsible gambling tools you choose to use.

If you choose not to provide data needed to perform the contract (for example, identity verification), we may be unable to open or maintain your account.

Legitimate Interests

We process personal information where it is necessary for our legitimate business interests, balanced against your privacy rights and expectations. These interests include:

Securing our systems, preventing fraud, and protecting players and the platform from abuse, including through profiling and automated risk scoring.
Improving products and services, including via analytics, testing, troubleshooting, and optimization (for example, to improve game performance or website navigation).
Establishing, exercising, or defending legal claims and managing disputes.
Conducting internal reporting, auditing, and business planning.

Where required by laws such as GDPR and Mexican privacy regulations, we conduct legitimate interest assessments to ensure that our interests do not unfairly override your fundamental rights and freedoms.

Compliance with Legal Obligations

We process personal information to comply with our legal and regulatory obligations in Curaçao and other applicable jurisdictions, and to align with Canadian privacy principles. This includes:

Conducting KYC and AML checks and monitoring transactions for suspicious activity.
Maintaining appropriate records of financial transactions for tax, accounting, and reporting purposes.
Responding to lawful requests from regulators, supervisory authorities, and law enforcement (including Antillephone N.V. and relevant data protection authorities).
Complying with applicable data protection laws such as PIPEDA, EU GDPR, and Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) where they apply to our processing activities.

Purpose of Processing

Provision and Management of Services

We process your personal information to deliver and manage the f12-bet-casino platform and related services:

Opening and maintaining user accounts, including age verification and eligibility checks (noting that we do not accept players from Ontario).
Operating the sportsbook and online casino, including processing bets, calculating odds, settling wagers, and crediting winnings.
Administering payments, bonuses, promotions, and loyalty or VIP programs.
Providing customer support through email and 24/7 live chat, including investigating and resolving technical or account-related issues.

Improvement, Analytics, and Personalisation

We use technical, transactional, and behavioral data to understand how our services are used and to improve them:

Monitoring performance and usability of our websites (including f12bet-casino-ca.com and f12.bet).
Analyzing aggregated gameplay and betting patterns to optimize game selection, odds offerings, and UX features.
Personalizing your experience, including tailored content, recommended games, and localized offers (for example, content tailored to Canadian players outside Ontario).
Conducting statistical and market analysis to inform responsible gambling measures and product enhancements.

Marketing and Communications

With your consent where required, we process personal information for marketing purposes:

Sending promotional emails about bonuses, campaigns, and new features relevant to f12-bet-casino.
Using cookies and similar technologies to measure the effectiveness of campaigns and to avoid showing you the same message repeatedly.
Segmenting players by preferences and behaviors to send more relevant offers, subject to your communication preferences.
Notifying you of changes to our Terms, Privacy Policy, or important service updates.

Fraud Prevention, Security, and Compliance

We use personal information to maintain the integrity of our platform and comply with regulatory requirements:

Detecting and preventing fraud, collusion, money-laundering, bonus abuse, and game manipulation, including via automated monitoring tools.
Monitoring logins and transactions to detect unusual or high-risk activity.
Implementing responsible gambling tools, such as self-exclusion and limits, and monitoring for signs of problematic gambling behavior.
Retaining audit trails and logs necessary for regulatory inspections by Antillephone N.V. and for compliance with data protection authorities in Canada, the EU/EEA, and Mexico where applicable.

Disclosure & Sharing

Service Providers and Partners

We share personal information with carefully selected third parties that help us operate the platform, under confidentiality and data protection obligations:

Payment processors and banks: including Pix Star Brasil Pagamentos Ltda and other PSPs, to process deposits, withdrawals, and refunds.
Technology providers: hosting companies, cloud infrastructure, CRM systems, analytics providers, RNG and gaming software suppliers (including F12 Gaming UK), and security and anti-fraud vendors.
Support providers: live chat platforms and customer support tools that enable us to provide 24/7 assistance.

Regulators, Authorities, and Dispute Bodies

We may disclose personal information to:

Regulatory authorities: Antillephone N.V. (our Curaçao regulator), government authorities, and law enforcement agencies when required by law or regulation.
Data protection regulators: such as the Office of the Privacy Commissioner of Canada (OPC), EU data protection authorities, and the Mexican National Institute for Transparency, Access to Information and Personal Data Protection (INAI) in connection with investigations or complaints.
Legal advisors and auditors: external counsel, accountants, and auditors for compliance, dispute resolution, and risk management purposes.

Affiliates and Marketing Partners

Where permitted by law and subject to appropriate safeguards, we may share limited data with:

Affiliate marketing partners: for tracking referrals, verifying commissions, and measuring campaign performance.
Advertising networks and social media platforms: using anonymized or pseudonymized identifiers, for retargeting or lookalike audiences, based on your consent where required.

We do not sell personal information in exchange for money. In some jurisdictions, certain types of targeted advertising may be considered a "sale" or "sharing"; where applicable, we provide choices to opt out.

Business Transfers

In the event of a corporate transaction involving F12 Gaming N.V. or f12-bet-casino (such as a merger, acquisition, restructuring, or sale of assets), personal information may be disclosed to prospective or actual purchasers and their advisors, subject to confidentiality obligations and applicable law.

International Transfers

Transfers Outside Canada

Because F12 Gaming N.V. is located in Curaçao and uses international service providers, your personal information may be stored and processed outside Canada, including in:

Curaçao (primary operational and regulatory jurisdiction).
Brazil (for payment processing via Pix Star Brasil Pagamentos Ltda and associated financial partners).
European Union, United Kingdom, and other countries where our technology providers, hosting partners, or analytics vendors operate.

When personal information is transferred outside Canada, it may be subject to the laws of the receiving jurisdiction and may be accessible to foreign courts, law enforcement, and regulatory authorities under those laws.

Safeguards for Cross-Border Transfers

We take reasonable contractual and technical measures to ensure that personal information receives a comparable level of protection to that required under Canadian privacy laws and, where applicable, GDPR and Mexican privacy rules. These measures may include:

Written data processing agreements and confidentiality obligations with all processors and sub-processors.
Standard contractual clauses approved under EU law or equivalent contractual safeguards for international transfers from the EEA or UK.
Internal policies restricting access to personal information to staff who need it for legitimate business purposes.
Encryption of data in transit and at rest, as further described in the "Data Security" section.

Where required by law, we conduct transfer impact assessments for high-risk transfers and implement additional safeguards as necessary.

Data Retention

General Retention Principles

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with legal and regulatory requirements, and to protect our legitimate interests (such as managing disputes). When determining retention periods, we consider factors such as the type of data, the nature of our relationship with you, and applicable laws in Curaçao, Canada, the EU/EEA, and Mexico.

Category-Specific Retention Periods

Account and identification data: generally kept for up to 5 years after your account is closed, or longer where required by AML, gambling, or financial regulations.
Financial and transaction records: typically retained for 5-7 years after the end of the relevant financial year to comply with tax and accounting obligations.
KYC and verification documents: normally stored for up to 5 years after account closure or the last transaction, subject to regulatory requirements.
Gameplay and behavioral data: maintained for the life of the account and for up to 5 years after closure for responsible gambling analysis, dispute resolution, and regulatory audits.
Technical logs and security data: retained for 6-24 months, unless longer retention is needed for security investigations or legal claims.
Marketing data and preferences: retained until you opt out or your account is closed, plus a short period to document your opt-out choice.
Cookies and tracking technologies: stored for periods typically between session-only and up to 24 months, depending on the cookie type and purpose (see "Cookies & Tracking Technologies").

Deletion and Anonymisation

When personal information is no longer required, we will securely delete or anonymise it. In some cases, we may anonymise data so that it can no longer be associated with an identified or identifiable individual and use it for statistics, research, or product improvement. Where you exercise your rights to erasure, we will remove or de-identify data unless we must retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

Your Rights

Overview of Rights

Depending on your place of residence and the laws that apply to our processing (including Canadian privacy legislation such as PIPEDA, the EU General Data Protection Regulation (GDPR), and Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)), you may have some or all of the following rights:

Right of access: to obtain confirmation of whether we hold personal information about you and to receive a copy of that information, subject to limited exceptions.
Right to rectification/correction: to request that we correct inaccurate or incomplete personal information.
Right to erasure ("right to be forgotten"): to request deletion of your personal information where it is no longer needed, where you withdraw consent and no other legal basis applies, or where required by local law, subject to regulatory and AML record-keeping obligations.
Right to restriction of processing: to request that we limit processing in certain circumstances (for example, while we verify contested accuracy).
Right to object: to object to certain processing activities, including direct marketing and profiling for marketing or legitimate interest purposes.
Right to data portability: where applicable (notably under GDPR and some Mexican privacy rules), to receive certain personal information in a structured, commonly used, machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise your rights, please contact us using one of the following channels:

Email: support@f12bet-casino-ca.com (subject line "Privacy Request").
Live chat: 24/7 live chat available on the website; you may ask the agent to forward your request to the Data Protection Officer.
Postal mail: Data Protection Officer, F12 Gaming N.V., Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao.

We may need to verify your identity before responding, for example by asking you to confirm specific account details or to provide identification documents where appropriate. This helps us protect your information from unauthorized access.

Response Timeframes and Fees

We aim to respond to all privacy-related requests within 30 days of receipt, consistent with PIPEDA, GDPR, and LFPDPPP standards. In complex cases or where we receive multiple requests, we may extend this period by an additional 30 days, and we will inform you if an extension is needed. We generally handle requests free of charge. However, where permitted by law, we may charge a reasonable fee or decline to act on requests that are manifestly unfounded, excessive, or repetitive.

Limitations

Your rights may be subject to legal restrictions. For example, we may not be able to delete data that must be retained for AML or gambling regulations, or to provide access to information that would reveal confidential commercial information, interfere with law enforcement, or infringe on the privacy of others. Where we rely on such exceptions, we will explain our reasoning unless prohibited by law.

Cookies & Tracking Technologies

Types of Cookies We Use

We use several categories of cookies and similar technologies on f12-bet-casino:

Session cookies: temporary cookies that are stored on your device only while your browser is open and are deleted when you close it.
Persistent cookies: remain on your device for a set period or until you delete them, enabling us to remember your preferences and recognize you on subsequent visits.
First-party cookies: set by our domain (f12bet-casino-ca.com or f12.bet) to support core site functionality.
Third-party cookies: set by service providers (for example, analytics and advertising partners) to provide services such as traffic analysis and campaign measurement.

Purposes of Cookies

Strictly necessary: essential for the operation of the site, including maintaining your session after login, enabling secure navigation, and handling payment steps.
Functional: remember your language, region, and interface customizations (for example, preferred odds format or displayed currency).
Analytics: collect aggregated statistics about how users interact with the site (pages visited, time spent, device types) to help us improve performance and usability.
Advertising and performance: support marketing campaigns, affiliate tracking, and, where applicable, personalized offers based on your interactions and preferences.

Managing and Disabling Cookies

You have several options to control cookies and tracking technologies:

Browser settings: most browsers allow you to block or delete cookies, or to be notified before a cookie is stored. Please consult your browser's help menu for instructions.
On-site tools: where available, our cookie banner or preference center allows you to accept or reject certain categories of cookies (for example, analytics or advertising cookies) while keeping strictly necessary cookies enabled.
Device and OS settings: mobile operating systems may offer additional privacy controls that limit tracking.

Please note that disabling certain cookies may affect site performance or functionality and may prevent you from logging in or using some features.

Data Security

Technical and Organizational Measures

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include:

Encryption in transit: use of TLS 1.2+ (or equivalent) to secure data transmitted between your browser and our servers.
Encryption at rest: storage of sensitive data (such as account credentials and certain financial identifiers) in encrypted form, using industry-standard cryptographic techniques.
Access controls: role-based access to systems and data, granting permissions only to staff who need them to perform their duties.
Authentication: strong password requirements and, where applicable, multi-factor authentication for critical administrative interfaces.

Operational Security and Governance

Beyond technical safeguards, we apply organizational and procedural controls, including:

Security policies and training: mandatory staff training on information security, privacy, and responsible handling of player data.
Monitoring and logging: recording access to key systems and conducting regular reviews to detect suspicious activity.
Vendor due diligence: assessing security practices of third-party processors and requiring appropriate security measures by contract.
Audit and review: periodic internal reviews and external audits of our systems and controls. We strive to align our practices with recognized standards such as ISO 27001 and SOC 2 principles, even if formal certification is not claimed unless explicitly stated on our website.

Incident Response

We maintain incident response procedures to handle actual or suspected data breaches:

Prompt investigation of alerts or suspected security events.
Containment and remediation to minimize impact and prevent recurrence.
Assessment of potential risks to affected users.
Notification to relevant authorities and affected individuals when required by applicable law (including Canadian, EU, and Mexican data protection rules) and as soon as reasonably practicable.

While we take these precautions, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for using only trusted devices and networks when accessing your account.

Complaints & Contacts

Contacting Us

If you have questions, concerns, or complaints about how we handle your personal information, please contact us first so that we can try to resolve the issue:

Email: support@f12bet-casino-ca.com
Live chat: 24/7 live chat available on the f12-bet-casino website.
Postal mail: Data Protection Officer, F12 Gaming N.V., Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao.

Internal Complaint Procedure

Submission: Send your complaint or question via email or live chat, clearly indicating that it relates to privacy or personal information.
Acknowledgement: We will acknowledge receipt of your complaint as soon as reasonably possible, typically within a few business days.
Investigation: Our data protection team will review your complaint, gather relevant information, and may contact you for clarification.
Response: We aim to provide a substantive response within 30 days. If more time is needed due to complexity, we will inform you of the reason and the expected extension period.
Escalation: If you are not satisfied with the response, you may request escalation to our senior compliance management for further review.

Escalation to Supervisory Authorities

You also have the right to file a complaint with a data protection or privacy authority, in particular in the country or province where you live or work or where you believe your rights have been infringed. Examples include:

Canada: Office of the Privacy Commissioner of Canada (OPC) - see https://www.priv.gc.ca for contact details and complaint procedures. Some provinces (such as Quebec, Alberta, and British Columbia) also have their own privacy regulators.
European Union / EEA: Your local Data Protection Authority (DPA). Contact details are available via the European Data Protection Board at https://edpb.europa.eu.
Mexico: Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Information on submitting complaints under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) is available at https://www.inai.org.mx.

For matters relating to our gambling licence and player protection under Curaçao law, you may also contact our regulator:

Regulator: Antillephone N.V.
Complaint email: certria@gaminglicences.com

We encourage you to contact us first so we can attempt to address your concerns directly before you approach a supervisory authority, but this is not a legal requirement.

Updates

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or privacy practices. When we make material changes, we will take appropriate steps to inform you in advance, such as:

Posting a prominent notice or banner on https://f12bet-casino-ca.com.
Sending an email notification to the address linked to your account, where appropriate.
Displaying alerts in your account dashboard after login.

Unless otherwise required by law, material changes will take effect no earlier than 30 days after we provide notice. Continued use of the services after the effective date of the updated Policy constitutes your acceptance of the changes.

Version Control and Changelog

This Privacy Policy applies to the Canadian-facing f12-bet-casino services as of the date indicated below:

Last updated: November 2025

Where feasible, we will keep an overview of material changes, which may include:

Updates to categories of data collected (for example, introduction of new responsible gambling tools or payment methods).
Changes in our list of key processors or international transfer destinations.
Adjustments to retention periods or security practices in response to legal or technical developments.

Your Options Following Updates

If you do not agree with an updated version of this Privacy Policy, you may choose to stop using our services and request account closure at any time by contacting support@f12bet-casino-ca.com or via live chat. We will close your account in accordance with our Terms and Conditions and apply the retention and deletion rules described in this Policy. Where required by law, you may also object to specific changes or uses of your data, and we will assess such objections on a case-by-case basis.