Data Governance Framework

Aurora Gaming processes your personal information in strict adherence to applicable Canadian statutory frameworks, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial privacy legislation, alongside international regulatory benchmarks. Under these data protection laws, every operation involving your records must rely on a clearly established lawful ground. We systematically categorize all processing into four primary legal justifications: contractual necessity, statutory obligation, legitimate business interests, and express consent.

1. Performance of a Contract
When you register an account with our platform, an enforceable contractual relationship is established under our published terms. Processing your personal data is mandatory to deliver our core wagering and account management services. Under this basis, we process data to:

• Authenticate user credentials and maintain secure account administration across active sessions.
• Facilitate financial transactions, including processing deposits, settlement of wagers across live betting markets, and processing Canadian Dollar (CAD) withdrawals via verified payment processors.
• Execute transaction histories, settle winning stakes accurately against verified event outcomes, and maintain an immutable ledger of all placed bets.
• Deliver critical non-marketing operational notices, such as balance updates, security alerts, technical maintenance notifications, and amendments to service terms.

2. Legal and Regulatory Obligations
As an operator compliant with strict licensing standards and anti-financial crime mandates, we must collect, verify, and retain specific user records to satisfy binding regulatory requirements. This includes:

• Know Your Customer (KYC) Verifications: Validating government-issued identification, residential address documentation, and age verification to ensure players meet the Canadian legal age of majority (19+ in most provinces; 18+ in Alberta, Manitoba, and Quebec).
• Anti-Money Laundering (AML) & Counter-Terrorist Financing (CTF): Monitoring transaction volumes, screening against domestic and international politically exposed persons (PEP) and sanctions registries, and filing mandatory reports on suspicious financial activities.
• Player Protection Mandates: Monitoring activity metrics to identify markers of problematic gambling, enforcing self-exclusion registers, and executing loss limits consistent with our responsible gaming frameworks.
• Statutory Auditing and Tax Compliance: Maintaining financial transaction logs and dispute resolution archives for mandated statutory retention windows (typically five to seven years post-account closure).

3. Legitimate Business Interests
We process personal data where necessary to pursue legitimate operational objectives, provided such activities do not override your fundamental individual privacy rights. Activities conducted under legitimate interests include:

• Platform Integrity and Fraud Prevention: Implementing device fingerprinting, IP address monitoring, and algorithmic screening to detect syndicate betting, arbitrage abuse, bonus exploitation, and unauthorized multi-accounting.
• Risk Assessment and Market Management: Analyzing aggregated turnover to calibrate sports betting odds and manage operational exposure.
• Technical Infrastructure Security: Detecting and mitigating malicious traffic, brute-force attempts, DDoS vectors, and unauthorized network intrusions.
• Service Optimization: Reviewing telemetry and aggregated navigational trends to improve interface performance, server stability, and feature responsiveness across desktop and mobile browsers.

4. Express Consent
Where processing falls outside contractual, statutory, or legitimate interest justifications, we obtain your clear and explicit consent prior to handling your data. Consent is specifically utilized for opt-in direct marketing, such as customized email bulletins and notifications regarding our latest sportsbook promos. You retain the absolute right to revoke this consent at any time via your account profile settings or through the unsubscribe mechanism included in every marketing communication, without impacting the lawfulness of any processing conducted prior to revocation.

Aurora Gaming does not sell, rent, or trade your personal information to marketing brokers or unrelated third parties. To maintain operational stability, comply with Canadian federal and provincial regulations (such as PIPEDA and FINTRAC reporting standards), and fulfill our contractual obligations to active account holders, we disclose specific data categories to verified third-party entities. Every external partner undergoes rigorous screening and is bound by formal data processing agreements that restrict usage exclusively to the defined operational purpose.

Primary Categories of Authorized Third-Party Recipients:

• Payment Processors and Financial Gateways: When you fund your account or request a withdrawal, transaction identifiers, card details, Interac e-Transfer data, or cryptocurrency transaction hashes are securely transmitted to authorized payment service providers (PSPs) and banking networks. These providers operate under PCI-DSS Level 1 compliance and applicable banking laws to ensure secure settlement.
• Gaming Software Providers: Wagering activities across our catalog require sharing a pseudonymized player identifier, session session tokens, and bet amounts with software providers (such as Evolution, Pragmatic Play, and Playtech). This technical integration enables real-time odds calculation, game outcome verification via certified Random Number Generators (RNG), and settlement without exposing your direct identity records.
• Identity Verification and Fraud Detection Vendors: Compliance with anti-money laundering (AML) and Know Your Customer (KYC) regulations requires validating identity documents against official databases. We engage specialized verification agencies to confirm government IDs, address proofs, and source-of-wealth records, preventing fraudulent account creation and underage access.
• Infrastructure, Hosting, and Telemetry Providers: Core platform hosting is maintained through encrypted cloud servers. Web analytics services (such as pseudonymized telemetry tools) evaluate traffic throughput, error logs, and user flows to maintain network security and page performance.
• Regulatory and Law Enforcement Authorities: We are legally mandated to share account details, transaction logs, and identity records when responding to lawful subpoenas, court orders, or reporting thresholds established by Canadian regulatory authorities and law enforcement bodies.

Cross-Border Data Transfers: Because select technological partners and server nodes operate in international jurisdictions, including the European Economic Area (EEA), the United Kingdom, and the United States, your data may be stored or processed outside Canada. In every instance of cross-border transmission, Aurora Gaming implements Standard Contractual Clauses (SCCs) and robust technical safeguards (AES-256 encryption in transit and at rest) to ensure privacy standards meet or exceed Canadian legal requirements.

Cookie Architecture and Tracking Technologies: Our web servers and mobile interfaces utilize cookies, pixel tags, and local storage objects to optimize session handling and secure our live betting platform. We classify technical cookies into four operational tiers:

• Strictly Necessary Cookies: Core technical files essential for session authorization, load balancing, fraud detection, and token renewal. These cookies cannot be disabled, as the site cannot function without them.
• Performance and Diagnostic Cookies: Analytical cookies that aggregate non-identifiable metrics on page load speeds, response times, and navigation drop-offs to improve overall infrastructure reliability.
• Functional and Preference Cookies: Local storage parameters that retain user-selected preferences, including language settings, regional odds display formats (decimal, fractional, or American), and active view configurations across our sportsbook promotion pages.
• Targeting and Optimization Cookies: Marketing pixels used to assess campaign efficiency and deliver relevant contextual messages based on demonstrated interest.

You retain full autonomy over non-essential tracking technologies. You can adjust your preferences at any time via the cookie settings console in your account dashboard or by reconfiguring your web browser privacy filters. To learn more about our commitment to user safety and operational integrity, consult our comprehensive about page and explore our responsible gambling guidelines.

Under applicable data privacy regulations, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and international standards such as the GDPR, registered account holders retain specific statutory rights regarding the collection, processing, and storage of their personal information. Aurora Gaming maintains strict compliance workflows to ensure user requests are verified and processed within the required statutory timeframe of 30 calendar days.

Your primary data subject entitlements include the following operational rights:

• Right of Access and Portability: You can request a comprehensive digital extract of all personal data held about you, including account registration logs, transaction records, verification records, and activity histories across our desktop platform and sports betting apps. This data is delivered in a structured, commonly used, machine-readable format (CSV or JSON).
• Right to Rectification: If profile information, residential address, banking data, or contact numbers become outdated or inaccurate, you may update them directly within your account profile or request administrative correction through customer support. Proof of address or updated documentation may be required to verify modified identity records.
• Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your account and associated personal data. Erasure requests are processed subject to mandatory legal and financial obligations, including anti-money laundering (AML) legislation, anti-fraud auditing rules, and responsible gambling self-exclusion registry requirements.
• Right to Restrict or Object to Processing: You hold the right to limit the processing of your personal information where data accuracy is contested, or to object entirely to automated decision-making and direct promotional communications. Opting out of promotional messaging can be completed via marketing preference toggles without impacting transactional account notices.

Security Protocols and Infrastructure Protection: All data transmitted to and from livelinebetting.com is protected using 256-bit TLS (Transport Layer Security) encryption protocols, authenticated by verified cryptographic certificates. Stored data is partitioned on isolated servers with active perimeter firewalls, regular vulnerability assessments, and strict multi-factor authentication (MFA) access controls restricted strictly to authorized operational staff.

Mandatory Retention Periods: In accordance with financial compliance rules, counter-terrorist financing guidelines, and Canadian federal reporting frameworks, essential customer identity records, deposits, payouts, and transactional betting logs must be retained for a mandatory minimum period of five (5) full calendar years following account closure. Upon the expiration of the statutory retention mandate, personal identifiers are permanently scrubbed from our database systems.

Contacting the Data Protection Officer (DPO): For formal privacy inquiries, subject access requests, or regulatory questions regarding data processing, contact our dedicated compliance office directly by email at [email protected] or via postal mail addressed to Data Protection Office, Aurora Gaming Operations, 123 High Street, Sliema, SLM 1540, Malta. If you believe your privacy concerns have not been adequately resolved, you maintain the right to submit a formal complaint to the Office of the Privacy Commissioner of Canada (OPC) or your provincial privacy oversight commissioner.