Privacy Policy

This Privacy Policy explains how Ellipse Entertainment Limited, operating the High Flyer Casino brand via highflyerwin-ca.com (including the review page High Flyer Casino), collects, uses, discloses, and protects your personal information. It applies to all players, prospective players, and other visitors who access or interact with our websites, mobile interfaces, and related online services in Canada. By using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and replaces any previous privacy notices published on highflyerwin-ca.com.

Who We Are

For the purposes of Canadian privacy law and, where applicable, international data protection law, the organization responsible for personal information processed through highflyerwin-ca.com (including the page High Flyer Casino) is:

• Operator / Legal Entity: Ellipse Entertainment Limited
• Brand: High Flyer Casino
• Primary website: https://highflyerwin-ca.com
• Registered office for Canadian operations: 55 Village Centre Place, Mississauga, Ontario, Canada

Ellipse Entertainment Limited is licensed to offer online gambling services to eligible players physically located in:

• Ontario, Canada: Under an operating agreement with iGaming Ontario and regulated by the Alcohol and Gaming Commission of Ontario (AGCO) / iGaming Ontario (iGO).
• Rest of Canada (excluding Ontario): Under licence number 00874 issued by the Kahnawake Gaming Commission (Kahnawake Gaming Commission - KGC).

Data Protection Contact (DPO / Privacy Office)

• Email: [email protected]
• Postal: Privacy Office, Ellipse Entertainment Limited, 55 Village Centre Place, Mississauga, Ontario, Canada

If you have any questions about this Privacy Policy or how we handle your information, you should contact our Privacy Office using the details above.

What Personal Data We Collect

We collect and process only the personal information that is reasonably necessary for the operation of High Flyer Casino and the provision of services via highflyerwin-ca.com, including the page High Flyer Casino. The categories of data we may collect are:

• Identification and contact data: Full name, date of birth, residential address, email address, telephone number, username, player ID, and verification documents (such as copies of government-issued ID, proof of address, or other KYC documentation as required by AGCO/iGO, KGC and applicable law).
• Account and transactional data: Account registration details, login credentials (stored in encrypted form), account settings and preferences, deposit and withdrawal history, game session records, bonuses and promotions claimed, loyalty status, and communications with customer support.
• Payment and financial data: Partial payment card details (tokenized or truncated card numbers), payment method type, payment provider identifiers, transaction amounts, time stamps, and limited bank or e-wallet information as required to process payments and perform anti-fraud checks. We do not store full card details where this is handled by certified payment processors.
• Technical and device data: IP address, approximate geographic location (derived from IP or geo-location tools), device identifiers, device type and operating system, browser type and version, language settings, referral URLs, and system logs related to access, errors, and security events.
• Behavioural and usage data: Login times, session duration, game selections, stakes, wins and losses, betting patterns, clickstream data, interaction with pages and features (including High Flyer Casino), responsible gambling tools usage, and other in-site behavioural metrics used for analytics, personalization, and responsible gambling monitoring.
• Marketing and communication data: Your preferences regarding receiving promotional emails, SMS or in-account messages, records of consents and opt-outs, campaign engagement (e.g., email opens, link clicks), and responses to surveys or feedback forms.
• Compliance and risk data: Information obtained during KYC/AML checks, sanctions and politically exposed person (PEP) screening results, internal risk scoring, device and network risk indicators, and information related to self-exclusion or other responsible gambling measures.
• Cookies and similar technologies: Unique identifiers associated with cookies, web beacons, pixels, SDKs, and local storage used to enable the site, remember your preferences, perform analytics, prevent fraud, and deliver relevant marketing (see "Cookies & Tracking Technologies" below).

Where permitted by law, we may collect certain information from third-party sources (such as identity verification services, payment providers, or affiliate partners) and combine it with information we hold about you for the purposes set out in this Privacy Policy.

Legal Basis for Processing

Because High Flyer Casino serves users in Canada and may interact with players and visitors from other regions, our processing of personal information is based on a combination of Canadian law (including PIPEDA and applicable provincial legislation) and, where relevant, international data protection principles such as the EU General Data Protection Regulation (GDPR) and Mexican privacy law.

• Your consent: We rely on your express or implied consent to:
  • Set non-essential cookies and similar technologies.
  • Send you marketing communications (email, SMS, push, in-account messages).
  • Conduct certain forms of analytics or profiling for marketing purposes.
  You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Performance of a contract / provision of services: We must process your personal information to:
  • Create and administer your player account.
  • Verify your eligibility to play (age, location, identity).
  • Provide games, manage bets, process deposits and withdrawals.
  • Provide customer support and manage promotions.
• Compliance with legal and regulatory obligations: As a regulated gambling operator (AGCO/iGO in Ontario and KGC for the rest of Canada), we are required to:
  • Perform know-your-customer (KYC) and anti-money laundering (AML) checks.
  • Prevent fraud, money laundering, and other criminal activity.
  • Maintain records for audit and reporting to regulators, tax and law enforcement authorities.
  • Enforce responsible gambling measures and self-exclusion programs.
• Legitimate interests (or equivalent concepts under Canadian and Mexican law): We process certain data when it is necessary for:
  • Improving and optimizing our services, including High Flyer Casino content.
  • Maintaining IT and network security and preventing abuse of our systems.
  • Protecting our legal rights, interests, and the integrity of the gaming platform.
  • Conducting statistical and market analyses in an anonymized or pseudonymized form.
  Where required, we balance these interests against your fundamental rights and freedoms.

Where GDPR or Mexican privacy law (such as the Federal Law on Protection of Personal Data Held by Private Parties) applies, these bases correspond to the lawful grounds recognised under those frameworks.

Purpose of Processing

We use your personal information only for specified, explicit, and legitimate purposes and do not process it in a way that is incompatible with those purposes. In particular, we process data for the following reasons:

• Providing and managing casino services:
  • To create and manage your player account and verification status.
  • To allow you to place bets, play games, receive bonuses, and participate in promotions.
  • To process payments, including deposits, withdrawals, and refunds.
  • To provide customer support and resolve technical issues and disputes.
• Regulatory compliance and responsible gambling:
  • To carry out KYC/AML checks and comply with AGCO/iGO and KGC rules.
  • To monitor gameplay and betting patterns for signs of fraud or problem gambling.
  • To implement self-exclusion, limits and other safer gambling tools.
  • To retain records necessary for regulatory audits and legal processes.
• Improving our services and user experience:
  • To analyze site usage, including interactions with High Flyer Casino, in order to improve navigation, content, and features.
  • To test new features, perform quality assurance, and optimize performance.
  • To personalize content, recommendations, and offers based on your preferences and behaviour, where permitted by law.
• Marketing and promotions:
  • To send you promotional messages about games, bonuses, and offers from High Flyer Casino, where you have consented or where permitted by law.
  • To measure the effectiveness of campaigns and optimize marketing strategies.
  • To manage loyalty programs and VIP services where applicable.
• Security, fraud prevention, and dispute handling:
  • To detect and prevent fraud, account compromise, and other abuses.
  • To investigate and resolve disputes, chargebacks, or regulatory inquiries.
  • To protect the rights, property, and safety of players, Ellipse Entertainment Limited, and the integrity of the gambling systems.

Disclosure & Sharing

We do not sell your personal information. However, we may share it with carefully selected third parties under strict contractual and legal safeguards where necessary for the purposes described above.

• Payment service providers and banks: To process deposits, withdrawals, and other financial transactions, and to perform related fraud checks. These providers act as independent controllers or processors depending on the arrangement.
• Technology and service providers: Including hosting providers, game providers, CRM systems, email and SMS platforms, customer support tools, analytics services, identity verification and geolocation providers, and security / anti-fraud tools. These parties are typically bound by data processing agreements that restrict their use of your information to our instructions.
• Regulators and governmental authorities: We may share data with:
  • Alcohol and Gaming Commission of Ontario (AGCO) and iGaming Ontario (iGO).
  • Kahnawake Gaming Commission (KGC).
  • Law enforcement, tax authorities, and other competent agencies in Canada or abroad.
  Such disclosures occur where required by law, regulation, court order, or regulatory request.
• Affiliates and advertising partners: Where you arrive at highflyerwin-ca.com via an affiliate link or advertising network, we may share limited information (such as anonymized identifiers, conversion data, or aggregate statistics) to attribute traffic and optimize campaigns. Direct marketing with third-party partners is carried out only when permitted by law and, where required, based on your consent.
• Corporate transactions: In connection with any merger, acquisition, restructuring, sale of assets, or insolvency event involving Ellipse Entertainment Limited or the High Flyer Casino business, your personal information may be disclosed to potential or actual purchasers, their advisers, and other relevant parties, subject to confidentiality and data protection safeguards.
• Professional advisers: We may share data with lawyers, auditors, consultants, and other professional advisers to obtain legal, financial, or technical advice, subject to professional obligations of confidentiality.

Whenever we share personal information with third parties acting on our behalf, we implement contractual protections requiring them to maintain appropriate security, use the data only for specified purposes, and comply with applicable privacy laws.

International Transfers

High Flyer Casino primarily serves players in Canada; however, many of our service providers, infrastructure components, and partners operate across borders. As a result, your personal information may be transferred to and processed in countries or territories outside your province, outside Canada, and, in some cases, outside your home jurisdiction if you are visiting from abroad.

• Locations of processing: Your data may be processed in:
  • Canada, including servers and operational centres used by Ellipse Entertainment Limited.
  • Kahnawake, in connection with infrastructure and licensing for the rest-of-Canada operations.
  • The European Economic Area (EEA), the United Kingdom, and other jurisdictions where our technology and service partners are located.
  • The United States or other countries that may not provide the same level of data protection as your home jurisdiction.
• Safeguards for international transfers: When personal information is transferred outside of Canada or outside jurisdictions considered to have adequate data protection laws:
  • We use contractual safeguards (such as standard contractual clauses approved under the GDPR or equivalent instruments) where appropriate.
  • We require recipients to implement robust technical and organizational measures to protect your data (encryption, access controls, security certifications where applicable).
  • We transfer only what is necessary for the relevant purpose and use pseudonymization or anonymization where practical.

By using our services, you understand that your personal information may be transferred and stored in the manner described above, subject to these safeguards and applicable legal requirements.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to meet our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Retention periods may vary depending on the type of data and the applicable laws (including gambling and AML regulations in Ontario and Kahnawake).

• Player account and identification data: Typically retained for the duration of your relationship with us and for a period after account closure (commonly up to 5 - 7 years) to comply with gaming, AML, tax, and record-keeping obligations and to defend against legal claims.
• Transactional and betting data: Information about deposits, withdrawals, game outcomes, and betting history is retained for regulatory and accounting purposes for the periods required by law and regulators (which may be up to or exceeding 7 years in some cases).
• Compliance and risk data: KYC/AML records, risk assessments, and self-exclusion data are retained for the legally mandated periods and as necessary to ensure the integrity of responsible gambling schemes and prevent re-registration where prohibited.
• Marketing data: Information relating to your marketing consents and communication preferences is retained while you maintain an account or until you withdraw consent or object to processing, plus a reasonable period to maintain records of your opt-out request.
• Technical logs and analytics data: Web server logs, security logs, and analytics events are generally retained for shorter periods (for example, from several weeks up to 24 months), unless a longer period is required for security investigations or legal proceedings.

When personal information is no longer needed, we will securely delete or anonymize it. In some cases, we may anonymize data so that it can no longer be associated with you; such anonymized information may be used indefinitely for statistical, research, or analytical purposes.

Your Rights

High Flyer Casino is committed to respecting your privacy rights in line with Canadian law and, where applicable, international standards including the EU GDPR and Mexican data protection law (such as the Federal Law on Protection of Personal Data Held by Private Parties).

• Right of access: You have the right to request confirmation of whether we hold personal information about you and to obtain access to the personal information we hold, together with explanations of how it is used and with whom it is shared.
• Right to correction (rectification): You may request correction of inaccurate or incomplete personal information. In many cases you can update certain details directly in your account settings; for other changes, you may need to contact our Privacy Office and provide supporting documentation.
• Right to deletion / erasure: In certain circumstances, you may request that we delete your personal information, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. However, due to gaming, AML, and regulatory obligations, we may be required to retain certain records even after your account is closed.
• Right to restriction of processing: You can request that we limit the processing of your personal information in specific situations (e.g., while the accuracy of data is being verified or where you have objected to processing and we are assessing the request).
• Right to object: Where we rely on legitimate interests to process your personal information, you have the right to object to such processing on grounds relating to your particular situation. You always have the right to object to the use of your personal information for direct marketing, and we will honour such objections promptly.
• Right to data portability (where applicable): For certain information processed by automated means and based on consent or contract, you may request a copy in a structured, commonly used, machine-readable format, and you may ask us to transmit it to another organization, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing or certain cookies), you may withdraw consent at any time via your account settings, unsubscribe links in emails, or by contacting us. Withdrawal will not affect processing that has already taken place.
• Rights under Mexican law and GDPR (if applicable): If you are protected by Mexican privacy law or the GDPR, you may enjoy additional or more specific rights (including ARCO rights - access, rectification, cancellation, and opposition - under Mexican law and rights related to automated decision-making under GDPR). We will endeavour to honour such rights to the extent required by applicable law.

Exercising your rights and response times

• You can exercise your rights by contacting our Privacy Office at [email protected] and clearly describing your request.
• For security reasons, we may ask you to provide information to verify your identity before acting on your request.
• We aim to respond within 30 days of receiving a complete request. Where allowed by law, this period may be extended, in which case we will inform you of the reasons for the delay.
• We do not charge a fee for handling your request unless it is manifestly unfounded, repetitive, or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request, in accordance with applicable law.

Cookies & Tracking Technologies

We use cookies and similar technologies on highflyerwin-ca.com, including on the page High Flyer Casino, to ensure the site functions correctly, enhance your experience, analyze traffic, and support marketing activities.

• Types of cookies we use:
  • Session cookies: Temporary cookies that are stored on your device only for the duration of your browsing session and are deleted when you close your browser or log out.
  • Persistent cookies: Cookies that remain on your device for a set period of time or until you delete them, helping us recognize you and remember your preferences.
  • First-party cookies: Cookies set directly by highflyerwin-ca.com to provide core functionality and remember your settings.
  • Third-party cookies: Cookies set by external providers (such as analytics, security, or advertising partners) to support analytics, fraud prevention, and marketing.
• Purposes of cookies and similar technologies:
  • Strictly necessary / functional: To enable basic site functions, secure login, session management, payment processing, and load balancing. These are essential and cannot be switched off in our systems.
  • Preferences: To remember your language, region, and site settings so that we can provide a more personalized experience.
  • Analytics and performance: To collect aggregated information about how visitors use the site, which pages are visited (including content like High Flyer Casino), and how features are used, helping us improve performance and usability.
  • Advertising and attribution: To measure the effectiveness of our marketing campaigns, prevent fraud, and deliver relevant promotions, in some cases in cooperation with affiliate and advertising partners.
• Managing cookies:
  • You can manage your cookie preferences using your browser settings, which typically allow you to block or delete cookies.
  • Some browsers also offer "Do Not Track" (DNT) settings; while we respect privacy-enhancing technologies, our response to DNT signals may be limited by technical and legal factors.
  • Disabling certain cookies may affect the functionality of the site, including the ability to log in or use some features.

Data Security

We take the security of your personal information very seriously and implement technical and organizational measures designed to protect it against unauthorized access, loss, misuse, alteration, or destruction.

• Encryption and secure transmission:
  • Data transmitted between your device and our servers is protected using industry-standard Transport Layer Security (TLS 1.2 or higher).
  • Sensitive data is encrypted at rest where appropriate, and strong cryptographic controls are applied to credentials and payment-related information.
• Access control and authentication:
  • Access to personal information is restricted to authorized personnel who require it to perform their job duties, based on role-based access controls.
  • Administrative interfaces are protected by strong authentication mechanisms and logging.
• Security monitoring and audits:
  • We maintain security monitoring to detect suspicious activity and potential threats.
  • We conduct regular security assessments, vulnerability management, and, where appropriate, engage independent specialists to review our controls.
  • Our security program is designed to align with recognized international standards such as ISO 27001 and SOC 2, where appropriate for our risk profile and operations.
• Staff training and policies:
  • Employees with access to personal information receive training on privacy, data protection, and security best practices.
  • Internal policies and procedures govern how personal information must be handled, including restrictions on its use and disclosure.
• Incident response:
  • We maintain procedures for identifying, assessing, and responding to data security incidents.
  • Where required by law, we will notify affected individuals and relevant authorities of certain data breaches without undue delay, taking into account regulatory timelines in Canada and, where applicable, other jurisdictions.

While we strive to protect your personal information, no system can be guaranteed 100% secure. You are also responsible for keeping your account credentials confidential and using unique, strong passwords.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal information, we encourage you to contact us first so that we can try to resolve the issue.

• Step 1 - Contact our Privacy Office:
  • Email: [email protected]
  • Postal: Privacy Office, Ellipse Entertainment Limited, 55 Village Centre Place, Mississauga, Ontario, Canada
  • Please provide your name, contact details, a description of your concern, and any relevant account information. Do not include full payment card details or passwords.
• Step 2 - Internal review and response:
  • We will acknowledge receipt of your complaint and investigate it in a fair and timely manner.
  • Our goal is to respond with our findings and any proposed resolution within 30 days, or to inform you if more time is needed in complex cases.
• Step 3 - Escalation to supervisory authorities:
  • Canada: If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC). Up-to-date contact details are available at https://www.priv.gc.ca. Depending on your province, you may also have the right to contact your provincial privacy commissioner.
  • European Union / EEA (where applicable): If GDPR applies to you, you may lodge a complaint with your local data protection authority. The list of EU/EEA supervisory authorities is available via the European Data Protection Board at https://edpb.europa.eu.
  • Mexico (where applicable): If Mexican privacy law applies to you, you may contact the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Current contact information can be found at https://www.inai.org.mx.

Nothing in this section limits any rights you may have to seek other remedies under applicable law.

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or the operation of High Flyer Casino and highflyerwin-ca.com (including the page High Flyer Casino).

• How we will notify you of changes:
  • The "Last updated" date at the end of this Policy will be revised to reflect the most recent version.
  • For material changes, we will use additional notice methods, which may include:
    • Email notifications to the address associated with your player account.
    • Prominent banners or notices on our website or within your account dashboard.
    • In-product messages when you log in.
• Advance notice for significant changes:
  • Where required by law or where the change is significant (for example, introducing new processing activities or changing how your data is shared), we will provide reasonable advance notice, generally at least 30 days before the changes take effect.
  • During this notice period, you may review the proposed changes and choose to close your account if you do not agree with them, subject to the settlement of any outstanding balances and compliance with applicable regulatory requirements.
• Your continued use of the services:
  • By continuing to use our services after the effective date of an updated Privacy Policy, you acknowledge that the updated version applies to your use of the site.
• Version control and change log:
  • Version: 1.0
  • Last updated: January 2026
  • Summary of material changes: Initial comprehensive publication of the Privacy Policy for High Flyer Casino on highflyerwin-ca.com, including explicit coverage of the review page High Flyer Casino, clarification of regulatory context in Ontario and Kahnawake, expanded description of user rights, and enhanced information on security and international transfers.