Privacy Policy

Version: 1.0  |  Last Updated: June 04, 2026

This Privacy Policy explains how Realz, operating through the website thehughesjonescentre.ca (the “Website”), collects, uses, stores, shares, and protects your personal information. It also describes your rights in relation to that information and how you can exercise them.

This Privacy Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy. By registering an Account or otherwise using the Website, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

1.1. Scope

This Privacy Policy applies to all personal information collected from users of the Website, whether through account registration, gameplay, financial transactions, customer support interactions, marketing communications, or browsing activity. It applies regardless of the device or platform used to access the Website.

1.2. Our Approach to Privacy

Realz is committed to protecting the privacy and security of the personal information entrusted to us. We process personal data only for lawful, specified, and legitimate purposes. We take all reasonable steps to ensure that personal data is accurate, kept secure, and not retained longer than necessary.

1.3. Privacy Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our dedicated privacy team at privacy@thehughesjonescentre.ca.

2. Data We Collect

2.1. Information You Provide Directly

We collect information that you provide to us voluntarily, including:

• Identity data: Full name, date of birth, gender, nationality;
• Contact data: Email address, phone number, residential address;
• Account credentials: Username and encrypted password;
• Verification documents: Government-issued ID, proof of address, payment method documentation submitted for KYC purposes;
• Financial data: Payment method details, transaction history, deposit and withdrawal records;
• Correspondence data: Messages, chat logs, and emails exchanged with our support or compliance teams;
• Preferences: Communication preferences, language settings, responsible gaming tool settings.

2.2. Information We Collect Automatically

When you use the Website, we automatically collect certain technical and behavioural data, including:

• Device and technical data: IP address, browser type and version, operating system, device identifiers;
• Usage data: Pages visited, time spent on pages, links clicked, game sessions played, wagering history;
• Log data: Access logs, error logs, and security event logs;
• Location data: General geographic location inferred from IP address (not precise GPS location).

2.3. Information from Third Parties

We may receive personal information about you from the following third-party sources:

• Payment processors: Transaction confirmation and fraud risk signals;
• Identity verification providers: KYC and AML screening results;
• Fraud prevention services: Device fingerprinting and risk scoring data;
• Analytics providers: Aggregated and anonymised website usage data;
• Self-exclusion registers: Information provided through provincial or national self-exclusion programmes.

3. How We Use Your Data

3.1. Purposes of Processing

We use your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your Account;
• Service delivery: Providing access to Games, processing deposits and withdrawals, and delivering customer support;
• Identity verification: Conducting KYC and AML checks as required by our compliance obligations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal conduct;
• Responsible gaming: Monitoring gameplay for signs of problem gambling; administering player protection tools;
• Legal compliance: Meeting our obligations under applicable Canadian law, including reporting requirements;
• Communications: Sending transactional emails, account notifications, and (where consented) promotional communications;
• Improvement of Services: Analysing usage data to improve the Website, Games, and user experience;
• Marketing: With your consent, sending personalised promotional offers, newsletters, and updates.

3.2. Marketing Opt-Out

You may withdraw your consent to receive marketing communications at any time by clicking the “unsubscribe” link in any marketing email, by updating your Account communication preferences, or by contacting us at privacy@thehughesjonescentre.ca. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Legal Bases for Processing

4.1. Bases Under Applicable Law

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely upon include:

• Contract performance: Processing necessary to deliver the Services you have requested, including account registration, gameplay, and payment processing;
• Legal obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and tax obligations;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, responsible gaming oversight, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Where we rely on your consent, for example for marketing communications or the use of non-essential cookies.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties:

• Payment service providers: To process deposits and withdrawals;
• KYC and AML verification providers: To conduct identity verification and fraud screening;
• Game software providers: To facilitate gameplay and maintain game integrity;
• IT and cloud service providers: To host, maintain, and secure the Website and its data infrastructure;
• Customer support platforms: To manage and respond to support enquiries;
• Marketing and analytics partners: To deliver and measure marketing campaigns and analyse website usage;
• Regulatory and law enforcement authorities: Where required or permitted by applicable law;
• Professional advisers: Legal, financial, and compliance advisers under obligations of confidentiality.

5.2. No Sale of Personal Data

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

5.3. Third-Party Data Controllers

Where third parties act as independent data controllers (such as payment providers with their own privacy obligations), their use of your personal data is governed by their respective privacy policies. We encourage you to review the privacy policies of any third-party services you use in connection with the Website.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies (such as web beacons, pixels, and local storage) to recognise your browser, remember your preferences, and collect usage data.

6.2. Types of Cookies We Use

6.3. Managing Cookies

You may control and manage cookie preferences through our cookie consent banner or via your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. Most browsers allow you to refuse or delete cookies; for instructions, refer to your browser's help documentation.

7. Data Security

7.1. Security Measures

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encryption of sensitive data at rest, including payment information and identity documents;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for administrative access to data systems;
• Incident response procedures for the detection and management of data breaches.

7.2. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and any applicable regulatory authority within the timeframes required by applicable Canadian law. Notifications will be provided via email or prominent notice on the Website.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. Typical retention periods are:

• Account data: Retained for the duration of your Account, plus five (5) years following closure;
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with applicable financial regulations;
• KYC documents: Retained for a minimum of five (5) years from the end of the business relationship;
• Marketing data: Retained until you withdraw consent or for up to two (2) years from your last interaction;
• Support correspondence: Retained for a minimum of three (3) years.

8.2. Deletion

When data is no longer required, we will securely delete or anonymise it in accordance with our data retention schedules. Anonymised or aggregated data that cannot reasonably be used to identify you may be retained indefinitely for analytical and statistical purposes.

9. Your Rights

9.1. Rights Under Applicable Law

Subject to applicable Canadian privacy legislation (including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws), you have the following rights with respect to your personal data:

• Right of access: Request a copy of the personal data we hold about you;
• Right to correction: Request that inaccurate or incomplete data be corrected;
• Right to withdraw consent: Withdraw your consent to processing activities based on consent (e.g., marketing);
• Right to complain: Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) or a provincial privacy authority;
• Right to deletion: Request deletion of your personal data, subject to our legal retention obligations.

9.2. Exercising Your Rights

To exercise any of the above rights, please submit a written request to privacy@thehughesjonescentre.ca. We will respond to your request within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly. We may need to verify your identity before processing your request.

10. International Data Transfers

10.1. Cross-Border Transfers

In the course of providing our Services, your personal data may be transferred to and processed in countries outside of Canada where our service providers or data infrastructure are located. These countries may not provide the same level of data protection as Canadian law. Where such transfers occur, we ensure appropriate safeguards are in place, such as contractual clauses or equivalent data protection standards.

10.2. Due Diligence

Before engaging third-party data processors located outside of Canada, we conduct due diligence assessments of their data protection practices and require them to enter into data processing agreements that meet the standards required under applicable Canadian privacy law.

11. Minors

11.1. Age Restriction

The Website is strictly intended for adult Players who meet the minimum legal gambling age in their province of residence. We do not knowingly collect or process personal data from individuals under the applicable minimum age. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated Account.

11.2. Parental Controls

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at privacy@thehughesjonescentre.ca. For further information on protecting minors from online gambling, please visit our Responsible Gaming page.

12. Changes to This Policy

12.1. Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services we offer. The updated policy will be posted on this page with a revised “Last Updated” date. Where changes are material, we will notify registered Players via email or prominent Website notice. Your continued use of the Website following the publication of changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Information

13.1. Privacy Enquiries

For all privacy-related enquiries, requests, or complaints, please contact us:

• Privacy / DPO Email: privacy@thehughesjonescentre.ca
• General Support Email: support@thehughesjonescentre.ca

13.2. Regulatory Contacts

If you are unsatisfied with how we have handled your privacy concerns, you have the right to contact the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca, or the privacy commissioner relevant to your province of residence.