Privacy Policy

This Privacy Policy explains how Bet 99, in connection with the Bet 99 brand operated via the website bet99-win.ca (collectively, "we", "us", or "our"), collects, uses, discloses, and protects personal information of players and other visitors to our website and related online services. It applies to all individuals who access or use bet99-win.ca, including prospective, current, and former registered users, as well as visitors who browse the site without opening an account.

We are required by Canadian privacy and gambling laws, as well as by the standards of our regulators and licensing authorities, to safeguard your personal information and to explain our practices in a clear and transparent way. Please read this Policy carefully before using our services.

Effective date: 1 January 2026

Who We Are

For the purposes of this Privacy Policy, the primary data controller for personal information collected through bet99-win.ca is the operating group commonly referred to as Bet 99, which is associated with the parent company Sports Venture Holdings Inc., a private company (Inc.) (the "Operator"). The review project identified as Bet 99 forms part of this online operation in relation to the bet99-win.ca domain.

Licensing and regulatory context

Ontario, Canada: Online sports betting and casino operations for eligible Ontario residents are conducted under authorization from the Alcohol and Gaming Commission of Ontario (AGCO) and operated in partnership with iGaming Ontario (iGO). Sports Venture Holdings Inc. is listed as a registered operator in iGO market reports and AGCO registries as of 2024 and remains subject to their standards in 2026.
Rest of Canada (excluding Ontario): Online gaming operations for Canadian residents outside Ontario are carried out under a valid licence issued by the Kahnawake Gaming Commission (KGC) to BQC Consulting GmbH on behalf of Sports Venture Holdings Inc.

Corporate details and contact

Legal entity type: Inc. (private company).
Parent company: Sports Venture Holdings Inc.
Legal address and registration number: These details are recorded with our regulators (including AGCO and the Kahnawake Gaming Commission) and may be obtained from the relevant public registers or on written request. We do not publish full corporate mailing details on this page for security and anti-fraud reasons.

Data Protection Contact / Privacy Officer: We maintain a dedicated privacy and data protection function. You may contact our privacy team (Data Protection Officer or equivalent) using any of the following channels:

Online: via the contact or support forms available on bet99-win.ca, clearly indicating "Privacy" or "Data Protection" in the subject line.
Email: by using the general contact email indicated in the "Contact Us" or "Support" section of bet99-win.ca and addressing your message to the attention of the "Privacy Officer".
Post: to the corporate mailing address indicated in our terms and conditions or as available from AGCO / KGC public registers, marked "Attention: Privacy Officer".

What Personal Data We Collect

We only collect personal data that is necessary, proportionate, and relevant to providing and improving our services, meeting legal obligations (including anti-money laundering and gambling regulations), and protecting our legitimate interests and those of our players.

Identity and contact data

Full name, date of birth, and age verification information.
Residential address, country and province of residence.
Government-issued identification details (for example, ID card, driver's licence, passport numbers and copies) where required for KYC/AML and regulatory checks.
Contact information such as email address, mobile and/or landline telephone number.
Account identifiers: username, customer ID, and authentication credentials (hashed passwords, security questions).

Financial and transactional data

Payment information, such as partial card details (card type, masked card number), bank account identifiers, e-wallet details and any payment tokens provided by processors.
Deposit and withdrawal history, including amounts, dates, methods used, and account balances.
Records of chargebacks, payment disputes, refunds, and security flags.

Gaming and behavioural data

Betting and gaming history (bets placed, games played, stakes, outcomes, win/loss records, bonuses used, tournament participation).
Session data such as login times, duration, activity logs, clicks, and interactions with site features.
Responsible gambling data (self-exclusion status, limits set, time-outs, contact notes related to responsible gambling interactions).

Technical and device data

IP address, approximate location derived from IP (city, province, country).
Device identifiers (for example, device type, operating system, browser type and version, language settings, screen resolution).
Log data (pages visited, date and time stamps, referring and exit pages, error logs, performance metrics).

Communications and verification data

Copies of communications with customer support (emails, chat transcripts, call summaries, complaint records).
Verification data submitted during KYC/AML checks (proof of address, source-of-funds documentation, enhanced due diligence materials).
Marketing preferences and consent records (opt-in/opt-out status for email, SMS, push notifications).

Cookies and similar technologies

We use cookies, web beacons, pixels, software development kits (SDKs), and comparable technologies to collect data about how you access and use bet99-win.ca. This may include:

Unique cookie identifiers and online identifiers linked to your account.
Analytics data regarding navigation patterns, time on page, and feature usage.
Advertising and attribution data (for example, referral sources, campaign identifiers) where marketing technologies are used.

More information is provided in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

Our processing of personal data is grounded in Canadian privacy law (including the Personal Information Protection and Electronic Documents Act ("PIPEDA") and substantially similar provincial legislation where applicable), as well as in our regulatory obligations as a licensed gambling operator and, where relevant, international standards such as the EU General Data Protection Regulation ("GDPR") and Mexican data protection laws. Depending on the context, we rely on one or more of the following legal bases:

Consent

We obtain your informed consent where required by law, for example:
- When you choose to create an account and provide personal information.
- When you opt in to receive marketing communications (email, SMS, push notifications).
- When you consent to non-essential cookies or similar technologies.
You may withdraw consent at any time (see "Your Rights" below). Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Performance of a contract

We process personal data that is necessary to:
- Create, manage, and secure your gaming account.
- Process deposits, withdrawals, and wagers.
- Provide customer support and handle your queries.
- Administer promotions, bonuses, and loyalty programs.

Compliance with legal and regulatory obligations

We are obliged to collect and retain certain data to comply with:
- Anti-money laundering ("AML") and counter-terrorist financing laws and regulations, including FINTRAC requirements.
- Gambling regulations and standards imposed by AGCO, iGaming Ontario, the Kahnawake Gaming Commission, and other competent authorities.
- Record-keeping, reporting, tax, and audit obligations.

Legitimate interests

Where permitted by applicable law, we process data because it is necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your fundamental rights and freedoms. These legitimate interests include:
- Preventing and detecting fraud, abuse, collusion, or other unlawful or harmful activities.
- Ensuring the security and integrity of our systems and the fairness of our games.
- Improving our services, user experience, and website performance.
- Conducting analytics and anonymized or aggregated statistical reporting.

Other legal grounds where applicable

In exceptional cases, we may process data to protect the vital interests of an individual (for example, where there is an immediate risk of serious harm), or as otherwise permitted or required by Canadian law, GDPR, or Mexican data protection regulations to the extent they apply.

Purpose of Processing

We process your personal data for specific, explicit, and legitimate purposes and do not use it in ways incompatible with those purposes.

Provision and operation of gambling services

Creating and managing your account and verifying your eligibility to play (age, location, identity).
Operating sports betting and casino products, settling bets, crediting winnings, and managing balances.
Providing customer support and responding to questions, complaints, or feedback.

Compliance, risk management, and responsible gambling

Performing KYC/AML checks and ongoing monitoring, including sanctions and politically exposed persons (PEP) screening where required.
Monitoring for fraud, money laundering, match-fixing, bonus abuse, and other prohibited conduct.
Implementing responsible gambling tools (limits, time-outs, self-exclusion) and contacting you where we detect potential indicators of harm.
Responding to lawful requests from courts, law enforcement, regulators, and other authorities.

Improving our services and analytics

Analyzing usage patterns, site performance, and customer behaviour to enhance features, stability, and user experience.
Developing new products, services, and promotions based on aggregated or anonymized data.

Marketing, personalization, and loyalty

Sending you promotional communications and offers about bet99-win.ca and related Bet 99 products, subject to your consent and applicable anti-spam laws (including CASL).
Tailoring content, offers, and recommendations based on your gaming history and preferences, where permitted by law.
Administering loyalty schemes, contests, and promotions (including eligibility checks, prize fulfilment, and public winner announcements where allowed).

Security and fraud prevention

Protecting our systems, accounts, and players against unauthorized access, cyberattacks, and security incidents.
Maintaining logs, audits, and technical measures to detect anomalies and investigate suspicious activity.

Disclosure & Sharing

We do not sell your personal information. We share personal data only with carefully selected third parties where necessary for the purposes described in this Policy, where required by law, or where you have provided your consent.

Service providers and partners

Payment processors and banking partners: To process deposits, withdrawals, and payment-related verifications.
KYC/AML and identity verification providers: To validate identity documents, addresses, and source-of-funds where needed.
IT, hosting, and infrastructure providers: To host our platforms, provide cloud services, and ensure site availability and performance.
Game and platform providers: To operate casino games and betting platforms, including risk management and odds services.
Analytics and customer support tools: To monitor performance, manage customer interactions, and improve user experience.

Group companies and affiliates

We may share data within the Sports Venture Holdings Inc. group and with related entities such as BQC Consulting GmbH (in its capacity as licence holder with the Kahnawake Gaming Commission) as needed for:
- Regulatory compliance and reporting.
- Centralized risk management and responsible gambling oversight.
- Consolidated analytics and internal administration.

Regulators, authorities, and dispute bodies

We may disclose personal data to:
- AGCO, iGaming Ontario, and the Kahnawake Gaming Commission, as required by licence conditions or investigations.
- FINTRAC and other law enforcement or supervisory bodies for AML/CTF or other legal requirements.
- Civil, administrative, or criminal courts, arbitration tribunals, and dispute resolution schemes where necessary to defend or exercise legal claims.

Marketing, affiliates, and advertising networks

Where you have provided the required consent, we may share limited information with:
- Affiliate partners and marketing agencies who promote bet99-win.ca.
- Advertising networks and technology providers that deliver targeted or retargeted ads based on cookies or other identifiers.
You can withdraw consent to such sharing for marketing purposes at any time (see "Your Rights").

Business transfers

If we undergo a corporate transaction (such as a merger, acquisition, reorganization, or asset sale), your data may be transferred to the acquiring or successor entity, subject to applicable privacy laws and continued protection obligations.

Whenever we share personal data with third parties, we require them, through contract and/or law, to process it only for specified purposes and with appropriate security and confidentiality safeguards.

International Transfers

Although our primary operations focus on Canada, some of our service providers, infrastructure, and group entities may be located outside your province of residence and outside Canada, including (but not limited to) the United States, the European Economic Area ("EEA"), and other jurisdictions.

Location of processing: Personal data may be stored and processed on servers and systems located in Canada (including the Mohawk Territory of Kahnawake) and in other countries where our service providers operate.
Contractual safeguards: Where required by law for transfers outside Canada or, where applicable, outside the EEA or Mexico, we implement appropriate safeguards, such as:
- Standard contractual clauses or other contractual protections approved by relevant authorities.
- Data processing agreements requiring high standards of security, confidentiality, and privacy compliance.
Access by foreign authorities: Personal data stored abroad may be subject to the laws of those jurisdictions and may be accessible to foreign courts, law enforcement, or regulatory authorities.

By using bet99-win.ca, you understand that your personal data may be transferred to and processed in countries outside your province or country of residence as described here, subject to the safeguards permitted or required by applicable laws.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to meet our legal, regulatory, and contractual obligations, and to protect our legitimate interests (for example, in the event of disputes). Retention periods may vary depending on the type of data and applicable laws.

General retention guidelines

Player account data (identity, contact, KYC/AML records): Typically retained for the duration of your relationship with us and, after account closure, for a period generally not exceeding five (5) years, unless a longer period is mandated by AML, tax, or gambling regulations, or is necessary in connection with legal proceedings.
Transaction and gaming history: Retained for at least five (5) years from the date of the relevant transaction to satisfy regulatory, audit, and accounting requirements.
Responsible gambling records: Retained for the period of any self-exclusion or active limit, plus an additional period (typically up to five (5) years) to ensure effective enforcement and regulatory compliance.
Customer support and complaint records: Retained for the lifetime of the account and for a reasonable period after closure (usually up to five (5) years) to resolve disputes and demonstrate compliance.
Marketing data and preferences: Retained until you withdraw consent, opt out, or your account is closed, after which we may keep limited records of your opt-out status to ensure we respect your choices.
Technical logs and security data: Retained for shorter periods where possible (for example, 6 - 24 months), unless longer retention is required for security investigations or regulatory reasons.

When data is no longer needed, we will securely delete, anonymize, or aggregate it so that it can no longer reasonably be linked to an identifiable individual.

You may request further details about retention periods for specific categories of data by contacting our privacy team.

Your Rights

We are committed to respecting your privacy rights under Canadian law and, where applicable, aligning our practices with international standards such as the EU GDPR and Mexican data protection laws, including the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations. The availability and exact scope of certain rights may depend on your place of residence and the laws that apply to our relationship with you.

Key rights

Right of access: You can request confirmation of whether we hold personal data about you and obtain a copy of such data, along with information about how we use it.
Right to rectification (correction): You can request that inaccurate or incomplete personal data be corrected or updated. In many cases you can update certain details directly in your account settings.
Right to erasure ("right to be forgotten"): You may, in certain circumstances, request deletion of your personal data. This right is subject to important limitations: we may be required by law or regulation (for example, AML or gambling rules) to retain certain information for specific periods.
Right to restrict processing: You may request that we restrict processing of your data in specific situations, such as while we verify its accuracy or assess an objection.
Right to object: Where processing is based on our legitimate interests or for direct marketing, you may object at any time. We will stop processing for marketing purposes once you object or opt out.
Right to data portability: Where provided by law (for example, under GDPR), you may request to receive certain personal data you have provided to us in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to withdraw consent: Where we rely on consent (for example, for marketing communications or certain cookies), you can withdraw that consent at any time, without affecting prior lawful processing.
Rights related to automated decision-making: Where applicable, you may have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, and to request human review of such decisions.

How to exercise your rights

Submit a request: Contact us via the privacy contact methods described in the "Complaints & Contacts" section or use the contact/support forms on bet99-win.ca, clearly indicating the right you wish to exercise.
Identity verification: We may ask for information to verify your identity (for example, confirming account details or requesting supporting documents) to protect you and others against unauthorized access.
Processing your request: We aim to respond within 30 days of receiving a complete request, as required by Canadian privacy law and consistent with GDPR and Mexican standards. If your request is complex or we receive numerous requests, we may extend this period, and we will inform you of the extension and reasons.
Fees: Requests are generally processed free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in accordance with applicable law.

Some rights may not be fully available in all jurisdictions or may be subject to regulatory obligations specific to gambling (for example, mandatory retention for AML). We will explain any such limitations in our response.

Cookies & Tracking Technologies

We use cookies and similar technologies on bet99-win.ca to operate our services, improve performance, enhance user experience, and support marketing activities. Cookies are small text files stored on your device when you visit the site.

Types of cookies we use

Strictly necessary (functional) cookies: These are essential for the operation of the website and for enabling basic functions such as logging in, maintaining session state, processing bets, and ensuring security. They cannot be disabled via our cookie settings panel.
Preference cookies: These remember your settings and choices (for example, language, region, display preferences), improving your user experience.
Analytics and performance cookies: These help us understand how visitors use the site, which pages are most visited, and any errors or performance issues. This information is usually aggregated and used to improve site performance and design.
Advertising and targeting cookies: These may be set by us or third-party partners to build a profile of your interests, deliver targeted ads on our site or third-party sites, and measure the effectiveness of marketing campaigns.
Session vs. persistent cookies: Session cookies are temporary and deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them.

Managing cookies

You can manage or disable cookies through:
- Your browser settings (for example, by blocking all cookies or configuring notifications when a site wants to set a cookie).
- Any cookie management or preference centre we make available on bet99-win.ca, which may allow you to opt out of certain non-essential cookies.
If you block or delete certain cookies, some features of the site (including secure login and gameplay) may not function properly.

Where required by law, we will obtain your consent before using non-essential cookies or similar technologies.

Data Security

We implement a comprehensive information security program designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. While no system can guarantee absolute security, we apply technical and organizational measures consistent with industry best practices and regulatory expectations.

Technical safeguards

Encryption in transit and at rest: Data transmitted between your browser and our servers is protected using transport layer security (TLS 1.2 or higher) where supported. Sensitive data is encrypted at rest using strong cryptographic standards.
Access controls and authentication: Access to personal data is restricted on a need-to-know basis, using role-based access controls, strong authentication procedures, and, where appropriate, multi-factor authentication.
Network and system security: We employ firewalls, intrusion detection and prevention systems, anti-malware tools, secure configuration standards, and continuous monitoring to reduce vulnerability to cyberthreats.

Organizational and procedural measures

Policies and training: Staff and relevant contractors are subject to confidentiality obligations and receive training on privacy, data protection, and security practices, particularly those working in customer support, payments, and risk departments.
Vendor due diligence: We evaluate the security posture of third-party service providers that handle personal data and require appropriate safeguards in our contracts.
Audit and oversight: We conduct internal reviews and, where appropriate, engage independent assessments to evaluate and enhance our security controls.

Incident response

We maintain incident response procedures to detect, investigate, and respond to suspected or actual data breaches or security incidents.
Where required by law, we will notify affected individuals and relevant authorities (for example, the Office of the Privacy Commissioner of Canada and, where applicable, EU or Mexican authorities) without undue delay, providing information about the incident and steps taken to mitigate potential harm.

Our security program is informed by internationally recognized frameworks (such as ISO 27001 and SOC 2) to the extent applicable, although bet99-win.ca and Bet 99 should not be understood as holding formal certification under these standards unless expressly stated on our website.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise your privacy rights, you can contact us or the relevant supervisory authorities as described below.

Contacting our Privacy Officer / DPO

First point of contact: Please contact our privacy team (Privacy Officer or Data Protection Officer) by:
- Using the contact or support forms on bet99-win.ca and indicating "Privacy" or "Data Protection" in the subject.
- Using the general support contact details listed on bet99-win.ca and addressing your request to the "Privacy Officer".
Information to include: Provide your full name, account username (if any), contact details, a clear description of your request or complaint, and any relevant supporting documentation.
Response time: We will acknowledge your complaint or request as soon as reasonably possible and aim to provide a substantive response within 30 days, in line with Canadian privacy law and aligned with GDPR and Mexican standards. If additional time is required, we will inform you of the reasons and expected timeline.

Escalation to supervisory authorities

If you believe your privacy concerns have not been adequately addressed, you may lodge a complaint with a competent data protection or privacy authority.

Canada - Office of the Privacy Commissioner of Canada (OPC)
- Website: https://www.priv.gc.ca/en/
- Telephone (toll-free in Canada): 1-800-282-1376
- Mailing address: Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec K1A 1H3, Canada
Mexico - National Institute for Transparency, Access to Information and Personal Data Protection (INAI) (for individuals whose rights under Mexican data protection law may be engaged)
- Website: https://www.inai.org.mx
- Contact details and complaint procedures are available on the INAI website.
European Union / EEA - Data Protection Authorities (if GDPR applies to you)
- You may lodge a complaint with the data protection authority in the EU/EEA member state of your habitual residence, place of work, or alleged infringement.
- A list of supervisory authorities is available via the European Data Protection Board: https://edpb.europa.eu/about-edpb/board/members_en

In addition, you may have the right to seek a remedy before courts or tribunals in your jurisdiction. We will cooperate with regulators and supervisory authorities as required in 2026 and beyond.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, regulatory guidance, or security practices. The most current version will always be available on bet99-win.ca.

Notification of changes

Minor changes: For non-material updates (for example, clarifications or formatting changes), we will post the revised Policy on bet99-win.ca with an updated "Last updated" date.
Material changes: For significant changes (such as new purposes of processing, new categories of recipients, or substantial changes to your rights), we will provide additional notice by:
- Sending an email notification to the address associated with your account (where available).
- Displaying a banner or pop-up notice on bet99-win.ca.
- Providing alerts in your account dashboard where applicable.
Advance notice: Where reasonably possible and required by law, we will provide at least 30 days' notice before material changes take effect.

Your options

If you do not agree with the updated Policy, you may close your account and stop using bet99-win.ca before the changes take effect.
Continued use of our services after the effective date of an updated Policy will constitute your acknowledgement and, where required, your consent to the revised terms.

Last updated: January 2026

This Privacy Policy does not create contractual or statutory rights beyond those already provided under applicable laws but is intended to transparently explain how Bet 99, in connection with bet99-win.ca and the Bet 99 brand, handles your personal data.