Privacy Policy

1. General Provisions

Casino NB established data protection protocols in 2010, aligning operations with Canadian Privacy Act regulations. Implementation covers both physical casino location and digital platforms. Continuous system updates maintain compliance with evolving provincial and federal requirements. Protection standards underwent significant enhancement in 2023, incorporating advanced security measures across all operational areas. External auditors conduct quarterly assessments to verify compliance levels and system integrity. Protection Framework:

Component	Standard	Update Frequency	Verification
Security	GDPR-aligned	Quarterly	External audit
Storage	ISO 27001	Monthly	Internal check
Processing	PIPEDA	Weekly	Automated scan
Access	PCI DSS	Daily	System log

Framework implementation ensures comprehensive data protection across all operational channels. Security teams monitor system performance through automated tools and manual verification procedures. Regular penetration testing validates protection effectiveness. 1.1 Scope of Application Policy coverage extends throughout the 21 Casino Drive facility in Moncton. Digital security encompasses website operations, mobile applications, and electronic payment systems. Third-party service providers operate under strict contractual obligations matching internal standards. System architecture implements multiple security layers, protecting user data across all interaction points. Regular security assessments identify potential vulnerabilities and implement necessary improvements. 1.2 Legislative Framework Canadian Privacy Act provides foundational regulatory guidance for operations. Provincial gaming regulations supplement federal requirements with specific regional mandates. International standards compliance ensures protection for visitors from various jurisdictions. Regulatory updates trigger immediate system modifications, ensuring continuous compliance. Legal department maintains current documentation of all applicable requirements and implementation standards.

2. Key Terms and Definitions

Data classification system organizes information based on sensitivity levels and protection requirements. Security protocols adjust automatically based on data category and usage context. Primary identifiers include:

Government ID numbers
Financial accounts
Contact information
Biometric data
Gaming preferences

Implementation teams apply specific protection measures for each data category. Regular audits verify proper classification and handling procedures across all systems. 2.1 Processing Standards Processing operations follow strict protocols designed to maintain data integrity. Each activity undergoes security verification before execution. System logs maintain detailed activity records for audit purposes. Technical requirements include:

Process	Standard	Monitoring
Input	ISO 27001	Real-time
Analysis	PIPEDA	Hourly
Transfer	SSL/TLS	Continuous

Processing standards emphasize data protection throughout the operational cycle. Regular staff training ensures proper procedure implementation across all departments.

3. Operator Rights and Obligations

Casino NB maintains primary responsibility for data protection across all operational areas. Security infrastructure undergoes constant monitoring to ensure protection standards. Technical teams implement updates based on emerging security requirements. 3.1 Core Responsibilities Operational duties include:

System integrity maintenance
Security protocol implementation
User data protection
Breach response management

Implementation teams maintain detailed documentation of all security measures. Regular system audits verify protection effectiveness across all operational areas. 3.2 Technical Implementation Infrastructure development prioritizes data protection through multiple security layers. System architecture implements redundancy to prevent service interruptions. Regular maintenance schedules ensure optimal performance levels. Protection measures include:

System	Purpose	Update Cycle
Firewalls	Access Control	Weekly
Encryption	Data Protection	Daily
Monitoring	Activity Tracking	Hourly

4. Data Subject Rights

Casino NB ensures comprehensive user rights protection through systematic implementation. Support teams provide assistance for all user requests regarding personal data access and modification.

4.1 Access Rights

Users retain full control over access to their personal information. The system is designed to process requests efficiently while adhering to strict security standards. Basic data access requests are processed within 24 hours, while financial record requests require up to 48 hours. Requests for complete historical data may take up to 72 hours, depending on the level of verification required. Technical teams continuously monitor request trends to enhance response times, and support staff is available to guide users through the process.

5. Data Processing Principles

The data processing framework adheres to strict security protocols, ensuring protection throughout the entire lifecycle of collection, storage, and usage. Multiple security layers are implemented to safeguard sensitive information at all stages of processing.

5.1 Collection Methods
Data collection employs both physical and digital mechanisms designed for maximum security. Physical data collection occurs at secured terminals, service points, registration desks, and gaming floor systems, ensuring controlled environments. Digital platforms utilize encrypted connections, real-time verification processes, automated backups, and access logging to maintain integrity and prevent unauthorized access.

5.2 Storage Requirements
Stored data is protected by advanced security measures. Physical data centers employ 24/7 monitoring, while digital systems implement 256-bit encryption and multi-factor access controls. Daily redundant backups ensure data availability and integrity. Regular assessments and system updates optimize storage security based on the latest performance evaluations.

Key Processing Features:

Encrypted connections for all digital interactions
Multi-factor authentication for system access
Real-time data verification and logging
Automated and redundant daily backups

6. Processing Conditions

6.1 Legal Framework Processing requires explicit authorization through verified channels. System implementation ensures regulatory compliance across all operations. Authorization includes:

User consent
Purpose specification
Processing scope
Time limitations

6.2 Technical Requirements System architecture implements:

Component	Purpose	Update Cycle
Verification	Identity confirmation	Real-time
Authorization	Access control	Continuous
Monitoring	Activity tracking	Automated
Documentation	Record keeping	Daily

Regular audits verify technical compliance across all processing areas

7. Security Implementation

Security measures are systematically implemented to ensure comprehensive protection across all operational aspects. Both physical and digital security layers are integrated to safeguard data and operations.

7.1 Access Controls
Role-based access controls are applied throughout all systems and operations. Basic access is granted to general users, while transaction processing is limited to specific roles. System management access is restricted to technical staff, and administrative control remains exclusively available to high-level operators. Regular verification processes are conducted to ensure the ongoing effectiveness of these access controls.

8. Documentation Requirements

Documentation maintains complete operational records across all systems. Implementation ensures efficient access while maintaining security.

8.1 Record Management

System maintains:

Operational logs
Security records
User activities
System updates

Regular audits verify documentation completeness and accuracy.

9. Final Provisions

9.1 Policy Updates
Policy updates follow a structured process to ensure clarity and compliance. Reviews and assessments are conducted quarterly to evaluate necessary changes. Implementation of updates occurs monthly, with thorough testing and verification conducted weekly. All changes are documented daily to maintain a complete and transparent policy history.

9.2 Support Channels
Support services are accessible through various channels to address any inquiries or issues. Technical support operates 24/7 for immediate assistance. Email responses are provided within 4 hours, while phone support ensures instant resolution. Written requests are addressed within 72 hours. Regular training sessions keep the support team informed and effective, ensuring consistent and accurate assistance.