Privacy Policy

This Privacy Policy explains how Flamez collects, uses, stores, and protects personal information belonging to players who register and use the services offered on this website. It applies to all visitors and registered account holders in Canada, excluding Ontario, and it sets out the rights individuals have regarding their personal data along with the practical steps taken to safeguard that data. Because online gambling involves handling of identity and financial information, this policy is written to be as clear and specific as possible while remaining general where exact operational detail cannot be disclosed for security reasons. Anyone who does not agree with the practices described below should refrain from using the site and may contact support through the channels described near the end of this document.

Who This Policy Covers

This document applies to any person who visits the website, opens an account, or otherwise interacts with services provided under the Flamez brand, operated by Ganadu Gaming Limited and licensed by the Kahnawake Gaming Commission. Payment processing in connection with the platform is handled through Otso Operations Limited, a company registered in Cyprus, which acts as a payment services entity for transactions made on the site. Because gambling services are age-restricted, this policy is directed at individuals who are 18 years of age or older, which is the minimum legal age required to register an account and use the casino. Anyone under this age is not permitted to submit personal information to the site, and any account found to belong to a minor will be closed and reported in line with applicable procedures.

Information We Collect

The categories of personal data collected depend on how a person interacts with the site, ranging from basic browsing activity to detailed identity information required once an account is opened and funded. Some data is collected automatically through technical means such as cookies and server logs, while other data is provided directly by the player during registration, deposit, withdrawal, or identity verification. The table below summarizes the main categories of information that may be processed.

Where identity documents are requested, this is generally tied to standard verification checks that may be triggered by periodic compliance reviews, unusually large transactions, or irregular account activity, and is a routine part of operating a licensed gambling service rather than an indication of wrongdoing.

How Personal Information Is Used

Personal data collected through the site is used for a defined set of operational purposes rather than for open-ended profiling. The primary uses include verifying the identity and age of account holders, processing deposits and withdrawals through supported payment methods, maintaining the security of accounts through measures such as two-factor authentication, and detecting or preventing fraud, money laundering, or underage access. Data is also used to operate responsible gambling tools such as deposit limits, loss limits, session limits, reality checks, and self-exclusion requests, since these features depend on accurate account and activity records. In addition, information may be used to respond to support queries submitted through live chat or email, to investigate complaints, and to comply with legal or regulatory obligations under the terms of the Kahnawake gaming licence.

Where bonus-related account activity is recorded, such as free spins credited on a qualifying first deposit or cashback calculated on net losses, this data is processed strictly to administer the relevant account terms, including wagering requirement tracking, rather than for marketing profiling beyond what a player has consented to.

Cookies and Similar Technologies

The website uses cookies and similar tracking technologies to support core site functionality, remember login sessions, and understand how visitors use the platform. Some cookies are strictly necessary for the site to function correctly, such as those that keep a player logged in or maintain security tokens during a session. Other cookies support analytics, allowing aggregated, non-identifying insight into how pages are used so that the site can be maintained and improved over time. Where cookies are used for purposes beyond strict necessity, players are given the opportunity to manage their preferences through browser settings or, where available, an on-site cookie management tool.

Most browsers allow users to block or delete cookies, though doing so may affect certain features of the site, including the ability to remain logged in or to use certain personalized settings. Because cookie technology changes periodically and browser controls vary, players are encouraged to review their own browser documentation for the most accurate instructions on managing stored cookies.

Legal Basis for Processing

Personal data is processed on a number of legal grounds depending on the nature of the activity. Processing necessary to perform the contract between the player and the operator, such as verifying identity or processing a withdrawal, forms one basis. Processing necessary to comply with legal obligations, including anti-money laundering and licensing requirements under the Kahnawake Gaming Commission, forms another. Where processing is not strictly necessary for the contract or a legal obligation, such as certain marketing communications, the operator relies on consent, which a player may withdraw at any time through account settings or by contacting support.

Sharing of Information with Third Parties

Personal information is shared only with parties that have a legitimate operational role in delivering the service, rather than sold or shared for unrelated commercial purposes. This may include payment processors such as those handling Interac, Visa, Mastercard, Skrill, Neteller, MiFinity, MuchBetter, or bank transfer transactions, since these providers require certain account and transaction details to complete deposits and withdrawals. It may also include identity verification providers engaged to confirm age and identity during know-your-customer checks, regulatory bodies such as the Kahnawake Gaming Commission where required by licence conditions, and professional advisors such as auditors or legal counsel where necessary for compliance or dispute resolution. Game providers supplying the slots and live casino content available on the platform may also receive limited technical data, such as an anonymized player identifier, necessary to record gameplay results and RNG outcomes accurately.

Any third party engaged to process personal data on behalf of the operator is expected to apply appropriate safeguards consistent with the security standards described in this policy, including encryption and restricted access controls.

Data Retention

Personal data is retained for as long as necessary to fulfil the purposes described in this policy, including the ongoing operation of an active account, compliance with regulatory retention periods, and the resolution of any outstanding disputes or investigations. Financial and identity records connected to KYC and anti-money laundering checks are generally retained for extended periods following account closure, consistent with obligations commonly attached to gambling licences, since regulators and auditors may require access to historical records during compliance reviews. Once data is no longer required for these purposes, it is expected to be securely deleted or anonymized in line with standard data lifecycle practices, though exact retention periods for specific data types are not published here as they may vary according to regulatory requirements in effect at a given time.

Data Security

The platform applies a range of technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse. These measures include TLS encryption for data transmitted between a player’s device and the platform, adherence to ISO 27001 information security practices, and the use of two-factor authentication to add an additional layer of protection to account access. Game outcomes are generated using certified random number generation technology that is audited by independent external testing organizations, which supports both fairness of play and the integrity of associated account data. While these measures are designed to provide a high standard of protection, no system can guarantee absolute security, and players are encouraged to use strong, unique passwords and to avoid sharing login credentials with any third party.

International Data Transfers

Because the operator, payment entity, and various service providers are based in different jurisdictions, including the British Virgin Islands and Cyprus, personal data may be transferred and processed outside of Canada. Where such transfers occur, the operator expects that appropriate safeguards are applied to maintain a level of protection consistent with the principles described in this policy, even where the receiving jurisdiction may have different data protection laws than Canada. Players who have specific concerns about the location of data processing may contact support to request further general information.

Your Rights as a Data Subject

Players generally have a number of rights concerning their personal data, subject to applicable law and any legitimate restrictions arising from regulatory or legal obligations. These typically include the right to request access to personal data held about them, the right to request correction of inaccurate information, the right to request deletion of data where it is no longer necessary for the purposes it was collected for, and the right to object to certain types of processing, such as marketing communications. Players may also have the right to request a copy of their data in a portable format and the right to lodge a complaint with an applicable data protection or regulatory authority if they believe their information has been mishandled. Requests relating to these rights can generally be made by contacting support through the channels described below, and the operator aims to respond to legitimate requests within a reasonable timeframe, taking into account any verification steps needed to confirm the identity of the requester.

Responsible Gambling and Data Used for Player Protection

Data collected through account activity plays a direct role in supporting responsible gambling tools available on the platform. Deposit limits, loss limits, session limits, and stake limits rely on accurate tracking of account transactions and playing patterns, while reality checks and the self-assessment test use account activity data to prompt players to reflect on their gambling behaviour. Time-out and self-exclusion features, which may range from twenty-four hours to several weeks or longer, along with withdrawal lock options, depend on the operator maintaining accurate records so that these protective measures function as intended once activated. Players are reminded that the legal minimum gambling age is 18, and that responsible gambling tools are available to all account holders regardless of how long they have held an account. Support organizations such as the Responsible Gambling Council and the Canadian Centre on Substance Use and Addiction offer independent resources for anyone concerned about their own gambling behaviour or that of someone close to them, and general information about these organizations can be found through their own published materials. For more detail on the tools available directly through the platform, players can review the dedicated responsible gaming resources.

Children and Age Verification

The platform is intended exclusively for individuals who are 18 years of age or older, consistent with the minimum legal gambling age in Canada. Age verification checks form part of the standard account registration and know-your-customer process, and any account later found to belong to someone under this age will be closed, with funds handled in accordance with applicable regulatory requirements. Parents and guardians who believe a minor has accessed the site using false information are encouraged to contact support so that appropriate action can be taken.

Marketing Communications

Where a player has provided consent to receive marketing communications, such as information about account features or account-specific offers, this data is used only for that stated purpose and can be withdrawn at any time. Consent can typically be withdrawn through account preference settings or by contacting support directly, after which marketing communications will stop within a reasonable period, though certain transactional or account-related communications, such as security alerts or regulatory notices, may continue as they are necessary for the operation of the account rather than for marketing purposes.

Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in applicable law, regulatory requirements, or operational practices. Where changes are made, the updated version will be published on the website, and continued use of the platform following such changes constitutes acceptance of the revised policy. Players are encouraged to review this document from time to time to stay informed about how their personal data is handled.

Contacting Us About Privacy

Questions, requests, or concerns regarding this Privacy Policy or the handling of personal data can be directed to support through the live chat function available on the site or through email, both of which are generally available to registered account holders. The support team can provide further general guidance on data protection matters or direct a request to the appropriate internal contact where a more detailed response is required. Because live chat operates continuously, it typically offers the fastest initial response for privacy-related questions, while email may be more appropriate for detailed or documentation-heavy requests. Players who wish to review other aspects of how the platform operates, including account funding and withdrawal options, can also refer to the payment methods information published on the site.