burger icon
Rimrock Casino
Log In

Privacy Policy

This privacy policy explains how rim-rock-casino, operating exclusively through rim-rock-casino-ca.com, manages and protects your personal information as a player or visitor. This policy applies to all users of our website and casino services, effective from November 6, 2025, and is designed to meet Canadian legal and industry standards.

Who We Are

OBSERVE: rim-rock-casino is a government-owned online casino platform operated by the British Columbia Lottery Corporation (BCLC), a recognized Crown Corporation.

  • Legal Entity: British Columbia Lottery Corporation (BCLC)
  • Headquarters & Legal Address: 2940 Virtual Way, Vancouver, BC V5M 0A6, Canada
  • Mailing Address: PO Box 1080, Richmond, BC V6X 3Y9, Canada
  • Regulatory Authority: BCLC under the Gaming Policy and Enforcement Branch (GPEB) of British Columbia
  • Primary Contact: Data Protection Officer (DPO) - Contact via support@rim-rock-casino-ca.com or +1-877-706-6789 (support)
  • Responsible Gambling/Player Health Support: GameSense Advisor +1-604-215-0649

For all privacy-related inquiries, complaints, or requests, please contact our DPO using the above details or via our secure feedback form at https://playnow.com/contact-us.

What Personal Data We Collect

OBSERVE: rim-rock-casino collects various categories of personal data for regulatory, operational, and service improvement purposes. EXPAND: We collect only data necessary to provide secure, compliant, and efficient gaming services.

  • Identity Data: Full name, date of birth, address, government-issued identification details (for KYC/AML compliance)
  • Contact Data: Email address, phone numbers, mailing address
  • Technical Data: IP address, device identifiers, browser type, operating system, access logs, session data
  • Financial & Payment Data: Payment card information, transaction records, withdrawal/deposit information
  • Behavioral Data: Betting and play history, site interactions (clicks, navigation), preferences
  • Cookies & Tracking: Session cookies, persistent cookies, third-party analytics and advertising cookies, similar tracking technologies

All data is collected in compliance with Canadian privacy laws and only for the explicit purposes defined in this policy.

Legal Basis for Processing

OBSERVE: rim-rock-casino processes your personal data in strict accordance with Canadian law, including the Personal Information Protection Act (PIPA BC), and applicable federal statutes. EXPAND: Our processing is based on:

  • User Consent: For marketing communications, certain cookies, and optional features, we request your explicit consent. You may withdraw this consent at any time.
  • Contract Fulfillment: Processing is required to deliver our casino services to you, including account creation, verification, payments, and customer support.
  • Legitimate Interests: We use data to prevent fraud, ensure security, and conduct internal analytics to improve our offerings, provided these interests do not override your fundamental rights.
  • Legal Obligations: We are legally required to process and retain certain data for anti-money laundering (AML), know-your-customer (KYC), taxation, and regulatory reporting purposes.

REFLECT: If you decline to provide necessary data, we may be unable to offer certain services or fulfill our legal obligations.

Purpose of Processing

OBSERVE: We collect and process your data solely for legitimate and transparent purposes as detailed below:

  • Provision of Casino Services: To enable secure account registration, authentication, gameplay, deposits, withdrawals, and customer support.
  • Improvement and Personalization: To enhance user experience, conduct analytics, and personalize content and offers based on preferences and usage.
  • Marketing and Communication: To send you promotional materials, newsletters, or special offers, only with your explicit consent.
  • Fraud Detection and Prevention: To monitor and investigate suspicious activities, enforce responsible gambling measures, and protect users from harm.

Disclosure & Sharing

OBSERVE: rim-rock-casino limits the disclosure of your data to third parties, ensuring all sharing complies with Canadian law and regulatory mandates.

  • Payment Partners: Data is shared with payment processors and financial institutions solely for transaction processing and anti-fraud checks.
  • Service Providers: We may engage IT, cloud hosting, analytics, or communication service providers who process data strictly under our instructions and confidentiality agreements.
  • Regulators & Law Enforcement: Data is disclosed to BCLC, GPEB, and relevant authorities to meet legal, regulatory, or investigative requirements.
  • Affiliates & Partners: With your consent, select data may be shared with marketing affiliates or advertising networks to deliver targeted promotions.
  • Legal Requirements: We may disclose information in response to legal processes, court orders, or to protect our legal rights and user safety.

REFLECT: All third parties are contractually required to maintain appropriate data security and confidentiality standards.

International Transfers

OBSERVE: rim-rock-casino primarily stores and processes personal data in Canada, but certain service providers may be located in other jurisdictions.

  • Regions Involved: Data may be transferred to the United States, European Union, or other countries where our service providers operate.
  • Protection Measures: All international transfers comply with Canadian and international data protection standards, including use of Standard Contractual Clauses (SCCs) or equivalent safeguards.
  • Data Security: Service providers are contractually obligated to apply adequate security measures and confidentiality protections, regardless of location.
  • User Rights: You retain all privacy rights under Canadian law even when your data is processed outside Canada.

We do not transfer data to jurisdictions without adequate data protection guarantees.

Data Retention

OBSERVE: rim-rock-casino retains personal data only for as long as necessary to fulfill the purposes set out in this policy or as required by law.

  • Account Data: Retained for the duration of your account and up to 5 years after account closure or inactivity, to comply with AML/KYC requirements.
  • Transaction Records: Maintained for a minimum of 5 years as per regulatory obligations.
  • Marketing Data: Retained until you withdraw consent or unsubscribe from communications.
  • Deletion Criteria: Data is deleted or anonymized upon user request, expiration of retention period, or completion of processing purpose, unless legal retention is required.

All disposal procedures follow industry best practices to ensure secure data destruction and prevent unauthorized access.

Your Rights

OBSERVE: As a user of rim-rock-casino-ca.com, you have defined legal rights regarding your personal data under Canadian law, with alignment to GDPR standards where applicable. EXPAND: These rights are granted free of charge and can be exercised at any time.

  1. Right of Access: You may request confirmation as to whether we process your data and obtain a copy of the information held about you.
  2. Right to Correction: You can request the correction of inaccurate or incomplete personal data in your account or records.
  3. Right to Deletion: You may request erasure of your personal data where legally permissible, subject to mandatory retention obligations.
  4. Right to Restriction: You may request the restriction of processing in specific circumstances (e.g., contesting accuracy, objection to processing).
  5. Right to Object: You have the right to object to certain processing activities, including direct marketing.
  6. Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another provider.
  7. Right to Withdraw Consent: Where processing is based on consent (such as marketing), you can withdraw your consent at any time via your account dashboard or by contacting us.
  8. Procedures: All requests can be made via email to support@rim-rock-casino-ca.com or through our online contact form. We will respond within 30 days, unless an extension is required by law, in which case you will be notified in writing.
  9. Cost: Exercising your rights is free of charge, though a reasonable fee may apply for excessive or unfounded requests.

REFLECT: If you are dissatisfied with our response, you may escalate your complaint to the Office of the Information and Privacy Commissioner for British Columbia (www.oipc.bc.ca) or to relevant European authorities if your data is processed under GDPR standards.

Cookies & Tracking Technologies

OBSERVE: Our website uses cookies and similar technologies to provide, improve, and personalize your experience. EXPAND: You have full control over your cookie preferences.

  • Session Cookies: Essential for navigation and secure access during your visit; deleted when you close your browser.
  • Persistent Cookies: Remain on your device to remember preferences and login details for future sessions.
  • Third-Party Cookies: Used for analytics (e.g., Google Analytics) and advertising purposes, set by external service providers.
  • Cookie Management: You can manage or disable cookies via your browser settings or through our internal cookie control panel available on rim-rock-casino-ca.com.

Disabling cookies may affect certain site features and functionality.

Data Security

OBSERVE: rim-rock-casino implements robust technical and organizational measures to protect your personal information. EXPAND: Our security framework is aligned with international best practices and regulatory requirements.

  • TLS 1.2+ Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher.
  • Data Encryption: Personal data is encrypted at rest and in transit using industry-standard algorithms.
  • Multi-Factor Authentication (MFA): MFA is enforced for access to administrative and sensitive user accounts.
  • Access Controls: Strict role-based access control (RBAC) policies ensure only authorized personnel can access personal data.
  • Security Audits: Regular internal and external security audits (aligned with ISO 27001 and SOC 2 where applicable) are conducted to test and enhance our security posture.
  • Staff Training: All employees receive mandatory privacy and security training, with regular updates and compliance monitoring.
  • Incident Response: Comprehensive procedures are in place to detect, respond to, and report data breaches, including timely notification to users and regulators in accordance with legal obligations.

REFLECT: While we maintain high security standards, no method of transmission or storage is completely secure. Users are encouraged to use strong passwords and report any suspected security incidents immediately.

Complaints & Contacts

OBSERVE: rim-rock-casino is committed to addressing all privacy concerns in a transparent and timely manner.

  • Data Protection Officer (DPO): For privacy inquiries, contact support@rim-rock-casino-ca.com or call +1-877-706-6789.
  • Online Feedback Form: Available at https://playnow.com/contact-us
  • Postal Address: Privacy Officer, rim-rock-casino, 2940 Virtual Way, Vancouver, BC V5M 0A6, Canada
  • Complaint Procedure: Submit your complaint via any of the above channels. Our DPO will acknowledge receipt within 5 business days and provide a substantive response within 30 days. Complex matters may require additional time, in which case you will be informed of progress.
  • Escalation: If unresolved, you may escalate your complaint to the Office of the Information and Privacy Commissioner for BC (www.oipc.bc.ca, Phone: +1-250-387-5629) or, for users covered by GDPR, to the relevant EU data protection authority.

REFLECT: We are committed to fair, timely, and transparent resolution of all privacy-related complaints.

Updates

OBSERVE: rim-rock-casino may revise this privacy policy to reflect regulatory changes or operational updates. EXPAND: We ensure transparency in all updates.

  • Notification Procedures: Material changes will be communicated via email (if provided), prominent website banners, and account dashboard alerts.
  • Version Control: This policy is versioned and includes a 'Last updated: November 6, 2025' timestamp. A detailed changelog of material changes will be made available.
  • Advance Notice: For significant changes, we provide at least 30 days' advance notice before the new policy takes effect.
  • User Options: Users may object to material changes or close their accounts without penalty prior to the effective date of the new policy.

Last updated: November 6, 2025

REFLECT: Continued use of rim-rock-casino-ca.com after policy updates constitutes acceptance of the revised terms.