Privacy Policy

Version: 1.0  |  Last Updated: November 3, 2025

1. Introduction

Welcome to Aerobet (the "Platform", "we", "us", or "our"), accessible at theaerobetcasino.com. We are committed to protecting the privacy and personal data of every individual who visits, registers with, or uses our services. This Privacy Policy explains what personal data we collect, the purposes for which we process it, the legal bases we rely upon, with whom we may share it, and the rights you hold as a data subject.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This document forms part of our broader legal framework alongside our Terms and Conditions and our Responsible Gaming policy, both of which we encourage you to review. If you disagree with any part of this Privacy Policy, please discontinue your use of the Platform and contact us at the details provided in Section 13.

2. Data We Collect

We collect personal data from you directly, automatically through your use of the Platform, and occasionally from third-party sources. The categories below outline the specific types of information we may gather.

2.1 Identity and Registration Data

When you create an account, we collect information necessary to identify and verify you, including:

• Full legal name, date of birth, and gender;
• Government-issued identification documents (e.g., passport, driver's licence, provincial ID) and any supporting proof-of-address documentation submitted during Know Your Customer (KYC) verification;
• Username and account password (stored in hashed form);
• Nationality and country of residence.

2.2 Contact Data

• Email address and telephone number;
• Residential or billing address, including postal code and province.

2.3 Financial and Payment Data

To process deposits and withdrawals in Canadian Dollars (CAD), we collect:

• Payment method details relevant to your chosen option, which may include Interac e-Transfer reference data, iDebit or InstaDebit account identifiers, Visa or Mastercard card numbers (last four digits only stored by us), PayPal email, Skrill or Neteller account details, Paysafecard voucher references, MuchBetter account data, or cryptocurrency wallet addresses;
• Transaction history, including deposit amounts, withdrawal requests, and processing timestamps;
• Source-of-funds documentation where required by our compliance obligations.

2.4 Gameplay and Technical Data

• Game session logs, bet amounts, wins, losses, and bonus usage;
• IP address, device type, operating system, browser type and version;
• Geolocation data (country and province level) derived from your IP address;
• Session timestamps, login history, and platform navigation paths.

2.5 Communications Data

• Records of correspondence sent to or received from our support team via email, live chat, or telephone;
• Survey responses, feedback submissions, and promotional opt-in preferences.

2.6 Data Collected from Third Parties

We may receive supplementary identity and fraud-screening data from third-party KYC verification providers, fraud prevention services, and analytics partners to confirm the accuracy of information you have provided and to fulfil our compliance obligations.

3. How We Use Your Data

We process your personal data for specific, explicit, and legitimate purposes only. We will not use your data in a manner incompatible with the purpose for which it was originally collected.

3.1 Account Management and Service Delivery

We use your identity, contact, and login data to create and administer your account, authenticate your sessions, process financial transactions, and deliver the gaming services you have requested. Without this processing, we cannot provide you with access to the Platform.

3.2 Regulatory Compliance and Anti-Fraud Measures

We are obligated to verify the identity and age of all users prior to allowing gameplay. We use your identity documents and KYC data to confirm that you are at least 19 years of age (or 18 in Alberta, Manitoba, and Quebec, where the provincial minimum applies) and that you are not a self-excluded or otherwise restricted individual. We also process data to detect, investigate, and prevent money laundering, fraud, and other illegal activity in accordance with applicable legislation.

3.3 Responsible Gaming

Gameplay data, session logs, and account activity are analysed to monitor for signs of problem gambling. We use this information to apply responsible gaming tools such as deposit limits, session reminders, cooling-off periods, and self-exclusion, as described in our Responsible Gaming policy.

3.4 Customer Support

Communications data and account history allow us to respond to your enquiries, resolve disputes, and provide technical assistance in a timely and informed manner. Support interactions may be recorded for quality assurance and training purposes, and you will be informed if this is the case.

3.5 Marketing and Promotions

Where you have given us explicit consent, we use your contact data and gameplay preferences to send you promotional offers, bonus notifications, and news about the Platform via email or other channels. You may withdraw consent and opt out at any time by clicking the unsubscribe link in any marketing message or by contacting us at support@theaerobetcasino.com.

3.6 Platform Improvement and Analytics

Aggregated and pseudonymised technical and gameplay data are used to analyse Platform performance, improve user experience, fix technical errors, and develop new features. Where possible, analytics are performed on data that cannot identify you individually.

4. Legal Bases for Processing

We process personal data only when a valid legal basis exists. The primary legal bases we rely upon are set out below, together with the corresponding processing activities.

Where we rely on consent, you retain the right to withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

5. Data Sharing & Third Parties

We do not sell your personal data to third parties. We may, however, share data with carefully selected recipients in the following circumstances.

5.1 Service Providers and Data Processors

We engage third-party processors to assist in delivering our services. These include payment processors (handling Interac, Visa, Mastercard, PayPal, Skrill, Neteller, Paysafecard, MuchBetter, iDebit, InstaDebit, Neosurf, and cryptocurrency transactions), KYC and age-verification providers, cloud hosting and infrastructure providers, customer support platform vendors, and email delivery services. All processors are bound by data processing agreements that restrict their use of your data to the specific task for which they were engaged.

5.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to governmental bodies, law enforcement agencies, or financial intelligence units where required by law, court order, or lawful regulatory demand. We will notify you of such disclosure unless legally prohibited from doing so.

5.3 Responsible Gaming Organisations

In limited circumstances, and where necessary to protect your welfare, we may share minimal data with problem gambling support organisations to facilitate self-exclusion verification or referral to support services. Please refer to our Responsible Gaming page for further details.

5.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring, your personal data may be transferred to a successor entity. We will notify affected users in advance and ensure that equivalent privacy protections remain in place.

5.5 Aggregated Data

We may share anonymised, aggregated statistical information with analytics partners or publish it for industry research purposes. This data cannot be used to identify you as an individual.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website; it enables the site to recognise your browser and remember certain information across sessions.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as session authentication, security controls, and load balancing. These cannot be disabled without impairing your use of the Platform.
• Functional Cookies: Remember your preferences such as language settings, currency display, and notification choices to deliver a more personalised experience.
• Analytics Cookies: Collect pseudonymised data about how users navigate the Platform, which pages they visit most frequently, and where errors occur, allowing us to improve performance and usability.
• Marketing Cookies: Used with your consent to track browsing activity across sessions and, where applicable, to deliver relevant promotional content. You may opt out of marketing cookies via our consent management tool.

6.2 Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through the cookie consent banner displayed on your first visit, or via the settings in your web browser. Please note that disabling strictly necessary cookies may affect the functionality of the Platform. For more detail on the specific cookies deployed, please consult our Cookie Notice accessible in the site footer.

7. Data Security

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a priority for us. We implement a layered security framework comprising both technical and organisational measures.

7.1 Technical Safeguards

• TLS/SSL encryption for all data transmitted between your browser and our servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records;
• Password hashing using industry-standard algorithms, ensuring that plain-text passwords are never stored;
• Firewalls, intrusion detection systems, and regular vulnerability assessments;
• Multi-factor authentication options for user accounts.

7.2 Organisational Measures

Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training. We conduct periodic internal audits and security reviews to identify and address potential weaknesses in our systems.

7.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, inform affected individuals without undue delay, in accordance with applicable data protection legislation.

While we apply robust safeguards, no method of electronic transmission or storage is entirely infallible. You also bear responsibility for maintaining the confidentiality of your account credentials.

8. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable law and regulatory obligations.

• Account data: Retained for the duration of your active account relationship and for a period of five (5) years following account closure, to satisfy anti-money-laundering and compliance record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction in line with financial reporting obligations.
• KYC and identity documents: Retained for the period required by applicable regulations, typically five years from the end of the business relationship.
• Customer support communications: Retained for up to three (3) years from the date of each interaction to resolve potential future disputes.
• Marketing consent records: Retained for as long as you remain an opted-in subscriber, and for up to three years following opt-out to demonstrate compliance.

Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with you.

9. Your Rights

Depending on your jurisdiction of residence within Canada, you may hold a range of rights in relation to the personal data we hold about you. We are committed to honouring these rights and will respond to verified requests in a timely manner, generally within 30 days of receipt, extendable by a further 30 days in cases of complexity.

9.1 Right of Access

You have the right to request confirmation of whether we hold personal data about you and, if so, to obtain a copy of that data together with information about how it is processed. Submit your request to privacy@theaerobetcasino.com. We will verify your identity before releasing any data to protect against unauthorised disclosure.

9.2 Right to Correction (Rectification)

If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. In many cases, you can update basic account details (such as your contact information) directly within your account settings. For corrections to identity or KYC data, contact our support team or privacy email.

9.3 Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent and no other legal basis applies, or where you object to processing based on legitimate interests and we have no overriding grounds to continue. Please note that certain data must be retained for legal and regulatory compliance purposes and cannot be deleted on request; we will inform you clearly when this applies.

9.4 Right to Restriction of Processing

You may ask us to restrict the processing of your data in specific circumstances: for example, while the accuracy of data is being contested, or while we assess an objection to processing based on legitimate interests. During the period of restriction, we will store your data but not actively process it beyond what is strictly necessary.

9.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a structured, commonly used, and machine-readable copy of your personal data, and to request that we transmit it directly to another service provider where technically feasible.

9.6 Right to Object

You have the right to object to processing carried out on the basis of our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately. Where you object to other legitimate-interest processing, we will cease unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Rights Related to Automated Decision-Making

Where we make decisions about you solely by automated means that produce a legal or similarly significant effect (for example, automated account suspension following fraud detection), you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Contact us at privacy@theaerobetcasino.com to invoke this right.

9.8 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to privacy@theaerobetcasino.com with sufficient information to allow us to identify your account. We will not charge a fee for reasonable requests but reserve the right to charge an administrative fee or refuse manifestly unfounded or excessive requests, with written reasons provided. If you are not satisfied with our response, you may escalate your complaint to the applicable Canadian privacy supervisory authority, including the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your relevant provincial privacy commissioner.

10. International Data Transfers

The Platform operates globally, and some of our service providers, infrastructure partners, and data processors are located outside of Canada. As a result, your personal data may be transferred to, stored in, or processed in countries that do not provide the same level of data protection as your province of residence.

When we transfer personal data internationally, we take steps to ensure that your data continues to receive a level of protection consistent with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial equivalents. These safeguards may include:

• Contractual protections in the form of data transfer agreements with recipient organisations;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection;
• Technical measures such as encryption to protect data in transit and at rest.

You may request further details about the safeguards in place for specific international transfers by contacting us at privacy@theaerobetcasino.com.

11. Minors

The Platform is strictly intended for adults of legal gambling age. In most Canadian provinces and territories, the minimum age is 19 years; in Alberta, Manitoba, and Quebec, the minimum age is 18 years. We do not knowingly collect personal data from individuals below the applicable minimum age in their province of residence.

All applicants are required to pass age verification as part of the account registration process. If we discover or are notified that we have inadvertently collected personal data from a minor, we will promptly close the relevant account, delete all associated personal data, and refund any funds held, in accordance with our Terms and Conditions. If you believe a minor has registered on the Platform, please contact us immediately at support@theaerobetcasino.com. Further information about protecting minors from gambling-related harm is available on our Responsible Gaming page.

12. Changes to This Policy

We review and update this Privacy Policy periodically to reflect changes in our data practices, applicable legislation, or the services we offer. When we make material changes, we will notify you by posting the revised policy on this page with an updated version number and effective date, and, where appropriate, by sending an email notification to the address registered with your account.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page regularly. If a proposed change materially reduces your rights, we will seek your fresh consent where required by applicable law. Archived previous versions of this policy are available on request by contacting privacy@theaerobetcasino.com.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which we process your personal data, please do not hesitate to contact us through any of the channels listed below.

We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 days. Complex requests may take up to 60 days in total, and we will keep you informed of progress. Should our response not meet your expectations, you retain the right to lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or with the relevant provincial privacy authority in your jurisdiction.

For responsible gaming support, the following Canadian organisations can provide confidential assistance:

• Responsible Gambling Council (RGC): responsiblegambling.org
• Centre for Addiction and Mental Health (CAMH): camh.ca
• ConnexOntario (24/7 helpline): 1-866-531-2600
• BC Problem Gambling Help Line: 1-888-795-6111
• Quebec Gambling Help and Referral: 1-800-461-0140
• Canadian Centre on Substance Use and Addiction (CCSA): ccsa.ca
• GamTalk (online peer support): gamtalk.org