GranaWin Privacy Policy

Written for compliance with PIPEDA and, for Quebec residents, Law 25. Last revised on the date shown above.

GranaWin Privacy Policy

Who Controls Your Personal Information

The controller of the personal information described in this policy is TechSolutions Group N.V., the entity operating GranaWin under Curacao Gaming Authority licence no. 8048/JAZ2017-067. Correspondence regarding personal data should be sent to [email protected], which routes directly to the team responsible for privacy requests. This policy applies to every player who registers an account on granawin24.com, regardless of the province from which the account is accessed, and it is read alongside the terms and conditions rather than replacing them.

What We Collect and Your Rights Over It

We collect information you provide at registration, such as name, date of birth, and email address, along with payment details submitted at deposit or withdrawal, identity documents supplied during verification (KYC), technical data including IP address and device logs, and cookies placed during your browsing session. Gameplay data, including bets placed, wins recorded, and Comp Points accumulated in the VIP program, is also stored against your account to keep your balance and tier progress accurate. You have the right to access the personal information we hold about you, request correction of inaccurate entries, and withdraw previously given consent at any time, subject to obligations that require us to retain certain records regardless of a withdrawal request. Quebec residents additionally have the right, under Law 25, to request de-indexation of information that is no longer relevant and to receive their data in a portable format on request. Requests of either kind are handled through the contact channel described at the end of this policy.

Under PIPEDA, express consent is obtained before collecting sensitive information such as identity documents used for KYC verification, typically through the explicit confirmation step in the verification flow. For less sensitive processing, such as basic account administration, consent may be implied by your continued use of the account after registration. Separately from consent-based processing, certain data is collected and retained to meet legal obligations, including anti-money laundering reporting requirements that apply to the operator regardless of any individual consent choice. Where a transaction pattern triggers a manual review under these obligations, the review is carried out using the account and payment data already on file rather than by requesting new consent for that specific check.

Who Sees Your Data and What Happens When You Close Your Account

Personal and financial data is shared with payment providers processing Interac, Visa, Mastercard, and cryptocurrency transactions, with the third-party service engaged to confirm identity during KYC verification, and with game providers such as Pragmatic Play and Evolution Gaming to the extent needed to operate the games you play and to detect fraud. Each of these recipients receives only the data needed for its specific function; a game provider, for example, receives gameplay data but not your KYC documents. Where servers or service providers used to support these functions are located outside Canada, contractual safeguards consistent with PIPEDA requirements are put in place to protect the data during and after the transfer, and the same standard of protection applies regardless of the country in which the recipient is based. Once an account is closed, financial and identity records are retained for the period required by anti-money laundering and licensing obligations before being deleted; account preference data not subject to a retention obligation is removed on a shorter schedule following closure. If a closed account is reopened before the retention period expires, the previously retained records are reattached to the reactivated account rather than being recreated from a blank profile.

Your Right to File a Complaint

If you believe your personal information has been handled improperly, you may file a complaint with the Office of the Privacy Commissioner of Canada. Quebec residents may instead, or in addition, file a complaint with the Commission d’acces a l’information du Quebec, which has jurisdiction over Law 25 matters concerning Quebec residents. We recommend raising the issue with us directly first, through the contact address given below, since many concerns can be resolved faster that way than by waiting on a formal regulatory review.

How to Manage Cookies and Reach Us About Your Data

Cookies on granawin24.com fall into essential categories needed for login and session security, and optional analytics and marketing categories that can be declined through your browser’s cookie settings without affecting core site functionality. Marketing emails are sent only with consent obtained under Canada’s Anti-Spam Legislation (CASL), and every marketing message includes an unsubscribe link that takes effect immediately once used. For any request concerning access, correction, consent withdrawal, or de-indexation under Law 25, contact [email protected] with your registered account email so the request can be matched to your profile.