Privacy Policy - Data Protection & User Rights

Personal Information and Data Processing Policies

TrueNorth operates under rigorous compliance standards to ensure transparent management of all user data collected across the sportsbook platform. When creating an account to access our online sports betting services, players submit personal identifiers including full legal name, date of birth, residential address, email address, and phone number. Under Canadian regulatory guidelines and international anti-money laundering (AML) directives, we also require Know Your Customer (KYC) documentation before processing initial withdrawals. This verification involves collecting digital copies of government-issued photo identification (such as a provincial driver's licence or passport), recent utility bills or bank statements issued within the past 90 days as proof of address, and documentation verifying payment method ownership. In addition to directly supplied identifiers, our infrastructure automatically records technical telemetry during each session. This technical dataset includes internet protocol (IP) addresses, device fingerprinting markers, browser configurations, operating system versions, and timestamped transaction histories. Because sports betting regulations require strict verification of physical location within Canadian borders, we process precise geolocation and Wi-Fi triangulation data upon every login and wager placement. We deploy essential session cookies to preserve active login authentication, analytical cookies to evaluate site load performance across various network conditions, and security cookies that detect unauthorized automated script access or multiple simultaneous logins from differing geographic regions. We do not sell personal information to commercial marketing lists or unauthorized data brokers. Personal data is shared strictly with verified third-party operational vendors necessary for service delivery. These recipients include licensed payment service providers (such as Interac e-Transfer processors and digital asset clearinghouses), external identity verification services, fraud prevention specialists, odds feed integrators, and dispute resolution arbiters. All data exchanges with external processors operate over encrypted 256-bit TLS connections and are constrained by contractual Data Processing Agreements (DPAs) requiring adherence to strict confidentiality and security protocols consistent with modern privacy standards. Users maintain distinct statutory rights regarding their personal information. You possess the legal right to request a complete export of your stored personal records, submit corrections for outdated residential or contact details, or request account closure and data deletion. Please note that data erasure requests remain subject to statutory record-retention requirements under Canadian financial and AML laws, which mandate maintaining transaction and identity records for a minimum of five years following account closure. For detailed organizational background, review our about our platform operations section, or consult our responsible gambling tools for self-exclusion data management. Direct all data inquiries, portability requests, or privacy concerns directly to our dedicated Data Protection Officer at [email protected].

Categories of Collected Data

Directly Submitted Information

To establish and maintain an account on TrueNorth, users must provide specific personal and financial records. This data is required under Canadian regulatory standards, identity verification mandates, and anti-money laundering (AML) requirements.

Account Registration Details: When opening an account, we collect your full legal name, date of birth (to confirm the legal wagering age of 19+, or 18+ in Alberta, Manitoba, and Quebec), residential address, postal code, active email address, and Canadian mobile telephone number used for two-factor authentication (2FA).
Identity Verification (KYC) Documentation: In compliance with federal and provincial anti-money laundering statutes, we collect electronic copies of government-issued photo identification (such as a Canadian passport, provincial driver's licence, or photo card) alongside proof of address documents (utility bills or bank statements issued within the past 90 days).
Payment and Banking Data: For deposits and withdrawals, we process truncated card details (first six and last four digits of Visa or Mastercard, expiry date, and cardholder name), Interac e-Transfer transaction identifiers, electronic funds transfer (EFT) routing numbers, or public blockchain addresses when utilizing options outlined in our cryptocurrency settlement guide. Complete payment card numbers are tokenized by PCI-DSS Level 1 compliant processors and are never stored on our operational servers.
Communications and Support Inquiries: We archive transcripts of live support chats, email correspondence, dispute records, and responses to customer service inquiries to track resolution timelines and quality assurance.
Account Limits and Player Controls: Records of user-configured deposit caps, cooling-off periods, reality checks, and self-exclusion requests initiated through our responsible gambling program.

Automated Telemetry and Technical Data

Whenever you access TrueNorth via desktop or handheld web browsers, our network infrastructure automatically logs diagnostic and usage information to ensure system integrity, prevent fraud, and maintain regulatory compliance.

Device and Network Telemetry: Systems capture your client IPv4 and IPv6 addresses, operating system version (Windows, macOS, Android, iOS), browser engine version, screen resolution, unique hardware identifiers, and language settings. This information is evaluated to identify unauthorized login attempts and ensure proper rendering across standard web and mobile sports betting interfaces.
Wagering and Transaction History: Our core wagering engine maintains immutable logs of every bet placed, including market identifiers, odds recorded at the time of confirmation, settled outcomes, cashout calculations, account balance changes, and wagering progression on active sportsbook deposit bonuses.
Geolocation and Boundary Verification: To satisfy provincial licensing parameters, we log connection timestamps, ISP routing data, and network-based location metrics to verify that real-money wagering occurs strictly within legally approved boundaries.
Cookies and Local Storage Artifacts: We deploy session cookies, persistent authentication tokens, and fraud-detection browser fingerprinting scripts. These tokens preserve your login state, retain interface preferences (such as decimal odds formatting), and detect concurrent or anomalous access from conflicting geographic regions.

Cookies and Tracking Technologies

TrueNorth employs cookies, web beacons, clear GIFs, and local browser storage to operate our digital wagering infrastructure securely, authenticate sessions, and assess overall system efficiency. A cookie is a compact text string deposited on your desktop or mobile hardware when you navigate our platform. These identifiers permit our web servers to distinguish your hardware profile from other concurrent sessions, safeguard transactional workflows, and preserve active session variables across page transitions.

We classify the tracking elements deployed across our domain into four primary technical categories:

Strictly Necessary Cookies: Essential for platform security, load balancing, and statutory compliance. These tokens manage cryptographic session authentication, prevent cross-site request forgery (CSRF), verify user age thresholds under provincial Canadian regulations, and maintain real-time betslip state integrity while browsing betting markets on our sports betting platform. Disabling these identifiers blocks access to core account capabilities and deposit workflows.
Performance and Diagnostic Cookies: Aggregated analytical identifiers, including services such as Google Analytics and server-level telemetry, that log server response latencies, HTTP error codes, rendering speeds, and user navigation flow paths. Data gathered through diagnostic tags remains pseudonymized and is used strictly to resolve technical bottlenecks and improve site stability across desktop and mobile browsers.
Functional Preference Cookies: Persistent files that record your platform custom preferences across visits, including decimal versus fractional odds displays, regional timezone offsets (such as EST, CST, or PST across Canadian provinces), interface language defaults, and customized responsible betting session timer prompts configured in your account settings.
Targeting and Attribution Technologies: Analytical scripts and partner attribution tags that verify referral origins, campaign performance, and bonus code validations. These records prevent promotional abuse, verify affiliate referral validity, and calibrate relevant platform promotions while preventing repetitive display prompts.

Session cookies exist transiently in your browser memory and expire immediately upon closing the active browsing window. Persistent cookies remain stored on your hard disk for periods ranging from thirty days to twenty-four months, or until manually purged through your operating system settings. We adhere to fair information practices established under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) regarding consent and transparency for stored client-side data.

You maintain full operational control over tracking tokens through standard browser configuration panels. Major browsers (Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge) provide settings to inspect, block, or delete cookies on a site-specific or global level. You can also deploy platform-level opt-out tools such as the Digital Advertising Alliance of Canada (DAAC) WebChoices tool or enable the Global Privacy Control (GPC) signal. Please note that restricting strictly necessary or functional cookies will disrupt live odds updates, session continuity, and identity validation routines required for secure wagering operations.

Data Sharing Protocols and Statutory Rights

Third-Party Disclosures

TrueNorth maintains a strict policy against commercializing or renting personal records. Customer information is transmitted exclusively to third-party entities that support core infrastructure, fulfill regulatory obligations, or process financial settlements under binding confidentiality and data-protection agreements.

Payment Gateway and Settlement Processors: To authenticate transactions, clear deposits, and execute withdrawals, necessary transaction details are transferred to certified payment processors, banking networks, and digital wallet infrastructure. These organizations process card records, transaction amounts, and routing identifiers in compliance with PCI-DSS standards.
Identity Verification and Fraud Detection Providers: To comply with Canadian anti-money laundering (AML) mandates and standard Know Your Customer (KYC) requirements, we share user identification documents, proof of address, and residential data with accredited identity-verification agencies and credit reference databases for electronic cross-referencing.
Platform Infrastructure and Telemetry Providers: Operational telemetry, session logs, and device fingerprints are processed via enterprise cloud servers and analytical software vendors to monitor system latency, resolve technical bugs, and optimize platform uptime across mobile and web interfaces.
Regulatory and Law Enforcement Authorities: TrueNorth is legally obligated to share transactional histories, betting ledgers, and account identities with provincial gaming regulators, tax authorities, or law enforcement bodies when served with valid subpoenas, court orders, or statutory reporting triggers related to suspicious betting patterns.
Operational Group Entities: Customer profiles may be processed by operational subsidiaries within the TNB Interactive Ltd. corporate framework to handle central database administration, platform security audits, and internal risk assessment protocols.

Your Legal Entitlements

Under applicable Canadian federal privacy legislation (PIPEDA) and international data protection standards, registered patrons hold defined statutory entitlements regarding the collection, retention, and handling of their personal records. These requests can be submitted directly to our Data Protection Officer.

Right of Access: You are entitled to request formal confirmation of whether your data is being processed, alongside a comprehensive digital copy of all personal records, wagering ledgers, and balance transaction files on record.
Right to Rectification: If your profile details become outdated, incomplete, or factually inaccurate—such as an updated residential address or modified banking details—you may submit updated verification files to adjust the active database.
Right to Erasure: You can submit a request for the permanent deletion of your personal records ("right to be forgotten"). This right is subject to overriding statutory retention periods mandated by provincial gaming regulations and anti-money laundering compliance laws, which require transaction archives to be retained for minimum statutory durations.
Right to Restriction of Processing: You may request the suspension of data processing activities while the factual accuracy of a profile is contested or while an official formal dispute is investigated.
Right to Data Portability: Account holders may request the extraction of their submitted personal profile data in a structured, commonly accessible, and machine-readable format (such as CSV or JSON) for transfer to third-party services.
Right to Withdraw Consent: Where data handling relies strictly on voluntary user consent—such as non-essential telemetry or promotional notifications—you may withdraw that authorization at any time via account settings or through our responsible gambling support tools.

Security Standards and Record Retention

TrueNorth enforces rigorous technical, procedural, and organizational safeguards designed to secure player records against unauthorized interception, structural loss, data destruction, and unlawful manipulation. Every digital exchange between your client device and our servers is secured using 256-bit Transport Layer Security (TLS 1.3) cryptographic protocols and certified Secure Sockets Layer (SSL) infrastructure. Sensitive financial records, tokenized transaction identifiers, and personal identifying documents uploaded during Know Your Customer (KYC) verification are housed in segregated data vaults with restricted access, role-based identity authentication, enterprise web application firewalls (WAF), and automated intrusion detection systems operating around the clock. Personal records and transaction logs are retained strictly for the duration necessary to satisfy operational purposes, contractual requirements, and mandatory compliance obligations under applicable Canadian and international regulatory frameworks. To satisfy federal anti-money laundering (AML) and counter-terrorist financing standards, identity documentation, deposit receipts, withdrawal logs, and betting histories must be preserved for a statutory retention window—typically five to seven years following the formal closure of an account or the execution of a final transaction. Once the mandated retention term lapses and no active dispute, audit, or legal hold applies, data records are permanently destroyed or irreversibly anonymized using secure electronic sanitization standards. Because our secure infrastructure utilizes cloud networks and specialized data processing vendors, your personal data may occasionally be transferred to and stored on encrypted systems located outside your home province or territory. In all cross-border data movements, TrueNorth applies comprehensive data protection agreements incorporating Standard Contractual Clauses, adequacy assessments, and stringent non-disclosure requirements ensuring that recipient servers uphold security measures equivalent to Canadian privacy principles. For questions regarding our compliance practices or to update your preferences, consult our responsible gambling resources and account management tools. TrueNorth regularly reviews this privacy schedule to reflect technical enhancements, statutory amendments, and operational upgrades. In the event of material revisions affecting how personal data is collected or handled, notifications will be delivered via platform announcements or registered email correspondence. For inquiries regarding data rights, verification files, or regulatory compliance, players may submit formal requests to our designated Data Protection Officer via email at [email protected] or by post to Data Protection Officer, TrueNorth Interactive Compliance, 100 King Street West, Suite 5600, Toronto, ON M5X 1C9, Canada.