By Fiona Nicoll
Extreme Casino has been collecting personal data about players since 2000. In 2026, the platform operates under Anden Holdings Limited with a Curacao Gaming Control Board licence application currently on hold under number OGL/2024/1274/0819. That licensing status is the most important contextual fact for understanding Extreme Casino’s privacy framework — the data protection obligations tied to that licence are shaped by an offshore framework in transition rather than the GDPR-aligned standards of MGA or UKGC licensees or the AGCO’s Ontario-specific requirements. Canada’s federal PIPEDA provides the most substantive privacy protection layer for Canadian players at Extreme Casino, applying as domestic law regardless of the operator’s offshore location.
The regulatory framework for Extreme Casino’s privacy practices
| Privacy standard | Applies to Extreme Casino Canadian players? |
|---|---|
| PIPEDA (Canadian federal law) | Yes — applies regardless of offshore location |
| Ontario privacy legislation | Relevant if accessible to Ontario players |
| GDPR (EU standard) | No — not an MGA or UKGC licensee |
| CGCB data requirements | Yes — though licence is on hold |
| AGCO data standards | No — not an AGCO licensee |
What data Extreme Casino collects from Canadian players
Data provided directly:
| Category | Specific data points |
|---|---|
| Identity data | Full legal name, date of birth |
| Contact data | Email address, residential address |
| Verification data | Government-issued photo ID, proof of address, payment documentation |
| Financial data | Card details where used, cryptocurrency wallet addresses, CA$ transaction history |
| Account preferences | Deposit limits requested via email, marketing consent |
Data collected automatically:
| Category | Specific data points |
|---|---|
| Technical data | IP address, device type, browser, operating system |
| Behavioural data | Games played, session length, bet sizes, bonus code usage, win and loss records |
| Cryptocurrency transaction data | Wallet addresses, on-chain transaction identifiers for Bitcoin and Litecoin |
| Location data | IP-based geolocation for jurisdictional compliance |
| Communication data | Live chat transcripts, email support records, telephone interaction records |
| Cookie data | Session authentication, analytics, marketing tracking |
The cryptocurrency transaction data entry deserves specific explanation. On-chain transactions using Bitcoin or Litecoin create permanent public blockchain records that exist independently of Extreme Casino’s internal privacy practices — wallet addresses, transaction amounts, and timing are publicly visible on the relevant blockchain network to anyone who searches them. Extreme Casino’s privacy policy governs what the platform does with your internal data; it cannot govern the transparency of public blockchain ledgers.
Third parties who may receive your data
| Third party category | Purpose | Notes |
|---|---|---|
| Payment processors | Card and e-wallet transactions | Visa, Mastercard, Skrill, Neteller, ecoPayz where available |
| Blockchain networks | Cryptocurrency transaction processing | On-chain records are public by nature |
| Identity verification providers | KYC document authentication | Third-party verification services |
| Regulatory authorities | CGCB compliance reporting | Offshore regulator — licence on hold |
| IT and infrastructure providers | Platform hosting and security | Cloud servers and security services |
| Marketing platforms | Delivering consented communications | Email delivery |
Data retention
| Data type | Retention period | Basis |
|---|---|---|
| Identity and KYC documents | Extended period post-closure | AML compliance requirements |
| Financial transaction records | Extended period | Financial compliance |
| Game session history | Duration determined by operational needs | Dispute resolution |
| Support communication records | Operational duration | Complaint documentation |
| Marketing consent records | Consent duration | PIPEDA compliance |
Your rights as a Canadian player under PIPEDA
- Right of access — request a copy of all personal data Extreme Casino holds about you
- Right to correction — request updates to inaccurate personal information
- Right to withdraw consent — for marketing communications, opt out at any time
- Right to complain — file with the Office of the Privacy Commissioner of Canada if Extreme Casino does not resolve your concern
- Right to account closure — Extreme Casino must close your account on request, subject to retention obligations
PIPEDA access requests must be addressed within 30 days. Contact Extreme Casino’s support team through live chat or email to initiate any data rights request.
