Pin-Up Privacy Policy

Personal information that may be collected includes:

• Identification and verification data: name, date of birth, address, nationality, ID documents, photos, and proof of address.
• Contact details: email, phone number, preferred language.
• Account and service data: username, preferences, responsible gambling settings, self-exclusion status, limits, and support records.
• Transaction and payment data: deposits, withdrawals, payment instrument tokens, billing information, and anti-fraud signals.
• Technical data: device identifiers, IP address, browser type, operating system, app version, location signals, cookies, and similar technologies.
• Compliance data: records needed for anti-money laundering and counter-terrorist financing checks.

Purposes of collection

• Provide and operate services, verify identity, process payments, and enable responsible gambling tools.
• Prevent fraud, ensure platform integrity, and secure accounts.
• Meet legal and regulatory obligations, including AML and sanctions screening.
• Improve online features, analytics, and user experience.

Protection measures

• Encryption in transit and at rest, access controls, multi-factor authentication, network segmentation, and monitoring.
• Vendor due diligence, confidentiality obligations, and privacy-by-design practices.
• Staff training, role-based access, and regular risk assessments.
• Payment processing aligned to industry security standards such as PCI DSS.

User rights in Canada

• Access a copy of personal information, know how it is used, and obtain information about disclosure to third parties.
• Request correction of inaccurate or incomplete data.
• Request deletion where allowed by law, or object to certain processing.
• Withdraw consent for optional uses at any time, without affecting earlier lawful processing.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or relevant provincial authorities.

Retention and destruction

• Personal information is kept only as long as needed for the purposes described or as required by law.
• Records tied to financial transactions and compliance may be retained for up to seven years.
• Data is securely destroyed or anonymized when no longer required.

Compliance

• Processing follows Canadian privacy laws, including PIPEDA and applicable provincial statutes, CASL for commercial messages, and anti-money laundering laws.

Personal information is used for lawful purposes and processed transparently:

• Account set-up and administration, identity verification, and age checks.
• Processing deposits, withdrawals, and refunds through payment service providers.
• Customer support, dispute resolution, and service notices.
• Responsible gambling features, limit management, and self-exclusion.
• Security, fraud prevention, risk management, and incident response.
• Analytics to maintain and improve online services and user experience.
• Personalization of content and settings.
• Marketing communications based on consent and CASL requirements, including the option to opt out at any time.
• Legal and regulatory compliance, including reporting to competent authorities where required.

How to access, update, or delete data

• Users may submit a privacy request through account settings or Support.
• Reasonable identity verification is required to protect accounts.
• A response is provided within a reasonable period, normally within 30 days under Canadian law.

Corrections and deletions

• Inaccurate information will be corrected upon request.
• Deletion requests are honoured when allowed by law and when retention is not required for legal, accounting, security, or dispute purposes.
• Some data must be retained for AML, audit, tax, or regulatory obligations.

Security checks and payment processing

• By using Pin-Up, users consent to security checks designed to prevent fraud and ensure compliance.
• Payment details may be processed by payment providers and financial institutions under their own security programs and privacy policies.

• Services are intended for adults aged 18 and older.
• Age cannot be verified without documents. Evidence of age may be requested during verification, payments, or risk checks.
• If a minor’s personal information is discovered, it will be deleted upon verified parental or guardian request, the account will be closed, and access will be blocked.

• Personal information may be stored or processed in other countries where service providers operate.
• Using the site constitutes consent to those transfers.
• Contractual and organisational safeguards are used to ensure a level of confidentiality and protection comparable to Canadian standards.
• Vendors are required to handle information only for the specified purposes and to maintain appropriate security measures.

• A legal disclaimer may limit, interpret, or otherwise affect how certain rules apply in specific situations.
• The disclaimer applies once the user accepts this Privacy Policy by signature, acceptance through the site, or other means of accession.
• Nothing in this policy limits rights that cannot be excluded under applicable law.
• If any part of this policy is found unenforceable, the remainder continues to apply as permitted by law.

Definition and purpose

• Cookies are small text files stored on a device to remember preferences and improve online services.

How cookies are used

• Essential operation and security.
• Statistics and analytics on site performance.
• Behaviour analysis to understand service usage and detect issues.
• Personalization of content and settings.

Retention

• Non-essential cookies are generally retained for up to 1 year, subject to earlier deletion by the user.

Control

• Users can manage cookies through browser settings and the site’s consent tools. Blocking some cookies may affect functionality.

• Using Pin-Up means full acceptance of this Privacy Policy and any updates posted on the site.
• If versions differ, the most recent version available on the site prevails.
• Continued use of services after changes take effect indicates agreement to the revised document.

• Personal information may be shared when required by law, to manage disputes, to enforce agreements, to process payments, or to operate services through vendors.
• Third parties engaged for these purposes are listed on the site where applicable. If not listed, users will be informed of the purpose and scope before sharing whenever feasible.
• Providing information for a specific feature or service indicates consent to share it for that purpose.
• Third parties are required to protect confidentiality and use information only as instructed.

• The site may contain links to external websites that have their own privacy policies.
• The operator is not responsible for how external websites collect, use, or protect information.
• Users should review the privacy policies of external websites before providing any personal data.