Privacy Policy

This Privacy Policy explains how LeoVegas Casino, operating through casinoleo-vegas.com, collects, uses, stores, shares, and protects personal information. It applies to website visitors, registered players, and people who contact support. Effective date: 6 November 2026.

A privacy policy is how users are told about data handling, legal rights, security safeguards, and the situations in which personal information may be disclosed in connection with online casino services. This notice applies when you browse casinoleo-vegas.com, create or use an account, take part in games, request payments, receive communications, or otherwise use LeoVegas Casino services offered to customers in Canada outside Ontario.

Who We Are

For this Privacy Policy, LeoVegas Casino means the LeoVegas Casino offering made available through casinoleo-vegas.com. On the information currently available, the brand is associated with Versus Odds B.V., a B.V. entity, and operates under the Antillephone N.V. master license in Curaçao. LeoVegas Casino serves customers in Canada outside Ontario. It is not presented as an Ontario-regulated gaming operator.

Some corporate particulars that a privacy notice often includes are not specified in the information presently available to LeoVegas Casino on casinoleo-vegas.com. That includes the full operator legal name, legal address, company registration number, tax number, and a direct telephone number for the data protection function. If you need those details for verification, ask through the support and privacy contact below. This notice does not fill those gaps with assumed details.

Privacy Contact

Questions, requests, or complaints about personal information can be sent to the privacy contact for LeoVegas Casino:

• Email: [email protected]
• Department: Support / Data protection requests intake
• Postal address: Not specified in the currently available corporate information
• Phone: Not specified in the currently available corporate information

If a Data Protection Officer, or a separate data protection department, is formally appointed later, LeoVegas Casino will update casinoleo-vegas.com with the relevant name and contact details.

What Personal Data We Collect

LeoVegas Casino may collect personal data directly from you, automatically when you use casinoleo-vegas.com, and from third parties such as payment providers, identity-verification vendors, fraud-prevention partners, and regulatory or compliance databases. The categories may include:

• Identity and contact data: full name, date of birth, residential address, email address, telephone number, username, account ID, and messages sent to support.
• Account and verification data: copies of identity documents, proof of address, age-verification information, source-of-funds or source-of-wealth information where required, and KYC/AML review results.
• Payment and transaction data: deposit and withdrawal records, payment-method details, masked card information, e-wallet identifiers, bank-related data where a payout needs it, chargeback records, and transaction status logs.
• Gaming and behavioral data: betting history, game participation, bonus use, session activity, clicks, navigation patterns, preferences, responsible-gambling interactions, and account-limitation history.
• Technical data: IP address, browser type, operating system, device identifiers, language settings, time zone, access times, referring URLs, log files, crash data, and security-event records.
• Marketing and preference data: subscription choices, consent records, campaign interaction, and communication preferences.
• Cookies and similar technologies: session cookies, persistent cookies, pixels, tags, SDKs where they are used, and other tools for authentication, analytics, and advertising preferences.

LeoVegas Casino may also infer limited information from activity on casinoleo-vegas.com, such as risk indicators, fraud flags, a likely jurisdiction, preferred games, and whether a promotion is suitable. That inference is used only where it is reasonably necessary for the service, compliance, or security.

Legal Basis for Processing

Personal information is processed only where there is an appropriate legal basis under privacy standards relevant to these operations. That includes Canadian private-sector privacy principles and, where a cross-border user or processing relationship makes it relevant, internationally recognized data-protection frameworks.

• Contract performance: creating and managing the account, authenticating identity, accepting deposits, giving access to games, administering bonuses, processing withdrawals, answering service requests, and enforcing the terms that apply to LeoVegas Casino on casinoleo-vegas.com.
• Consent: used where it is required, including certain marketing communications, non-essential cookies, and optional promotional features. You can withdraw consent for future processing. Withdrawal does not undo processing that the law or the contract still requires.
• Legitimate interests: platform security, fraud prevention, abuse investigations, website improvement, internal analytics, protection of legal rights, and responsible-gambling controls, where those interests are not overridden by your rights and freedoms.
• Legal and regulatory obligations: age checks, identity verification, anti-money-laundering reviews, sanctions screening, fraud reporting, dispute handling, accounting, recordkeeping, and lawful requests from regulators, law enforcement, courts, or licensing bodies.

Where the applicable law requires express consent, LeoVegas Casino will ask for it before processing. If certain personal data is required for a legal obligation, refusing it may block account creation, continued access, or a withdrawal.

Purpose of Processing

LeoVegas Casino uses personal information for defined business and compliance purposes connected to casinoleo-vegas.com:

• Providing casino services: registration, opening and keeping accounts, gameplay, bonuses, deposits and withdrawals, and customer support.
• Identity, age, and compliance verification: eligibility checks, KYC/AML requirements, fraud checks, and payment or ownership checks before a payout.
• Service administration: records, technical faults, duplicate accounts, terms and conditions, and monitoring of suspicious or abusive conduct.
• Platform improvement: how people use casinoleo-vegas.com, performance, functionality, feature tests, and the user experience.
• Marketing and promotions: newsletters, bonus offers, and promotional messages where the law allows them, or where you have opted in or have not opted out, as applicable.
• Analytics and reporting: aggregated statistics, internal analysis, and operational planning, with unnecessary identification reduced where that is feasible.
• Fraud prevention and security: suspicious behavior, account protection, payment irregularities, and the security of the network and the information on it.

LeoVegas Casino does not use personal information for a purpose that is materially incompatible with this Privacy Policy, unless a new lawful basis applies or a further notice is published on casinoleo-vegas.com.

Disclosure & Sharing

Personal information is disclosed only where that is reasonably necessary for the service, legal compliance, security, or legitimate operations connected to casinoleo-vegas.com. It is not sold as a customer list in the ordinary course of business.

• Payment and banking partners: deposits, withdrawals, reversals, anti-fraud checks, and payment verification.
• Service providers and processors: hosting, cloud infrastructure, support tools, KYC/AML verification partners, analytics providers, CRM systems, security vendors, and technical contractors. They act under contractual confidentiality obligations.
• Regulators, licensing bodies, and authorities: where disclosure is required, or reasonably requested, for compliance, audits, investigations, legal claims, or regulatory reporting.
• Corporate group or business counterparties: parent-company relationships, professional advisers, auditors, insurers, and parties to financing, restructuring, a merger, an acquisition, or an asset transfer, with appropriate safeguards.
• Affiliates and advertising partners: limited data for attribution, campaign measurement, or delivery of a promotion, where the law allows it. Non-essential advertising generally relies on consent or on your cookie preferences.

Where a third party processes personal data for LeoVegas Casino, it is expected to use the information only for the authorized purpose, apply suitable security controls, and follow confidentiality and data-protection duties that match the sensitivity of the data.

International Transfers

LeoVegas Casino operates online through casinoleo-vegas.com and uses cross-border service providers. Personal information may be transferred to, stored in, or accessed from a jurisdiction outside your province or country of residence. That can include Curaçao, places where a provider keeps infrastructure, and places where payment, fraud-prevention, analytics, hosting, customer-support, or compliance partners operate.

• Transfer context: an international transfer can happen when account data sits on external servers, when a foreign vendor runs a KYC or payment check, or when support, compliance, fraud monitoring, or analytics is done across a border.
• Protection measures: LeoVegas Casino seeks contractual data-protection clauses, confidentiality agreements, access restrictions, due diligence, and other recognized safeguards suited to how sensitive the information is.
• Regulatory access risk: personal information held outside Canada may be subject to foreign laws, court orders, or lawful access by public authorities in that jurisdiction.

Words such as "Privacy Shield" appear in older international privacy language as an example of transfer-safeguard terminology. LeoVegas Casino does not state that any specific framework applies unless casinoleo-vegas.com says so expressly. For more on the cross-border safeguards in use, contact [email protected].

Data Retention

Personal information is kept only for as long as it is reasonably needed for the purposes in this Privacy Policy, for legal and regulatory duties, to resolve disputes, to prevent fraud, to enforce agreements, and to keep required business and accounting records. The period depends on account status, the law, how sensitive the data is, and whether an investigation is open.

• Account and identity data: generally for the life of the account and for up to 5 years after closure, unless a longer period is required for law, regulation, fraud prevention, or a dispute.
• KYC/AML and verification records: at least 5 years after the customer relationship ends, or longer where the law, licensing expectations, or an open investigation requires it.
• Transaction and payment records: up to 7 years for accounting, audit, tax, anti-fraud, and legal recordkeeping.
• Gaming, bonus, and behavioral records: for as long as the account, an irregularity, a complaint, responsible gambling, or fraud monitoring needs them, typically up to 5 years after closure.
• Marketing records: until consent is withdrawn, you unsubscribe, or the promotional purpose has ended. A suppression list may be kept so that an opt-out continues to be honored.
• Cookies and technical logs: for the cookie's lifespan and for system and security needs. Some logs are short-lived. Security logs may be kept longer when an investigation needs them.

Deletion can follow a valid request, the end of the retention period, an inactivity review, or the end of the purpose, unless LeoVegas Casino must or may keep the information for legal defense, compliance, fraud prevention, or an unresolved dispute. Where the law allows it and operations need it, information may be anonymized instead of deleted.

Your Rights

Depending on where you are, what is being processed, and which law applies, you may have rights over your personal information. LeoVegas Casino handles requests in line with applicable Canadian privacy principles and, where relevant, internationally recognized rights. Some drafting sources mention GDPR and Mexican privacy-law concepts. LeoVegas Casino on casinoleo-vegas.com is directed to the Canadian market outside Ontario, so requests are handled primarily under applicable Canadian standards. Equivalent protections may be applied in practice where that is feasible.

• Right of access: you may ask whether LeoVegas Casino processes your personal information and ask for the categories, or the specific data, held about you, subject to lawful exceptions.
• Right to correction: you may ask for inaccurate, outdated, or incomplete personal information to be corrected. Evidence may be requested.
• Right to deletion: you may ask for deletion where the data is no longer necessary, where consent has been withdrawn and no other lawful basis remains, or where processing is unlawful. Deletion is limited where KYC, AML, accounting, fraud prevention, a dispute, or legal defense requires retention.
• Right to restrict or object: you may object to certain processing based on legitimate interests, or ask that processing be limited while accuracy or lawfulness is reviewed.
• Right to data portability: where it is technically feasible and legally applicable, you may ask for a copy of certain data in a structured, commonly used format.
• Marketing rights: you may withdraw consent to marketing emails, or opt out of promotional messages, by using an unsubscribe tool or by contacting support.

How to Exercise Your Rights

1. Submit your request. Email [email protected] with the subject line "Privacy Request" and name the right you want to use.
2. Verification. LeoVegas Casino may ask you to verify your identity so the account is protected and personal information is not disclosed to the wrong person.
3. Review. The request is assessed against account status, applicable law, and any legal or regulatory duty that limits what can be done.
4. Response timeframe. LeoVegas Casino aims to respond within 30 days of a verifiable request. If complexity reasonably requires more time, you will be told about the extension and why it is needed.
5. Fees. Requests are generally free. A reasonable fee may be charged only where the law allows it, for example if a request is manifestly unfounded, repetitive, or excessive.

If you are still dissatisfied after the response, you can take the concern to an appropriate privacy regulator. Because LeoVegas Casino is aimed at Canada outside Ontario, Canadian privacy complaint channels are the ones most likely to matter in practice. References to Mexican data-protection rules in source instructions are not treated as the governing law for casinoleo-vegas.com, except where the same rights language is used as a protective standard for users.

Cookies & Tracking Technologies

casinoleo-vegas.com uses cookies and similar technologies to run the website, remember preferences, measure performance, analyze traffic, detect fraud, and, where permitted, support advertising and promotional measurement. Cookies are small text files stored on your device. Similar tools can include pixels, tags, local storage, and software development kits where those are used.

• Session cookies: temporary cookies that end when you close the browser. They are generally used for essential functions: session management, navigation, login state, and security.
• Persistent cookies: cookies that stay for a set period. They can remember preferences, recognize a returning visitor, store a language or interface choice, and support analytics.
• Third-party cookies: cookies set by an external provider, such as an analytics vendor, a payment tool, a fraud-prevention service, or an advertising partner. They may record interactions across sessions or services, under that provider's own privacy terms.

Cookie Purposes

• Strictly necessary / functional: website operation, account authentication, security, fraud prevention, and core delivery of the service.
• Analytics: traffic, usage trends, technical faults, and improvements to content and performance.
• Advertising and attribution: campaign measurement, limits on repeated ads, and personalized promotions, typically where you have given consent or where the law allows it.

Managing Cookies

You can control cookies in the browser, on the device, and in any cookie-preference tool published on casinoleo-vegas.com. Turning off strictly necessary cookies can break login, payment flows, fraud screening, and other core services. Marketing consent can also be withdrawn separately, through communication preferences or by writing to [email protected].

Data Security

LeoVegas Casino uses administrative, technical, and organizational safeguards meant to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. No transmission or storage system on the internet can be guaranteed fully secure. Controls are kept in proportion to the volume and sensitivity of the personal data processed through casinoleo-vegas.com.

• Encryption: TLS 1.2 or higher for data sent between your device and platform services, plus encryption or an equivalent control for sensitive data at rest where that is appropriate.
• Access control: role-based permissions, account authentication, least-privilege access, privileged-access management, and access logs, so internal exposure to personal information stays limited.
• Account protection: password controls, session monitoring, device and IP analysis, and multi-factor authentication where it is implemented or required for a sensitive account action.
• Monitoring and testing: security reviews, vulnerability management, fraud-detection tools, logging, and technical assessments aimed at finding and reducing risk.
• Governance and training: staff confidentiality duties, internal policies, and periodic security and privacy training for the people who need it.
• Incident response: steps to identify, contain, assess, document, and remediate a security incident, including notice where applicable law requires it.

ISO 27001 and SOC 2 are recognized international security standards that may guide what is expected of a vendor or a control. Unless casinoleo-vegas.com expressly says so, LeoVegas Casino does not claim to hold a specific certification. You are responsible for keeping login credentials confidential and for telling support promptly if you suspect unauthorized access to the account.

Complaints & Contacts

For a privacy concern, a complaint, or a question about how LeoVegas Casino handles personal information through casinoleo-vegas.com, use the channels that are actually available:

• Email: [email protected]
• Website: https://casinoleo-vegas.com
• Online feedback form: Not specified in the currently available contact information
• Phone: Not specified in the currently available contact information
• Postal address: Not specified in the currently available corporate information

Complaint Procedure

1. Initial submission. Email the complaint to [email protected]. Include the account email, what happened, relevant dates, and the outcome you want.
2. Acknowledgment. LeoVegas Casino aims to acknowledge receipt within 5 business days.
3. Review and investigation. Support, compliance, or the privacy function reviews the complaint. Identity verification or supporting documents may be requested.
4. Substantive response. LeoVegas Casino aims to answer on the substance within 30 days, or to explain why more time is needed if the matter is unusually complex.
5. Escalation. If the result is not satisfactory, you may refer the matter to an appropriate supervisory or regulatory authority.

External Escalation

For users in Canada, a privacy complaint can generally be sent to the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca. If the same matter also concerns another jurisdiction that actually applies, you may contact the competent authority there as well. Mexican or EU authorities named in source instructions are not treated as the primary supervisory contacts for LeoVegas Casino targeting Canada outside Ontario, unless a specific cross-border processing relationship makes that authority relevant to the individual case.

Updates

Last updated: November 2026.

LeoVegas Casino may change this Privacy Policy to reflect legal requirements, operational practice, security measures, website functionality, corporate structure, or the way user rights are handled on casinoleo-vegas.com. The current version is the one published on the website. It replaces earlier versions from the effective date stated on it.

• Notification methods: a post on the website, an alert in the account dashboard, a banner on the site, and, where it is appropriate, an email to the address on the account.
• Advance notice for significant changes: where a change materially affects your rights or the way personal information is used, LeoVegas Casino aims to give at least 30 days' notice, unless an immediate change is required for a legal, security, or fraud-prevention reason.
• User options: if you object to a material change, you may contact support, withdraw a consent that applies, stop using a non-essential feature, or ask for the account to be closed, subject to legal and contractual duties that are still outstanding.

Version Control

This version is effective as of 6 November 2026. A material change may cover data categories, processing purposes, international transfers, who information is disclosed to, retention periods, how rights requests work, or complaint channels. Where it is useful, LeoVegas Casino may publish a short changelog on casinoleo-vegas.com describing a substantial revision.