Welcome to AuroraBet Engine ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website (aurorabet-engine.io) or use our B2B iGaming platform software and services.

By accessing or using our services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy. This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and aligns with regulatory requirements set forth by the Alcohol and Gaming Commission of Ontario (AGCO) and iGaming Ontario (iGO).

1. Information We Collect

As a B2B platform provider, we process information on two distinct levels: Operator Data (data regarding our direct B2B clients) and End-User Data (data regarding the players of our B2B clients, for which we act as a Data Processor).

1.1. Operator Data (Data Controller)

• Contact Information: Name, business email address, phone number, company name, and job title when you request a demo or contact us.
• Account & Financial Information: Billing details, corporate registration documents, and licensing information necessary to establish a commercial agreement.
• Technical Data: IP addresses, browser types, operating systems, and usage metrics collected automatically via cookies when you browse our corporate site.

1.2. End-User Data (Data Processor)

When our B2B partners (Operators) use the AuroraBet Engine platform, we process End-User data on their behalf. This may include:

• Personally Identifiable Information (PII) required for KYC/AML checks (e.g., government-issued ID, date of birth, residential address).
• Financial transaction logs, deposit/withdrawal histories, and masked payment details.
• Gameplay behavior, wagering history, and responsible gaming limits.

Note: Operators remain the Data Controllers for End-User data. AuroraBet Engine processes this data strictly according to the Operator's instructions and applicable regulatory frameworks.

2. How We Use Your Information

We use the Operator Data we collect for the following business purposes:

• Service Delivery: To set up, operate, and maintain your dedicated platform instances and APIs.
• Communication: To respond to inquiries, provide technical support, and send critical system updates or service bulletins.
• Security & Compliance: To monitor against unauthorized access, prevent fraud, and ensure the integrity of our microservices infrastructure.
• Improvement: To analyze system performance and aggregate usage trends to optimize our underlying technology stack.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

• Third-Party Service Providers: We may share data with trusted cloud hosting providers (e.g., AWS, Google Cloud deployed in Canadian data centers), payment gateways, and KYC verification vendors necessary to operate the platform. These third parties are bound by strict data processing agreements.
• Legal & Regulatory Authorities: We may disclose information if required to do so by law or in response to valid requests by public authorities, including AGCO, iGO, or the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction under confidentiality agreements.

4. Data Security and Retention

AuroraBet Engine employs enterprise-grade security measures to protect your data. All data is encrypted at rest using AES-256 and in transit via TLS 1.3. We utilize strict access controls, multi-factor authentication (MFA) for our internal teams, and regular third-party penetration testing.

We retain Operator Data for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. End-User data processed on behalf of Operators is retained according to the specific regulatory mandates (e.g., 5 to 7 years for financial and gameplay records under Canadian law) and the Operator's instructions.

5. Your Privacy Rights

Under PIPEDA and other applicable privacy laws, you have the right to:

• Request access to the personal information we hold about you.
• Request corrections to any inaccurate or incomplete data.
• Withdraw your consent to our processing of your personal data (subject to legal or contractual restrictions).
• Request the deletion of your personal data (Right to be Forgotten), provided it does not conflict with our regulatory record-keeping requirements.

To exercise these rights, please contact our Data Protection Officer using the details provided below.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to track activity and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site or B2B Portal.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated directly to our active B2B partners via email or an in-platform notification.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer at:

AuroraBet Engine Inc.
Attn: Data Protection Officer (DPO)
100 King Street West, Suite 5600
Toronto, ON M5X 1C9, Canada
Email: [email protected]
Phone: +1 (416) 555-0198