Privacy Policy
This Privacy Policy describes how wheelz-casino, operating via wheelz-casino-ca.com, collects, uses, discloses, and protects your personal information as of November 6, 2025. It applies to all players and website visitors located in Canada who access our services or interact with our platform. The policy is required to fulfil legal obligations, ensure transparency, and protect the rights of users under Canadian and global data protection regulations.
Who We Are
OBSERVE: wheelz-casino is operated by Rootz Limited, a company incorporated and registered in Malta, serving Canadian users via wheelz-casino-ca.com.
- Operator Legal Name: Rootz Limited
- Legal Address: Ewropa Business Centre, Dun Karm Street, Level 3 - 701, Birkirkara, BKR 9034, Malta
- Company Registration Number: C 83903
- Licenses:
- Malta Gaming Authority (MGA): MGA/B2C/599/2018 (active through 2025)
- Alcohol and Gaming Commission of Ontario (AGCO): OPIG1242821 (active through 2025)
- Data Protection Officer (DPO) Contact:
- Email: [email protected]
- Website: https://wheelz-casino-ca.com
What Personal Data We Collect
OBSERVE: To provide regulated iGaming services, wheelz-casino collects the following categories of data:
- Personal Identification Data: Full name, date of birth, address, email, phone number
- Technical Data: IP address, device information, browser type, operating system, access logs, session data
- Payment Data: Bank account details, payment card information, transactional records, withdrawal and deposit history
- Behavioral Data: Betting history, gaming activity, site navigation, click events, gaming preferences
- Cookies and Tracking Data: Unique identifiers, session tokens, analytics cookies, advertising cookies, similar technologies
EXPAND: This information is necessary for account creation, regulatory compliance, fraud prevention, personalized experiences, and lawful operation in Canada.
Legal Basis for Processing
OBSERVE: wheelz-casino processes your personal data in accordance with Canadian law, international standards, and applicable gaming regulations.
- User Consent: Data processing for marketing, optional services, and cookies is based on your explicit consent, which you may withdraw at any time.
- Contractual Necessity: Data is processed to perform our contract with you, including account management, transactional operations, and service delivery.
- Legitimate Interests: Processing for security monitoring, fraud detection, website analytics, and service improvement is justified by our legitimate interests, balanced against your privacy rights.
- Legal Obligations: Compliance with KYC (Know Your Customer), AML (Anti-Money Laundering), record-keeping, and regulatory requirements (as mandated by MGA, AGCO, and Canadian authorities).
REFLECT: All processing activities are documented and regularly reviewed to ensure ongoing compliance with CA, MGA, and AGCO standards.
Purpose of Processing
OBSERVE: wheelz-casino uses your data strictly for the following purposes:
- Service Provision: To set up and maintain your casino account, process transactions, and provide gaming services via wheelz-casino-ca.com
- Service Improvement: To analyze usage, enhance platform functionality, and optimize user experience
- Marketing & Communication: To send promotional offers, newsletters, and updates (where you have provided consent)
- Analytics: To conduct statistical analysis and improve business operations
- Fraud Prevention & Security: To detect, prevent, and investigate fraudulent or suspicious activity
- Regulatory Compliance: To fulfill obligations under gaming laws and regulatory requirements
EXPAND: Data will not be used for unrelated purposes without informing you and obtaining necessary consent.
Disclosure & Sharing
OBSERVE: Your personal data may be shared only as strictly necessary to provide services and comply with legal requirements:
- Service Providers: Payment processors, hosting providers, technical support, and analytics vendors bound by strict confidentiality agreements
- Regulatory Authorities: Disclosures to the Malta Gaming Authority, Alcohol and Gaming Commission of Ontario, and other competent regulatory bodies for compliance, audit, or legal obligations
- Affiliates & Subsidiaries: Limited, controlled sharing with direct affiliates (Wildz, Caxino, Spinz) for operational purposes only, subject to the same protections
- Advertising Networks: Third-party advertising or marketing partners only with your explicit consent for such processing
- Legal Compliance: Where required by law, court order, or to protect the rights, property, or safety of wheelz-casino, our users, or the public
REFLECT: All third parties are contractually obliged to maintain data confidentiality and security in accordance with Canadian law and international standards.
International Transfers
OBSERVE: As wheelz-casino operates globally, your data may be transferred to or accessed from jurisdictions outside Canada, including Malta and the European Economic Area.
- Transfer Safeguards: All international transfers are protected by legally binding agreements, such as Standard Contractual Clauses approved by the European Commission.
- Security Measures: Data transferred internationally is subject to robust security protocols, including encryption, access controls, and risk assessments.
- Compliance: Transfers are conducted only as necessary for service provision, regulatory compliance, and where adequate data protection standards are ensured.
REFLECT: You may request further information on the safeguards for international data transfers by contacting our DPO.
Data Retention
OBSERVE: wheelz-casino retains your personal data only as long as necessary for the purposes outlined in this policy and as required by law.
- Account Data: Retained for the duration of your account and up to five (5) years after account closure or termination, in accordance with regulatory retention periods
- Transactional & Payment Data: Retained for at least five (5) years in line with anti-money laundering (AML) requirements
- Marketing Data: Retained until you withdraw consent or unsubscribe from communications
- Cookies & Analytics: Retention periods vary by cookie type (see Cookies section below)
Deletion Criteria: Data is securely deleted or anonymized upon expiry of retention periods, upon your valid request, or if processing is no longer necessary. Legal obligations may require retention beyond such periods for dispute resolution or regulatory investigations.
Your Rights
OBSERVE: In accordance with Canadian, EU (GDPR), and Mexican privacy laws (where applicable), you have the following rights regarding your personal data processed by wheelz-casino-ca.com:
- Right of Access: Request a copy of your personal data held by us.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal and regulatory retention requirements.
- Right to Restrict Processing: Request limitation of data processing under certain circumstances.
- Right to Object: Object to processing based on legitimate interests or direct marketing at any time.
- Right to Data Portability: Request transfer of your data to another provider in a structured, commonly used format.
- Right to Withdraw Consent: Withdraw consent for marketing or optional data processing at any time, without affecting prior processing.
- Right to Lodge a Complaint: File a complaint with the relevant data protection authority (see Complaints & Contacts section).
How to Exercise Your Rights
- Procedure: Submit requests via email to [email protected] or through the website's contact channels.
- Verification: We may require verification of your identity to process your request securely.
- Response Timeframe: We will respond to all valid requests within 30 days, free of charge unless requests are manifestly unfounded or excessive.
REFLECT: These rights are guaranteed under GDPR (EU), Canadian privacy law (PIPEDA, provincial acts), and Mexican data protection laws (where services extend). We are committed to upholding your privacy rights at all times.
Cookies & Tracking Technologies
OBSERVE: wheelz-casino uses cookies and similar tracking technologies to enhance your experience on wheelz-casino-ca.com.
- Session Cookies: Enable essential site functions and expire when you close your browser.
- Persistent Cookies: Remain on your device for a set period to remember your preferences and login details.
- Third-Party Cookies: Used for analytics (e.g., Google Analytics) and advertising purposes, subject to your consent.
Cookie Purposes
- Functional: Ensure the website operates correctly and remembers your settings.
- Analytics: Collect anonymous usage statistics to optimize our services.
- Advertising: Deliver personalized offers and content (only with your consent).
Managing Cookies
- Adjust your browser settings to refuse or delete cookies.
- Utilize our internal cookie management panel (accessible on the website) to set your preferences.
REFLECT: Disabling cookies may affect certain website features or functionality. For detailed information, see our Cookie Policy.
Data Security
OBSERVE: wheelz-casino employs industry-leading security practices to protect your personal data from unauthorized access, loss, misuse, or disclosure.
- Encryption: All data transmitted is protected using TLS 1.2+ protocols; sensitive data at rest is encrypted with robust algorithms.
- Access Controls: Role-based access ensures only authorized personnel can access personal data, with multi-factor authentication (MFA) where applicable.
- Security Audits: Regular internal and third-party audits are conducted to assess and improve security posture.
- Staff Training: Employees receive ongoing training regarding data protection, confidentiality, and incident response.
- Incident Response: Formal incident response plans are in place for timely detection, reporting, and management of any security breaches.
- Compliance: Security measures are aligned with ISO 27001 and SOC 2 standards where applicable.
REFLECT: We continuously monitor and update our security practices to address evolving threats and regulatory requirements.
Complaints & Contacts
OBSERVE: wheelz-casino is committed to addressing any data protection concerns promptly and transparently.
- Contact the DPO:
- Email: [email protected]
- Online: Visit https://wheelz-casino-ca.com for feedback forms (if available)
- Postal Address: Ewropa Business Centre, Dun Karm Street, Level 3 - 701, Birkirkara, BKR 9034, Malta
- Complaint Procedure:
- Submit your concern or complaint to our DPO via email or website.
- We will acknowledge receipt within 7 days and provide a substantive response within 30 days.
- If unresolved, you may escalate your complaint to the relevant data protection authority:
- Supervisory Authorities:
- Office of the Privacy Commissioner of Canada (OPC): Contact OPC
- Malta Data Protection Commissioner: Contact IDPC Malta
- EU Supervisory Authorities: As applicable for cross-border processing
REFLECT: We encourage you to contact us first, but you also have the right to lodge a complaint directly with the relevant authority at any time.
Updates
OBSERVE: This Privacy Policy may be updated periodically to reflect legal, technical, or operational changes.
- Notification Procedures: For material changes, we will notify users by email, prominent website banners, and account dashboard alerts.
- Advance Notice: Significant amendments will be communicated at least 30 days before the effective date, giving you the option to object or close your account without penalty.
- Version Control: Last updated: November 2025
- Changelog: Material revisions and their effective dates will be published in this section.
REFLECT: Continued use of wheelz-casino-ca.com after updates implies acceptance of the revised policy. We recommend reviewing this page regularly for the latest information.
Regional Compliance Note: This policy is tailored for Canadian users of wheelz-casino-ca.com, fully aligned with Canadian federal and provincial data protection statutes, and incorporates international best practices including GDPR, where applicable. All retention periods, procedural safeguards, and user rights are extended to 2025 and subject to regular review for ongoing compliance.