This Privacy Policy outlines the standards applied to collect, manage, and safeguard information when accessing our betting comparisons, editorial guides, and site features. When visitors access our platform, technical logs capture non-personally identifiable metrics, including IP addresses, browser versions, operating systems, and page response times to monitor infrastructure stability and optimize site performance.

We use standard HTTP cookies and privacy-compliant analytics tools to evaluate traffic patterns and remember visitor preferences. Users can restrict or disable cookie tracking via browser settings at any time without losing access to published content or our about page. We do not sell or trade user information to commercial data brokers.

External platforms, including sportsbooks reviewed on our site and organizations featured in our responsible gambling guide, operate under separate privacy policies. In accordance with Canadian data protection principles under PIPEDA, users maintain the right to verify, modify, or request deletion of any stored contact records by submitting a formal privacy request.

True North Bets processes personal data in strict compliance with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial data protection frameworks. We collect and maintain records strictly necessary for account administration, regulatory compliance, risk mitigation, and security verification. When you register an account, make financial deposits, place wagers on our sports betting markets, or initiate withdrawals, information such as your full legal name, residential address, date of birth, government identification numbers, and transactional logs are gathered and verified under anti-money laundering (AML) and Know Your Customer (KYC) mandates.

We use technical tracking mechanisms and standard HTTP cookies to support operational performance, security integrity, and session continuity. Strictly necessary cookies maintain session state and authenticate logins across page requests. Performance and analytical cookies monitor platform latency, navigation paths, and transaction response times without storing directly identifying credentials. Functionality cookies record chosen interface settings, including regional formats and decimal odds preferences across live betting lines. Users retain full control over tracking mechanisms via their browser settings, though disabling essential session cookies will prevent login functions and bet placement processing.

Data sharing occurs only under strictly defined operational necessity and statutory mandates. Information is transferred securely to verified third-party payment processors, identity verification databases, fraud detection providers, and regulatory enforcement authorities where required by Canadian law. We do not sell, rent, or trade customer contact details or betting logs to unaffiliated commercial brokers. All external service contractors operate under strict data-processing agreements ensuring equivalent technical safeguards and limited operational access.

Under Canadian privacy statutes, registered patrons hold the legal right to request formal access to their personal records, request the rectification of outdated or inaccurate entries, and review our automated processing protocols. Data retention periods conform strictly to statutory standards: transaction logs and verification records are held for a baseline minimum of five years following account closure to satisfy FINTRAC and licensing audit obligations. For specific questions concerning privacy controls, data access requests, or self-exclusion data policies under our responsible gambling program, players may submit formal documentation directly to our designated Data Protection Officer at [email protected].

Account registration requires your full legal name, date of birth, email address, and residential province. Depositing funds or requesting a withdrawal adds payment method details, banking references, and identity documents submitted for verification. We also record wagering history, session timestamps, and device identifiers such as browser type and approximate location derived from IP address.

None of this is collected for its own sake. Identity fields support KYC and age verification. Payment fields support fraud checks and refund processing. Device and session data support account security, including detecting logins from unfamiliar locations.

Cookies on our platform fall into four categories, each serving a distinct function.

• Strictly necessary cookies: Maintain login sessions and secure form submissions. Disabling these prevents account access entirely.
• Performance cookies: Measure page load times, error rates, and navigation paths across the site without identifying individual visitors by name.
• Functionality cookies: Remember interface choices, such as preferred odds format or saved filter settings on comparison tables.
• Analytics and advertising cookies: Support aggregate traffic reporting and, where applicable, measure the performance of affiliate links to reviewed sportsbooks.

Most browsers let you block or delete cookies through their privacy settings. Blocking functionality or analytics cookies has no effect on your ability to read published content. Blocking strictly necessary cookies will prevent login and bet placement.

We share personal data only with parties that have a defined operational role, never with unrelated commercial buyers.

• Payment processors: Handle deposit and withdrawal transactions and receive the minimum card, banking, or e-wallet details needed to complete each transfer.
• Identity verification providers: Confirm age and identity against government-issued documents during onboarding and periodic re-verification checks.
• Fraud detection services: Screen transaction patterns for signs of account takeover, bonus abuse, or money laundering.
• Regulators and law enforcement: Receive records only when compelled by a valid legal order or licensing obligation.

Each provider operates under a written data-processing agreement limiting use of your information to the stated purpose. We do not permit these providers to repurpose your data for their own marketing.

PIPEDA gives Canadian residents specific, enforceable rights over personal information held by a private organization like ours.

• Right of access: Request a copy of the personal information we hold about you, along with an explanation of how it has been used.
• Right of correction: Ask us to amend inaccurate or outdated entries, such as a changed address or updated contact number.
• Right to withdraw consent: Withdraw consent for optional processing, such as marketing communications, without affecting core account functions.
• Right to complain: File a complaint with the Office of the Privacy Commissioner of Canada if you believe we have mishandled your information.

Requests are verified against your account identity before any records are released, to prevent disclosure to the wrong person. We respond to access and correction requests within 30 days, consistent with PIPEDA's response timeline.

Retention periods are set by regulatory obligation rather than convenience. Identity documents and transaction records are held for a minimum of five years after account closure to satisfy FINTRAC and provincial licensing audits. Marketing preferences and cookie consent records are held for the duration of an active relationship and cleared within 24 months of your last visit if the account was never completed.

Support correspondence, including emails sent to our privacy team, is retained for three years to allow follow-up on unresolved requests. Once a retention period expires, records are deleted or irreversibly anonymized rather than archived indefinitely.

Data in transit between your browser and our servers is protected with TLS encryption. Stored identity documents and payment references are encrypted at rest, with access restricted to staff who need it for verification or support duties.

Internal access is logged, and administrative accounts require multi-factor authentication. Should a breach occur that creates a real risk of significant harm, we notify affected users and the Office of the Privacy Commissioner of Canada without unreasonable delay, consistent with PIPEDA's breach reporting obligations.

No system is immune to every threat, so we also require account holders to use unique passwords and to report suspicious activity, such as unrecognized login alerts, as soon as they appear.