Golden Star Privacy Policy: How We Protect Your Data

The data controller responsible for processing personal information on the Golden Star platform is the legal entity operating the website under its applicable gaming licence. This entity determines the purposes and means by which user data is collected and processed, in full accordance with the obligations established under relevant data protection legislation.

During registration and general use of the platform, the following categories of personal and navigational data may be collected:

• Identification data: full name, date of birth, and government-issued identification documents;
• Contact details: email address, phone number, and residential address;
• Financial data: payment method information, transaction history, and billing details;
• Technical and navigation data: IP address, browser type, device identifiers, pages visited, and session duration;
• Account data: username, password credentials, and account preferences;
• Voluntarily submitted information: any personal details provided through the contact form or support correspondence.

All categories of data collected are limited to what is necessary for the purposes described in this document.

The platform uses cookies and similar tracking technologies to enhance navigation, retain user preferences, and analyse site performance. Cookies are small data files stored on the user’s device that allow the platform to recognise returning visitors and improve the overall experience. Both session cookies, which expire when the browser is closed, and persistent cookies, which remain on the device for a set period, may be used.

Users can manage their cookie preferences through the following methods:

1. Accessing the browser settings and navigating to the privacy or cookies section to review and disable specific cookies.
2. Using the cookie consent tool displayed upon first visit to the platform to select preferred categories of cookies.
3. Consulting the browser’s help documentation for guidance on blocking or deleting cookies stored on the device.
4. Opting out of analytics cookies through third-party opt-out tools where applicable.

Disabling certain cookies may affect the functionality of some features on the platform.

User data may be shared with third parties only where necessary and in accordance with applicable data protection requirements. The categories of third parties that may receive user information include:

• Payment processors and financial service providers that facilitate deposits and withdrawals;
• Regulatory and law enforcement authorities, where disclosure is required by law;
• Identity verification and anti-fraud service providers;
• Technical service providers supporting platform operations.

All third-party arrangements are governed by data processing agreements that impose appropriate safeguards. For international data transfers outside Canada, the platform ensures that equivalent protections are applied in accordance with applicable data protection frameworks.

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting obligations. Retention periods are determined by factors such as account activity, applicable legislation, and the nature of the data involved. Once the applicable retention period has expired, data is securely deleted or anonymised. For further details on data security or user rights related to retention, users may refer to the relevant sections of this policy.

The platform applies a range of technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Key security methods include:

• SSL/TLS encryption: all data transmitted between the user’s device and the platform is encrypted using industry-standard protocols;
• Access controls: internal access to personal data is restricted to authorised personnel on a need-to-know basis;
• Monitoring systems: platform infrastructure is subject to ongoing monitoring to detect and respond to potential security incidents;
• Data minimisation practices: only the information necessary for each specific purpose is collected and retained.

These measures are reviewed and updated regularly to reflect evolving security standards and applicable regulatory requirements.

Under applicable data protection law, users have the following rights regarding their personal information:

• Right of access: the right to request a copy of personal data held by the platform;
• Right to rectification: the right to have inaccurate or incomplete data corrected;
• Right to erasure: the right to request deletion of personal data where no longer necessary;
• Right to restriction: the right to limit how personal data is processed in certain circumstances;
• Right to portability: the right to receive personal data in a structured, commonly used format;
• Right to withdraw consent: the right to withdraw consent for processing at any time, without affecting prior processing.

To exercise any of these rights, users may contact the platform’s data protection team at the email address provided in the Contact section of this policy. Users also retain the right to file a complaint with the relevant data protection authority in their jurisdiction.

The platform is intended exclusively for users aged 19 years or older, in accordance with applicable Canadian gaming regulations. Golden Star does not knowingly collect personal data from individuals below this age. If it is discovered that personal information has been collected from a minor, the platform will take prompt steps to delete that data and close the associated account.

With the user’s prior consent, Golden Star may use collected contact information to send marketing communications, including promotional offers, platform updates, and relevant news. Users who no longer wish to receive such communications may opt out at any time by clicking the unsubscribe link included in every marketing email, or by contacting the platform’s support team directly with an opt-out request. Once an opt-out request is received and processed, no further marketing communications will be sent to that user. Opting out of marketing does not affect the delivery of transactional or account-related messages.

This Privacy Policy may be revised periodically to reflect changes in applicable law, platform operations, or data processing practices. Users will be notified of significant changes through an on-site notice or by email to the address associated with their account. Minor changes may be published directly to this page without separate notification. Continued use of the platform following the publication of any changes constitutes acceptance of the revised policy. Users are encouraged to review this document periodically to remain informed.

For any questions or concerns related to the handling of personal data on the platform, users may contact the data protection team by submitting a request through the official contact form available on the website or by emailing the support address listed in the platform’s Help section.

Users may reach out regarding the following topics:

• Data access requests and copies of personal information held;
• Requests for rectification, erasure, or restriction of personal data;
• Complaints relating to data processing practices;
• General privacy questions or policy clarifications.

If a concern remains unresolved after contacting the platform, users have the right to escalate the matter to the relevant data protection authority in their province or territory of residence.