Ruby Fortune Privacy Policy with Account Security and Data Use

Personal Data Ruby Fortune Collects

At Ruby Fortune, privacy begins with transparency. We explain how personal information is collected, used, protected, and shared in Canada.

When you create or use an account, we may collect identifying and account-related details, including your name, email address, date of birth, residential address, payment details, and contact information.

We also collect technical and activity data needed to operate the service safely. This may include your IP address, browser type, device information, usage patterns, gameplay activity, and connection details.

Some information is provided directly during registration, payments, support requests, or account updates. Other data is collected automatically while you use our website, mobile features, or casino services.

In some cases, identity checks require supporting documents. Government-issued identification may be requested to verify age, identity, location, and account ownership where required.

For players in Canada, this information helps us verify identity, process transactions, prevent fraud, and meet gaming compliance requirements. It also supports safer gambling tools, customer support, and account management.

We may also use aggregated or de-identified information for analysis and service improvement. When data can no longer identify you on its own, it may be used to assess performance, trends, and product quality.

How Ruby Fortune Uses and Secures Data

We use personal data to provide and improve the service. This includes running your account, delivering requested features, monitoring security, and responding to support requests.

Account information enables access to registered features and helps maintain your preferences. It also supports communication about service updates, account changes, security notices, and essential operational messages.

Payment and transaction data supports deposits, withdrawals, purchases, and related account activity. Sensitive card handling is processed through PCI-DSS compliant payment gateways with tokenization controls in place.

Data also helps us detect unusual behaviour before it becomes a larger issue. Fraud monitoring, identity verification, and security reviews support a safer environment across the platform.

Protection measures include secure servers, restricted staff access, privacy training, backup systems, and layered technical controls. Data transmissions are protected with 128-bit SSL encryption between your device and our servers.

Additional safeguards may include firewalls, intrusion detection systems, audits, and access controls. These measures are designed to reduce risk, limit unauthorized access, and support continuity if systems are disrupted.

For Ontario activity in Canada, data handling may also operate under FIPPA, PIPEDA, and Ontario Regulation 722/21. Ontario operations are linked to AGCO authorization under licence number OPIG1237898, issued 23 June 2022.

No online system can guarantee absolute security at all times. For that reason, we also encourage strong passwords and two-factor authentication where available.

When Ruby Fortune Shares Player Information

We may share information when necessary to operate the service properly. This usually involves trusted providers that support payments, identity checks, technical infrastructure, customer support, and responsible gambling tools.

These providers are expected to use the information only for the services they perform. We apply controls to help ensure third parties maintain appropriate privacy and security standards when handling player information.

We may also disclose information when required by law, regulation, or official request. This can include regulators, lawful authorities, and agencies involved in fraud, money laundering, or other prohibited conduct.

Information is not sold, rented, or traded to marketing companies or unrelated businesses for commercial gain. That remains a core part of how player privacy is handled in Canada.

If business ownership, structure, or assets change, account data may be transferred as part of that process. Where required, notice of material privacy changes is provided through the service or other appropriate channels.

Personal information may also be transferred across jurisdictions where operational support is provided. In those cases, we use controls intended to keep protection aligned with applicable privacy standards.

Marketing communications remain subject to player choice. You can withdraw marketing consent through account preferences or by using the unsubscribe option in promotional emails.

Service messages may still be sent when needed to support account use, security, or legal obligations. These differ from promotional offers because they relate to the operation of your account.

Privacy Rights and Cookie Controls

You keep important rights over your personal information with us in Canada. These rights can include access, correction, deletion requests, objection in some situations, and data portability.

You can request a copy of the personal data we hold about you. You can also ask us to correct inaccurate details or update information that has changed over time.

Deletion requests are possible, but they are not always immediate or absolute. Some records must be retained for legal, regulatory, fraud prevention, or dispute-handling purposes.

If you close your account, certain information may still be retained for the period required by law. In Ontario materials, some retention periods are listed as at least 3 years, at least 5 years, or at least 6 years depending on the data type.

You may also request your voluntarily provided personal information in a structured, machine-readable format. Written requests may require identity verification before we release, correct, or delete account-related records.

If you believe your privacy rights were not respected, you may raise the issue with support first. You may also escalate concerns to the relevant privacy commissioner or gaming authority where appropriate.

Cookies and similar technologies are part of how the service functions each day. They help maintain sessions, remember preferences, support authentication, measure performance, and improve loading behaviour.

We use both session and persistent cookies for different purposes. Session cookies end when the browser closes, while persistent cookies remain until they expire or are removed.

Cookies do not typically identify you by themselves, although they can be linked with information already stored about your account. Sensitive personal information such as passwords is not typically stored in cookies.

You can manage or clear cookies through your browser settings at any time. If you disable them, some features may stop working properly, and you may need to sign in again.

Steps to Manage Your Privacy

• Review account details regularly and keep contact information up to date.
• Use available deposit limits and communication controls if needed.
• Clear cookies if you want to reset stored site preferences.
• Contact support if you need help with access, correction, or deletion requests.

If you want a closer look at how your data and account security are handled, you can sign in to review your settings and preferences.