Privacy Policy — SpinQuest Canada
Last updated: April 14, 2025 | Applies to: spin-quest.ca
| What We Collect | Why We Collect It | How Long Kept |
|---|---|---|
| Email address | Account access, game history | Account lifetime + 90 days |
| Province of residence | Eligibility verification | Account lifetime |
| Government ID (KYC) | Redemption verification only | 7 years (AML requirement) |
| Session/IP data | Fraud prevention, security | 90 days |
| Payment information | Optional coin purchases | Not stored — processor holds |
Information We Collect
Account registration data
When you create a SpinQuest Canada account, we collect your name, email address, and province of residence. This information is used solely to maintain your account, verify your eligibility to participate in the Canadian sweepstakes programme, and deliver earned rewards to the correct account. We do not collect date of birth at registration — age verification is completed through the KYC process when you request a redemption.
How We Use Your Data
Your data is used to operate your SpinQuest Canada account, deliver bonus credits, process redemption requests, and send you material communications including KYC status updates and policy change notices. We do not use your data for behavioural advertising, third-party lead generation, or resale. We do not contact you with promotional emails more than 3 times per week and you may unsubscribe from all non-essential email communications at any point through the Account Settings page.
PIPEDA Compliance
Your rights under Canadian privacy law
The Personal Information Protection and Electronic Documents Act (PIPEDA) grants you the right to access all personal data held about you and to request correction of inaccurate information. Submit access requests via the contact page. We respond within 30 calendar days. All personal data is stored on servers with AES-256 encryption. Data transmitted between your browser and our servers uses TLS 1.3 or higher. We conduct annual penetration testing and quarterly access reviews of all systems holding personal data.
Third-Party Data Sharing
We share limited data with three categories of third parties only: (1) payment processors for coin purchase transactions — they receive only what is required for PCI-DSS compliant processing; (2) KYC verification partners for redemption document review — bound by the same PIPEDA obligations as spin-quest.ca directly; (3) aggregated, non-personally-identifiable session analytics with our hosting infrastructure provider for server optimization. No social media platform, advertising network, or data broker receives personally identifiable information from spin-quest.ca.
Cookie Policy
spin-quest.ca uses strictly necessary cookies for session management and account authentication. No third-party cookies, no advertising pixels, no cross-site tracking identifiers. The session cookie expires when your browser closes unless you select "Remember Me" at login, in which case it expires after 30 days. You may clear cookies at any time through your browser settings without losing account data — simply log back in.