burger icon

Privacy Policy

This Privacy Policy describes how stoney-nakoda-resort, operating exclusively via stoney-nakoda-resort-ca.com, collects, uses, discloses, and safeguards your personal information. The policy applies to all players, guests, and website visitors engaging with our services, digital platforms, and casino operations in Alberta, Canada. Effective date: 6 November 2025.

Who We Are

OBSERVE: stoney-nakoda-resort is operated under the legal ownership of the Stoney Nakoda First Nation (Bearspaw, Chiniki, and Wesley bands). Our principal place of business and legal address is 888 Nakoda Way, Mînî Thnî (Morley), Alberta, T0L 1N0, Canada. Operations are regulated by the Alberta Gaming, Liquor and Cannabis (AGLC) authority.

EXPAND: As a licensed land-based casino operator, stoney-nakoda-resort adheres to all applicable privacy and gaming laws in Alberta and Canada. Our compliance responsibilities are managed by our Data Protection Officer (DPO).

REFLECT: For privacy questions or to exercise your rights, contact our DPO:

  • Email: [email protected] (general), [email protected] (support)
  • Legal Address: 888 Nakoda Way, Mînî Thnî (Morley), Alberta, T0L 1N0, Canada
  • Phone: Not specified (please use email for fastest response)

What Personal Data We Collect

OBSERVE: stoney-nakoda-resort-ca.com collects personal data for operational, legal, and service reasons.

EXPAND: We process the following categories of data:

  • Personal Identification Data: Full name, date of birth, contact details (email, phone number), government-issued identification (where required by law).
  • Technical Data: IP address, device information (browser type, operating system), log files, and access records.
  • Payment Data: Payment card details (where applicable), transaction records, billing address, and other financial information for deposits or withdrawals.
  • Behavioral Data: Gaming and betting history, session activity, site navigation, clickstreams, and preferences.
  • Cookies and Tracking Technologies: Session and persistent cookies, analytics tools, third-party cookies (for advertising and analytics).

REFLECT: All data is collected directly from you or automatically via your use of stoney-nakoda-resort-ca.com, in line with Canadian privacy and gaming regulations.

Legal Basis for Processing

OBSERVE: Canadian privacy law (PIPEDA), Alberta regulations, and AGLC requirements determine lawful data processing.

  • User Consent: We obtain express or implied consent to collect, use, or disclose personal data, especially for optional services (e.g., marketing).
  • Contract Fulfillment: Processing is necessary for the performance of services you request, including establishing casino accounts, verifying identity (KYC), and facilitating transactions.
  • Legitimate Interests: We process data to protect our business and users (fraud prevention, IT security, analytics), provided such interests do not override your fundamental rights.
  • Legal Obligations: We process and retain certain data to comply with statutory duties under AGLC, anti-money laundering (AML) laws, and other regulatory requirements.

REFLECT: In all cases, stoney-nakoda-resort-ca.com ensures data processing is proportionate, transparent, and limited to necessary purposes under CA law.

Purpose of Processing

OBSERVE: Data is collected to operate our casino, meet legal duties, and provide a safe user experience.

  • Providing Casino Services: Account creation, identity verification, game access, compliance with AGLC license terms.
  • Improving Services: Monitoring site usage, analyzing performance, and enhancing features based on user feedback and behavioral data.
  • Marketing and Communication: Sending promotional offers, newsletters, and service notifications (with user consent).
  • Analytics and Research: Aggregated data analysis to understand market trends and user needs.
  • Fraud Prevention and Security: Detecting suspicious activity, preventing unauthorized access, and ensuring gambling integrity.

REFLECT: Each purpose is aligned with legitimate business interests and regulatory obligations, ensuring compliance with CA standards.

Disclosure & Sharing

OBSERVE: Data may be disclosed to third parties under defined circumstances.

  • Payment Partners: Banks and payment processors receive necessary payment data to facilitate deposits and withdrawals.
  • Service Providers: Technology, security, analytics, and hosting partners process data under strict confidentiality and security agreements.
  • Regulatory Authorities: Alberta Gaming, Liquor and Cannabis (AGLC) and other regulatory agencies may receive data for compliance, audit, and legal purposes.
  • Affiliates and Advertising Networks: With your consent, data may be shared with affiliates for marketing or advertising purposes.

REFLECT: stoney-nakoda-resort-ca.com never sells your personal data. All disclosures are limited to legitimate purposes, governed by contractual and statutory safeguards.

International Transfers

OBSERVE: stoney-nakoda-resort-ca.com is primarily based in Canada; however, some service providers may operate internationally.

  • Cross-Border Data Transfer: If data is transferred outside Canada (for example, to cloud hosting or analytics providers), we ensure equivalent protection through Standard Contractual Clauses (SCCs) or other legally recognized safeguards.
  • Privacy Shield/Other Mechanisms: Where data is processed in the United States or other jurisdictions, compliance with recognized frameworks or contractual obligations is enforced.

REFLECT: All international transfers are strictly limited and performed in compliance with Canadian, Alberta, and AGLC regulations to maintain adequate data protection.

Data Retention

OBSERVE: Retention policies reflect Canadian legal and regulatory standards.

  • Personal Data: Retained for the duration of your active account and for up to five (5) years following account closure, in compliance with AGLC and AML requirements.
  • Technical and Behavioral Data: Retained for as long as necessary to fulfill the purposes described, subject to legal and operational requirements.
  • Deletion Criteria: Data is deleted or anonymized upon expiry of retention periods, user request (where applicable), or when processing is no longer required.

REFLECT: Retention periods are regularly reviewed to ensure ongoing compliance, and procedures are in place for secure deletion.

Your Rights

OBSERVE: stoney-nakoda-resort-ca.com upholds your rights under Canadian (PIPEDA, Alberta PIPA) and international best practice standards.

  1. Access: You may request access to your personal data held by us at any time.
  2. Correction: You may request corrections or updates to inaccurate or incomplete data.
  3. Deletion: You may request deletion of your data, subject to legal retention requirements.
  4. Restriction: You may request restriction of processing in specific circumstances (e.g., contesting data accuracy).
  5. Objection: You may object to processing for certain purposes, such as direct marketing.
  6. Data Portability: You may request to receive your data in a structured, commonly used machine-readable format, where technically feasible.
  7. Withdrawal of Consent: You may withdraw your consent to marketing communications at any time, without affecting the lawfulness of processing before withdrawal.
  • How to Exercise Rights: Submit a request to [email protected] or [email protected].
  • Response Time: We will respond within thirty (30) days of receiving your request, free of charge, subject to verification of your identity and legal exceptions.

REFLECT: These procedures are aligned with applicable Canadian privacy legislation and international benchmarks. For unresolved complaints, you may contact the Office of the Information and Privacy Commissioner of Alberta.

Cookies & Tracking Technologies

OBSERVE: stoney-nakoda-resort-ca.com uses cookies and similar technologies to optimize user experience and site security.

  • Session Cookies: Temporarily stored, essential for secure login and navigation.
  • Persistent Cookies: Remain after closing your browser to remember preferences and improve user experience.
  • Third-Party Cookies: Used for analytics (e.g., traffic monitoring) and advertising (with your consent).

Managing Cookies: You may manage or disable cookies via your browser settings or, where available, through our internal privacy panel. Note that disabling cookies may impact certain functionalities.

REFLECT: All cookie use complies with CA and Alberta regulations, and no unnecessary cookies are set without your consent.

Data Security

OBSERVE: stoney-nakoda-resort-ca.com employs robust security measures to protect your data.

  • Encryption: All data in transit is secured using TLS 1.2 or higher. Sensitive data is encrypted at rest.
  • Authentication & Access Controls: Multi-factor authentication and strict access privileges protect user data from unauthorized access.
  • Security Audits: Regular external and internal audits are conducted to identify and remedy vulnerabilities.
  • Staff Training: Ongoing privacy and security training for all relevant staff.
  • Incident Response: Documented procedures for timely detection, reporting, and remediation of security incidents, including user notification protocols.
  • International Standards: Where applicable, data protection practices align with ISO 27001 and SOC 2 requirements.

REFLECT: These measures are continuously updated to address evolving threats and regulatory expectations in the CA gaming industry.

Complaints & Contacts

OBSERVE: stoney-nakoda-resort-ca.com is committed to addressing privacy concerns promptly and transparently.

  1. Contacting Us: For privacy-related inquiries or complaints, contact our DPO via [email protected] or [email protected]. Please provide sufficient detail to enable us to address your concern.
  2. Complaint Procedure: Upon receiving your complaint, we will acknowledge receipt within five (5) business days and provide a substantive response within thirty (30) days.
  3. Escalation: If you are dissatisfied with our response, you may escalate your complaint to:
    • Office of the Information and Privacy Commissioner of Alberta
    • Suite 2460, 801 6 Ave SW, Calgary, AB T2P 3W2, Canada
    • Phone: +1 888-878-4044
    • Website: https://oipc.ab.ca

REFLECT: All complaints are handled confidentially and in accordance with Canadian legal requirements.

Updates

OBSERVE: This Privacy Policy is reviewed and updated regularly to reflect changes in law, technology, or business practices.

  • Notification Procedures: Material changes will be communicated via email, prominent website banners, and account dashboard alerts at least thirty (30) days in advance.
  • User Options: You may object to material changes or close your account without penalty within the notice period.
  • Version Control: Last updated: 6 November 2025.
  • Changelog: All material changes will be summarized and made available on this page for transparency.

REFLECT: Continued use of stoney-nakoda-resort-ca.com after the effective date of changes constitutes your acceptance of the updated policy.