Last updated: 1 OCTOBER 2025
At Digital Forge LTD (‘we’, ‘us’, or ‘our’), we take your privacy seriously. This document explains how and why we access, collect, store, use, and share (‘process’) your personal information whenever you use our services, including when you:
The provisions of this Policy are governed by Canadian privacy and marketing laws, including the Personal Information Protection and Electronic Documents Act, PIPEDA, substantially similar provincial private sector privacy statutes where applicable, and Québec’s Act to modernize legislative provisions as regards the protection of personal information (Law 25). This Policy further reflects the requirements of Canada’s Anti-Spam Legislation (CASL), the Competition Act and the Ad Standards Canada guidelines on testimonials and endorsements, as well as advertising and data collection requirements imposed by Google, Microsoft, and other applicable third-party platforms under their respective advertising terms and policies. We are committed to the protection of the personal information of individuals and to maintaining high standards of privacy. We implement practices, procedures, and systems designed to comply with Canadian privacy laws, including data minimization, purpose limitation, and appropriate security safeguards.
If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, contact us. All questions, requests, or complaints regarding this Policy must be submitted in writing by email to support@mapletop10casinos.com, or by post to 12 Agiou Therapontos, Morfeas Complex, Flat 2, Paphos, 8036, Cyprus.
The Services are intended solely for individuals who have reached the legal gambling age in their province or territory of residence in Canada and who are residents of Canada. Persons who have not reached the legal gambling age in their province or territory, or who are not residents of Canada, are not permitted to use or register for the Services. By using the Platform, you agree to this Privacy Policy, our Terms of Service and our Cookies Policy, and you acknowledge that you have read and understood these terms and expressly consent to the collection, handling, storage, use, and disclosure of your personal information in accordance with their terms.
We collect and process personal information from you directly and automatically when you interact with our services. The categories of information we collect are necessary for the provision of our services, security, and legal compliance. All personal information collected is processed in accordance with this Policy and applicable Canadian laws. You are responsible for ensuring that the personal information you provide to us is true, complete, and accurate, and you must notify us of any changes to such information.
You voluntarily provide us with personal information when you register on the Services, express an interest in our products and Services, participate in activities on the Services, or otherwise when you contact us.
(a) Personal Information Provided by You
The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
(b) Sensitive Information
We do not process sensitive personal information for marketing or profiling. Unless you provide such information to us yourself, we do not request, nor do we collect, any sensitive information about you, including details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, genetic data, or biometric identifiers. We also do not collect information about criminal convictions and offences. We prohibit the use of sensitive personal information for targeted advertising.
(c) Payment Data
If you choose to make purchases from us, we may collect data necessary to process your payment, such as your payment instrument number and the security code associated with your payment instrument. Payment credentials are processed by licensed payment processors. Full card details are not stored on our servers and are transmitted using encrypted channels to the processing bank or payment service provider.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity, such as your name or direct contact details, but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, approximate location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for internal analytics and reporting purposes. The information we collect includes:
(a) Log and Usage Data
Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings, and information about your activity in the Services, including date and time stamps, pages and files viewed, searches, and other actions such as features used, as well as device event information such as system activity, error reports, and hardware settings.
(b) Device Data
We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address or proxy server, device and application identification numbers, approximate location, browser type, hardware model, Internet service provider or mobile carrier, operating system, and system configuration information.
(c) Location Data
We may collect location data such as information about your device's location, which can be either precise or imprecise. The scope depends on the type and settings of the device you use to access the Services. We may infer approximate location from your IP address. You can opt out of location collection by refusing access or disabling location settings on your device. If you opt out, certain aspects of the Services may not function as intended.
We utilize Google’s reCAPTCHA service to protect our contact and submission forms from spam and abuse. This service may collect personal information, including your IP address and device characteristics, to determine if you are a human user. The information collected by reCAPTCHA is processed in accordance with Google’s privacy documentation. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Where consent is required under Canadian law or platform policies, we will obtain your consent through our consent interface before enabling non-essential Google services.
We process your personal information for specific and legitimate purposes, in compliance with PIPEDA principles of consent, purpose specification, and limiting collection and use. These purposes include the following:
All processing of personal information is conducted in accordance with PIPEDA, substantially similar provincial laws, and Law 25 in Québec, with internal controls for data minimization, accuracy, and purpose limitation. Personal information is not used for purposes unrelated to its original collection unless authorized by law or supported by valid consent.
We may disclose personal information to third parties strictly as required for the lawful operation of the Website, performance of contractual obligations, compliance with legal duties, or in accordance with your express instructions. Disclosure may occur to the following categories of recipients:
All third-party recipients of personal information are bound by legally enforceable obligations of confidentiality, data protection, and purpose limitation. Personal information may not be used by third parties for any independent or unauthorized purpose. We do not sell, rent, trade, or otherwise commercialise personal information to third parties for unrelated direct marketing or profiling. We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of assets, financing, or acquisition of all or a portion of our business.
Cross-border disclosures. The primary place of processing for Canada-directed services is Canada. Certain service providers may be located outside Canada, including in the European Union and the United States. Where personal information is transferred outside Canada, we ensure that the overseas recipient provides a level of protection comparable to that required under Canadian law or that appropriate safeguards are in place, including contractual measures. For residents of Québec, before communicating personal information outside Québec we conduct a privacy impact assessment in accordance with Law 25, we ensure that the information will receive adequate protection, and we enter into written agreements reflecting such safeguards. Where required, we will obtain your express consent before any such international transfer occurs.
The Website uses cookies and equivalent tracking technologies to facilitate secure access, optimize performance, assess user engagement, and support lawful advertising and promotional campaigns. Cookies are data files stored on your device that allow us to identify sessions, remember preferences, and deliver relevant content. Cookies are classified as strictly necessary, performance, analytics, or marketing. To enable certain functions during your visit to our Services, we use:
Deployment of non-essential tracking technologies is performed in accordance with Canadian privacy laws, CASL, the consent and data use requirements of Google Ads and Microsoft Ads, and our implementation of Google Consent Mode v2 using a Google-certified consent management platform. Non-essential cookies are not placed until you have provided affirmative consent through our cookie consent interface. You may change or withdraw consent at any time using the “Manage cookies” control that is available on the Website. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to measure conversions. We prohibit the collection or use of sensitive personal information for targeting.
The following technologies are used on the Website:
| Tool | Purpose | Privacy Policy Link |
|---|---|---|
| Google Analytics | Visitor behaviour analysis, session statistics | https://policies.google.com/privacy |
| Microsoft UET | Microsoft Ads tracking and campaign effectiveness | https://privacy.microsoft.com/privacystatement |
| Microsoft Clarity | Heatmaps, session recordings, user interface diagnostics | https://clarity.microsoft.com/terms |
| Affiliate Tracking | Attribution of referred users and affiliate payment validation | As per affiliate network policy |
| CookieYes CMP | Consent capture and enforcement under Google Consent Mode | https://www.cookieyes.com/privacy-policy/ |
You may manage your cookie preferences by responding to the cookie consent prompt upon first access, adjusting your browser settings to block or delete cookies, or using opt-out tools provided by relevant advertising vendors. Refusal of non-essential cookies will not restrict access to the Website, although certain personalised features may not function or be fully optimized. For further details, consult our Cookies Policy.
We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, or as required to comply with applicable law, audit requirements, investigations, or risk management processes. No purpose in this notice requires us to keep your personal information for longer than six months after termination or deactivation of the user account, unless a longer period is required or permitted by law. Retention durations are determined by reference to the following factors:
Upon account closure or termination, personal information will be retained only to the extent required for legal compliance, evidentiary integrity, fraud prevention, or security monitoring. Once such retention is no longer required, the data will be securely deleted or irreversibly anonymised. Backup data may be retained in encrypted storage environments for disaster recovery and compliance continuity. Access to archived data is restricted and monitored.
We implement and maintain appropriate technical and organisational security measures designed to protect the security, confidentiality, and integrity of personal information that we process, consistent with the safeguards principle under PIPEDA and Law 25. These security measures include:
No method of transmission over the Internet or method of electronic storage is fully secure. We do not guarantee absolute security. Transmission of personal information to and from our Services is at your own risk. You are responsible for maintaining the confidentiality of your login credentials and must notify us immediately of any suspected unauthorised access to your account. In the event of a breach of security safeguards that poses a real risk of significant harm, we will comply with breach reporting and notification obligations under PIPEDA and applicable provincial laws, including notifying the Office of the Privacy Commissioner of Canada, any applicable provincial authority, and affected individuals, and we will maintain records of all breaches.
We do not knowingly collect, solicit data from, or market to individuals who have not reached the legal gambling age in their province or territory of residence. Access to the Website and participation in any services offered by MapleTop10Casinos.com is limited to individuals who have reached the legal gambling age and who are Canadian residents. This restriction supports responsible gambling and compliance with Canadian consumer protection principles. We provide information only, we do not operate gambling services.
We may implement age affirmation or verification procedures when appropriate. If a user is identified or reasonably suspected to be under the legal gambling age:
If we learn that personal information from an ineligible individual has been collected, we will deactivate the account and take reasonable measures to delete such data. If you become aware of an ineligible individual using the Website or submitting personal information, notify us immediately at support@mapletop10casinos.com.
You are entitled to certain rights regarding your personal information. We acknowledge these rights and are bound by legal duty to assist you in their exercise.
Subject to verification and legal limitations, you may exercise the following rights under PIPEDA and applicable provincial laws, including Law 25 in Québec:
You may review or change information in your account or terminate your account by:
We may require you to verify your identity before acting on any request. All requests must be submitted in writing.
We will respond to valid requests within thirty calendar days unless an extension is legally permitted. We may decline a request where:
If you are dissatisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner of Canada or with your provincial privacy authority. Québec residents may contact the Commission d’accès à l’information.
Some web browsers and mobile applications allow users to transmit a “Do Not Track” signal to indicate a preference to disable cross-site tracking. At present, no legally binding or industry-wide standard for recognizing DNT signals exists. Accordingly, the Services do not respond to DNT signals at this time. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Policy. Users may exercise control over tracking through the following measures:
Refusing tracking cookies will not affect your ability to access the Services, but may limit the functionality or relevance of certain features.
We may update this Privacy Policy from time to time. The updated version will be indicated by the revised date at the top of this Privacy Policy. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. You should review this Privacy Policy periodically to remain informed about how we protect your information.
If you have questions or comments about this notice, or wish to submit a privacy-related enquiry, complaint, or data access request, you must do so in writing via email or post to one of the following addresses:
Postal Address:
Digital Forge LTD
12 Agiou Therapontos, Morfeas Complex, Flat 2
Paphos
8036
Cyprus
Email:
support@mapletop10casinos.com
All valid requests will be assessed in accordance with our obligations under PIPEDA and applicable provincial laws. We will respond within thirty calendar days or such additional time as may be permitted by law. We may decline to act on a request where:
We are committed to handling your inquiries with care and in accordance with our obligations. We provide information only, and we do not operate gambling services. For responsible gambling resources, consult provincial resources that apply to you, including ConnexOntario and other provincial supports referenced in our Gaming Policy.
You have the right to request access to the personal information we collect from you, to correct inaccuracies, or to delete your personal information, subject to legal limits. To submit a data subject request to review, update, or delete your personal information, send a written request to support@mapletop10casinos.com. We may request identity verification before processing your request and we will respond within the timelines required by law.