We read through the relevant policy sections and tested the flow on web and mobile to see what’s actually asked of you in Canada. Use this as your “what matters” guide. If you need the exact legal text, open the full Privacy/Terms pages in your account.
Let’s dive into what the brand collects, why it’s needed (think KYC/AML and payments), how long it’s kept, who it’s shared with, and what you can do at any time (opt-outs, data requests, and helplines).
The Essentials at a Glance
Here’s the short version of how your data is handled before we dive into the full details:
- Who this concerns: Everyone accessing the online sportsbook and casino via 22bet.com (Canada view). The service is for 18+ only and requires a personal account in your legal name.
- What “personal data” includes: Anything that can identify you directly or indirectly: account info, verification documents, payment details, device/usage data, and your communications with support.
- Why data is collected: To provide the service (create your account, process deposits/withdrawals), meet legal obligations (anti-money laundering and age checks), protect the platform (fraud prevention, security), and send marketing updates with your permission.
What the Brand Collects (And Typical Examples)
To keep the site running safely and legally, 22Bet has to collect a few different types of information. Here’s what that usually includes in practice:
- Account details: name, date of birth, address, phone, email, chosen currency (CAD), and preferences.
- Verification (KYC): government ID, proof of address (recent utility bill/bank statement), and proof that you own the payment method you’re using (e.g., masked card, wallet profile, transfer receipt).
- Payments and transactions: deposits, withdrawals, method used, currency, timestamps, and receipts.
- Device/usage data: IP address, device/browser info, session logs, pages visited, and interaction with features (e.g., login attempts, bonus activation).
- Responsible gaming and security signals: limit settings, self-exclusion status, failed logins, and risk checks necessary to keep accounts safe.
- Support records: live chat transcripts, emails, and documents you upload in reply to a request.
Why Your Data Is Used (Lawful Bases in Practice)
In plain terms, your details are only used for specific, legally recognized reasons. Here’s how that plays out on 22Bet in Canada:
- To run your account and deliver services (contract): registrations, logins, game access, promotions you choose to activate.
- To process payments and withdrawals (contract/legal obligation): moving funds, confirming ownership of the payment method, and preventing chargebacks.
- To verify identity and comply with laws (legal obligation): AML/KYC checks, age verification, record-keeping.
- To protect the platform (legitimate interests/legal obligation): fraud prevention, account security, incident logging, and dispute handling.
- To communicate (legitimate interests/consent): service emails (receipts, policy updates) and, if you opt in, marketing emails or app pushes, you can stop at any time.
How Long Is Data Kept?
Records tied to AML/KYC and payments are retained for a legally mandated period (commonly several years after your last activity or account closure). Other data is kept only as long as needed for the purposes above, but later securely deleted or anonymized.
Who Your Data Is Shared With (And Why)
Some information has to be passed to trusted third parties so payments work, checks can be completed, and the site stays secure—typically, that means:
- Payment providers and banks: to process deposits/withdrawals and investigate payment issues.
- KYC/AML partners: to verify documents and run required compliance checks.
- Hosting and security vendors: to operate the website/app reliably and safely.
- Analytics and anti-fraud tools: to improve stability and detect abuse.
- Group/affiliates and professional advisors: where necessary for operations, audits, or legal advice.
- Regulators and law enforcement: when the law requires or for the establishment, exercise, or defence of legal claims.
The brand does not sell your personal data. Any marketing is either service-related (non-promotional) or only sent when you’ve opted in. You can opt out at any time.
Where Data Is Processed (International Transfers)
Your information may be stored or processed outside your province or country. When that happens, contractual and technical safeguards are used to protect your data to an appropriate standard (for example, encryption in transit/at rest and access controls).
Security in Practice
A mix of technical and organizational measures protects your account: encryption, strict access control on back-office systems, secure document upload, and continuous monitoring to catch suspicious activity.
For you, the fastest wins are simple: unique passwords, device lock/biometrics, and avoiding “Remember me” on shared devices. If verification is in progress, withdrawals may pause until checks are complete. This is normal and part of the security process.
Cookies and Similar Tech
Cookies power core features (stay logged in, keep the bet slip, load pages reliably) and help with analytics and marketing if you’ve agreed to it. You can manage cookies in your browser/app settings; blocking strictly necessary cookies may break parts of the site.
Your Choices and Rights
- Access and portability: Request a copy of your personal data in a common format.
- Rectification: Fix inaccuracies (name spelling, address, phone).
- Deletion: Request erasure where allowed by law (records required for AML/financial reporting may be exempt until the retention window ends).
- Restriction/objection: Limit certain processing or object where applicable.
- Marketing control: Opt out of promotional emails or app pushes at any time from your profile or the message footer.
- Self-exclusion and limits: Set financial/time limits or self-exclude directly in your account, separate from privacy rights.
To exercise rights or ask a privacy question, contact the support addresses provided in your account (general support, security/KYC, and the dedicated privacy inbox). Include your account email and a clear description of your request to speed things up.
Children’s Data
The service is not for minors. Accounts require age verification, and any underage account is closed with associated data handled per legal requirements.
Changes to This Summary
Privacy rules evolve. When the official policy changes, the site updates the text and, where required, prompts you in the account. Reread the live policy if something significant, such as a new data use or transfer location, is introduced.