Personal Data Processing and Scope
This Privacy Policy details how Trailblazer gathers, processes, stores, and safeguards personal data collected across our sports betting platform and mobile interfaces in Canada. In compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy standards, we collect user information strictly to maintain account integrity, verify identity under standard Know Your Customer (KYC) requirements, and deliver sports wagering services. You can review our corporate background on the about Trailblazer operations page. When registering an account or initiating transactions, we log details including full legal name, date of birth, residential address, email, phone number, and IP address to confirm eligibility and ensure adherence to Canadian age verification regulations.
Operating an online sportsbook requires continuous technical monitoring to guarantee fair wagering and satisfy regulatory location requirements. We employ device fingerprinting, session tracking, and IP-level geolocation technology to confirm that users access our markets from permitted jurisdictions. Technical data logged during each session includes browser user-agent strings, operating system versions, access timestamps, and hardware identifiers. We also use strictly necessary cookies to maintain secure sessions, functional cookies to store interface preferences like odds formats (decimal, American, or fractional), and analytical cookies to detect anomalous network traffic. You may manage non-essential cookie permissions via browser settings, though disabling essential session cookies may disrupt active bet placement or account authentication.
Trailblazer does not sell, rent, or trade customer information to external marketing brokers. Personal and transaction data is shared exclusively with authorized third-party service vendors necessary for sportsbook operations. These partners include licensed payment processors (such as Interac e-Transfer networks, electronic funds transfer providers, and major debit card clearinghouses), identity validation databases, and anti-fraud monitoring networks mandated under FINTRAC compliance guidelines. When you claim promotional offers outlined in our sportsbook promotion rules, wagering records are monitored by automated integrity systems to prevent duplicate account abuse and bonus arbitrage.
Under Canadian data privacy frameworks, registered users retain specific statutory rights regarding their personal information. You hold the right to request a digital copy of the personal data held in your account profile, submit corrections for outdated contact details, or request account closure and subsequent data anonymization where statutory retention laws allow. Note that standard financial transaction records and KYC documentation must be retained for a mandatory minimum period of five years following account closure to satisfy Canadian anti-money laundering regulations. For queries concerning data handling, self-exclusion records tied to our responsible gambling tools, or formal privacy requests, contact our designated Data Protection Officer at [email protected].
Categories of Personal Data Collected
Information Disclosed Directly by the Account Holder
In accordance with Canadian privacy standards under the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial gaming mandates, Trailblazer collects personal information explicitly provided during account setup, identity verification, and ongoing transactions. This data is collected strictly to establish identity, maintain security, and fulfill legal compliance duties.
- Registration Profile: When creating a profile, users submit their full legal name, date of birth, primary residential address, contact email address, and Canadian telephone number. This foundational record establishes eligibility under Canadian age verification thresholds (19+ in most provinces and territories; 18+ in Alberta, Manitoba, and Quebec).
- Know Your Customer (KYC) & AML Verification: To comply with federal Anti-Money Laundering (AML) directives monitored by FINTRAC, users must supply valid government-issued photo identification (such as a provincial driver's license or passport), alongside proof of residence (such as a utility statement or municipal tax assessment dated within the last 90 days).
- Payment and Transactional Details: Processing deposits and withdrawals requires transactional identifiers, including tokenized credit card data, Interac e-Transfer handles, and bank routing details for direct wire clearance. Sensitive credit card records are encrypted under Payment Card Industry Data Security Standard (PCI-DSS) Level 1 controls.
- Responsible Gaming & Communication Records: Any preferences configured through our responsible gambling tools—including custom deposit caps, session timeouts, and self-exclusion requests—are logged permanently to prevent unauthorized account reactivation. Customer service records across email tickets and live chat sessions are stored for quality assurance and dispute resolution.
Technical Data Captured Through Automated Systems
When interacting with the platform interface, automated diagnostic and telemetry systems record continuous technical data. This telemetry helps detect fraudulent account access, monitors platform performance, and fulfills provincial geofencing requirements that confirm all wagering occurs within permitted Canadian jurisdictions.
- Device Specifications & Network Identifiers: Automated servers log public IP addresses, hardware model identifiers, operating system versions, and browser user-agent strings across desktop sessions and dedicated sports betting apps. This data verifies session legitimacy and detects unauthorized proxy or VPN usage.
- Provincial Geolocation Telemetry: Regulatory standards require real-time location validation before any wager can be accepted. Systems collect precise Wi-Fi positioning data, mobile cell-tower triangulation, and GPS coordinates to verify physical location boundaries within Canada.
- Platform Activity & Betting Logs: System monitors track operational behavior across the online sportsbook platform, recording page load durations, odds format adjustments, bet slip submissions, market interactions, and transactional audit trails. These logs are stored in secure access-controlled databases to assist with regulatory compliance audits and operational integrity checks.
- Cookie Taxonomy & Local Storage: Essential session cookies maintain authenticated login sessions and interface preferences, expiring automatically upon logout. Analytical tags track aggregate usage patterns without storing unhashed identity files, while anti-fraud cookies detect rapid multi-accounting attempts across identical browser environments.
Legal Grounds for Data Processing
Trailblazer processes personal records strictly within defined statutory boundaries and standard data protection principles applicable across Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy standards. Every piece of information collected through our digital interfaces serves a specific, documented purpose backed by a recognized legal ground. We do not process personal data without an explicit operational or legal justification.
Contractual Necessity: The primary basis for handling your identifying and financial records is the execution and administration of the service agreement established when you register an account. Processing required under this category includes validating your account credentials, executing deposits and payouts via Interac, credit cards, or direct bank transfer, settling wagers on sports events, and maintaining accurate ledger records. Providing access to wagering markets, calculating odds balances, and delivering customer support through live desk ticketing also fall squarely under contractual execution.
Statutory and Regulatory Compliance: Online gaming operations in Canada operate under rigorous reporting and compliance frameworks. We process identity verifications, government-issued IDs, proof of residential address, and transaction histories to comply with the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) reporting standards, and provincial gaming commission rules. This includes mandatory identity checks to prevent underage registration (strictly 19+, or 18+ where provincially permitted), screening against politically exposed persons (PEP) databases, and cross-referencing national and provincial self-exclusion registries as part of our responsible gambling protocols.
Legitimate Business Interests: Where processing is necessary for operational integrity and risk control, we rely on legitimate business interests that do not override individual privacy rights. This covers network security monitoring, server load balancing, bot detection, latency reduction across our mobile and desktop web interfaces, and automated anti-fraud checks to safeguard wagering liquidity. It also extends to performance analytics across our dedicated sports betting apps, diagnostic crash logging, and internal auditing of betting market exposures.
Consent and Communication Preferences: Direct marketing notifications, tailored bonus updates, and optional analytics telemetry are processed exclusively upon your explicit opt-in consent. Players can adjust marketing permissions or revoke consent at any time via account privacy settings or through the unsubscribe link embedded in email digests. Revoking marketing consent does not affect the operation of core transactional services or legally mandated communications regarding account status, security alerts, or regulatory amendments.
Retention Schedules: Personal records and financial transaction ledgers are retained for the duration of your active account lifecycle plus a mandatory statutory period—typically five to seven years following account closure—as required by Canadian taxation and anti-money laundering regulations. Upon the expiration of statutory retention windows, records are either securely purged from production servers or fully anonymized for statistical reporting.
Data Sharing and Cross-Border Transfers
Third-Party Disclosures and Service Categories
Trailblazer does not sell, lease, or monetize personal identifiable information to external brokers. Data distribution is strictly restricted to vetted operational partners, regulatory bodies, and specialized service contractors essential for platform integrity and statutory compliance. Key categories of recipients include:
- Payment Intermediaries and Financial Networks: Transaction data is routed through payment processing gateways (including Interac e-Transfer providers, major card processing networks, and digital wallet processors) to facilitate deposits, process withdrawal requests, and audit balance reconciliations. For digital asset settlements across our crypto betting options, public blockchain wallet identifiers and hash records are validated via specialized settlement providers.
- Identity Verification and AML Screening Partners: In accordance with Canadian and international anti-money laundering (AML) standards and FINTRAC obligations, customer identification files, proof-of-address documents, and national registry records are verified against PEP (Politically Exposed Persons) databases and global sanctions registries via automated identity verification services.
- Live Feed and Platform Software Vendors: Sports odds engines, real-time data providers (including official sports data syndicates powering our live betting markets), and platform infrastructure hosts process pseudonymous account identifiers to register open tickets and settle market outcomes.
- Fraud Prevention and Risk Analytics: Device telemetry, IP connection attributes, and betting velocity metrics are shared with specialized fraud mitigation platforms to detect syndicate wagering, arbitrage exploitation, and unauthorized access attempts across active sportsbook bonus promotions.
- Regulatory Oversight and Responsible Gaming: Data may be disclosed to provincial gaming authorities, sports integrity monitoring bodies (such as the International Betting Integrity Association), and self-exclusion registers integrated with our responsible gambling resources to enforce operator-wide limits.
International Transfers and Data Protection Safeguards
While primary user records are hosted within secure Canadian data regions (such as AWS Canada Central in Montreal), operational redundancy, 24/7 infrastructure monitoring, and third-party software integration necessitate cross-border data transmissions to processing centers located in the United States, the United Kingdom, and the European Economic Area (EEA).
To ensure that Canadian consumer data maintains an equivalent standard of protection when processed across international borders, Trailblazer applies the following technical and legal safeguards:
- Contractual Guarantees and Standard Contractual Clauses (SCCs): All non-domestic data processors are bound by comprehensive Data Processing Agreements (DPAs) incorporating standard contractual provisions that align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and international privacy frameworks. These contracts legally prohibit vendors from utilizing player data for independent commercial objectives or unapproved sub-processing.
- End-to-End Cryptographic Protocols: Telemetry, payment payloads, and account credentials transferred over external public networks are encrypted using TLS 1.3 with AES-256-GCM cipher standards. Off-site replica archives and cross-region database backups are protected using segregated customer-managed encryption keys (AWS KMS / HSM modules).
- Vendor Compliance Audits: Third-party processors must maintain active SOC 2 Type II certifications, ISO/IEC 27001 accreditations, or equivalent independent security audit records, renewed on an annual basis to confirm infrastructural resilience.
- Extraterritorial Access Scrutiny: In the event that a foreign law enforcement agency or court issues a disclosure demand for data residing in an external server facility, our legal compliance team conducts an immediate statutory review to verify cross-border legal treaties (such as MLAT protocols) before any disclosure is evaluated.
Your Rights, Data Security, and Contact
Under Canadian privacy frameworks, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial equivalents, you hold clear statutory rights regarding the personal records collected during your use of Trailblazer. You have the right to submit a formal inquiry to review the exact personal information we maintain, verify the specific purposes for which it has been processed, and demand prompt rectification of any inaccurate, outdated, or incomplete account documentation.
- Right to Access: Request a comprehensive copy of all personal identifiers, device logs, and transaction histories tied to your profile.
- Right to Rectification: Request corrections or updates to inaccurate identity records, contact details, or verified payment information.
- Right to Erasure: Request the deletion of non-essential data records, provided the data is no longer required to satisfy active regulatory or statutory obligations.
- Right to Object and Restrict: Withdraw marketing consent at any time and restrict automated analytical profiling or performance tracking.
- Right to Portability: Receive your provided personal information in a structured, commonly used, and machine-readable electronic format.
To safeguard personal and financial records against unauthorized access, loss, or disclosure, technical controls include TLS 1.3 encryption with 256-bit cryptographic keys across all data transfers, multi-factor administrative authentication, and firewalled database clusters. Identity verification documents and wagering transaction logs are retained for a baseline duration of five to seven years following account termination in compliance with Canadian anti-money laundering (AML) and FINTRAC regulatory frameworks. Following the expiration of statutory retention mandates, all records are permanently erased using secure data sanitization standards.
To exercise any statutory data rights, report security concerns, or request privacy policy clarifications, contact our designated Data Protection Officer at [email protected]. All formal data requests receive an initial response within 48 business hours and complete resolution within the standard 30-day timeframe established under PIPEDA. Users also have the legal right to file complaints with the Office of the Privacy Commissioner of Canada (OPC). For information on account controls and player welfare, review our responsible gambling guide.
