Privacy Statement

• Privacy Statement Summary
• Definitions
• Who we are
• Sources from which we collect Personal Information
• What Personal Information We Collect, and What We Use your Personal Information for
• Who we share your information with
• Meeting our Responsible Gambling Obligations
• Location that we may transfer your Personal Information to
• Security
• Cookies
• Marketing Communications and Your Choices
• Data Accuracy
• Your Rights
• Children’s Privacy
• How to contact us or our Privacy Officer
• Governing Law
• Changes to this Privacy Statement

Privacy Statement Summary

1. Purpose. This Privacy Statement (hereinafter, "the Privacy Statement" or “the Statement”) aims to inform you about how we gather, process, and protect your Personal Information when you use our services through our websites, mobile applications and Electronic Channels. We rely on your consent for processing your Personal Information, by reading and accepting this Privacy Statement you consent to us processing your Personal Information. However, please also note, that much of the information we collect about you is also required to meet our contractual, legal and regulatory obligations as an agent of the Alberta iGaming Corporation (“AiGC”) under the Operating Agreement executed between us and the AiGC.

You can always revisit and revise this Privacy Statement through the links available in the footer of our Operator Website site.

2. What Personal Information we collect. We collect Personal Information to provide our services, and any other information you provide to us. This may include: your name; contact information; information to establish your identity; date of birth; gender; information about your use of our services, such as transactional information, and your bets, winnings, losses, deposits and withdrawals; payment information; information in your communications with us (including call recordings, and survey responses and your social media interactions with us); user IDs or online identities; information about customer wellbeing; images and selfies; preferences and interests; whether you click or respond to our marketing; risk scores and profile classifications; and information regarding your active software applications and active processes while using the Operator Website.
3. How we collect information using technology. We may collect information using technology, including your IP Address, MAC address, device type, apps, location, log in details and information about how you use our mobile applications and websites. We use this to provide customer service, to meet our legal obligations, for identity verification, to present content in an effective manner, to improve our products and services, optimize business processes, ensure the integrity of our systems and to manage our Information Technology, undertake quality assurance, support management of our staff, analyze and improve the performance of webpages, services, or promotions, and to provide content that is relevant to you. We also use it to prevent or detect crime, fraud, or breaches of our terms; and to exercise or defend legal claims. We also use cookies to track who, how and when Players use the site in order to deliver relevant regional and Personal Information, and for compliance, security and analysis, such as reducing fraud.
4. What we do with the information we collect. We use the information we collect to provide our services, and as we describe in this Statement. This may include processing information to provide our products and services; meet contractual and regulatory obligations; provide Statement of changes to our service terms or policies; provide customer service and address questions or concerns; to meet legal obligations; to perform identity checks, age verification and ensure responsible gambling (including self-exclusion, or our choice to exclude you ); to communicate with you; for surveys, competitions and promotions; to improve our products and services; to understand the effectiveness of our advertising, and make it more relevant; build a profile of you, your preferences and your habits to better understand your interests; to prevent or detect crime, fraud or breaches of our terms; and to exercise or defend legal claims.
5. When we disclose Personal Information. We may disclose Personal Information to third parties that help us process it for the purposes we describe. We may also disclose it if we undergo a business transaction or where permitted or required by law. We will also disclose Personal Information to verify your identity, including to confirm your age, identity, and payment details.
6. Your choices. If you receive commercial email from us, you may unsubscribe from them. You may also change your marketing preferences under “Settings” in your account. Subject to limits in the law, you may access and correct your Personal Information, exercise certain other rights regarding how we use your Personal Information. If you withdraw consent to our processing of information necessary to provide our services, we may no longer be able to provide those services to you.

Definitions

Who are we

Electraworks Maple Limited (or “the Operator”) is a member of Entain Group of companies and this Statement explains what your Personal Information will be used for. The Operator is running the Operator Websites and providing the Operator Offerings as part of the open and regulated internet gaming (iGaming) market in Alberta conducted and managed by Alberta iGaming Corporation (“AiGC”) and is collecting, using, and disclosing POPA Data on behalf of, and as agent to, AiGC under the authority of Sections 4(a) and (c) POPA, the iGaming Alberta Act, the Gaming, Liquor and Cannabis Act (Alberta), and the Operating Agreement.

Where we use the term “we” or “us”, this includes the entity and Brands (https://entaingroup.com/about/business-overview/our-brands/) and other companies within the Entain group.

We are committed to protecting your Personal Information when you use our services through our website and mobile application and take the security of your information very seriously. We have strict security measures in place to protect your Personal Information which includes robust security procedures which are regularly tested and reviewed. If you have any concerns about the way in which we process or protect your Personal Information or would like to contact us about any aspect of this Statement, please get in touch through the contact details at the bottom of this statement.

This Privacy Statement should be read in conjunction with our cookies Statement, any Statements or terms located within the stores and our site terms of use / terms and conditions.

Sources from which we collect Personal Information

We will collect Personal Information about you from the following sources:

• When you register for an account with us;
• When you visit our website or our social media sites;
• Through surveys you complete;
• When you communicate with us (by email, mail, phone, in store or through chat, including chat rooms, or social media);
• When we undertake analysis of your interaction with us;
• From our other group companies for internal reasons, primarily for business and operational purposes;
• From public sources of information such as public records or social media postings;
• From cookies and tracking devices on your devices where you have permitted their use;
• From third parties’ databases to comply with our legal and regulatory obligations, where relevant;
• From online vendors and service providers such as financial and shared liquidity services, and from customer lists lawfully acquired from third-party vendors, where relevant.

What We Use your Personal Information for

Some of these decisions or actions we may take in managing your account or meeting our legal obligations may involve fully automated decisions. We will however always provide you with contact details where you can ask for a review of the decision or get further information from us.

Who we share your Personal Information with

We may need to share Personal Information with third-parties to ensure that we meet our legal requirements and obligations under the OA or where we need support in meeting your needs or provide our services. We may also share information with other organisations where it is permitted or required by Applicable Law and the AiGC.

These other parties are typically:

• Alberta iGaming Corporation as required by Alberta Appliable Law and our obligations under our Operating Agreement with Alberta iGaming Corporation;
• business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
• our affiliates and selected third parties, where you have expressly opted-out of receiving marketing from us / third parties, or self-excluded, in which case we may share suppression lists with our affiliates and selected third parties, to ensure you do not receive unsolicited marketing from us;
• members of the Entain Group and third-party suppliers and service providers for any of the purposes identified in the table above; third party suppliers and service providers to the extent they assist the Entain Group with its legal / regulatory obligations e.g. providers of services in respect of anti-money laundering, fraud, verification etc.;
• selected third parties so that they can contact you with details of the services that they provide, where you have expressly opted-in/consented to the disclosure of your Personal Information for these purposes;
• analytics and search engine providers that assist us in the improvement and optimization of our site and other selected third parties;
• other 3^rd party organisations who ask, encourage or collate feedback and any online views of your experiences with us to help us improve and optimize our services;
• banks, credit card companies and relevant agencies who may share with third parties for the purpose of investigating and safeguarding against underage, fraudulent, criminal or suspicious activity or safer gambling (or other activities we are bound by law, regulation or guidance to investigate and safeguard against) or if we have reason to believe that you have undertaken such activity; and
• our regulators, law enforcement or fraud prevention agencies, as well as our legal advisers, courts, applicable independent adjudication services and betting and casino or relevant integrity organisations and any other authorised bodies, for the purposes of investigating any actual or suspected criminal activity, maintaining standards of behaviour in our services and products or other regulatory or legal matters;
• when we check your identity when you first register with us, we share information with Credit Reference Agencies, such as TransUnion Canada (via Aristotle provider) and Equifax Canada (via GBGroup). This check will leave a footprint (“Soft-Mark”) on your credit record. Further to the Credit Reference Agencies mentioned above, we will also utilize the services of Jumio, who assist with the capture, verification, and extraction of details from Identity Documents and Proof of Address documents. Further information about how these agencies hold and use your information can be found on their relevant websites.

We may also disclose your personal information to third parties in the following circumstances, and where authorised by the AiGC:

• The Operator may share limited Gaming Data with another Provincial iGaming Agent strictly to the extent necessary to identify, link, or match a Player’s iGaming Account with their account held with that other Provincial iGaming Agent. Such sharing will only occur where the Operator has obtained the Player’s informed consent and is authorized to do so by the AiGC;
• In connection with fulfilling its obligations under the Operating Agreement relating to responsible gaming, the Operator may share limited Gaming Data with another Provincial iGaming Agent solely for responsible gaming purposes, and only to the extent strictly necessary. This sharing is subject to prior informed consent from the Player and must comply with AiGC requirements;
• In the event that we consider selling or buying any business or assets, in which case we will disclose your Personal Information to any prospective sellers or buyers of such business or assets;
• in the event of any insolvency situation (e.g. the administration or liquidation) of Entain Group plc, or a data controller or any of its group entities;
• if we, or substantially all of our assets, are acquired by a third party, in which case Personal Information held by us about Players will be one of the transferred assets;
• in order to enforce or apply our website terms of use;
• to protect the rights, property, or safety of us, our staff, Players, or others. This includes exchanging information with other companies and organisations (including withoutlimitation, the local police or other local law enforcement agencies if required by law) for the purposes of staff and Player safety, crime prevention, fraud protection and credit risk reduction;
• if we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime;
• Where you have self-excluded yourself from gambling, we may share this information with our regulators or other companies in our field where we believe it is important to support your exclusion.

We will not share it with other third-party organisations unless you have expressly opted-in/consented to the disclosure of your Personal Information for these purposes

Meeting our Responsible Gambling Obligations

• We take responsible gambling very seriously at Entain. Where legally allowed or required by the Operating Agreement, we may share your information across our brands in the Entain Group, and where required with other organisations to meet our responsible gambling commitments.
• We have an obligation to identify those at harm from gambling as early as we can and help them stop gambling by placing certain limits on accounts; this could include deposit limits, product limits, limiting the ability of an account to gamble certain products / times / periods In order to meet these obligations, we analyse customer’s transactions and evaluate behaviour or financial status across our products and brands, which may lead us to make decisions on your account(s).
• We are also constantly looking at innovative ways to help spot players who may be on a path to difficulties and identify them digitally. This means that we may use systems that identify customers (such as cookies on player’s devices or images sent by you) and internally we have developed systems to understand your play to better communicate any risks concerning your activity. We may also share or receive player information with other organisations who help evaluate risks or assess affordability by looking at how you may interact with other gambling operators or help individuals directly.

In all these cases, please be assured that we take our obligations very seriously, in helping customers gamble responsibly and in protecting your Personal Information. We will always ensure that we take the most appropriate measures and controls to protect your Personal Information.

How long we retain your Personal Information

We retain Personal Information only for as long as is necessary to fulfil the purposes for which it was collected, as identified in our Privacy Statement. Personal Information will be disposed of in accordance with our retention and disposition policy and schedule, which comply with our retention obligations under the Systems, Data, and Record Retention Policy and the OA, and where there are legal or regulatory requirements that mandate longer retention.

Where we process your Personal Information for marketing purposes or with your consent, we process the Personal Information until you ask us to stop and for a short period after this (to allow us to implement your request). We also keep a record of the fact that you have asked us not to send you direct marketing so that we can respect your request in future.

Locations that we may transfer your Personal Information

From time to time, service providers, members of the Entain Group and organisations with whom we work with, may be located outside Canada in countries that do not have the same standards of protection for Personal Information as Canada. Your Personal Information may be transferred to and processed in these countries, including the UK, Gibraltar, India, the EEA, Isle of Man and the USA. We will only transfer your Personal Information outside of Canada where appropriate safeguards have been put in place, such as contractual or other means to provide a comparable level of protection. However, Personal Information processed and stored in another country may be subject to disclosure or access requests by the governments, courts or law enforcement or regulatory agencies in that country according to its laws.

You may contact our Privacy Officer at dataprotectionofficer@entaingroup.com for more information on our policies and practices regarding service providers outside of Canada.

Security

We are committed to safeguarding your Personal Information when you use our services. We implement appropriate technical and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, alteration, or disclosure. These measures are regularly reviewed and updated to mitigate privacy and security risks and to ensure an appropriate level of protection in light of the nature of the data processed and the risks involved.

We maintain a structured incident and breach management program to ensure that any actual or suspected security incidents, including Personal Information Breaches, are identified, reported, and handled promptly and consistently. All incidents are initially managed by Security Operations Team, which monitors and responds to security events and escalates any incidents for further assessment. A formal risk evaluation is conducted to determine whether a breach has occurred, assess the potential impact on individuals, and identify appropriate mitigation measures. This process is documented in our internal incident and breach management records.

Where required, we will notify the AiGC and any other relevant authorities without undue delay and will cooperate fully with them. We will also assist the AiGC in its response to any Operator Data Incident, including by providing relevant information and support to mitigate potential adverse effects on individuals.

As a business, we have secure firewalled datacentres, certified encrypted webpages and we are ISO27001:2013 certified. We also take steps to ensure our subsidiaries, agents, affiliates and suppliers employ adequate levels of security across the business.

However, transmission of information over the internet is not completely secure. While we take reasonable steps to protect your Personal Information, we cannot guarantee the security of information transmitted to our site, and any such transmission is at your own risk. Once we have received your information, we apply strict security procedures and safeguards to prevent unauthorized access.

You also play an important role in keeping your Personal Information secure. Where you have been provided with, or have chosen, a password or other login credentials to access certain parts of our services, you are responsible for maintaining their confidentiality. You must not share your credentials with any third party and should ensure that your password is strong and unique to your account. We recommend using a combination of letters, numbers, and special characters, and updating your password regularly.

Please be aware that sharing account details, reusing passwords across multiple services, or failing to take basic security precautions may increase the risk of unauthorized access to your Personal Information. If you suspect that your account or credentials have been compromised, you should notify us immediately so that we can take appropriate steps to protect your account.

Cookies

We use cookies for various purposes including making your experience of our website better. For more information on our use of cookies, please see our Cookies Statement.

Marketing Communications and your choices

When we first collect your personal information, we’ll ask you to tell us how you would like to hear from us in the future about our other products and services as part of our Loyalty Program. It’ will normally be via a tick boxes on forms or web page and you can opt-out at any time.

What is 'Opting Out'?

The term opt-out refers to several methods by which individuals can avoid receiving unsolicited product or service information. This ability is usually associated with direct marketing campaigns such as telemarketing, e-mail marketing, or direct mail.

*Please consider that 'opting out' will not prevent any essential customer correspondence e.g. bet or account correspondence

How can I opt out of marketing correspondence?

If you do not wish to receive any offers, promotions, information on events and tailored communications based on your account activity, you can request to be made un-contactable by:

• Using the “unsubscribe” option provided in any marketing communication you receive
• changing your preferences on your account settings
• contacting our Customer Support department
• contacting the Privacy Officer.

What details do you require from me?

We might need as much of the following as possible, to ensure that you are not sent any further unwanted correspondence:

• Your full name
• Your account number
• How we contacted you, i.e. email, SMS, or post
• The mobile number or email/postal address we contacted you on
• The mobile number or email address that the message came from
• The date(s) and time(s) you were contacted
• A copy of the message you were sent (e.g. a screenshot or a forwarded email sent to our customer care team)

Data Accuracy

Keeping your Personal Information accurate and up to date is important. We are required to take reasonable steps to ensure that the Personal Information we hold is accurate, complete, and up to date. You also have an important role in helping us do this: you are responsible for ensuring that the information you provide to us (including information in your account profile) is accurate and current, and for promptly updating your details or notifying us if any of your Personal Information changes (for example, your name, contact details, address, or payment information).

Your rights under POPA, PIPA and ATIA

Children’s Privacy

Our websites and services are not intended for individuals under the age of 18, and we do not knowingly solicit or collect personal information from minors. If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete the information promptly. Parents or legal guardians who believe that a minor has provided us with personal information may contact us at any time to request its removal.

Contact Us or Our Privacy Officer

If you have any questions about this Statement or would like further information about your rights, please contact by one of the following means:

By email: dataprivacy@entaingroup.com.

Our Privacy Officer may also be contacted at the above address or by emailing dataprotectionofficer@entaingroup.com.

Questions, comments and requests regarding this Privacy Statement are welcomed.

Governing Law

This Privacy Statement shall be governed by and construed in accordance with the Privacy Laws and all Applicable Laws governing the collection, use, disclosure and retention of Personal Information in the Province of Alberta, including the Personal Information Protection Act (PIPA), Protection of Privacy Act (POPA) and Access to Information Act or Protection of Privacy Act (ATIA), and the applicable federal laws of Canada.

Changes to this Privacy Statement

Any changes to this Privacy Statement in the future will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes to Privacy Statement.

This Statement was last reviewed and updated: July 23rd 2026.