Privacy

Spreee Privacy Policy

A clear, plain English summary of what data Spreee collects, why, how it is protected and the rights you have as a Canadian user.

Spreee takes privacy seriously and the platform is built to collect only the data we actually need to run a safe, compliant social casino. This Privacy Policy is the full, plain English statement of what we collect, why we collect it, how we protect it, when we share it with third parties and what rights you have as a Canadian user under the Personal Information Protection and Electronic Documents Act, the equivalent provincial laws and the standard set by the Office of the Privacy Commissioner of Canada.

Wherever this policy gets technical, a plain English summary is included next to the formal language. If anything in this document is unclear or if you want to exercise any of the rights described below, the Spreee privacy team is reachable through the contact details at the end of this page and commits to a written response inside one business day.

What personal data Spreee collects

When you create a Spreee account we collect your registered email address, your chosen username, your date of birth, your province of residence and a salted hash of your password. We do not collect your real name, your home address, your phone number or any government ID at the registration step. If you later choose to buy a Gold Coin pack in the Shop, the payment processor collects the payment details directly and returns only a token to Spreee, which means we never see your full card number.

For sweepstakes prize redemptions above the threshold set by Canadian law, the Spreee compliance team collects additional identity verification documents including a government issued photo ID and proof of address. These documents are reviewed by a trained agent, held only for the period required by anti money laundering law and then securely deleted in line with our data retention schedule.

Why each piece of data is collected

Email address is used for account verification, transactional notifications about your account and, if you opted in, marketing communication that you can unsubscribe from at any time. Date of birth is used to confirm you are of legal age in your province of residence. Province of residence determines which Spreee features are available to you and which Spreee Coin sweepstakes you are eligible for. Username is used to identify you in tournaments and multiplayer games.

Payment tokens are used to process Shop transactions and to enable repeat purchases without re entering your card details. Identity verification documents are used solely for sweepstakes prize redemption compliance under Canadian anti money laundering law. We do not use any of this data for behavioural advertising, we do not sell any of it to third parties and we do not share it with any other gaming operator.

How Spreee protects your data

Every page on Spreee is served over 256 bit SSL. Every account password is salted and hashed using industry standard algorithms. Two factor authentication is available on every account and strongly encouraged for any account with a meaningful Spreee Coin balance. Payment data is tokenised and never stored on Spreee servers. Identity verification documents are stored on encrypted infrastructure that is segregated from the general application database and accessible only to the compliance team for the specific purposes set out above.

Access to personal data inside the Spreee team is limited to the smallest possible group of employees on a need to know basis. Every access event is logged, audited monthly and reported to the privacy lead. Spreee runs annual third party security audits and the high level results are made available to any user who requests them. In the event of any data incident, the privacy team commits to notifying affected users inside the seventy two hour window set by Canadian and EU best practice.

When Spreee shares data with third parties

Spreee shares personal data with third parties only for specific, documented operational reasons. Payment processors receive the tokenised payment data needed to process Shop transactions. Email service providers receive the email address needed to deliver account notifications and marketing email. Identity verification providers receive identity documents needed for sweepstakes prize redemption compliance. Hosting and infrastructure providers process data under data processing agreements that meet Canadian privacy standards.

Spreee does not sell personal data to anyone, ever. Spreee does not share data with advertising networks, behavioural advertising platforms or any other operator of any gaming platform. Spreee does not share data with marketing analytics firms beyond the aggregate non identifying data needed to measure platform usage. Any future change to these practices would be communicated by email to every affected user at least thirty days in advance.

Your privacy rights under Canadian law

Under PIPEDA and the equivalent provincial laws you have the right to access the personal data Spreee holds about you, the right to request correction of any inaccurate data, the right to withdraw consent to optional uses like marketing email and the right to request deletion of personal data subject to the legal retention requirements explained in our data retention schedule. All of these rights can be exercised by contacting the Spreee privacy team through the contact details at the end of this page.

The privacy team commits to a written acknowledgment of every request inside one business day and a substantive response inside thirty days, which is the timeline set by PIPEDA. If you are not satisfied with a response from the Spreee privacy team you have the right to complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or to the equivalent provincial privacy commissioner for your province.

Cookies, tracking and analytics

Spreee uses a minimal set of cookies for essential functionality, including the cookie that keeps you signed in and the cookie that remembers your responsible gaming settings. We use a small set of first party analytics cookies to measure aggregate platform usage and identify performance issues. We do not use third party advertising cookies, retargeting pixels or cross site tracking. The Cookie Policy explains every cookie in detail and the cookie consent banner lets you opt in or out of every non essential cookie individually.

You can manage cookie preferences at any time from the Privacy and Settings panel of your account or from the link at the bottom of every page. Disabling non essential cookies has no effect on your ability to play any game on the platform. Disabling essential cookies will prevent you from being able to sign in and is not recommended.

Common Questions, Real Answers

What personal data does Spreee actually collect at sign up?

At the sign up step Spreee collects your registered email address, your chosen username, your date of birth, your province of residence and a salted hash of your password. We do not collect your real name, your home address, your phone number or any government ID at registration. Additional identity verification documents are only collected later if and when you request a Spreee Coin prize redemption above the threshold set by Canadian anti money laundering law.

Does Spreee ever sell my data to third parties?

No. Spreee does not sell personal data to anyone, under any circumstance. We do not share data with advertising networks, retargeting platforms or other gaming operators. Personal data is only shared with the specific operational providers needed to run the platform, including payment processors for Shop transactions, email service providers for account notifications and identity verification providers for sweepstakes redemption compliance. Each of these is governed by a data processing agreement that meets Canadian privacy standards.

How do I access or delete the data Spreee holds about me?

Contact the Spreee privacy team through the contact details at the bottom of this page, by live chat or by email. Under PIPEDA you have the right to access your personal data, correct it, withdraw consent to optional uses and request deletion subject to the legal retention requirements explained in our data retention schedule. The privacy team commits to a written acknowledgment of every request inside one business day and a substantive response inside thirty days.

Is my payment information stored on Spreee servers?

No. When you buy a Gold Coin pack in the optional Shop the payment processor collects the payment details directly and returns only a token to Spreee. The token is used to process the transaction and to enable repeat purchases without re entering your card details, but Spreee never sees, stores or has access to your full card number. The payment processor is PCI compliant and bound by a data processing agreement that prohibits any use of your data beyond the transaction itself.