Privacy Policy

This Privacy Policy explains what personal information 7 Sultans collects, why we need it, who we share it with and how long we keep it. It covers every page of this website, the player account, the contact form and any email exchange you have with our support team.

7 Sultans is an information site about online casino games for adults in Canada. We ask only for the details needed to open and protect an account, to check age and province, and to answer your questions. We do not sell personal information, and we do not rent or trade mailing lists.

For players in Canada we follow the fair information principles of the Personal Information Protection and Electronic Documents Act (PIPEDA), together with any provincial privacy law that applies to you, such as Quebec’s Law 25.

Short version: we keep the data you type into our forms on our own server, we run no analytics or advertising scripts, and you can ask to see, correct or delete your information at any time by writing to support@7sultanscasinoco.slonik.store.

The organisation responsible for personal information processed in connection with the casino service is the operator declared by the reference brand 7Sultans Casino:

These details are the operator and licensing information declared by the reference brand. Status: Claimed by the operator — check the regulator’s public register before you play. You can look up the authorization on the Kahnawà:ke Gaming Commission website. This website itself does not hold a gaming licence.

The information we handle falls into a small number of groups. Some of it you give us directly, some is created when you use your account, and some is collected by the operator at a later stage, such as identity checks and payments.

• Personal and contact data — first and last name, email address, date of birth and province or territory.
• Account data — a hashed password, your marketing preference, responsible gambling limits, breaks and reality-check settings.
• Identity documents — collected by the operator during verification, not through this site’s forms.
• Payment information and transaction history — collected and held by the operator and its payment providers at the cashier stage.
• Gaming activity — a log of the games you tried to open while signed in.
• Location and device data — the province you declare, your IP address and basic technical data your browser sends.
• Support messages — what you send through the contact form or by email.

What we collect and why

When you register, we ask for your first name, last name, email address, date of birth, province or territory and a password. You also confirm that you accept the Terms and Conditions and this policy, and you can choose whether to receive marketing emails.

Your date of birth is checked against the minimum age of 18, and your province is checked against the list of eligible territories. Registration is not available in Alberta and Ontario. If either check fails, the account is not created.

Account records are stored on our server in a structured JSON data store. Your password is never stored as typed: it is converted into a one-way hash with PHP’s password_hash function, so nobody, including our staff, can read it back. If you forget it, we email you a one-time reset link that expires after one hour.

Before real-money play or a withdrawal, a licensed operator must confirm who you are. This step is carried out by the operator at the verification stage, not through the forms on this website. You may be asked for a government-issued photo ID, proof of address such as a recent utility bill or bank statement, and in some cases proof that a payment method belongs to you.

Documents are used to confirm your identity and age, to prevent fraud and duplicate accounts, and to meet anti-money-laundering rules. The operator may use specialist verification providers to check documents electronically.

We will never ask you to send identity documents through the contact form or by ordinary email unless you are asked to do so as part of a verification process you started.

Deposits and withdrawals are handled by the operator and its payment providers in the cashier. Depending on the method you choose, this can include card details, Interac or online banking references, prepaid voucher numbers or bank account details. Full card numbers are processed by the payment provider and are not stored on this website.

The operator keeps a transaction history — deposits, withdrawals, amounts, dates and payment method — because it is needed to process payments, to resolve disputes and to meet anti-money-laundering record-keeping duties. You can read more about how payments work on our How It Works page.

Games cannot be played on this website. When you are signed in and open a game from the catalogue, we record which game you tried to open and when. Support uses this log to answer questions such as “why could I not open this game?”, and it is kept only within a limited, rolling list.

Where real-money play takes place with the operator, the operator records your game rounds, stakes and results. This data is used to settle bets, to calculate loyalty points, to spot signs of harmful play and to investigate complaints or suspected fraud.

Online casino play is only permitted in certain territories, so location matters. At registration you declare your province or territory, and we refuse registration from Alberta and Ontario. Our server also sees the IP address of each request, which reveals an approximate region.

The operator may use IP-based or other geolocation checks before allowing play or payments, to make sure games are offered only where the law allows. We do not use precise GPS location, and we do not track your movements.

Like any website, our server receives technical data with every request: IP address, browser type and version, operating system, language setting, the page requested and the time of the request. Contact form submissions are stored together with the IP address they came from, so we can limit repeated or automated messages.

We use this data for security, to keep the site working and to diagnose errors. We do not build device fingerprints or advertising profiles.

We use a small number of strictly necessary cookies: a session cookie that keeps you signed in, a cookie that remembers your answer to the age confirmation, and a cookie that remembers your cookie choice. None of them is used for advertising.

The full list, with what each cookie does and how long it lasts, is in our Cookie Policy. You can delete cookies in your browser at any time; if you delete the session cookie, you will simply be signed out.

At present this website runs no analytics scripts — no Google Analytics, no heatmaps, no session recording. We learn about site problems from server logs and from the messages you send us.

If we ever add an analytics tool, we will update this policy and the Cookie Policy first, and any non-essential analytics cookies will only be set after you agree to them in the cookie banner.

We send promotional emails only if you ticked the marketing box at registration or switched it on later in your account. Service messages, such as password reset emails and replies to your questions, are sent regardless, because they are part of running the account.

You can withdraw consent at any time in your account settings or by writing to support@7sultanscasinoco.slonik.store. If you take a break or self-exclude, marketing stops for the whole period, whatever your preference says. No marketing or advertising pixels currently run on this site.

Promotional messages are never sent to accounts on a cooling-off break or in self-exclusion.

Some parts of the casino service rely on other companies. The main categories are:

• Hosting — the provider that runs the server where this site and its data store live.
• Email delivery — used to send password reset links and replies from support.
• Game providers — the studios whose games appear in the catalogue; when you play with the operator, they receive the minimum data needed to run game rounds.
• Payment and verification providers — used by the operator for the cashier and identity checks.

Each provider may use the data only to perform its service for us or for the operator, and must protect it. Links to outside websites, such as support organisations on our Responsible Gambling page, are governed by those websites’ own policies.

We share personal information only when there is a clear reason:

• with the operator, Baytree Interactive Ltd, and the service providers listed above, to run your account and the casino service;
• with the Kahnawà:ke Gaming Commission or other authorities, when the law or the terms of the licence require it;
• with law enforcement or financial intelligence units, when we must report suspected fraud or money laundering;
• with professional advisers, such as auditors and lawyers, under a duty of confidentiality;
• with a buyer or successor if the business is reorganised, under the same privacy commitments.

We do not sell personal information and we do not share it with advertisers.

The declared operator is registered in Guernsey, and some service providers may store or process data outside Canada. When information leaves Canada, it is subject to the laws of the country where it is held, and authorities there may be able to access it under those laws.

Before transferring data, we and the operator use contracts and security measures that give a level of protection comparable to what you would expect in Canada. You can ask us for more detail about where your data is held by writing to support@7sultanscasinoco.slonik.store.

We keep personal information only for as long as we need it for the purposes in this policy:

• Account data — while your account is open, and afterwards for as long as required by law or needed to handle a dispute.
• Identity documents and transaction history — for as long as required by law, for example under anti-money-laundering record-keeping rules, which can continue for several years after an account is closed.
• Self-exclusion records — for the full exclusion period and as long as required afterwards, so that the exclusion can be honoured.
• Support messages — for as long as needed to resolve your request and any follow-up.
• Password reset links — valid for one hour and unusable after that or once spent.

When data is no longer needed, it is deleted or anonymised so it can no longer be linked to you.

Under PIPEDA and applicable provincial law, you have the right to:

• access the personal information we hold about you and learn how it has been used and shared;
• correct information that is inaccurate or incomplete;
• withdraw consent to optional processing, such as marketing, at any time;
• ask for deletion of information we no longer need, subject to legal retention duties;
• complain about how your information has been handled.

Residents of Quebec also benefit from the rights set out in Law 25, including the right to be informed about automated decisions and to data portability where it applies. Many details can be updated yourself in your account; for everything else, write to support@7sultanscasinoco.slonik.store. We may ask you to confirm your identity before acting on a request, and we aim to reply within the time limits set by law.

If you are not satisfied with our answer, you can file a complaint with the Office of the Privacy Commissioner of Canada, or with your provincial privacy commissioner where one applies.

We use safeguards that match the sensitivity of the information:

• passwords are stored only as one-way hashes created with password_hash;
• forms that change data are protected against cross-site request forgery (CSRF) with per-session tokens;
• password reset links are single-use and expire after one hour;
• the contact form limits the number of messages from one connection per hour;
• access to the data store is restricted to staff who need it for their work.

No system is completely secure, so please use a unique password and sign out on shared devices. If we learn of a breach that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

Questions, requests and complaints about privacy can be sent to:

Please mark privacy requests clearly so they reach the right person, and include the email address linked to your account.

We may update this policy when the site, the law or the way we handle data changes. The date at the top of the page shows the latest version. If a change significantly affects how your information is used, we will tell you by email or with a notice when you sign in before it takes effect.

Where a change needs your consent, for example a new kind of marketing or analytics, we will ask for it rather than assume it.