THE SIX GAMING LIMITED

The Six Gaming Limited includes the following casino website: on.amazonslots.ca (Amazon Slots)

The Six Gaming Limited, an Alderney registered company with registered address at La Corvee House, La Corvee Alderney GY9 3TQ, Guernsey. The Six Gaming Limited is authorized and licensed by the Alcohol and Gaming Commission of Ontario (AGCO). License Number OPIG1229310.

Which are the owners and operators of the casino websites.

WHAT INFORMATION WE COLLECT?

The Six Gaming as an operator under authority from iGO is collecting, processing, and disclosing personal information under FIPPA, Ontario Regulation 722/21 made under the Alcohol and Gaming Commission of Ontario Act, and the Operator Agreement with iGO. The collection, processing and disclosure of personal information is governed to FIPPA, PIPEDA and Ontario Regulation 722/21.

Under FIPPA, "personal information" means recorded information about an identifiable individual. In general, The Six Gaming collects the following types of personal information, although different types of information may be collected depending on the purpose of collection or if the collection is required by law:

We collect two types of information from our Users:

Personal Information

The first type of information is information that identifies or may reasonably identify an individual with reasonable effort ("Personal Information"). Personal Information which is being gathered may consist of the following:

• Registration details: When you open an account and register to use the Services, you will be asked to provide us certain details about yourself, such as: first and last name, email address, gender, birth data, physical address, ID number, phone number, occupation, etc.
• Governmental-issued ID: In certain instances, you will be required to provide a copy of a governmental-issued ID, for identity verification process. Please note that this information is required for certain features of our Services.
• Payment information: In order for you to enjoy all of the functions of the Services (e.g. place bets, perform purchases, play in tournaments, etc.), payment information will be collected from you, such as your credit card number and bank account details.
• Voluntary information: We also collect information which you provide us voluntarily. For example, when you respond to communications from us, communicate with us via email or share additional information about yourself through your use of the Services, such as on the chat feature and in games.
• Device information: We collect specific types of connection details and information with regard to your device, software or hardware that may identify you, such as: device's unique identifiers (e.g. UDID, IMEI, MAC address), browser fingerprinting, IP address and geo-location data.
• Telephone calls: We record or monitor telephone calls for customer support, training and/or security purposes.
• Social networks: When you register through your social network account (such as your Facebook account), to use the Services or connect your player account with such account, we will have access to basic information from your social network account, such as your name, birthdate, profile picture and friends' list, as well as information you made publicly available on such account.
• Information we collect from third parties: We collect Personal Information from third party service providers, such as information about your credit history from credit agencies and other financial information, which is relevant to the provision of the Services, as well as information which is gathered in order to verify your identity and prevent fraudulent or illegal activity.
• Location tracking: We collect information on location to comply with legal obligation.

Non-personal information

The second type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via the User's use of the Services ("Non-Personal Information").

Non-Personal Information which is being collected consists of technical information and aggregated usage information, and may contain, among other things, the User's operating system, type of browser, screen resolution, browser and keyboard language, the User's 'click-stream' and activities on the Services, the period of time the User visited the Services and related time stamps, etc.

For avoidance of doubt, any Non-personal Information connected or linked to any Personal Information shall be deemed as Personal Information as long as such connection or linkage exists.

Types of Non-personal Information we collect from or about you:

• Technical information: In order to enhance the functionality of the Services and to provide you with a better user experience, we collect technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time and the domain name of the website from which you linked to the Services; etc.).
• Gameplay information: We record game play information including, amongst other things, your deposits, bets, bonuses, game session duration and your high scores. We may also share and publish such information through any of our Platforms.
• Device and connection information: If you download the Software to your device, we may collect information from the particular device you are using, for security and fraud detection and prevention purposes. For example, we may gather information with regard to other software which is running simultaneously with the Software for detecting if you are using software which is associated with fraudulent activity (e.g. robots, malware, etc.) or checking if the connection you are using is via a VPN or proxy.
• Analytics information: We collect information about your use of the Services, such as applications' usage, log files, user activity (e.g. pages viewed, the amount of time spent on particular pages, online browsing, clicks, actions, etc.), time stamps, alerts, etc. This information is collected for amongst other things troubleshooting errors and bugs as well as for research and analytics purposes about your use of the Services.
• Anonymous information: We may anonymize or de-identify the information collected by the Services or via other means so that the information cannot, on its own, personally identify you. Our use and disclosure of such aggregated or de-identified information is not subject to any restrictions under this Privacy Policy, and we may disclose it to others without limitation and for any purpose, such as for advertising or marketing purposes.

MINORS

The Services are not designed or directed to persons under the age of 19 or persons under the age of legal consent with respect to the use of the Services of any jurisdiction, whichever is higher ("Legally of Age"). If you are not Legally of Age, you should not download or use the Services nor provide any Personal Information to us.

We reserve the right to access and verify any Personal Information collected from you. In the event that we become aware that a user who is not Legally of Age has shared any information, we may discard such information. If you have any reason to believe that a minor has shared any information with us, please contact us.

HOW WE USE THE COLLECTED INFORMATION?

We use your Personal Information for the purposes listed below:

• To set up, manage and update your account;
• To provide and operate the Services (such as for betting and payment processing);
• To communicate with you and to keep you informed of our latest updates to our Services and special offers;
• To market our Services (see more below under "Marketing"), as well as to serve you advertisements, including behavioral advertising;
• To conduct analytics, statistical and research purposes, in order to improve and customize the Services to your needs and interests (such as by compiling aggregated reports about the usage of certain features of our Services);
• For Customer Relationship Management purposes, and to support and troubleshoot the Services and to respond to your queries;
• To enable us to further develop, customize and improve the Services based on Users' common preferences and uses;
• To provide you with a responsible gaming environment;
• To communicate with your and to process any of your requests to exercise your User Rights;
• To identify and authenticate your access to certain features of the Services;
• To detect and prevent fraudulent and illegal activity or any other type of activity that may jeopardize or negatively affect the integrity of the Services, including by identifying risks associated with your activity on our Services;
• To investigate violations of our policies and User Agreement as well as enforce our policies and the User Agreement;
• To investigate and resolve disputes in connection with your use of the Services; and
• As required by law or regulation (such as Know Your Customer ("KYC") and Anti-Money Laundering regulatory requirements), or as required by other governmental authorities, or to comply with a subpoena or similar legal process or respond to a government request.

MARKETING

The Group will use your Personal Information, such as your name, home address, email address, telephone number etc., ourselves or by using our third party subcontractors for the purpose of providing you with promotional materials, concerning the Services as well as products, services, websites and applications which relate to: (i) other companies within the Group; (ii) White Label Brands; or (iii) Group's business partners and affiliates (collectively: "Marketing Affiliates"), which we believe may interest you.

We may also share and disclose Personal Information with our Marketing Affiliates for the purpose of providing you different marketing offers, which we, or our Marketing Affiliates, believe are relevant for you. Our Marketing Affiliates may use this Personal Information for different marketing techniques, such as direct email, post, SMS and telephone marketing purposes.

You may update your marketing preferences at any time through Customer Services (where available). When you choose to download Software pursuant to our Services, notification software may also be downloaded onto your device. This allows us to send notifications to you about our Services directly to your device, for example to inform you about new features, updates, service communications, offers and promotions.

By downloading such Software, You consent to receiving notifications. If You would prefer not to receive these notifications, You will need to manually uninstall the notification software from your device (for example by clicking the "what's this" link on a notification you receive and following the 'how to remove' instructions", or by following the applicable "Settings" and "Notification Centre" uninstall instructions on Your Access Device).

You may at any time decline receiving further marketing offers from us or from our business partners and marketing affiliates by contacting via Live Chat facility. Please note that even if you unsubscribe from our marketing mailing list, we may continue to send you service-related updates and notifications.

WITH WHOM WE SHARE INFORMATION?

We do not rent, sell, or share your Personal Information with third parties ("Recipients") except as described in this Privacy Policy. The Personal Information will be disclosed to Recipients only to the extent required for the specific purpose, as stipulated in this Privacy Policy.

We share Personal Information with any of the following recipients:

• White Label Brands, including any replacement service provider that the White Label Brand may engage to operate the White Label Brands (if applicable);
• Companies within the Group and other affiliated companies, Subcontractors and third-party service providers, as well as their subcontractors, which by way of example include (but is not limited to) cloud computing companies, marketing affiliates, identity verification and fraud prevention services, and other data verifiers;
• Credit reporting agencies;
• Payment service providers, payment processors and banks;
• To any third parties who provide services in relation to the operation or promotion of the applicable In House Brand or the White Label Brands (if applicable);
• To any third parties who organize offline events or tournaments on behalf of or in conjunction with any companies within the Group;
• To hotels and flight companies (such as in the context of offline events and promotions);
• Auditors, contractors or advisers of any of the Group's business processes;
• To any third parties who investigate, detect or prevent fraudulent or illegal activity (e.g. governmental authorities, FINTRAC, police, banks and other investigatory organizations);
• Licensing authorities, governmental and regulatory bodies, in accordance with applicable laws and regulations; and
• Potential purchasers or investors in any of the companies within the Group or While Label Brand (if applicable), or in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, reorganization, bankruptcy, consolidation or asset sale of an asset or transfer in the operation thereof) in relation to any company within the Group (in such event, the acquiring company or transferee will assume the rights and obligations as described in this Privacy Policy).
• Gaming Regulatory Bodies such as the Alcohol and Gaming Commission of Ontario and iGaming Ontario

In addition to the purposes listed in this Privacy Policy, we share Personal Information with those Recipients for any of the following purposes:

• Storing such information on our behalf, for example by using cloud computing service providers;
• Processing such information to assist us with our business operations (e.g. to process payments and your deposits; authenticate your access; auditing our operations; detect and prevent fraudulent or illegal activity; etc.);
• Performing research, technical diagnostics or analytics;
• Communicating targeted advertising, as well as promotional and informational materials, in accordance with our marketing policy (see below, under "Marketing"); and
• Whenever we believe in good faith that disclosure is necessary to protect our rights or legal claims, enforce our policies (including our User Agreement and Privacy Policy), protect your safety or the safety of others, as well as to investigate or prevent any fraud, for security reasons or to help us with any other related technical issue.

TRANSFER OF INFORMATION

Since we operate globally, it may be necessary to transfer your Personal Information to countries outside the Ontario. The data protection and other laws of these countries may not be as comprehensive as the Freedom of Information and Protection of Privacy Act.

We use best efforts to ensure that your Personal Information is protected in accordance with our privacy policy, through contractual means (such as by using the contractual clauses approved by the relevant regulators for data transfer) or other means (such as ensuring that the jurisdiction imposes adequate safeguards for data protection).

If you feel that your privacy was treated not in accordance with our policy, or if any person attempted to abuse the Services or acted in an inappropriate manner, please contact us directly via Live Chat facility.

THIRD PARTY TRACKING TECHNOLOGIES

When you visit or access our Services (for example when you visit our websites), we use (and authorize third parties to use) location tracking, web beacons, cookies, pixels, scripts, tags and other technologies ("Tracking Technologies").

The Tracking Technologies allow us to automatically collect information about you and your online behavior, as well as your device (for example your computer or mobile device), for different purposes, such as verifying your location in Ontario or to enhance your navigation on our Services, improve our Services' performance and customize your experience on our Services. We also use this information to collect statistics about the usage of our Services, perform analytics, deliver content which is tailored to your interests and administer services to our Users, advertisers, publishers, customers and partners.

We also allow third parties to collect information about you through Tracking Technologies. To learn more please visit our Cookie Policy.

THIRD PARTY SERVICES

While using the Services you may encounter links to third party websites, services or applications. Please keep in mind that this Privacy Policy does not apply to any third-party websites, services or applications, even if they are accessible, downloadable, or otherwise distributed through the Services.

Please be advised that such third-party websites, services or applications are independent from the Group. We assume no responsibility or liability whatsoever with regard to privacy matters or any other legal matter with respect to such third-party websites and/or services. We encourage you to carefully read the privacy policies and the terms of use of such third-party websites and/or services, as their terms, not ours, will apply to any of your interactions with such third parties.

You should always review their privacy practices carefully before providing Personal Information to such third parties.

You are knowingly and voluntarily assuming all risks of using any third-party websites, services or applications. You agree that we shall have no liability whatsoever with respect to such third-party sites and your usage of them.

RETENTION OF PERSONAL INFORMATION

If you have registered with an account through our Services, we will retain and maintain your Personal Information during the period your account is active. In addition, we will retain your Personal Data for additional periods, to enable us to meet our legal obligations under applicable laws, regulations such as the applicable gambling regulations, Know-Your-Customer, Anti-Money Laundering regulations and obligations under the iGO Operating Agreement.

If for any reason you wish to delete your Personal Information, please send us an e-mail to privacy@thesixgaming.ca, and we will make reasonable efforts to address your request.

YOUR RIGHTS

Under FIPPA, you have the right of Access and Accuracy. Under PIPEDA, you have the right to withdraw any consent you have provided for the collection, disclosure, or use of your personal information (although, if you do so, we may no longer be able to provide services to you).

You may contact us at any time by email, and request:

• To access or delete any Personal Information relating to you.
• To change or update any Personal Information relating to you (for example, if you believe that your Personal Information is incorrect, you may ask to have it corrected or deleted). Note that you may also request that we will correct errors with regard to your Personal Information (except in cases where the information is required to be kept in its original format under any applicable laws and regulations).
• That we will restrict or cease any further use of your Personal Information.
• That we will provide the Personal Information you volunteered to us in a machine-readable format.

Please note that these rights are not absolute, and requests are subject to any applicable legal requirements, including gambling regulations and other legal and ethical reporting or document retention obligations. We may also rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion, in accordance with our internal policies.

If you have any concerns or queries about your personal information rights, don't forget that you always have the right to complain to a regulator. In order to escalate the complaint, you may contact iGO. The Six Gaming will aid iGO in the investigation and handling of your complaint, all in accordance with the Customer Care and Player Disputes Resolution policy (CCDR).

HOW WE KEEP YOUR INFORMATION SECURED

We take great care in implementing and maintaining the security of the Services and your information. We have put in place appropriate physical and technological safeguards to help prevent unauthorized access, to maintain data security, and to use correctly the information we collect online. These safeguards vary based on the sensitivity of the information that we collect and store.

We employ industry standard procedures and controls to ensure the safety of our users' information, such as:

• Secure network topology, which includes intrusion prevention and Firewall systems;
• Encrypted communication;
• Authentication and Access Control;
• External and Internal audit tests; etc.

Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorized access or abuse the Services, and we make no warranty, express, implied or otherwise, that we will prevent such access.

SECURITY & INCIDENT BREACH MANAGEMENT AND COOPERATION

Protecting your PI is of utmost importance for The Six Gaming and in this regard, we constantly strive to implement and maintain the security of your PI. We have put in place appropriate physical and technological safeguards to help prevent unauthorized access, to maintain data security, and to properly use the information we collect from you. These safeguards vary based on the sensitivity of the information that we collect and store, and include information security measures consistent with current best practices to protect our customers' privacy. These measures include technical, procedural, monitoring and tracking steps intended to safeguard data from misuse, unauthorized access or disclosure, loss, alteration or destruction.

Although we take reasonable steps and employ appropriate security measures to safeguard information, the Internet is not completely secure. We cannot guarantee the security of your PI and any transmission of your PI through the Internet is at your own risk. We cannot be responsible for the acts of those who gain unauthorized access to your PI, and we make no warranty, express, implied or otherwise, that we will prevent such access or abuse. We will however promptly notify you if your PI is impacted by a privacy breach that could reasonably result in a real risk of significant harm to you. We will also report any such privacy breach to the authorities as required by applicable laws (including, without limitation, the Office of the Privacy Commissioner of Canada), and keep a record of any such privacy breach to the extent required by applicable laws.

The Six Gaming's Incident Response Incident Management plan consists of a series of steps that are collectively known as the "Incident Management Process". This process provides a standardized and organized approach for handling security related incidents. If a security event is reported, resources involved will follow the Incident Response Process to take appropriate action. The Incident Management Process consists of three (3) steps:

1. Initiation: Together with our critical suppliers, internal departments, and assurance functions, we will determine the criticality and impact of any cyber-event. We will then heighten monitoring and alert the network and systems. We will investigate the depth of the intrusion into the infrastructure, and work to inform all internal parties that recovery activities have been initiated.
2. Containment, Eradication and Recovery: Together with our critical suppliers, internal stakeholders and assurance functions, we will run audit scripts to check the integrity of critical and customer data. Any data that is found to be impacted will require additional sanitization and restoration. Once the data is sanitized, analysis of player account balances can be initiated. Any failed transactions, bets and game data will be compiled in a report and sent to concerned authorities. Once approved, player account balances will be restored/refunded using recovery procedures. We will then validate that the restored assets are fully functional and meet the security posture required by our security team before bringing the site back online.
3. Notification: Players will be informed about restored balances via email or on-site message. Players will also be notified about what PI, if any, was exposed in the breach and will be encouraged to reset their passwords to ensure the environment remains secure. Notice will also be provided to iGO and the Office of the Privacy Commissioner of Canada, and The Six Gaming will assist iGO, the Office of the Privacy Commissioner of Canada and any other relevant authorities in breach management and handling from the impact of the breach.

CHANGES TO THE PRIVACY POLICY

We reserve the right to change this Privacy Policy at any time, so please re-visit this page frequently. We will provide notice of substantial changes of this Privacy Policy on the Services and/or we will send you an e-mail regarding such changes to the e-mail address that you volunteered. Such substantial changes will take effect seven (7) days after such notice was provided on any of the above-mentioned methods. Otherwise, all other changes to this Privacy Policy are effective as of the stated "Last Revised" date, and your continued use of the Services after the Last Revised date will constitute acceptance of, and agreement to be bound by, those changes.

HOW TO CONTACT US

If you have any general questions about the Services or the information that we collect about you and how we use it, please contact us via our chat facility on our contact us page.

We will make an effort to reply within a reasonable timeframe. Please feel free to reach out to us at any time. If you are unsatisfied with our response, you can reach out to the applicable data protection supervisory authority.