This Privacy Policy explains how Limbo collects, uses, stores, and protects personal data when players access and use the brand’s services in Canada. The document outlines the brand’s lawful data handling practices, transparency requirements, and compliance obligations under applicable Canadian privacy legislation. This policy covers account management procedures, data processing activities, and the security measures implemented to safeguard personal information. It is intended to inform players of their rights and the administrative processes governing their information. All data handling is conducted in accordance with legal standards and internal security protocols.
Data Collection and Categories of Personal Information Processed
Limbo collects personal data necessary for account creation, identity verification, transaction processing, and regulatory compliance. The categories of information processed include registration data such as full name, email address, date of birth, and residential address. During the account setup process, players may be required to provide government-issued identification documents to confirm age and identity, in line with Canadian legal requirements.
Transactional information is recorded, including deposit and withdrawal records, transaction history, and payment method details. For players participating in the limbo bet functionality, additional data related to wager amounts and game outcomes may be stored. Technical data is collected automatically, including IP addresses, device identifiers, browser type, and operating system information. This data supports system security and operational integrity.
Compliance-related records include correspondence with the brand, self-exclusion requests, and responsible gaming interactions. For players utilizing the limbo crypto game feature, blockchain transaction identifiers and wallet addresses may be recorded. The brand does not process sensitive personal data unless required by law or necessary for fraud prevention. All data collection is limited to what is reasonably required for lawful purposes.
Data Usage and Legal Basis for Processing Activities
Personal data is used to verify player identities, process transactions, maintain account security, and fulfill regulatory obligations. The legal basis for processing includes player consent, contractual necessity, legal obligations under Canadian laws, and legitimate interests such as fraud prevention and system integrity. When a player engages with the how to play limbo stake instructions, usage data may be processed to improve platform functionality and ensure accurate record-keeping.
Transactional data is processed to facilitate deposits and withdrawals, detect suspicious activity, and comply with anti-money laundering regulations. Identity verification data is used to confirm that players meet the minimum age requirement and to prevent underage access. Technical data supports server maintenance, error resolution, and security monitoring. Compliance data is processed to respond to regulatory inquiries and enforce self-exclusion programs.
Legitimate interests include protecting the platform from misuse, analyzing operational performance, and ensuring fair play. Where consent is required, players may withdraw consent at any time, subject to legal retention obligations. The brand does not use personal data for automated decision-making that produces legal effects without human review. All processing is documented and reviewed periodically to maintain compliance.
Data Storage, Security Measures, and Retention Rules
Personal data is stored on secure servers located within or outside Canada, depending on operational requirements. Limbo implements encryption protocols for data in transit and at rest, including TLS for network communications and AES for stored records. Access to personal data is restricted to authorized personnel who require the information to perform their duties, and access rights are reviewed regularly.
Firewalls, intrusion detection systems, and routine security audits are used to protect against unauthorized access or data breaches. For players asking is limbo available in canada, the brand confirms that data storage complies with Canadian privacy laws including PIPEDA principles. Retention periods are established based on legal requirements, tax obligations, and business needs. Account data is retained for the duration of the account’s active status and for a reasonable period after closure to comply with record-keeping mandates.
Upon expiration of the retention period, personal data is securely deleted or anonymized. Archiving procedures are applied to data that must be retained for legal or regulatory purposes, and access to archived data is limited. The brand does not retain data indefinitely without a documented purpose. Players may request information about specific retention schedules by contacting the designated privacy office. Data disposal methods include secure wiping of electronic files and shredding of physical documents.
| Data Category | Retention Period | Deletion Procedure |
|---|---|---|
| Account registration data | Active account + 5 years | Permanent deletion |
| Transactional records | 7 years (legal requirement) | Archiving then deletion |
| Technical logs | 12 months | Automated overwriting |
| Compliance documentation | 10 years | Secure archiving |
Player Rights and Data Access Procedures
Players in Canada have the right to access their personal data held by Limbo and to request correction of inaccurate information. Requests for data erasure may be submitted, subject to legal retention obligations. Players may also request restriction of processing or object to processing based on legitimate interests. Data portability requests are available for information provided directly by the player, provided the request does not adversely affect the rights of others.
All requests must be submitted in writing to the privacy department, and identity verification is required before any data access request is fulfilled. Verification may involve confirming account details, providing photographic identification, or answering security questions. The brand responds to verifiable requests within 30 days, as prescribed by Canadian privacy legislation. Extensions may apply for complex requests, with notice provided to the player.
Players may withdraw consent for processing activities that rely on consent, though this may affect account functionality. Complaints about data handling practices may be directed to the Office of the Privacy Commissioner of Canada. The brand maintains records of all data access requests and responses. No fee is charged for exercising privacy rights unless the request is manifestly unfounded or excessive. Players should retain a copy of any submitted requests for their records.