Privacy policy

01 Who is responsible for your information

The person responsible for the protection of the personal information collected through this site is the operator:

Société des loteries du Québec (Loto-Québec)
500 Rue Sherbrooke Ouest, Montréal, QC H3A 3G6
NEQ 1144330454

Within the organisation, this responsibility is exercised by the Privacy Officer. Requests may be addressed to that role at the postal address above.

02 The applicable framework

The operator is a corporation constituted under Québec law. Personal information collected through this site is handled under the Québec framework applicable to that status, which governs how information may be collected, used, communicated and kept, and which provides rights of access and correction.

European data protection law is not the basis of this policy and is not presented as such.

03 What is collected

Depending on how you use the site, the following categories may be collected:

Registration and identity. Name, address, date of birth, and the information needed to verify identity.
Contact details. Email address and, where you provide one, a phone number.
Account information. Credentials, settings, and the history of changes made to the account.
Transaction information. Deposits, withdrawals and balances, where these functions are used.
Gaming activity. Participation registered on the account, and results attached to it.
Responsible gambling information. Limits set, breaks taken and self-exclusions activated.
Location information. Where location controls apply to participation.
Preferences. Language, and consent choices including marketing.
Technical information. Cookies and equivalent storage as described in the cookie policy, and security logs.

Browsing the public pages of this site does not require an account and does not collect the categories above beyond what the cookie policy describes.

04 Why it is collected

To open and operate an account, and to verify that its holder meets the eligibility requirements.
To register participation, establish results and handle transactions on the account.
To apply the responsible gambling measures you have chosen, and those required of the operator.
To meet legal obligations, including those relating to the proceeds of crime and terrorist financing.
To keep the site and the accounts on it secure, and to detect misuse.
To send marketing communications, where and only where you have consented separately.

06 How long it is kept

Personal information is kept for as long as needed for the purpose it was collected for, and afterwards for as long as a legal obligation requires it to be kept.

Information relating to a self-exclusion is kept for the period necessary to give effect to it. Closing an account does not erase information that the operator is required to retain.

07 Who it may be communicated to

Personal information is not sold. It may be communicated:

to service providers acting on the operator’s behalf and under its instructions, to the extent needed for the service they provide;
where the law requires or authorises it, including to the authorities responsible for the obligations mentioned above;
where it is necessary to establish, exercise or defend a right in a proceeding.

08 Service providers

Where a service provider handles personal information on the operator’s behalf, it is bound to use it only for the purposes agreed, to protect it, and to return or destroy it when the mandate ends.

Where information would be handled outside Québec, the operator assesses the protection it would receive before entrusting it, as the applicable framework requires.

09 Security

Technical and organisational measures protect personal information against loss and unauthorised access, and access within the organisation is limited to what a role requires.

No system is beyond incident. Keeping your credentials confidential and not reusing them elsewhere remains a necessary part of the protection.

10 Your rights

Access. You may ask what personal information is held about you and obtain a copy of it.
Correction. You may ask for information that is inaccurate, incomplete or out of date to be corrected.
Withdrawal of consent. Where processing rests on your consent — marketing, non-essential cookies — you may withdraw it at any time.
Complaint. If you are not satisfied with how a request was handled, you may take the matter further under the applicable framework.

11 Making a request

A request for access or correction should be made in writing to the Privacy Officer at the postal address above, with enough information to identify you and to locate what your request concerns.

Because a request of this kind concerns personal information, identity is verified before it is answered. No dedicated support email or telephone line is published for this site, so the postal address is the channel to use.

12 Cookies and equivalent technologies

The cookies and storage used by this site, what each one is for, and how long it lasts are set out in the cookie policy. Consent for anything non-essential is asked for there and can be changed at any time.

13 Changes to this policy

This policy may be updated, in particular where the site changes or a legal requirement does. The date of the current version appears at the top of this page.

Where a change is significant, it will be brought to the attention of account holders rather than left to be noticed.

14 Contact

Questions about this document can be addressed to the operator at the address below. Where a matter concerns personal information, the privacy policy sets out the procedure that applies.

Société des loteries du Québec
500 Rue Sherbrooke Ouest, Montréal, QC H3A 3G6
NEQ 1144330454