Privacy Policy

Effective 5 November 2026. The controller is American Wagering, Inc.

Introduction

This policy describes personal information handled for Horseshoe online casino, for adults in Alberta. Alberta’s Personal Information Protection Act (PIPA) applies, and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies where it still governs. The controller’s office is One Caesars Palace Drive, Las Vegas, Nevada 89109. Write to support@www.horseshoeonlinecasino.co.

Data controller

American Wagering, Inc. is the controller. Horseshoe online casino is the brand on this website.

What we collect

• Account: name, email, password hash, date of birth, province, the confirmation that you are physically located in Alberta, the IP address at registration, and whether you opted in to offers.
• Identity: the JPG, PNG, or PDF you upload, and the time it was accepted. The file is not available at a public URL.
• Cashier: payment method and amount. The full card number is not collected.
• Play: casino rounds and sports bets, including stake, price, and return, plus the limits, break, and self-exclusion you set.
• Messages you send, the session, and a counter of failed logins.

Why

We use this information to open and protect the account, to take deposits and withdrawals, to settle play, to apply the welcome offers and the limits you set, to enrol a self-exclusion, and to reply to you. The age gate and the cookie choice are stored on your browser so the site can honour them.

Identity verification

Uploaded documents are reviewed against your registration details to confirm your age and identity. Status is set to Pending Verification on submission, Verified when the review confirms your age and identity, and Rejected when documents are invalid or do not match. Deposit, withdrawal, and play are not available until status is Verified. Identity documents, including the name, date of birth, and document number, are checked against the details you provided at registration. Where identity verification is performed with the assistance of a third-party identity verification provider, your document and registration data may be shared with that provider for verification purposes only.

Location

The service is for people physically located in Alberta. Your IP address at registration is stored and used as one signal of location. Actual location may be verified through additional means before or during real-money play, in accordance with applicable standards. Location is checked to confirm you remain in Alberta when placing bets or playing games. If location verification cannot be completed, access to real-money play will be restricted. We handle any location data collected only for the purpose of compliance with Alberta iGaming requirements.

Sharing

We do not sell personal information. We may disclose account, play, and payment records to AGLC and to AiGC where required for registration and licensing obligations, for the conduct and management of Alberta’s iGaming market, or for responsible gambling duties, and to the Office of the Information and Privacy Commissioner of Alberta when required by law. We may also share information with identity verification providers for KYC purposes, and with payment processors for cashier transactions. Staff who operate the site can read the records for operational purposes. If we process personal data outside Canada, we apply safeguards consistent with Alberta PIPA and federal PIPEDA requirements. Links to AGLC, AiGC, GameSense, 211, the Responsible Gambling Council, and selfexclusion.ca leave this site under those organizations’ own policies.

Cookies

Essential cookies are the age choice (ad_age, 365 days), the cookie choice (ad_consent, 180 days), and the session (ad_sid, until the browser closes). The cookie policy lists them. Analytics and marketing stay off unless you allow them. No advertising frame is embedded in the page.

Retention

• Account row, including a closed account: five years after the year the account was closed, or after the year of the last login if it was never closed.
• Self-exclusion: the exclusion period, then five years. An exclusion with no end date stays while it has no end date.
• Identity files: for the same period as the account row.
• Rounds, bets, and cashier entries: five years after the year of the transaction.
• Messages: two years from the day the message was stored.
• Password-reset tokens: 60 minutes. The delivery record is kept for one year.
• Failed-login counters: cleared on a successful login. A lock lasts 15 minutes.

Your rights

You can ask what is held, ask for a correction, or ask for a copy. Write to support@www.horseshoeonlinecasino.co from the email on the account. Alberta’s Personal Information Protection Act gives an organization 45 days to respond, with a possible extension the Act describes. If a request is refused, the reply will say why and how to complain to the Office of the Information and Privacy Commissioner of Alberta.

Security

Passwords are hashed. Session cookies are HttpOnly. Private records are wrapped so a direct request does not print them. Identity files sit outside the public pages. A breach that exposes account data would be described to the people affected and, where the Act requires it, to the Commissioner.

Contact

Privacy questions go to support@www.horseshoeonlinecasino.co or the contact form. Support is open every day, 9:00–21:00 Mountain Time.

Changes

A material change is posted on this page at least 14 days before it applies. The date at the top is the date of this version.