Privacy Policy
What we collect, why we collect it, and how to get it back or get rid of it.
Data controller
Fayyassalon is the controller of your personal data. For any question about how we handle it, or to exercise any of the rights below, write to support@fayyassalon.com — that address reaches the person responsible for privacy here.
What we collect
| Category | Examples |
|---|---|
| Identity | Name, date of birth, screen name, ID document at verification |
| Contact | Email, phone, postal address |
| Account | Password hash, security settings, limits, seed pairs |
| Play | Rounds, stakes, results, balances, transaction history |
| Technical | IP address, device and browser, approximate location from IP |
| Marketing | Your preferences and how you interact with our emails |
Why we collect it
- To run your account and the games — performance of our contract with you.
- To check eligibility — our legitimate interest in keeping the platform 18+ and preventing duplicate accounts.
- To keep play safe — legitimate interest in identifying harmful play patterns and honouring self-exclusions.
- To send marketing — your consent, which you can withdraw at any time from your profile.
- To meet legal and regulatory duties — including responding to lawful requests.
Who we share it with
We do not sell your data. We share it with processors who work for us under contract: Google Cloud (Toronto, Canada), who host the site, our email provider and Google, who provide our website analytics. There are no advertising processors and no payment processors — because there are no payments — and we otherwise disclose data only where the law requires it.
Our analytics tell us how many people visit and which pages they use, not who you are. IP anonymisation is switched on, Google's advertising features are not, and we send Google nothing about your account or your play. This processing happens outside Canada, including in the United States. You control it from the cookie notice — see the cookie policy.
How long we keep it
Account and transaction records are kept for seven years after account closure, which is the retention period our financial and anti-money-laundering obligations require. Marketing preferences are kept until you withdraw consent. Verification documents are deleted twelve months after a successful check.
Your rights
- Access — a copy of the data we hold about you.
- Rectification — correction of anything inaccurate.
- Erasure — deletion, except where retention is legally required.
- Restriction — pause our processing while a dispute is resolved.
- Portability — your data in a structured, machine-readable format.
- Objection — to processing based on legitimate interests, including profiling.
- Withdraw consent — at any time, for anything based on consent.
Write to support@fayyassalon.com and we will respond within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada.
Cookies
Covered separately in our cookie policy.
Security
Data is encrypted in transit with TLS 1.3 and at rest. Passwords are hashed with bcrypt. Access to production data is limited to staff who need it, logged, and reviewed quarterly. If a breach affects you we will tell you and the regulator within 72 hours of becoming aware of it.
Contact
Privacy enquiries: support@fayyassalon.com. We reply within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada.
