Privacy Policy

1. Who We Are

Vipcasinolic operates a boutique casino hotel in Vancouver, Canada, and this website at vipcasinolic.net. When this policy says "we", "us" or "our", it means Vipcasinolic as the data controller for the personal information described here. We decide why and how your data is processed, and we are accountable for keeping that processing lawful and reasonable.

If you have any question about this policy, or want to exercise a right described below, contact us using the details published on our contacts page. We answer privacy enquiries within thirty days, and usually sooner.

This policy applies to reservations, website visits, newsletter sign-ups, enquiries through our forms, and any offline interaction where we collect your details. It does not apply to third-party websites we link to.

2. What Data We Collect

We only collect data that we actually need to run the venue, keep the guest list safe, and comply with gaming regulation in British Columbia. Depending on how you interact with us, that may include:

• Identity data — name, date of birth, nationality and government-issued photo identification required for age and gaming checks.
• Contact data — postal address, email address and telephone number.
• Booking data — arrival and departure dates, room category, party size, preferences and special requests.
• Gaming data — table activity, credit line records, loyalty history and any self-exclusion or responsible play flags.
• Technical data — IP address, browser type, device information, pages viewed and the approximate city from which you visit.
• Communication data — emails, form submissions, phone notes and messaging records relating to your enquiry or stay.

We do not ask for special category data such as health information or political opinions, and we do not want it sent to us voluntarily. If you do share it, we will still handle it carefully, but we would rather you did not.

3. Why We Process Your Data

We rely on different legal bases under the GDPR and comparable Canadian rules depending on the activity. In every case, the processing has a clear purpose:

• Contract performance — to take and manage your booking, provide the suite, and handle payment.
• Legal obligation — to verify age, meet anti-money-laundering and gaming rules, and keep records regulators require us to hold.
• Legitimate interest — to run the venue safely, prevent fraud, protect staff and guests, and improve our service.
• Consent — to send you marketing emails or newsletters, which you can withdraw at any time by clicking unsubscribe or contacting us.

Where we rely on consent, refusing it never prevents you from making a booking. Consent is for optional things, not the basics.

4. Sharing and Retention

We share personal data only where it is necessary, and only with parties bound to keep it confidential. Those parties may include payment processors, identity verification providers, IT and hosting partners, licensed security contractors, auditors, and gaming regulators acting within their legal powers. We never sell personal data and we do not trade guest lists.

Retention is set by law and by how long we reasonably need the record. Booking and financial records are kept for at least seven years to meet accounting and gaming rules. Marketing data is kept while you remain subscribed and for one year after you unsubscribe. CCTV footage is kept for thirty days unless it is flagged for an incident or investigation. When the retention period ends, we delete or anonymise the data securely.

5. Your Rights

Under the GDPR and Canadian privacy legislation you have the right to:

• Access the personal data we hold about you and receive a copy.
• Ask us to correct anything inaccurate, incomplete or out of date.
• Request erasure where there is no legal reason for us to keep the data.
• Object to or restrict certain processing, including direct marketing.
• Receive the data you provided in a portable, machine-readable format.
• Withdraw consent you previously gave, without affecting past lawful processing.
• Lodge a complaint with the relevant supervisory authority in your country.

To use any of these rights, write to us using the contact details on our site. We will verify your identity before acting, to avoid disclosing data to the wrong person. We do not charge a fee for a reasonable request.

6. Security and International Transfers

We protect your data with encryption in transit, access controls limited to trained staff, physical security at the property, and regular reviews of who can see what. No system is perfect, and we do not pretend otherwise, but we work to keep breaches unlikely and to notify you and the regulators quickly if one affects you.

Our servers sit in Canada. If we ever transfer data internationally, we use legal safeguards such as standard contractual clauses and check the destination country's protections before any transfer takes place. This document forms part of our wider commitment to fair, transparent data handling and works together with our Terms and Conditions and Cookie Policy.