Privacy and data protection
MGM Casino Canada Privacy Policy
This Privacy Policy explains how MGM Casino collects, uses, shares, stores, and protects personal information when players and visitors in Canada use our website, account services, communications, and related casino features.
Understand and Control Your Information
MGM Casino aims to give Canadian users clear information and practical control over their personal data. You may review this policy before opening an account, update certain information from your account settings, manage optional communications, or submit a privacy request through our support channels.
Review What We Collect
See which identity, account, transaction, device, security, and communication details may be processed.
Choose Your Preferences
Manage optional marketing and non-essential cookie preferences through the available account or website controls.
Submit a Request
Ask to access or correct eligible personal information, withdraw consent where applicable, or raise a privacy concern.
How Personal Information Moves Through Our Services
This overview shows the usual data journey from collection to secure deletion or anonymization.
Scope of the MGM Casino Privacy Policy
This policy applies to personal information processed through MGM Casino services intended for users in Canada. It covers visitors, registered account holders, people who contact customer support, recipients of authorized communications, and individuals who interact with privacy, security, verification, or responsible gambling functions.
Personal information generally means information about an identifiable individual. It can include information that identifies you directly, such as your name, as well as information that may identify you when combined with other data, such as account activity, device information, or transaction records.
This policy does not govern independent third-party websites or services that maintain their own privacy practices. Before providing information directly to a third party, review the privacy notice presented by that provider.
Personal Information We May Collect
The information processed depends on how you interact with MGM Casino. We seek to collect information that is reasonably necessary for a stated purpose and appropriate to the service being provided.
| Information category | Examples | Typical source | Processing status |
|---|---|---|---|
| Identity and eligibility | Name, date of birth, address, government-issued identification details, and verification results | You or an authorized identity-verification provider | Often required |
| Account and contact | Username, email address, telephone number, account preferences, and support history | You and your use of the account | Service-related |
| Transaction information | Deposit and withdrawal records, payment method details, transaction references, and account balances | You, financial institutions, and payment providers | Often required |
| Gaming activity | Game sessions, wagers, outcomes, bonuses, limits, exclusions, and responsible gambling interactions | Your use of MGM Casino services | Service-related |
| Device and technical data | IP address, browser, operating system, device identifiers, log data, approximate location, and security events | Your device, browser, and security tools | Security-related |
| Marketing preferences | Communication choices, campaign interactions, and consent records | You and communication tools | Your choice |
Information You Provide Directly
You may provide personal information when registering, verifying an account, funding or withdrawing from an account, contacting support, setting limits, entering an eligible promotion, changing account details, responding to a security check, or submitting a privacy request.
Information Collected Automatically
When you visit or use the website, technical information may be generated automatically. This can include browser and device characteristics, access times, pages viewed, referral information, diagnostic logs, cookie identifiers, and events used to maintain security or understand service performance.
Information From Other Authorized Sources
Where permitted, MGM Casino may receive information from payment providers, identity and age-verification services, fraud-prevention services, regulators, self-exclusion systems, public records, or other sources needed to provide services and meet legal obligations.
Why MGM Casino Uses Personal Information
Personal information is used for defined operational, legal, safety, and customer-service purposes. The relevance and amount of data used may differ by activity.
Purpose and Processing Importance
Bar length illustrates the relative operational importance of each purpose. It does not represent the amount of personal information collected.
- Provide and administer services: create and maintain accounts, process eligible transactions, record activity, deliver requested features, and respond to support enquiries.
- Verify identity and eligibility: confirm age, identity, residency, location, payment ownership, and other information required for account access.
- Protect accounts and services: detect suspicious access, investigate fraud, prevent misuse, enforce platform rules, and maintain technical reliability.
- Meet legal obligations: perform recordkeeping, reporting, anti-money-laundering, sanctions, regulatory, tax, dispute-resolution, and law-enforcement response functions where applicable.
- Support responsible gambling: apply limits and exclusions, maintain player-protection records, identify potentially concerning activity, and provide relevant interventions.
- Improve the user experience: diagnose errors, assess website performance, understand feature usage, and develop safer or more useful services.
- Send communications: provide essential account notices and, where permitted, optional promotional communications based on your preferences.
Consent and Other Grounds for Processing
Depending on the activity and applicable Canadian privacy requirements, MGM Casino may process information with your consent or where processing is otherwise permitted or required by law.
Your Consent
Consent may be express or implied depending on the sensitivity of the information, your reasonable expectations, and the circumstances in which it is collected.
Providing Requested Services
Certain information is necessary to create an account, authenticate access, process transactions, provide support, and deliver features you request.
Legal Requirements
Information may be processed to meet obligations involving identity checks, financial crime prevention, reporting, record retention, player protection, and lawful requests.
You may withdraw consent for optional processing, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent does not automatically require deletion of records that MGM Casino must retain for security, dispute, regulatory, or legal purposes.
When Information May Be Shared
MGM Casino does not treat personal information as a product for unrestricted sale. Information may be disclosed to carefully selected recipients when reasonably necessary for a stated purpose, when you direct us to share it, or when disclosure is permitted or required by law.
| Recipient | Reason information may be shared | Typical safeguards |
|---|---|---|
| Payment and financial service providers | Process deposits or withdrawals, confirm payment ownership, investigate failed transactions, and prevent financial fraud | Contractual controls, access restrictions, and payment-security measures |
| Identity and compliance providers | Verify identity, age, residency, sanctions status, source-of-funds information, or other eligibility requirements | Purpose limitations, confidentiality obligations, and restricted access |
| Technology and hosting providers | Operate infrastructure, maintain accounts, store records, deliver messages, monitor performance, and provide cybersecurity services | Security requirements, service agreements, and data-access controls |
| Professional advisers | Receive legal, accounting, audit, insurance, risk, or dispute-resolution support | Professional confidentiality and limited-purpose disclosure |
| Regulators and public authorities | Meet licensing, reporting, taxation, anti-money-laundering, court-order, law-enforcement, or public-safety requirements | Legal authority and disclosure limited to the applicable request |
| Corporate transaction participants | Assess or complete a merger, financing, restructuring, sale, or transfer involving all or part of the relevant business | Confidentiality controls and continued protection under applicable law |
Service providers are expected to process information only for authorized purposes and to apply appropriate protection. Some providers may independently determine how they process specific information, particularly regulated financial institutions or public authorities.
Processing and Storage Outside Your Province or Canada
MGM Casino and its service providers may process or store personal information in a province, territory, or country outside your place of residence. Privacy and disclosure rules in another jurisdiction may differ from those that apply locally.
When personal information is transferred to a service provider, MGM Casino uses measures appropriate to the circumstances, which may include contractual requirements, security reviews, access controls, data minimization, and limits on how information may be used.
Information held in another jurisdiction may be accessible to courts, regulators, law-enforcement bodies, or other authorities under the laws of that jurisdiction.
How Long Personal Information Is Retained
MGM Casino retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, regulatory, security, accounting, responsible gambling, and dispute-resolution requirements.
Typical Information Retention Journey
Actual periods vary by record type, account status, regulatory requirements, unresolved matters, and applicable law.
Active Use
Information supports your account and the services you actively use.
Account Closure
Access is closed, but relevant records may remain protected and restricted.
Required Retention
Records may remain for legal, financial, security, exclusion, or dispute purposes.
Secure Disposal
Eligible information is deleted, destroyed, or anonymized when retention is no longer required.
Closing an account does not necessarily result in immediate deletion. Some records may need to be retained to maintain self-exclusion controls, resolve disputes, prevent fraud, meet financial reporting rules, or comply with other legal requirements.
How MGM Casino Protects Personal Information
MGM Casino uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, loss, misuse, disclosure, or destruction.
Access Management
Access to personal information is limited according to role, operational need, and authorization.
Security Monitoring
Systems and account events may be monitored to identify suspicious activity, technical threats, or attempted misuse.
Protected Transmission
Appropriate safeguards may be used when sensitive information is transmitted between supported systems and providers.
Provider Oversight
Relevant privacy and security expectations are included in service-provider selection and management processes.
Incident Response
Processes are maintained to investigate security incidents and provide notifications where required by applicable law.
Employee Awareness
Personnel with relevant responsibilities receive guidance on confidentiality, data handling, and security practices.
Cookies and Similar Technologies
MGM Casino may use cookies, local storage, pixels, software development kits, and similar technologies to operate the website, remember settings, protect accounts, understand performance, and support communications.
You can manage available non-essential cookie choices through the website’s privacy controls. Browser settings may also allow you to block or delete cookies. Blocking essential technologies may affect sign-in, security, preference storage, or other website functions.
Your Canadian Privacy Rights and Choices
Privacy rights vary by jurisdiction and are subject to lawful exceptions. Depending on your location and circumstances, you may be able to request access to eligible personal information, ask for corrections, withdraw consent for optional processing, or challenge compliance with applicable privacy principles.
Privacy Request Availability
The meters show how directly each choice can generally be initiated. Every request remains subject to identity verification and applicable legal restrictions.
Access Your Data
Request information about eligible personal data held about you and how it has been used.
Correct Information
Ask us to correct inaccurate or incomplete account information, subject to recordkeeping requirements.
Change Marketing Choices
Update optional communication preferences using account controls, unsubscribe tools, or customer support.
Withdraw Consent
Withdraw consent for eligible optional processing, subject to legal, security, and service limitations.
Request Deletion
Ask whether eligible information can be deleted after required legal and operational retention is considered.
Raise a Concern
Contact the privacy team if you believe information has been handled improperly or a request was not resolved.
How to Make a Privacy Request
- Use the privacy contact option: open the designated privacy or customer-support channel and state the right or concern you wish to address.
- Identify the relevant account: provide enough information for us to locate the correct records without sending unnecessary sensitive data.
- Complete verification: we may ask questions or request documentation to confirm identity and prevent unauthorized disclosure.
- Describe the scope: specify the information, date range, transaction, communication, or account activity involved where possible.
- Review our response: we will explain the outcome, any action taken, and any lawful limitation affecting the request.
We may be unable to provide certain information if disclosure would reveal another person’s data, compromise security, conflict with legal privilege, interfere with an investigation, or violate a legal restriction. Where appropriate, we will explain the reason for a limitation.
Automated Tools, Risk Signals, and Account Decisions
MGM Casino may use automated systems and risk indicators to support fraud detection, identity verification, security monitoring, transaction screening, responsible gambling measures, and compliance reviews.
Automated signals may identify activity for additional review. Depending on the circumstances, this may result in a verification request, delayed transaction, account restriction, security check, responsible gambling communication, or manual assessment.
These controls are intended to protect users, maintain service integrity, and support legal obligations. Contact customer support when you need clarification about an account action or additional document request.
Age Restrictions and Information About Minors
MGM Casino services are not intended for anyone who is below the legal gambling age applicable in their Canadian province or territory. We may use age-verification and identity-verification measures to prevent underage access.
If personal information associated with an underage person is identified, MGM Casino may restrict the relevant account, investigate the circumstances, preserve records required for legal or security purposes, and delete eligible information when appropriate.
Changes to This Privacy Policy
MGM Casino may update this Privacy Policy to reflect changes in services, technology, legal obligations, privacy practices, or security requirements. The current version will display its effective date.
When a change is material, an appropriate notice may be provided through the website, account interface, email, or another suitable communication channel. Continued use of the services after an update is subject to the revised policy and applicable consent requirements.
Contact MGM Casino About Privacy
Contact the MGM Casino privacy team to request access or correction, change an eligible privacy choice, ask how your information is handled, or report a privacy concern. Include your account username or registered contact information, a clear description of the request, and any relevant dates. Do not send passwords or full payment credentials.
Privacy requests may require identity verification. Account support, payment questions, and responsible gambling requests may be redirected to the team best equipped to handle them securely.
