Privacy Policy

This Privacy Policy explains how Solcasino, operated via the website sol-ca.com, collects, uses, discloses, and protects personal data of players and website visitors from Canada who access our online gambling services. It applies to all interactions with our website, mobile versions, and related services. By registering an account, using our services, or visiting our website, you acknowledge that you have read and understood this Policy. This Privacy Policy is effective as of 1 January 2026 and supersedes any previous versions.

Who We Are

OBSERVE: Users must know the identity and contact details of the data controller and related entities. EXPAND: We identify the operating company, group structure, and data protection contact channel. REFLECT: This section clarifies corporate responsibility and how to reach us about privacy matters.

The online casino presented as Solcasino and accessible at https://sol-ca.com (the "Website") is operated by:

Operator: GALAKTIKA N.V., a public limited company incorporated under the laws of Curaçao.
Registration number: 140803
Registered and legal address: Scharlooweg 39, Willemstad, Curaçao
Gaming license: Antillephone N.V. license no. 8048/JAZ2016-050, issued in Curaçao and valid for online gambling / iGaming operations (status: active as of 2026, subject to regulatory oversight).

For certain payment processing and financial operations, the Operator uses its wholly owned subsidiary:

Payment processor: Unionstar Limited
Jurisdiction: Cyprus
Registration number: HE 356131
Registered address: Agias Fylaxeos & Zinonos Rossidi 2, 1st Floor, 3082 Limassol, Cyprus

For the purposes of this Privacy Policy, GALAKTIKA N.V. is the data controller. Unionstar Limited and other third-party providers generally act as data processors or independent controllers for specific operations (e.g., payment processing, fraud checks), as explained below.

Data Protection Contact

Data protection contact / department: Data Protection Officer (DPO), GALAKTIKA N.V.
Email (privacy & support): [email protected]
Email (complaints & escalations): [email protected]
Website: https://sol-ca.com/en/privacy-policy

You may contact our DPO or data protection department via the above email addresses for any questions or requests related to this Privacy Policy or your personal data.

What Personal Data We Collect

OBSERVE: We collect identification, technical, transactional, and behavioral data. EXPAND: Data categories must be clearly listed for transparency and legal compliance. REFLECT: This enables users to understand what information is processed and why.

Identity and Contact Data

Full name, date of birth, and gender (if provided)
Residential address, billing address, and country of residence
Email address and phone number
Government-issued identification data (e.g., ID card, passport, driver's license), including document number, issuing authority, expiry date, and scanned copies or photos
Proof of address documents (e.g., utility bills, bank statements) including displayed data
Account credentials such as chosen username and hashed password (we never store plain-text passwords)

Account and Service Data

Account registration details, account status, and verification/KYC status
Communication preferences (language, marketing preferences)
Customer support communications, including emails, live chat logs, internal notes, and complaint records
Responsible gambling settings (deposit limits, loss limits, time limits, self-exclusion or cooling-off periods)

Technical and Usage Data

IP address and approximate location derived from IP (country, region, city)
Device information (device type, operating system, browser type and version, screen resolution, unique device identifiers where available)
Log data (dates and times of access, pages visited, clickstream data, referring and exit pages, time spent on pages, technical error logs)
Session identifiers, tokens, and internal IDs used to manage sessions and security

Financial and Transaction Data

Deposits, withdrawals, chargebacks, refunds, bonuses, and wagering data
Payment method details, such as:
- Partial card details (e.g., last 4 digits, card type, expiry date) when payments are card-based
- E-wallet identifiers, bank account IBAN or account numbers, or other payment account identifiers
- Transaction identifiers and timestamps, payment processor decisions (approved/declined), risk scores and verification flags
Financial verification documents where required by AML/KYC (bank statements, source-of-funds or source-of-wealth documentation, tax information where legally required)

Gaming and Behavioral Data

Game preferences, game sessions, and duration of play
Betting history, including bets placed, stakes, wins, losses, jackpots, and bonus usage
Bonus history (opt-in status, wagering progress, bonus abuse risk indicators)
Clickstream and interaction data on the Website (buttons clicked, navigation paths, promotional interactions)

Marketing and Communication Data

Opt-in and opt-out records for email, SMS, push notifications, and on-site messaging
Records of marketing communications sent to you and interaction metrics (opens, clicks, unsubscribes)
Participation in promotions, tournaments, loyalty or VIP programs, including earned points and tier status

Cookies and Similar Technologies

HTTP cookies, HTML5 local storage objects, and similar identifiers placed on your browser or device
Unique identifiers allocated by our systems, analytics tools, and advertising partners (where permitted)
Information collected by web beacons, pixel tags, SDKs, and other tracking technologies (e.g., device and browser characteristics, interaction with emails and advertisements)

Additional details on cookies and similar technologies are provided in the "Cookies & Tracking Technologies" section.

Legal Basis for Processing

OBSERVE: Processing must be grounded in lawful bases recognized by relevant data protection standards. EXPAND: We align with principles similar to the GDPR and with Canadian privacy norms (including PIPEDA and provincial laws where applicable). REFLECT: This section explains why and under what conditions we may process your data.

Performance of a Contract

We process personal data that is necessary to enter into and perform our contractual relationship with you, including:

Creating, managing, and operating your Solcasino player account on sol-ca.com
Providing access to games, processing bets, determining outcomes, and crediting winnings
Processing deposits, withdrawals, and payment transactions via Unionstar Limited and other payment providers
Providing customer support, handling your requests, and resolving account-related issues
Applying bonus programs, loyalty schemes, and promotions that you choose to participate in

Compliance with Legal and Regulatory Obligations

We process your data where necessary to comply with obligations under applicable laws and regulations, including but not limited to:

Anti-money laundering (AML) and counter-terrorist financing (CTF) regulations applicable in Curaçao and other relevant jurisdictions
Know-your-customer (KYC) requirements, including identity verification, age verification, and verification of address and funding sources
Regulatory reporting obligations to our licensing authority (Antillephone N.V. and/or Curaçao Gaming Control Board) and other competent authorities
Record-keeping obligations relating to financial transactions, gaming activity, and customer due diligence
Compliance with court orders, official requests, and legal proceedings

Legitimate Interests

We may process your data when it is necessary for the purposes of our legitimate interests, provided that such interests are not overridden by your rights and freedoms. These interests include:

Ensuring the security and integrity of our systems, services, and users, including fraud detection, account verification, and risk management
Preventing, detecting, and investigating suspicious or fraudulent activities, bonus abuse, collusion, money laundering, and other prohibited behaviors
Conducting analytics and statistics to improve our Website, services, and user experience, including game optimization and product development
Enforcing our Terms and Conditions, Bonus Policy, and other applicable rules
Defending our legal rights and interests in case of disputes or claims

Where required by local law, we will take measures to minimize the impact on your privacy (for example, by pseudonymizing data used for analytics).

Consent

We rely on your consent in the following cases:

Sending marketing communications (email, SMS, push notifications, or similar) about our products, promotions, and partners, where consent is required by applicable law
Using certain cookies and tracking technologies for advertising, profiling, and advanced analytics, where consent is required
Processing certain optional information that is not strictly necessary for contract performance or legal obligations (e.g., participation in specific surveys or feedback programs)

You may withdraw your consent at any time, as described in the "Your Rights" section, without affecting the lawfulness of processing based on consent before its withdrawal.

Purpose of Processing

OBSERVE: Data is collected for defined, explicit, and legitimate purposes. EXPAND: We classify purposes to ensure transparency and purpose limitation. REFLECT: This clarifies how each category of data is practically used.

Provision of Casino Services

Registering and managing your Solcasino account on sol-ca.com
Allowing you to deposit funds, place bets, participate in games, and withdraw winnings
Verifying your identity, age, and eligibility to use gambling services from Canada (outside of explicitly restricted provinces such as Ontario)
Applying game rules, bonus terms, loyalty points, and VIP benefits
Providing multi-language customer support and technical assistance

Compliance, Risk Management, and Fraud Prevention

Conducting KYC, AML, CTF, and affordability checks, including document verification and source-of-funds assessments
Monitoring transactions and gameplay for patterns that may indicate fraud, collusion, or other prohibited activity
Maintaining audit trails and logs to demonstrate compliance to regulators and law enforcement authorities
Protecting the integrity and fairness of games and bonuses

Service Improvement and Analytics

Analyzing how visitors and players use the Website and games to improve usability, performance, and content
Testing new features, games, and user-interface changes
Producing aggregated, pseudonymized statistics on game performance, marketing effectiveness, and customer satisfaction

Marketing, Personalization, and Loyalty

Sending newsletters, promotions, and targeted offers, subject to your consent and/or applicable law
Displaying personalized content, offers, and game recommendations based on your previous activity
Operating loyalty programs, tournaments, and special campaigns, including calculation of points, tiers, and rewards

Customer Support and Dispute Resolution

Responding to your inquiries, feedback, and complaints via email, live chat, or other channels
Investigating and resolving disputes regarding transactions, bonuses, and gaming outcomes
Cooperating with alternative dispute resolution services (e.g., AskGamblers) where applicable

Disclosure & Sharing

OBSERVE: Some personal data must be shared with trusted third parties to deliver services and comply with law. EXPAND: We describe categories of recipients, conditions of disclosure, and safeguards. REFLECT: This manages expectations and clarifies that we do not sell data for pure profit.

Group Companies and Service Providers

Payment processors and financial institutions: including Unionstar Limited (Cyprus) and other licensed payment providers for deposits, withdrawals, card processing, e-wallets, bank transfers, and fraud screening. These entities may also be PCI DSS compliant and subject to banking regulations.
Technical and hosting providers: providers of hosting, cloud storage, content delivery networks, security and monitoring tools, and IT maintenance services.
Game and platform providers: third-party game studios and platform providers who may require limited data (e.g., session identifiers, country, basic account information) for the operation of games, tournaments, and jackpots.
KYC/AML and risk management partners: identity verification providers, document verification services, and anti-fraud tools that assist us in meeting regulatory requirements.
Marketing and analytics partners: email marketing platforms, analytics tools, and advertising networks that help us deliver and measure marketing campaigns, subject to your consent where required.

Regulators and Authorities

Licensing and supervisory authorities in Curaçao (including Antillephone N.V. and/or the Curaçao Gaming Control Board) for regulatory reporting and compliance checks.
Law enforcement agencies, courts, and other public authorities where we are required to disclose data by law, regulation, legal process, or enforceable request.
Foreign authorities and regulators where required by applicable international cooperation mechanisms or cross-border investigations.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of our business, personal data may be transferred to potential or actual buyers, advisers, or new controlling entities, subject to confidentiality and data protection safeguards.

Affiliates and Advertising Networks

We may share limited information with affiliate partners who refer players to Solcasino, such as affiliate identifiers and aggregated performance statistics. Identifiable personal data is minimized or anonymized where feasible.
We may work with advertising networks and third-party platforms to display ads and measure campaign performance. Such partners may use cookies and similar technologies, subject to your consent where required by law. We do not permit such partners to use your data for their own unrelated purposes without your consent.

We do not sell your personal data to third parties in the sense of granting them general rights to use your data for their own commercial purposes unrelated to the provision of services on sol-ca.com.

International Transfers

OBSERVE: Data may be transferred across borders due to our international structure and service providers. EXPAND: We must explain destinations and safeguards. REFLECT: This addresses concerns regarding transfers outside a user's home jurisdiction.

Because GALAKTIKA N.V. is registered in Curaçao and Unionstar Limited is registered in Cyprus, and because we use third-party service providers worldwide, your personal data may be transferred to and processed in countries outside your province or country of residence, including:

Curaçao (primary location of the Operator and gaming license)
Cyprus (payment processing and financial operations)
Member States of the European Economic Area (EEA) where certain technical or marketing providers are located
Other jurisdictions (e.g., the United States or other countries) where global hosting or security providers might operate data centers

In all such cases, we take appropriate safeguards designed to protect your personal data in accordance with applicable data protection standards, which may include:

Contractual clauses with service providers that impose data protection obligations comparable to those under the GDPR or similar standards (e.g., Standard Contractual Clauses where legally required in the EU context)
Technical safeguards such as encryption in transit and at rest, strict access controls, and data minimization
Organizational policies and internal procedures limiting access to personal data to authorized personnel only, for legitimate purposes

By using sol-ca.com, you understand that your data may be processed in countries which may have different data protection laws than those in your home province, yet we will take reasonable steps to ensure an adequate level of protection consistent with this Privacy Policy.

Data Retention

OBSERVE: Data must not be kept longer than necessary. EXPAND: We define retention periods by category and purpose, considering legal obligations. REFLECT: This gives users clarity on how long their information is stored and under what conditions it is deleted or anonymized.

Player account and identity data: We typically retain core account data (identity, KYC documentation, contact details) for the duration of your active account and for a period of up to 5 - 7 years after account closure, depending on applicable AML/CTF, financial, and gaming regulations in Curaçao and other relevant jurisdictions.
Financial and transaction records: Records of deposits, withdrawals, bets, wins/losses, and related financial information are generally retained for at least 5 - 7 years from the date of the relevant transaction, for auditing, accounting, tax, and regulatory reasons.
Customer support and complaints data: Communications with customer support, complaint files, and dispute-resolution records are retained for the duration of the relationship and for at least 3 - 5 years after the final resolution of a case, to evidence our handling of issues and for legal defense.
Marketing data: Information about your marketing preferences and communication history is retained for as long as you remain subscribed and up to 2 years after your last interaction with our marketing communications, unless you unsubscribe earlier. We may retain a suppression list to respect your opt-out request.
Technical and analytics data: Logs, cookies-related data, and analytics information are typically retained in identifiable form for up to 24 months, after which they may be aggregated or anonymized, subject to security and regulatory requirements.
Responsible gambling and exclusion data: Data regarding self-exclusion, imposed limits, and responsible gambling incidents may be retained for at least 5 years after expiration of the relevant measure, to prevent circumvention and to comply with responsible gambling obligations.

When the retention period expires or the data is no longer necessary for the purposes for which it was collected, we will either securely delete or irreversibly anonymize the information, unless further storage is required by law.

Your Rights

OBSERVE: Even though our primary regulatory base is Curaçao, we aim to align with international best practices such as the GDPR, and to be compatible with Canadian privacy principles. EXPAND: We describe key rights (access, rectification, deletion, restriction, objection, portability, consent withdrawal) and how to exercise them. REFLECT: This empowers users and ensures procedural clarity.

Available Rights

Right of access: You may request confirmation whether we process your personal data and obtain a copy of such data, along with information about the processing.
Right to rectification: You may request correction of inaccurate or incomplete personal data. In many cases you can correct data directly in your account settings.
Right to deletion ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal ground applies), or where required by applicable law. We may need to retain certain data to comply with AML, gaming, and financial regulations or to defend legal claims.
Right to restriction of processing: You may request that we restrict processing in certain circumstances, for example while we verify the accuracy of data or when you object to processing.
Right to object: You may object to processing based on our legitimate interests, especially for direct marketing. When you object to direct marketing, we will cease such processing.
Right to data portability: Where technically feasible and subject to legal limitations, you may request your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller.
Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time (e.g., by unsubscribing from marketing emails or changing your preferences in your account), without affecting the lawfulness of prior processing.

How to Exercise Your Rights

Submit a request: Send an email to [email protected] or [email protected] with a clear description of your request and sufficient information to verify your identity (such as username, registered email, and security information).
Verification: For your security, we may request additional information or documentation to verify your identity before acting on the request.
Response time: We aim to respond to all legitimate requests within 30 days of receipt. If your request is particularly complex or we receive numerous requests, we may extend this period once by up to a further 30 days, in which case we will inform you.
Fees: Requests are normally handled free of charge. We may charge a reasonable fee or refuse to act on clearly unfounded or excessive requests, particularly where they are repetitive.

Nothing in this Privacy Policy limits rights that may be available to you under applicable Canadian privacy legislation (such as federal PIPEDA or substantially similar provincial laws) or other relevant international data protection frameworks. We will endeavour to handle your requests in a way that is consistent with such principles, even though our main establishment is outside Canada.

Cookies & Tracking Technologies

OBSERVE: Cookies are used for core functionality, analytics, and marketing. EXPAND: We explain types and management options. REFLECT: This section enables informed choice and transparency regarding online tracking.

Types of Cookies We Use

Strictly necessary (functional) cookies: These cookies are essential for the operation of the Website and for providing the services you request, such as logging in, maintaining sessions, processing bets, and ensuring security. They cannot be disabled via our systems, although you may block them in your browser (which could impair functionality).
Preference cookies: These remember your choices (such as language, region, and interface settings) and personalise your experience.
Analytics and performance cookies: These collect information about how visitors use the Website, such as pages visited and error messages, to help us improve performance and usability. Data is often aggregated or pseudonymized.
Advertising and targeting cookies: These may be set by us or our advertising partners to build a profile of your interests and show you relevant ads, including retargeted offers. They may track your activity across different websites and devices.
Third-party cookies: Our partners, such as analytics providers, payment providers, and affiliate networks, may set their own cookies on your device, subject to their own privacy policies.

Managing Cookies

You can manage cookies through your browser settings, where you may block or delete cookies from specific sites or all sites.
You may also manage certain cookies and preferences via internal tools (e.g., cookie consent banners or settings panels) on sol-ca.com, where available.
Disabling certain cookies may affect the functionality and performance of the Website, including your ability to log in, place bets, or access personalized features.

By continuing to use the Website without changing your browser or cookie settings, you agree to our use of cookies and similar technologies as described in this Privacy Policy and any dedicated Cookie Policy on https://sol-ca.com/en/privacy-policy.

Data Security

OBSERVE: Protecting personal data is essential for regulatory compliance and user trust. EXPAND: We use a combination of technical, organizational, and physical controls. REFLECT: This section outlines our security approach while recognizing that no system is entirely risk-free.

Technical Measures

Encryption in transit: We use Transport Layer Security (TLS 1.2 or higher) to encrypt data transmitted between your browser and our servers, helping protect it from interception.
Encryption at rest: Sensitive data stored in our systems or with trusted third-party providers is protected using industry-standard encryption and hashing mechanisms, including hashed passwords and tokenized payment information where applicable.
Access controls: Access to personal data is restricted based on the principle of least privilege. Only authorized personnel, who require access for their job functions, can access specific categories of data.
Network and system security: Firewalls, intrusion detection and prevention systems, anti-malware controls, and secure configuration practices are used to protect our infrastructure.
Secure development: We apply security best practices in software development and regularly test our systems for vulnerabilities.

Organizational and Procedural Measures

Staff training: Employees and contractors with access to personal data receive training on information security, data protection, and confidentiality obligations.
Confidentiality commitments: Staff and service providers are bound by confidentiality obligations and, where applicable, data processing agreements.
Incident response: We maintain procedures for detecting, investigating, and responding to security incidents. Where required by law, we will notify relevant authorities and affected individuals without undue delay.
Standards alignment: Where feasible, we seek to align our security controls with recognized industry standards (such as ISO 27001-like frameworks). Our payment partners may also maintain PCI DSS compliance for handling card data.

While we take reasonable measures to protect personal data, no security system is completely impenetrable. You are responsible for keeping your account credentials confidential and for choosing strong, unique passwords and enabling any security features we may offer.

Complaints & Contacts

OBSERVE: Users need clear channels to raise concerns or complaints. EXPAND: We outline internal steps and external escalation. REFLECT: This promotes accountability and trust.

How to Contact Us

General and privacy inquiries: [email protected]
Complaints and escalations: [email protected]
Postal address (operator headquarters): GALAKTIKA N.V., Scharlooweg 39, Willemstad, Curaçao
Payment processing office (not for general correspondence unless indicated): Unionstar Limited, Agias Fylaxeos & Zinonos Rossidi 2, 1st Floor, 3082 Limassol, Cyprus

Internal Complaint Procedure

Step 1 - Submit complaint: Send a detailed description of your concern to [email protected], including your username, registered email, dates, and any supporting evidence.
Step 2 - Acknowledgment: We will acknowledge receipt of your complaint as soon as reasonably possible, typically within 72 hours.
Step 3 - Investigation: Our complaints and data protection teams will investigate the matter, which may involve reviewing logs, communications, and relevant internal policies.
Step 4 - Response: We aim to provide a substantive response within 30 days from acknowledgment. If additional time is required (for example, due to complexity), we will inform you of the delay and expected timeframe.

Escalation to Supervisory or ADR Bodies

If you are not satisfied with our response or believe that we are processing your personal data in a manner that violates applicable data protection standards, you may have the right to lodge a complaint with a competent data protection or consumer authority in your jurisdiction. As our primary regulation is in Curaçao, there may not be a single dedicated data protection authority; however, you may typically contact:

Curaçao gaming regulator (for gaming regulatory aspects): see https://gamingcontrolcuracao.org for contact details and guidance.
Canadian privacy regulators (for Canadian residents): You may contact the Office of the Privacy Commissioner of Canada (OPC) or, where applicable, the privacy commissioner of your province or territory. Details are available at https://www.priv.gc.ca.
Alternative dispute resolution (ADR): For certain gambling-related disputes, you may use recognized ADR or mediation services such as AskGamblers (https://askgamblers.com/online-casinos/reviews/sol-casino), which may help facilitate resolution of complaints.

Before contacting external bodies, we encourage you to first allow us to address your concerns directly, as this is often the fastest and most effective route to resolution.

Updates

OBSERVE: Privacy policies must evolve as services and laws change. EXPAND: We define how we will notify users and manage versions. REFLECT: This ensures continued transparency and informed use.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. The updated version will be posted at https://sol-ca.com/en/privacy-policy and will be effective when published, unless otherwise stated.

Notification Procedures

Minor changes: For non-material updates (e.g., clarifications, formatting changes), we may simply update the posting date at the bottom of the Policy.
Material changes: For significant changes that affect your rights or how we process your personal data, we will provide additional notice, which may include:
- Email notifications to the email address associated with your account
- Prominent banners or pop-up notices on sol-ca.com
- Notifications in your account dashboard or message center

Advance Notice and Your Options

Where feasible and required by applicable standards, we will provide you with at least 30 days' advance notice before material changes take effect.
If you do not agree with the updated Privacy Policy, you may choose to stop using our services and request closure of your account and, where legally permissible, deletion or restriction of your personal data.
Continued use of the Website after the effective date of the updated Privacy Policy will be deemed to constitute your acceptance of the changes.

Last updated: January 2026