Privacy Policy

This Privacy Policy explains how N1 Interactive Ltd, operating the website n1-ca.com for the brand N1 Casino (the "Casino", "we", "us", "our"), collects, uses, discloses, and protects personal data of players and visitors from Canada (excluding Ontario). It applies to all users who access or use n1-ca.com or related services. By creating an account, using our services, or visiting our website, you acknowledge this Privacy Policy. This Privacy Policy is effective as of 1 January 2026 and supersedes all earlier versions.

Who We Are

OBSERVE: The operator details and contacts must be clearly identified for regulatory transparency and for users to exercise their privacy rights.

EXPAND: We must specify the legal entity, registration, licensing, and a responsible contact point for privacy matters.

REFLECT: The following information provides users and regulators with the necessary identification and contact channels.

The N1 Casino services available at https://n1-ca.com are owned and operated by:

Operator: N1 Interactive Ltd
Legal form: Limited company incorporated under the laws of Malta
Company registration number: C 81457
Registered and legal address: 206, Wisely House, Old Bakery Street, Valletta VLT1451, Malta
Gaming licence: MGA/B2C/394/2017 issued by the Malta Gaming Authority, valid at least through 2026

For privacy and data protection matters, you may contact our data protection contact point:

Data Protection Contact / Data Protection Department: N1 Interactive Ltd - Privacy
Email (primary for privacy requests): [email protected]
Email (support-related questions that may involve personal data): [email protected]
Postal contact: N1 Interactive Ltd, 206, Wisely House, Old Bakery Street, Valletta VLT1451, Malta (Attn: Data Protection)

When contacting us, please indicate that your request concerns the N1 Casino services on n1-ca.com.

What Personal Data We Collect

OBSERVE: To operate an online casino compliant with Maltese and Canadian requirements, we must collect identity, contact, technical, financial, and behavioural data.

EXPAND: Data categories must be specified so users understand what is collected directly from them and what is generated automatically.

REFLECT: The following list groups data by category and source in a transparent manner.

1. Identification and Contact Data

Full name, date of birth, and gender (if provided)
Residential address, country and province/territory of residence
Email address (e.g., the email used to register your account)
Telephone number, if you provide it for verification or support
Copy or details of identity documents (passport, ID card, driver's licence) and proof of address (e.g., utility bill, bank statement) for KYC/AML checks

2. Account and Gameplay Data

Username, account ID and password (stored in hashed form)
Account settings, preferences, language, and communication choices
Game activity (games played, session times, stakes, wins and losses, bonus usage, tournament participation)
Responsible gambling data (deposit limits, loss limits, self-exclusion details, cooling-off periods)

3. Financial and Payment Data

Payment method information (e.g., partial card details, e-wallet identifiers, payment account references). Full payment card data is typically processed by secure payment processors and not stored in full by us.
Deposit and withdrawal histories, including amounts, dates, currencies, and related transaction IDs
Verification data linked to source of funds or source of wealth, when required by AML regulations

4. Technical and Usage Data

IP address and approximate location derived from IP (e.g., province, city)
Device information (device type, operating system, browser type and version, language settings, screen resolution)
Log data (access times, pages viewed, clicks, referring URLs, error logs, login attempts, session duration)
Unique identifiers, where applicable (cookies, device IDs, session IDs)

5. Behavioural, Analytics and Marketing Data

Gameplay patterns, preferred games, betting frequency, risk indicators
Interaction with emails and marketing communications (e.g., open rates, unsubscribe actions, link clicks)
Participation in promotions, loyalty programs, tournaments and related performance

6. Communication Data

Records of communications with our customer support (email exchanges, chat logs, complaint submissions, responsible gaming discussions)
Information you provide in surveys, feedback forms, or reviews (where applicable)

7. Cookies and Similar Technologies

Cookies stored on your device to remember your preferences, authenticate your sessions, and improve website performance
Web beacons, pixels, and similar technologies that help us measure usage and the effectiveness of our marketing
Third-party analytics and advertising cookies, where consented, to conduct statistical analysis and personalized marketing (subject to your choices described below)

Where required by applicable law or best industry practice, certain information will be mandatory for regulatory and contractual reasons (for example, identification data to open and maintain an account and to comply with AML/KYC obligations). If you do not provide such data, we may not be able to offer or continue to provide our services.

Legal Basis for Processing

OBSERVE: Operating an online casino for Canadian players under an EU licence involves overlapping legal concepts similar to GDPR and Canadian privacy principles.

EXPAND: We must clearly identify and separate processing based on contract, legal obligation, legitimate interests, and consent.

REFLECT: The following grounds explain why and when we are legally permitted to process personal data.

1. Performance of a Contract

We process personal data when it is necessary to enter into and perform our contract with you, including our Terms and Conditions. This includes:

Creating and managing your N1 Casino player account on n1-ca.com
Providing access to games and related functionalities
Processing deposits, bets, wins, withdrawals, and payment instructions
Providing customer support and communicating with you about your account
Implementing responsible gambling tools you choose to use (e.g., limits, self-exclusion)

2. Compliance with Legal and Regulatory Obligations

We process data where necessary to comply with obligations under:

Anti-money laundering and counter-terrorist financing laws (AML/CFT)
Requirements imposed by the Malta Gaming Authority and other competent authorities
Record-keeping obligations (for example, financial transaction records for a legally specified period)
Responsible gambling and player protection rules, including detection of problem gambling patterns
Sanctions and law enforcement requirements, where applicable

3. Legitimate Interests

We rely on our legitimate interests to process personal data, provided such interests are not overridden by your privacy rights and freedoms. These interests include:

Maintaining the security and integrity of our platform, detecting and preventing fraud, abuse, collusion, and other prohibited behaviour
Enforcing our Terms and Conditions and protecting our legal rights
Monitoring performance, conducting analytics, and improving our website, games, and services
Personalizing the user experience (for example, content and game recommendations) where consent is not legally required
Internal training, quality assurance, and audit purposes

4. Consent

In certain cases, we rely on your consent. This includes:

Sending electronic marketing communications (email, SMS, push notifications) where required under applicable laws
Using certain non-essential cookies and similar technologies for analytics, advertising, and personalization
Processing special categories of data, where such data is voluntarily provided and processing is necessary and permitted

You can withdraw your consent at any time (see "Your Rights" below). Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal and may limit certain features or services.

Purpose of Processing

OBSERVE: Players must understand why their data is used and how this ties into providing a safe, compliant gambling environment.

EXPAND: Purposes should be grouped in a way that matches regulatory expectations and user expectations.

REFLECT: The purposes below align our contractual, legal, and legitimate interests with transparent disclosures.

1. Provision and Administration of Casino Services

Registering and maintaining player accounts on n1-ca.com for N1 Casino
Providing access to casino games and associated functionalities
Processing deposits, bets, bonuses, rewards, wins, and withdrawals
Providing multi-language user interface and personalized content where appropriate

2. Compliance, Security and Fraud Prevention

Conducting KYC (Know Your Customer) checks and verifying your identity and age
Fulfilling AML/CFT, licensing, tax (where applicable), and record-keeping requirements
Detecting and preventing misuse, fraud, money laundering, bonus abuse, account takeovers, or other illegal or irregular activities
Maintaining the security and integrity of our systems, applications, and networks

3. Responsible Gambling and Player Protection

Monitoring play patterns to identify potential problem gambling behaviour
Implementing and honouring self-exclusion, time-outs, and account limits
Contacting players, where appropriate, to provide information or interventions related to responsible gambling
Cooperating with relevant support organizations and regulatory authorities, where required

4. Customer Support and Communication

Responding to your questions, complaints, or requests via email or other channels
Notifying you about changes to our services, terms, or policies
Managing dispute resolution and complaint handling processes

5. Analytics, Service Improvement and Personalization

Conducting statistical analysis of how players use our website and services
Improving user interface, performance, and game selection based on aggregated behaviour
Testing new functionalities, games, and tools to enhance your experience
Personalizing content and recommendations where such personalization is compatible with applicable laws and your settings

6. Marketing and Promotions

Sending marketing communications (newsletters, bonuses, promotions) in accordance with your preferences and applicable laws
Running loyalty programs, tournaments, special offers, and targeted campaigns
Measuring and improving campaign effectiveness (e.g., which promotions are most relevant to Canadian players)

Disclosure & Sharing

OBSERVE: Effective privacy compliance requires transparent disclosure of recipients and logic of data sharing.

EXPAND: We must distinguish service providers, payment partners, regulatory bodies, affiliates, and advertising networks.

REFLECT: The following categories of recipients help users understand with whom their data may be shared and why.

1. Group Companies and Business Partners

Other entities within the N1 Interactive Ltd group, to the extent necessary to administer shared services, IT resources, and compliance functions.
Platform and software providers (for example, providers referenced in our ecosystem such as SoftSwiss) who supply the underlying technology used to operate the casino.

2. Payment Service Providers and Financial Institutions

Banks, card schemes, e-wallet providers, prepaid card providers, and other payment institutions that process deposits and withdrawals.
These partners receive only the data necessary to authorize and complete your transactions, to prevent fraud, and to comply with AML/CFT rules.

3. Technical and Operational Service Providers

Hosting providers, IT security companies, data storage and backup providers
Customer support tools (e.g., ticketing or live chat systems)
Analytics and performance monitoring services
Email and messaging platforms used to send transactional and marketing communications

4. Regulators, Authorities and Dispute Resolution Bodies

Malta Gaming Authority (MGA) and other competent regulatory bodies, as required under our licence (e.g., for reporting suspicious activity, responsible gambling interventions, or audits)
Law enforcement agencies, courts, and government authorities, when we are legally obliged to share data (for example, investigation of fraud or other offences)
Alternative dispute resolution (ADR) providers such as ThePOGG, where you initiate a complaint and authorize the sharing of relevant data necessary to address your case

5. Affiliates and Marketing Partners

Affiliates and marketing networks that refer players to n1-ca.com, for the purpose of verifying referrals, tracking performance, and calculating commissions.
Advertising networks and analytics services that may set third-party cookies or receive pseudonymous identifiers, only where legally permitted and subject to your consent and choices.

6. Corporate Transactions

In the event of a reorganization, merger, acquisition, sale of assets, or similar corporate transaction involving N1 Interactive Ltd or the N1 Casino business, your data may be shared with prospective or actual purchasers and their advisers, subject to appropriate confidentiality obligations and applicable law.

We do not sell your personal data in the commonly understood sense. Any sharing for marketing or analytics purposes is carried out in compliance with applicable Canadian privacy principles and, where relevant, EU-style data protection standards, and subject to your choices.

International Transfers

OBSERVE: Data of Canadian players is processed by an EU-based operator using global service providers.

EXPAND: Transfers may occur within the EEA, to Canada, and to other countries with varying data protection regimes.

REFLECT: Appropriate safeguards and contractual mechanisms must be described.

Your personal data may be transferred to and processed in the following jurisdictions:

Malta and other European Economic Area (EEA) countries: This includes our head office, hosting environments, and key technology partners.
Canada: Some processing occurs in or relates to Canada, for example when you access our services and when we use Canadian or North American service providers.
Other countries: Certain IT, payment, analytics, or support providers may be located in or process data from jurisdictions outside the EEA and Canada (for example, the United States or other third countries).

When personal data is transferred outside the EEA and/or outside your province or country of residence, we take appropriate measures to protect it, which may include:

Using data processing agreements and Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent safeguards where applicable.
Ensuring that recipients are subject to adequate data protection obligations by law, contract, or corporate rules.
Applying additional technical and organizational security measures, such as encryption and access controls.

By using n1-ca.com and providing your data, you understand that your data may be processed in countries that may have different data protection standards than those in your home province, but that we will take reasonable steps to ensure an appropriate level of protection consistent with this Privacy Policy.

Data Retention

OBSERVE: Gambling, AML and regulatory requirements impose minimum retention periods, while privacy principles require that data not be kept longer than necessary.

EXPAND: We must articulate retention rules by category and explain criteria for deletion or anonymization.

REFLECT: The following retention framework balances regulatory needs and user privacy.

1. General Retention Principles

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements.
When data is no longer needed, we will securely delete, anonymize, or aggregate it so that it can no longer be associated with an identifiable individual.

2. Typical Retention Periods

Account and identification data: Typically kept for the duration of your active account and for up to five (5) years after account closure or your last transaction, or longer if required by applicable AML, gaming, or financial regulations.
Transaction and gameplay records: Retained for at least five (5) years from the date of the relevant transaction or event, or longer where legal obligations require.
KYC and AML documentation: Retained for minimum periods required by AML/CFT laws and regulatory guidelines, generally at least five (5) years after the business relationship ends.
Marketing-related data: Retained while you remain subscribed to our marketing communications and for a short period afterwards to document your preferences and any withdrawal of consent.
Customer support communications: Typically kept for up to five (5) years from the date of communication, subject to ongoing disputes or investigations requiring longer retention.

3. Criteria for Extended Retention

Ongoing disputes, investigations, or legal proceedings involving you or us
Statutory limitation periods during which legal claims can be made
Regulatory audits or inquiries requiring records to remain available

Once retention periods expire, we will take steps to irreversibly anonymize or securely delete the data, unless continued retention is justified by one of the above criteria or by prevailing law.

Your Rights

OBSERVE: While Canadian privacy law differs from the GDPR and Mexican law, key principles such as access, correction, and control are similar.

EXPAND: We align our practices with EU-style rights for transparency and user control, even where not strictly mandated for Canadian players.

REFLECT: The following rights and procedures enable you to exercise meaningful control over your data.

1. Overview of Your Rights

Subject to applicable law and certain limitations, you may have the following rights in relation to your personal data:

Right of access: To obtain confirmation whether we process your personal data and to receive a copy of such data, together with information about our processing.
Right to rectification: To request correction of inaccurate or incomplete personal data.
Right to erasure (right to be forgotten): To request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent and there is no other legal basis, or when processing is unlawful, subject to legal and regulatory retention requirements (e.g., AML and gaming laws).
Right to restriction of processing: To request that we limit the processing of your data, for example while we verify its accuracy or the basis for processing.
Right to object: To object to processing based on our legitimate interests, including profiling related to such interests, on grounds relating to your particular situation. You also have an unconditional right to object to direct marketing at any time.
Right to data portability: To receive certain personal data you have provided to us in a structured, commonly used and machine-readable format, and to request us to transmit that data to another controller where technically feasible and where the processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: Where processing is based on your consent (for example, marketing communications or certain cookies), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Some of these rights are conceptually similar to rights recognized under Mexican data protection regulations (such as access, rectification, cancellation, and opposition to processing), although those Mexican laws generally apply to residents of Mexico. We adopt comparable standards as a matter of best practice and to align with robust privacy protections.

2. How to Exercise Your Rights

Submit a request: You can exercise your rights by contacting us at [email protected] or, for support-related questions that may involve personal data, at [email protected]. Please clearly state your identity, your account details (if applicable), the right you wish to exercise, and the scope of your request.
Verification: For security and privacy reasons, we may ask you to provide additional information to verify your identity before acting on your request. This prevents unauthorized access to your data.
Response timeframe: We aim to respond to all valid requests as soon as reasonably possible and in any event within thirty (30) days of receipt. If your request is particularly complex or numerous requests are received, we may extend this period, and we will inform you of any such extension and the reasons.
Fees: We generally handle requests free of charge. However, where allowed by law, we may charge a reasonable fee or refuse to act on manifestly unfounded or excessive requests, particularly due to their repetitive nature.
Limitations: Your rights may be limited by applicable laws and regulatory obligations, particularly those relating to gambling, AML/CFT, and record-keeping. For example, we may not always be able to delete data that we are legally required to keep.

3. Marketing Preferences

You may opt out of marketing emails at any time by using the "unsubscribe" link contained in each message or by contacting us at [email protected].
Even if you opt out of marketing, we may still send you service or transactional messages relating to your account (for example, security alerts, policy updates, or account notifications).

Cookies & Tracking Technologies

OBSERVE: Cookies are central to authentication, security, and analytics on an online casino site.

EXPAND: We must differentiate between necessary and optional cookies and explain user control mechanisms.

REFLECT: The following structure aligns with industry best practice and enhances transparency for Canadian users.

1. Types of Cookies We Use

Strictly necessary (session) cookies: These cookies are essential for the functioning of the site and enabling you to log in, maintain sessions, secure your account, and perform transactions. Without them, our services cannot be provided properly.
Functional (persistent) cookies: These remember your preferences (e.g., language, display settings, saved credentials where you choose) and enhance user experience across visits.
Analytics and performance cookies: These help us understand how visitors use n1-ca.com (for example, which pages are most visited, error rates, click paths) so we can improve performance and usability. These may be first-party or third-party cookies.
Advertising and targeting cookies: Where permitted and subject to your choices, these cookies are used to deliver more relevant ads and promotional messages, limit the number of times you see an ad, and measure the effectiveness of promotional campaigns.

2. Similar Technologies

We may use web beacons, pixels, and tracking URLs in our emails or on our website to understand whether messages are opened and which links are clicked.
These technologies operate in conjunction with cookies and allow us to better tailor content and communications.

3. Managing Cookies

Browser settings: Most web browsers allow you to manage cookies through their settings, including blocking certain types of cookies or alerting you when a website attempts to place a cookie on your device. Please note that disabling strictly necessary cookies may impair or prevent the use of our services.
In-site preferences: Where implemented, we may offer internal cookie or privacy preference panels allowing you to configure which optional cookies and similar technologies are used.
Third-party opt-outs: For some third-party analytics or advertising services, you may have additional opt-out options through their own tools or industry initiatives, subject to availability in your jurisdiction.

For more detailed information on our cookies and to review any specific cookie categories and lifetimes, please refer to any dedicated cookie settings we may provide on n1-ca.com.

Data Security

OBSERVE: Security is critical due to the financial and sensitive nature of gambling-related data.

EXPAND: We must address technical, organizational, and procedural safeguards that meet or align with international standards.

REFLECT: The following safeguards demonstrate our commitment to protecting your personal data.

1. Technical Measures

Encryption in transit: We use modern transport-layer security (such as TLS 1.2 or higher) to protect data transmitted between your device and our servers.
Encryption at rest: Where appropriate, we apply encryption or equivalent measures to databases and storage systems containing sensitive information.
Access controls: Access to personal data is restricted based on role, necessity, and least-privilege principles. Strong authentication, including multi-factor authentication for critical systems, is implemented where appropriate.
Network and application security: Firewalls, intrusion detection systems, malware protection, and secure development practices are employed to reduce vulnerabilities.

2. Organizational Measures

Policies and training: We maintain internal data protection and security policies and provide training to relevant staff on confidentiality, privacy, and security obligations.
Vendor management: We select service providers that implement appropriate security measures and we enter into data processing agreements where required, imposing confidentiality and security obligations.
Access logging and monitoring: System access and administrative actions are logged and monitored to detect unusual or unauthorized activities.

3. Audits and Incident Response

Audits and assessments: We regularly review our security posture and may conduct internal or external audits and penetration tests in line with industry standards. While we may not be formally certified under specific frameworks such as ISO 27001 or SOC 2, we strive to align our controls with recognized best practices.
Incident response: We maintain procedures to identify, assess, and respond to suspected personal data breaches. If a breach occurs that is likely to result in a significant risk to your rights and freedoms, we will notify you and relevant authorities when required by applicable law.

While we take reasonable and appropriate measures to protect your data, no system is completely secure. You also play an important role by maintaining the confidentiality of your login credentials and using secure networks and devices.

Complaints & Contacts

OBSERVE: Users must have clear, multi-channel options to raise privacy-related questions or complaints.

EXPAND: Complaint handling should include internal escalation and reference to competent supervisory or consumer authorities where applicable.

REFLECT: The following procedure supports transparency and accessible redress.

1. Contacting Us

Primary privacy contact: [email protected]
Customer support (including privacy-related service issues): [email protected]
Postal mail: N1 Interactive Ltd, 206, Wisely House, Old Bakery Street, Valletta VLT1451, Malta (Attn: Data Protection)

2. Internal Complaint Procedure

Submission: Send us your complaint with as much detail as possible about your concerns, including relevant dates, account information, and a description of the issue.
Acknowledgement: We will acknowledge receipt of your complaint as soon as reasonably possible, typically within a few business days.
Investigation: We will investigate your complaint internally, which may involve consultation with relevant departments (e.g., compliance, security, customer support).
Response timeframe: We aim to provide a substantive response within thirty (30) days. If we require more time due to complexity, we will inform you and provide an estimated timeframe.
Outcome and follow-up: We will explain the outcome of our investigation, including any measures we propose to address your concerns, and provide information on further options if you remain dissatisfied.

3. Escalation to Supervisory or Consumer Authorities

Depending on your place of residence and the regulatory frameworks applicable to us, you may have the right to lodge a complaint with a competent data protection or gaming authority. Potential avenues include:

Malta Gaming Authority (MGA) - Player Support: For issues connected to gaming conduct, fairness, or certain aspects of player protection. See https://mga.org.mt/support/online-gaming-support.
Alternative Dispute Resolution (ADR) bodies: For disputes relating to gaming services, you may use ADR services such as ThePOGG (see https://thepogg.com/submit-complaint), which may require us to share relevant information to resolve your dispute.
Provincial or federal privacy authorities in Canada: Depending on your province, you may contact your provincial privacy commissioner, if applicable, or the Office of the Privacy Commissioner of Canada for privacy-specific concerns.

While Mexican data protection authorities are mainly competent for processing activities concerning individuals in Mexico, we strive to apply comparable high-level privacy protections to Canadian users of N1 Casino as a matter of best practice.

Updates

OBSERVE: Privacy policies evolve due to regulatory changes, service changes, and best-practice developments.

EXPAND: We must describe how users will be informed about updates and what options they have if they disagree.

REFLECT: The following versioning and notification framework ensures transparency and predictability.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or internal practices.
Material changes will be clearly indicated, and the "Last updated" date will be revised.

2. Notification Methods

Email notifications: For significant changes that materially affect your rights or the way we process your data, we will endeavour to notify registered players by email using the address associated with their N1 Casino account.
Website banners and notices: We may display prominent notices or banners on n1-ca.com to inform visitors and players about key updates.
Account dashboard alerts: Where appropriate, in-account notifications may be used to highlight important changes.

3. Advance Notice and User Options

Where feasible and appropriate, we will provide at least thirty (30) days' advance notice of material changes before they take effect, particularly where changes may significantly affect how we use your personal data.
If you do not agree with the updated Privacy Policy, you may close your account and cease using our services before the changes become effective. Continued use of n1-ca.com after the effective date will constitute acceptance of the revised Policy.

Last updated: January 2026

Material changes since previous versions may include clarification of Canadian market references, updates to retention periods aligned with 2026 regulatory expectations, and more detailed descriptions of cookies, international transfers, and user rights.