Introduction
OtoQuébec is an independent gaming platform for adults who are located in Québec. To open an account, confirm your age and where you are connecting from, and record your wagers, we have to process information about you. We collect as little as we can, and only for specific purposes.
This policy covers the otoquebec.com website, your My Account area and any exchanges you have with our support team. It was written with Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, in mind.
OtoQuébec is not affiliated with Loto-Québec and does not act on its behalf. The information you give us is not passed on to Loto-Québec unless the law requires it.
Data Controller
The organization responsible for your information is OtoQuébec, the operator of the platform. The operator’s registered details (legal name and address) will be published on the Contact Us page and in this section once confirmed.
As required by Law 25, OtoQuébec has a person in charge of the protection of personal information. That person oversees this policy, answers access and correction requests, and handles complaints. You can reach them at privacy@otoquebec.com.
Personal Information Collected
Depending on the services you use, we may collect the following:
- Identification: first and last name, date of birth, home address, email address, phone number.
- Verification: a copy of an identity document and the outcome of the check.
- Location: IP address and the result of the check confirming you are in Québec.
- Transactions: deposits, withdrawals and payment references, once payment methods are available.
- Gaming activity: tickets, stakes, bets, outcomes, limits and exclusions.
- Technical: device type, browser, chosen language, connection logs and cookies.
- Communications: messages sent through the contact form or by email.
We do not collect information about your health, political opinions or religious beliefs, and we will never ask for your password by email or phone.
Account Registration
To create an account, you provide your name, date of birth, email address and a password. Your password is stored as a one-way hash, so nobody at OtoQuébec can read it.
We use this information to identify you each time you sign in, to confirm that you are 18 or older, and to send you account notices (security alerts, changes to our terms, password resets). It is not used to send you advertising without your consent.
Only one account is allowed per person. If we find duplicate accounts, we may match them using the information provided in order to merge or close them.
Identity Verification
Before any real-money play and before your first withdrawal, we need to confirm that you are the person who registered, that you are of age and that you live in Québec. This protects minors, prevents identity theft and meets federal anti-money-laundering requirements.
What we may ask for. A valid government-issued photo ID, such as a driver’s licence or passport, and, if needed, a recent proof of address (a utility bill or bank statement). We do not ask for your Québec health insurance card or your Social Insurance Number to open an account.
How the document is handled. You upload it over an encrypted connection. Only the details we need are extracted: name, date of birth, address, expiry date and document number. If a specialized identity verification provider is engaged, it acts solely on our behalf under a contract that forbids it from using your information for any other purpose.
Who can see it. Access to identity documents is limited to the staff responsible for compliance, and every access is logged.
Outcome. If the check fails or the document cannot be read, we will tell you and you can submit another one. Until your identity is confirmed, real-money games and withdrawals stay locked. No final refusal is made by automated processing alone: a person will review your file if you ask.
Geolocation Data
Real-money games on OtoQuébec are only available to people who are physically in Québec at the moment they play. Living in Québec is not enough: if you are travelling outside the province, access to play is suspended until you return.
How the check works. The check runs on our servers, not in your browser. It relies first on your IP address and the approximate location derived from it. When that signal is not sufficient, we may ask you to allow your browser to share your device’s location; you are free to decline.
What does not count as proof.
- A Canadian IP address does not prove that you are in Québec.
- Choosing French or English on the site says nothing about where you are.
- The address on your account does not replace the location check.
When the check happens. At sign-in, before a real-money game opens and, where necessary, during a session. We may also detect a VPN, proxy server or other tool that hides your location; in that case the check is treated as inconclusive.
If your location cannot be confirmed. Real-money games are blocked and you will see the message “You must be physically located in Québec to access real-money games.” You can still view your account, your history and the responsible gambling tools.
What we keep. We do not track your movements continuously. For each check we keep the date and time, the method used, the IP address and the result (confirmed or refused). This information is used for compliance and fraud prevention and is never used for advertising.
Financial Information
All transactions on OtoQuébec are in Canadian dollars (CAD). No payment method is offered at this time: deposit and withdrawal options will only be displayed once their integration has been confirmed. This section describes how financial information will be handled at that point.
Payment details. Sensitive data, such as a full card number, will be entered directly with the payment provider and processed by it. OtoQuébec will not store your full card number or its security code; we will only receive a transaction identifier and, where applicable, the last digits so you can recognize the method used.
Transaction history. For each deposit or withdrawal, we will record the amount, date, type of transaction, its status and the provider’s reference. You will be able to view this history in My Account.
Account holder. The payment method must be in your name. We compare the cardholder or account holder name with the name on your OtoQuébec account to prevent fraud and the use of third-party funds.
Legal obligations. Some transactions may have to be reviewed or reported under federal proceeds of crime and terrorist financing legislation. We never sell your financial information.
Gaming Activity
Every gaming transaction creates a record. That record is what allows us to settle your bets correctly, respond to a complaint and show you an accurate history.
What is recorded:
- lotteries: tickets purchased, selections, the draw entered and any prize;
- casino: the game opened, stake, result of each round, session start and end;
- sports betting: event, market, selection, decimal odds accepted, stake and settlement;
- responsible gambling tools: deposit or time limits, breaks and self-exclusions.
Why we use it. To calculate and pay winnings, display your history, handle disputes, detect fraud and collusion, and meet record-keeping obligations.
Risk indicators. We may look at how your activity changes over time (a sharp rise in stakes, very long sessions, repeated deposits after losses) to spot signs of problem gambling. This is profiling within the meaning of Law 25. It is used only to offer you control tools or to contact you, never to encourage you to play more.
If you self-exclude, we keep that information to prevent the account from being reopened during the period you chose.
Device Information
When you visit the site, our servers automatically receive certain technical details: IP address, browser type and version, operating system, interface language, pages viewed, and the date and time of requests.
These logs keep the site running, help us spot unauthorized access attempts and support the location check. We do not combine them with data from other websites to build an advertising profile.
Cookies
The site uses a small number of cookies: a session cookie that keeps you signed in, one that remembers your age confirmation, one that stores your cookie choices and one for your language.
Optional cookies are off by default. The full list, how long each cookie lasts and how to change your choices are set out in our Cookie Policy.
Analytics
No analytics tool is installed on the site at present. If we add one, it will only be switched on with your consent, given through the cookie banner, and this policy will be updated to name the tool, its provider and the data it collects.
We would favour aggregated statistics that do not identify individuals, used to understand which pages are useful and where navigation causes problems.
Marketing
We will only send you promotional messages if you have given express consent, in line with Canada’s Anti-Spam Legislation. You can withdraw that consent at any time through the unsubscribe link in every message or in your account settings.
No promotion is currently offered. People who have self-excluded, or whose activity shows signs of risky gambling, receive no marketing at all, even if they consented earlier.
Service messages about your account (security, verification, changes to our terms) are not marketing and will continue to be sent.
Third-Party Services
To run the platform, we may use providers that process information on our behalf:
- website hosting and infrastructure;
- identity and location verification;
- payment processing, once payment methods are integrated;
- game and sports data providers, for displaying odds and settling bets;
- transactional email delivery.
Each provider is bound by a contract that limits its use of the information to the service it provides and requires it to protect that information. The list of providers will be published here once the agreements are confirmed.
Data Sharing
We do not sell or rent your personal information. We only share it with others in these situations:
- with our service providers, for the purposes described above;
- with public authorities, when required by law or by a court order;
- with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC), when federal law requires it;
- with a prospective buyer as part of a business transaction, subject to a confidentiality agreement;
- with your consent, for any other purpose.
International Transfers
Some providers may store or process information outside Québec, elsewhere in Canada or in another country. Before any personal information is communicated outside Québec, we carry out a privacy impact assessment, as Law 25 requires.
The transfer only goes ahead if that assessment concludes the information will be adequately protected, and it is covered by a written agreement. The information then remains subject to the laws of the country where it is held, including access requests from local authorities.
Data Retention
We keep your information for as long as your account is open. After it is closed, we keep only what the law requires, in particular identification records, financial transactions and gaming history required under federal proceeds of crime legislation, for the period that legislation sets.
Messages sent to support are kept as long as needed to deal with the request and document any dispute. Self-exclusion records are kept at least for the full exclusion period.
At the end of the retention period, information is securely destroyed or irreversibly anonymized.
User Rights
Under Québec law, you have the right to:
- know whether we hold information about you and obtain a copy;
- have inaccurate, incomplete or outdated information corrected;
- withdraw your consent to optional processing, such as marketing;
- ask for your computerized information to be sent to you in a structured, commonly used technological format;
- ask that information stop being disseminated or that a hyperlink be de-indexed, in the cases provided by law;
- be told what information was used when a decision is based exclusively on automated processing, and submit your observations to a person.
Write to privacy@otoquebec.com. We may ask you to confirm your identity before we reply, and we respond within the 30 days set by law. If you are not satisfied with our answer, you can contact the Commission d’accès à l’information du Québec.
Security
The site is only available over an encrypted connection (HTTPS). Passwords are hashed, sessions expire after a period of inactivity, and internal access to sensitive information is restricted and logged.
No system is flawless. If a confidentiality incident creates a risk of serious injury, we will notify the Commission d’accès à l’information and the people affected, and we keep a register of incidents as Law 25 requires.
On your side, use a unique password, never share it, and sign out on shared devices. If you think someone else has used your account, write to support@otoquebec.com right away.
Contact Information
For questions about this policy or to exercise your rights, contact the person in charge of the protection of personal information at privacy@otoquebec.com.
For questions about your account, your bets or a technical problem, write to support at support@otoquebec.com or use the form on the Contact Us page.
If gambling is causing you problems, the independent service Gambling: Help and Referral is free and confidential at 1 800 461-0140. It is not connected to OtoQuébec.
Policy Updates
We review this policy when our practices change, for example when we add a payment method, a provider or an analytics tool. The date of the most recent update appears at the top of the page.
If a change significantly affects how your information is used, we will let you know by email or through a notice in your account before it takes effect, and we will ask for fresh consent where the law requires it.