Your Privacy at LevelUp
Novatrix SRL is the data controller for personal information handled through LevelUp. This means we decide why and how that information is processed. We have also appointed a data protection officer to answer questions and handle rights requests.
Information we handle
We collect identity data such as your name, date of birth, nationality and ID details. Contact data includes your address, proof of address, email address and phone number. Financial and transaction data covers payment details, source-of-funds evidence, deposits and withdrawals.
We also process gaming data, including games, wagers, bonuses, login activity and responsible gaming measures. Technical data can include your IP address, location, browser, device platform and time zone. Marketing data records your preferences and communications with us.
Why we use it
We use personal information to manage your account, process transactions, verify your identity, answer requests and provide promotions. These activities are necessary to perform our contract with you.
Legal duties require us to carry out AML and KYC checks, apply responsible gaming measures and make required regulatory reports. Our legitimate interests support fraud prevention, risk management, technical improvement and protection of our operations and users. Marketing and personalization rely on your consent or our legitimate interests, as applicable.
Where information comes from
Information may come directly from you, identity and age verification providers, banks and payment providers, AML databases, regulators and responsible gaming databases. Business partners, including advertising and analytics providers, may supply pseudonymous data for marketing or service improvement.
Who may receive it
Companies in our group may receive the data they need to fight fraud and bonus abuse, to meet AML duties and to support responsible gaming. With your consent, group members or marketing partners may receive details for direct marketing. Game providers receive information needed to deliver games, while payment providers receive what they need to process transactions.
Data may also go to communication services, age, identity and fraud-verification tools, lawyers, consultants and other processors supporting defined tasks. We may disclose information to law enforcement or regulators when the law requires it. If we are involved in a merger, acquisition or sale, the buyer may receive personal information, and we will inform you before the transfer occurs.
How long we keep it
We retain personal information only as long as necessary for its purpose, taking legal requirements, the nature of the data and related risks into account. Anti-money-laundering rules require us to retain it for at least five years after account closure, so an earlier deletion request cannot be completed during that period.
We use reasonable technical, physical and administrative safeguards. No method of handling information can promise total protection, so keep your login details confidential.
Your choices and rights
Under PIPEDA and GDPR, you may withdraw consent subject to legal or contractual restrictions, access or correct your information, ask for deletion, limit or object to processing, move your data to another provider, stop marketing messages and complain to a data protection authority.
To ask a privacy question or exercise a right, contact [email protected].
Our site is meant for adults only, 19+ in most provinces and 18+ in Alberta, Manitoba and Quebec. If we learn that someone younger has given us personal information, we take appropriate steps with that data.