Written by M. Glendinning, iGaming Content Editor
Reviewed by L. Nikoghosyan, Gambling Compliance Expert — Meet our team
Last updated: 12.07.2026
Last updated: January 1, 2026
Spicy (operated at spicy-ca.com) takes your privacy seriously. This Privacy Policy explains what personal information we collect, why we collect it, and how we use it. By using our website and services, you agree to the practices described here.
We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. If you're an Ontario player, additional protections apply under iGaming Ontario's regulatory framework.
Spicy is an online casino platform serving Canadian players. Our registered address and licensing information are available on request. For privacy-related questions, contact our Privacy Officer at [email protected].
We collect personal information when you register, play, or contact us. This includes:
We don't collect more than we need. Everything on that list has a specific purpose tied to running a safe, legal gambling platform.
There are a few core reasons we need your data. First, we're legally required to verify your identity and age before you can gamble on our platform. Second, we have obligations under Canadian anti-money laundering laws that require us to keep records of financial transactions. Third, we use your information to manage your account, process payments, and provide customer support.
We also use aggregated, anonymised data to improve our services and understand how players use the site. This data can't be traced back to you personally.
Under PIPEDA, we process your personal information based on your consent (given when you register), the performance of our contract with you, and our legal obligations as a licensed gambling operator. You can withdraw consent at any time, though this may mean we can no longer provide services to you.
We don't sell your personal information. Ever. We may share it with:
Any third party we work with is contractually bound to protect your data and use it only for the purpose we've specified.
We keep your personal information for as long as your account is active and for a minimum of five years after account closure. This is required by Canadian anti-money laundering regulations. After that period, we securely delete or anonymise your data.
You have the right to access the personal information we hold about you, request corrections if something is inaccurate, and ask us to delete your data (subject to our legal retention obligations). To make a request, email [email protected]. We'll respond within 30 days.
If you're not satisfied with how we've handled your information, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
We use industry-standard encryption (SSL/TLS) to protect data in transit and store your information on secure, access-controlled servers. Our team undergoes regular privacy and security training. No system is 100% foolproof, but we take every reasonable step to protect your data.
Our services are strictly for adults aged 19 and over (18+ in Alberta, Manitoba, and Quebec). We do not knowingly collect personal information from anyone under the legal gambling age. If we discover we've done so, we'll delete that information immediately.
We may update this Privacy Policy from time to time. When we do, we'll post the revised version on this page with a new effective date and notify you by email if the changes are significant. Your continued use of the site after any update means you accept the revised policy.