1.Who We Are
Aurora Play Lounge ("the platform", "we", "us") is a free social casino website operated by Duurzameregionaleontwikkeling Inc., a company incorporated in Ontario, Canada, with its office at 100 King St W, Toronto, ON M5X 1A9. As the operator, Duurzameregionaleontwikkeling Inc. is the data controller responsible for personal information processed through this website.
We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation such as Québec's Law 25. This policy is written to meet those standards and to be readable by a human being.
2.Scope of This Policy
This policy covers all personal information collected through duurzameregionaleontwikkeling.com, including its French-language pages, the support chat, the contact form, registration and login features, and optional Aurora Coins subscriptions.
It does not cover third-party websites we link to (such as responsible-gambling helplines or the OpenStreetMap service that renders our office map), which operate under their own privacy policies.
3.Information We Collect
We collect only what the platform genuinely needs:
- Account data — display name, email address and a hashed password when you register.
- Gameplay data — fictional coin balance, games played, session length and leaderboard standings.
- Subscription data — your chosen plan, renewal dates and billing status (payment card details are handled by our payment processor and never stored on our servers).
- Communication data — messages you send via the contact form or support chat, and our replies.
- Technical data — IP address, browser type, device class, language preference and standard server logs, used for security and performance.
We do not collect government identifiers, precise geolocation, biometric data or any financial information beyond what subscription billing requires.
4.How We Use Information
Personal information is used to: create and operate your account; save your fictional coin balance and preferences; process and manage optional subscriptions; respond to support requests; keep the platform secure and prevent abuse; comply with legal obligations; and understand aggregate usage so we can improve games and pages.
We do not use your information for third-party advertising, we do not build behavioural profiles for sale, and we do not make automated decisions that produce legal or similarly significant effects about you.
5.Legal Bases and Consent
We process personal information on the following grounds: performance of our contract with you (operating your account and subscription), your consent (optional communications and non-essential cookies), legitimate interests (security, fraud prevention, service improvement) and legal obligations (tax and accounting records for subscription payments).
Where consent is the basis, it is requested clearly and can be withdrawn at any time without affecting your access to the free platform.
6.Cookies and Similar Technologies
We use a small set of cookies and browser-storage entries: essential ones that keep you logged in and remember your language, and functional ones that store your fictional coin balance locally. We do not run third-party advertising trackers.
The complete list, including names, purposes and lifetimes, is maintained in our dedicated Cookie Policy.
7.Subscription and Payment Data
Aurora Coins subscriptions are billed by a PCI-DSS-compliant payment processor. Your card number never touches our infrastructure; we receive only a confirmation token, the plan identifier and the billing status needed to credit your fictional coins and manage renewals.
Billing records are retained as required by Canadian tax law (see Section 10). Cancelling a subscription stops all future billing immediately; it does not require contacting support, though we are happy to help.
8.Sharing and Disclosure
We never sell or rent personal information. We share it only with: service providers who host our infrastructure, deliver email or process payments, each bound by contract to use the data solely for our instructions; authorities, where a valid legal demand compels disclosure; and a successor entity, in the unlikely event of a merger or acquisition, under the same protections as this policy.
Aggregate, de-identified statistics (for example, "most-played game this month") may be published, but they can never be traced back to an individual.
9.International Transfers
Our primary infrastructure is located in Canada. Some service providers may process data in the United States or the European Union; where that happens, we use contractual safeguards consistent with PIPEDA guidance, and the data remains subject to this policy.
10.Data Retention
Account data is kept while your account is active and deleted within 30 days of account deletion. Support correspondence is kept for 24 months. Technical logs rotate within 90 days. Billing records for subscriptions are retained for 7 years, as required by the Canada Revenue Agency, even after account deletion — limited strictly to what tax law demands.
11.Security Measures
We protect personal information with TLS encryption in transit, encryption at rest for account records, hashed and salted passwords, role-based access controls, audit logging and regular security reviews. No system is perfectly secure; in the event of a breach creating a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
12.Your Rights
You may at any time: access the personal information we hold about you; correct inaccurate information; delete your account and associated data; withdraw consent for optional processing; and receive a portable copy of your account data in a machine-readable format.
Requests can be made from account settings or via the contact form. We respond within 30 days and never charge for reasonable requests.
13.Children and Minors
The platform is strictly for adults aged 18 and over. We do not knowingly collect information from minors. If we learn that an account belongs to a person under 18, we delete the account and its data promptly. Parents or guardians who believe a minor has registered should contact us immediately.
14.Third-Party Links
Pages on this site link to external resources, including Canadian responsible-gambling organisations and the OpenStreetMap embed on our contact page. Loading the map transmits your IP address to the OpenStreetMap Foundation under its own privacy terms. We choose third parties carefully but cannot accept responsibility for their practices.
15.Changes to This Policy
When we change this policy, we update the date at the top and, for material changes, display a notice on the website and email registered users. Earlier versions are available on request. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
16.Contact and Complaints
Privacy questions and requests reach our privacy officer via the contact form, by email at support@duurzameregionaleontwikkeling.com, or by mail to Duurzameregionaleontwikkeling Inc., 100 King St W, Toronto, ON M5X 1A9, Canada.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Québec, the Commission d'accès à l'information.