Privacy Policy

Effective: January 1, 2026 · Last updated: July 1, 2026

1. Information We Collect

We collect information you provide directly (name, email, date of birth, province) and information generated by your use of the Platform (draw entries, wallet transactions, prediction votes, daily check-ins, login attempts). We collect technical information including IP address, browser type, and device identifiers.

2. How We Use Your Information

We use your information to: operate the Platform and process draw entries; verify your identity and eligibility; comply with legal obligations (age verification, anti-fraud, AML); send transactional emails (verification, draw results); with your consent, send marketing communications; generate aggregated analytics to improve the Platform.

3. Legal Basis (PIPEDA / Law 25)

We process your personal information on the basis of: (a) consent (marketing communications, optional features); (b) contract performance (account operation, draw participation); (c) legal obligation (identity verification, age gating, audit logging); (d) legitimate interests (fraud prevention, platform security).

4. CASL Marketing Consent

We will not send marketing emails without your explicit opt-in consent. You may withdraw consent at any time by clicking "Unsubscribe" in any marketing email or updating your preferences in your account settings.

5. Data Retention

We retain your account data for as long as your account is active plus 7 years after closure, as required by Canadian financial regulations. Audit logs and compliance records are retained for a minimum of 5 years. You may request deletion of non-regulatory data by contacting privacy@wealthdraw.ca.

6. Data Sharing

We do not sell your personal data. We share data with: service providers (email delivery via Resend; payment processors); law enforcement or regulators when legally required; successors in a merger or acquisition (with notice to you).

7. Security

We use industry-standard security measures including encryption at rest and in transit, bcrypt password hashing, rate limiting on authentication, and append-only audit logging. No system is completely secure; we encourage you to use a strong, unique password.

8. Your Rights

Under PIPEDA and applicable provincial law, you have the right to: access your personal information; correct inaccurate information; withdraw consent (where consent is the legal basis); request deletion of non-regulatory data; file a complaint with the Office of the Privacy Commissioner of Canada.

9. Cookies

We use session cookies for authentication and preference storage. We do not use third-party advertising cookies. You can disable cookies in your browser, but some Platform features may not function correctly.

10. Contact Us

Privacy Officer: WealthDraw Inc., Toronto, Ontario. Email: privacy@wealthdraw.ca. We will respond to privacy requests within 30 days.