GDPR Rights & Data Protection

1. Your Data Protection Rights

Under Canadian privacy laws and in alignment with GDPR principles, you have comprehensive rights regarding your personal data. TECHNO-JEUX INC is committed to respecting and facilitating these rights.

2. Right to Access

You have the right to obtain:

• Confirmation that we process your personal data
• A copy of your personal data in our possession
• Information about how we use your data
• Details about data retention periods
• Information about third parties who receive your data

How to exercise: Submit a request via email to privacy@forestlotoca.com with subject "Data Access Request"

Response time: Within 30 days of verified request

3. Right to Rectification

You can request correction of:

• Inaccurate personal information
• Incomplete data that affects your account
• Outdated contact details

Some information (e.g., transaction history) cannot be altered due to regulatory requirements, but annotations can be added.

How to exercise: Log into your account to update most information, or contact support for verification-required changes

4. Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• Data has been unlawfully processed

Important Limitations:

We cannot delete data when retention is required for:

• Compliance with legal obligations (minimum 7 years for financial records)
• Establishment, exercise, or defense of legal claims
• Regulatory reporting to RACJ, AGLC, AGCO
• Prevention of fraud and money laundering

How to exercise: Submit account closure request via privacy@forestlotoca.com

5. Right to Restriction of Processing

You can request that we limit processing of your data when:

• You contest the accuracy of the data (while we verify)
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You object to processing (pending verification of legitimate grounds)

During restriction, we will only store your data, not actively process it.

6. Right to Data Portability

You can receive your data in a structured, commonly used, machine-readable format including:

• Account information
• Transaction history
• Participation records
• Communication preferences

Available formats: CSV, JSON, PDF

How to exercise: Request via privacy@forestlotoca.com with preferred format

Delivery: Secure download link within 30 days

7. Right to Object

7.1 Marketing Communications

You can object to direct marketing at any time:

• Click "unsubscribe" in any marketing email
• Adjust preferences in account settings
• Contact support to opt-out of all marketing

7.2 Profiling and Automated Decision-Making

We use automated systems for:

• Fraud detection and prevention
• Risk assessment for responsible gaming
• Personalized offers and recommendations

You have the right to:

• Obtain human review of automated decisions
• Express your point of view
• Contest automated decisions that significantly affect you

8. Consent Withdrawal

Where processing is based on consent, you may withdraw it at any time:

• Withdrawal doesn't affect past processing lawfulness
• Some services may become unavailable after withdrawal
• Account closure may be necessary if consent is fundamental to service provision

How to exercise: Manage consent preferences in account settings or contact privacy@forestlotoca.com

9. Right to Lodge a Complaint

If you believe we haven't adequately addressed your privacy concerns, you can file a complaint with:

Office of the Privacy Commissioner of Canada

Commission d'accès à l'information du Québec

10. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify you within 72 hours of becoming aware
• Describe the nature of the breach
• Explain likely consequences
• Detail measures taken or proposed to address the breach
• Provide contact information for further inquiries

11. Children's Data

We do not knowingly process data of individuals under 19 years of age. If we discover such processing:

• We will immediately cease processing
• Delete the data without undue delay
• Close any associated accounts
• Refund any deposits made

12. International Data Transfers

When transferring data internationally, we ensure adequate protection through:

• Standard Contractual Clauses approved by privacy commissioners
• Adequacy decisions recognizing equivalent protection levels
• Binding Corporate Rules for intra-group transfers
• Your explicit consent where required

13. Data Protection Officer

Our Data Protection Officer oversees compliance with privacy regulations:

14. Request Processing

Verification Requirements

To protect your privacy, we verify identity before processing requests through:

• Account login credentials
• Security questions
• Government-issued ID (for sensitive requests)
• Two-factor authentication

Response Timeframes

• Standard requests: 30 days
• Complex requests: Up to 60 days (with notification)
• Urgent requests (data breach): 72 hours

Fees

Most requests are processed free of charge. Excessive or repetitive requests may incur reasonable administrative fees.

15. Contact for Privacy Requests

To exercise any of your data protection rights:

Please include "Privacy Rights Request" in the subject line and specify which right(s) you wish to exercise.

16. Updates to This Document

We review and update this GDPR Rights document annually or when:

• Privacy legislation changes
• Our data processing practices evolve
• Regulatory guidance is updated

Material changes will be communicated via email and prominent website notice.