Last updated: 2026-06-25
-
1. Our commitment
lotoquebee.com is operated under the authority of the Société des loteries du Québec (Loto-Québec) ("Loto-Québec", "we", "us"), which is committed to protecting the personal information entrusted to it and to maintaining your trust. This Policy describes the personal information we collect, the purposes for which we collect it, how we use, disclose, retain and protect it, and the rights you can exercise. We handle personal information in accordance with the Act respecting the protection of personal information in the private sector (Quebec), as amended by Law 25, and with other Canadian privacy laws that apply to us. This Policy supplements, and should be read together with, our Conditions of Use and our Cookies notice.
-
2. Scope
This Policy applies to visitors to our website and mobile applications, and to users of our products and services, whether or not they hold an account. "Personal information" means any information that relates to a natural person and allows that person to be identified, located or profiled, directly or indirectly. It does not include business contact information used solely to communicate with a person in a professional capacity, or information that has been anonymized so that it can no longer identify anyone.
-
3. Data minimization
We collect only the personal information that is reasonably necessary for the purposes identified in this Policy. We do not require more information than we need, and where a purpose can be achieved with de-identified or aggregated data, we use that instead. When information is no longer necessary, we destroy, delete or anonymize it in accordance with our retention practices.
-
4. What personal information we collect
We collect three main categories of information. (1) Identification information that you provide, such as your name, date of birth, address, email, telephone number and the identity documents required to verify your account. (2) Activity and transaction information generated through your use of our services, such as your playing and purchase history, deposits, withdrawals, limits, the games you play and your participation in promotions. (3) Technical information collected automatically, such as your IP address, approximate location, device and browser characteristics, log data, and the cookies and similar technologies described in our Cookies notice. We collect personal information directly from you, automatically through your use of the site, and, where permitted by law, from third parties such as payment processors and identity-verification providers.
-
5. Why we collect it
We use your personal information to open and manage your account; to verify your age, identity and location and confirm your eligibility; to process your play, deposits, withdrawals and prizes; to operate, maintain and secure the site; to detect, prevent and investigate fraud, error and prohibited use; to support responsible gambling, including limits and self-exclusion; to produce de-identified statistics and improve our products; to respond to your requests and provide customer service; to meet our legal, regulatory and contractual obligations; and, where you have consented, to send you offers, newsletters and personalized communications. We only use your information for purposes that are consistent with those for which it was collected, unless the law allows or requires otherwise.
-
6. Legal bases for processing
We rely on the bases recognized by applicable law to process your personal information: your consent, where required; the performance of a contract with you, such as operating your account and processing your play and payments; compliance with our legal and regulatory obligations, including identity verification, the prevention of money laundering and responsible-gambling requirements; and, where permitted by law, our legitimate interests in securing the site, preventing fraud and improving our services, balanced against your rights. Where we rely on consent, you may withdraw it as described in this Policy.
-
7. Consent
We obtain your consent to collect, use and disclose your personal information, except where the law allows or requires us to act without it (for example, to prevent fraud, comply with a legal obligation or protect a person). Your consent may be express or, where appropriate and permitted, implied by your use of our services. We obtain separate, express consent before using sensitive information or before using your information for marketing where the law requires it. You may withdraw your consent at any time, subject to legal and contractual restrictions and reasonable notice; withdrawing consent may limit or prevent our ability to provide certain services, such as maintaining your account.
-
8. Who we may share it with
We do not sell your personal information. We may share it: with service providers and processors who perform functions on our behalf (such as payment processing, identity verification, hosting, analytics and customer support) under contracts that require them to protect it and use it only for the agreed purposes; with regulators, law-enforcement authorities and other third parties where required or permitted by law, or to protect our rights or the safety of others; in connection with a corporate or governmental transaction, subject to appropriate safeguards; and with your consent. We keep a record of the disclosures we make.
-
9. Transfers and disclosure outside Québec
Some of our service providers may store or process personal information outside Québec. Before transferring personal information outside Québec, we conduct an assessment to determine whether the information will receive a level of protection equivalent to that required under applicable Québec privacy legislation, taking into account the sensitivity of the information, the purposes of its use, the protective measures in place and the legal framework of the destination. Where necessary, we implement appropriate contractual and technical safeguards to protect the information, and we proceed only where this assessment supports doing so.
-
10. How long we keep it
We keep your personal information only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, regulatory, accounting and contractual obligations, including the resolution of disputes and the enforcement of our agreements. Retention periods vary depending on the type of information and the applicable requirements. When personal information is no longer needed, we securely destroy, delete or anonymize it. We maintain a governance framework, including retention and destruction schedules, to manage personal information throughout its life cycle.
-
11. How we protect it
We apply physical, organizational and technological security measures appropriate to the sensitivity of the information to protect it against loss, theft and unauthorized access, use, disclosure, copying or modification. These measures include restricted access on a need-to-know basis, encryption of data in transit, secure data centres, monitoring, employee confidentiality obligations and staff awareness. While we take these precautions, no method of transmission or storage is completely secure; you also play an important role by keeping your login credentials confidential and notifying us of any suspected unauthorized use of your account.
-
12. Privacy incidents and data breaches
We maintain measures to detect and respond to confidentiality incidents involving personal information. If a confidentiality incident occurs and presents a risk of serious injury, we will take reasonable steps to reduce the risk and prevent further incidents, notify the affected individuals and the Commission d'accès à l'information du Québec where required by law, and keep a register of incidents as required. We will provide affected individuals with the information needed to protect themselves where appropriate.
-
13. Children's privacy
Our services are intended for adults only. Access is reserved for persons 18 years of age and over, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18 without the proper authority, we will take steps to delete it. If you believe a minor has provided us with personal information, please contact our Privacy Officer.
-
14. Automated decision-making
In limited circumstances — for example, certain fraud-prevention, anti-money-laundering and eligibility checks — we may use processing that is automated, in whole or in part, to support a decision. Where a decision is based exclusively on automated processing of your personal information, you have the right, on request, to be informed of that fact and of the principal factors and parameters that led to the decision, to submit observations, and to ask that the decision be reviewed by a person. You can exercise these rights by contacting our Privacy Officer.
-
15. Your rights
Subject to the conditions and exceptions provided by law, you have the right to: be informed of the personal information we hold about you and to access it; request the correction of information that is inaccurate, incomplete or out of date; withdraw your consent or object to certain uses; request that we cease disseminating information or de-index a link in the cases provided by law; and obtain certain computerized information in a structured, commonly used technological format (portability). You may also ask questions about how your information is processed, including any automated processing used to render a decision based solely on automated processing.
-
16. How to exercise your rights
To exercise your rights, contact our Privacy Officer using the details below. We may ask you to verify your identity before responding, to protect your information. We respond within the timeframes prescribed by law, and access to your own personal information is generally provided free of charge, although a reasonable fee may apply in limited cases permitted by law, of which we will inform you in advance. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec.
-
17. Cookies and automatic collection
We use cookies and similar technologies that are functional and necessary to run the site and keep it secure, and — only with your consent — for personalization, statistics and advertising. When you first visit, our consent banner lets you accept all cookies or personalize your choices, and refusing is as easy as accepting. You can change your choices at any time and manage cookies through your browser settings. For a full description of the categories of cookies we use and your options, please see our Cookies notice.
-
18. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices, technology or legal obligations. The version published on the site is the one in effect, and the "last updated" date shows when it was last revised. Where a change is significant, we will provide notice by appropriate means. We encourage you to review this Policy periodically.
-
19. Privacy contact and complaints
We have designated a Privacy Officer responsible for ensuring our compliance with applicable privacy law. For any question, to access or correct your information, or to exercise your rights, contact our Privacy Officer by email at privacy@lotoquebee.com. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI), which oversees the protection of personal information in Quebec.