Privacy Policy

This Privacy Policy explains how WishKing collects, uses, stores, and protects personal information belonging to players who register an account, browse the site, or otherwise interact with our services. It applies to all visitors and registered account holders and is intended to help players in Canada understand what data we process, why we process it, and what choices are available to them. WishKing is operated by Rapiso Limitada, registered in Costa Rica, under a licence issued by the Tobique Gaming Commission. Because our services involve real-money gambling, players must be at least 18 years old, or the legal minimum age in their province if higher, and this document should be read alongside our terms and responsible gaming information.

Scope of This Policy

This policy covers personal data collected through the website and any associated mobile application, including data submitted during registration, deposits, withdrawals, identity verification, customer support interactions, and general site usage. It does not govern third-party websites that may be linked from our platform, including payment providers or software suppliers, each of which maintains its own privacy practices. Where a third-party service processes data on our behalf, such as our payment processor, we take reasonable steps to confirm that appropriate safeguards are in place. Continued use of the account or the site after this policy is made available constitutes acceptance of the practices described here.

Information We Collect

We collect several categories of information, some provided directly by the player and some generated automatically through use of the platform. The table below summarizes the main categories.

Identity and financial data are typically collected during registration and again during the know-your-customer verification process required before withdrawals, which may include a government-issued photo identification document, proof of address no older than three months, and a masked image of any card used for deposits. Technical data is collected automatically through cookies and similar technologies each time the site or application is accessed. We do not knowingly collect information from individuals under the legal gambling age, and any account found to belong to a minor will be closed and reported in line with our responsible gaming obligations.

How We Use Personal Data

Personal data is used to operate the account, process transactions, verify identity, and provide customer support. It is also used to meet legal and regulatory obligations, including anti-money laundering checks, tax reporting where applicable, and age verification consistent with the 18 and over requirement for participation. Transaction and gameplay data may be reviewed as part of routine account audits, fraud investigations, or when assessing eligibility for account features such as bonus terms and conditions, withdrawal limits, or VIP tier benefits. We may also use aggregated or anonymized data, which cannot identify an individual, for internal reporting and to improve game selection, site performance, and payment processing reliability. Marketing communications, where a player has opted in, are based on account activity and stated preferences, and players may withdraw consent to marketing at any time through account settings or by contacting customer support.

Legal Basis for Processing

Where applicable data protection principles require a stated legal basis, WishKing generally relies on the performance of the contract formed when an account is opened, compliance with legal and licensing obligations, and legitimate interests in preventing fraud and securing the platform. Where consent is the basis for processing, such as for optional marketing communications, that consent can be withdrawn without affecting the lawfulness of processing carried out before withdrawal. Sensitive categories of data are not knowingly collected beyond what is strictly necessary for identity verification and regulatory compliance.

Cookies and Similar Technologies

Cookies are small text files stored on a device that help the site function correctly, remember preferences, and understand how the platform is used. WishKing uses several types of cookies, including strictly necessary cookies required for login and security, functional cookies that remember settings such as language or display preferences, and analytics cookies that help us understand site traffic and usage patterns. Some cookies may be set by third-party service providers, such as payment processors or analytics tools, and are subject to those providers’ own data practices. Most browsers allow cookies to be controlled or disabled through settings, though disabling certain cookies may affect the ability to log in or use some site features normally. Players who wish to manage cookie preferences can typically do so through browser settings or any cookie preference tool made available on the site.

Sharing of Personal Data

Personal data may be shared with a limited number of third parties where necessary to operate the service or comply with legal obligations. This includes payment processors, such as ANACUA LIMITED, which facilitates certain transaction processing, identity verification providers engaged to confirm age and identity, regulatory or law enforcement authorities where required by applicable law, and professional advisors such as auditors where relevant. We do not sell personal data to third parties for their independent marketing purposes. Any third party that processes data on our behalf is expected to apply appropriate technical and organizational measures to protect that data and to use it only for the purposes for which it was shared.

Data Retention

Personal data is retained for as long as necessary to provide services, meet legal and regulatory retention obligations, resolve disputes, and enforce our agreements. Financial and identity verification records are typically retained for a period after account closure to satisfy anti-money laundering and licensing requirements, even where a player has requested account deletion. Once data is no longer required for these purposes, it is deleted or anonymized in accordance with internal data management practices. Players who close their account should be aware that certain records may still be retained for a defined period as required by applicable regulation.

Data Security

WishKing applies technical and organizational safeguards intended to protect personal data against unauthorized access, alteration, loss, or disclosure, including encryption of sensitive data in transit, restricted internal access controls, and monitoring of systems for suspicious activity. Payment card information is handled in a manner consistent with recognized industry security practices, and masked card images are used during verification rather than full card storage where possible. While reasonable safeguards are in place, no system can guarantee absolute security, and players are encouraged to use strong, unique passwords and to avoid sharing account credentials with anyone. Suspected unauthorized access to an account should be reported to customer support promptly so that appropriate steps can be taken.

International Data Transfers

Because WishKing operates through an international structure, including an operator registered in Costa Rica and a payment processor based in Cyprus, personal data may be transferred to and processed in countries outside Canada. Where such transfers occur, we aim to ensure that the receiving party maintains a level of protection consistent with the principles set out in this policy. Players who have concerns about international data transfers may contact customer support for further general information about how their data is handled.

Player Rights

Depending on applicable law, players may have rights in relation to their personal data, including the right to request access to the data held about them, request correction of inaccurate information, request deletion where legally permissible, object to certain processing activities, and request a copy of their data in a portable format. Requests of this nature can generally be submitted through the account profile settings or by contacting customer support, and we will respond within a reasonable timeframe once identity has been verified. Certain requests, such as deletion of records required for regulatory compliance, may not be possible to fulfill in full while an account remains subject to licensing obligations. Players are encouraged to keep their contact and account information up to date to ensure that communications regarding their data are received correctly.

Responsible Gaming and Data Use

Data collected through the account is also used to support responsible gaming tools, such as monitoring for patterns that may indicate a need for deposit limits, time limits, or self-exclusion. Players can adjust deposit and purchase limits from the profile tab, and self-exclusion can be requested by contacting customer support through the registered account email. WishKing states that it works alongside addiction research institutes to support player education, and data related to account activity may be used internally to identify accounts that could benefit from responsible gaming information or support resources. Because participation is restricted to those aged 18 and over, age verification data plays a central role both in regulatory compliance and in supporting a safer gambling environment. Players concerned about their gambling behaviour are encouraged to review the tools available in their account and to reach out to independent support organizations where appropriate.

Children’s Privacy

WishKing does not knowingly collect personal data from individuals under the age of 18, or the applicable legal minimum gambling age in the player’s province. If it becomes apparent that an account has been opened by a minor, the account will be suspended, any funds handled in accordance with applicable regulation, and the matter addressed consistent with our responsible gaming and legal obligations. Parents or guardians who believe a minor has provided personal data or accessed an account are encouraged to contact customer support so the matter can be reviewed.

Changes to This Policy

WishKing may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services offered. Where changes are material, reasonable efforts will be made to bring them to the attention of registered players, such as through an account notification or a notice on the site. Continued use of the account after any such update constitutes acceptance of the revised policy. Players are encouraged to review this page periodically to stay informed about how their personal data is handled.

Contact and Complaints

Questions, concerns, or requests relating to this Privacy Policy or to the handling of personal data can be directed to customer support, which is available through live chat and email in English and French. Complaints relating to data handling are reviewed in the same manner as other customer service matters, with an aim to provide a clear response within a reasonable period. Where a player remains unsatisfied after raising a concern through customer support, they may be entitled to escalate the matter to an applicable regulatory or data protection authority, depending on their jurisdiction. For general account matters, bonus terms and conditions, or payment questions, players can also refer to the relevant sections of the site, including the terms and conditions and the welcome bonus page, which describe eligibility and account rules that may involve the same personal data discussed in this policy. General information about the platform and its licensing background can be found on the about us page.