This policy covers the privacy side of playing Grey Rock through your browser, including sign-up, deposits, withdrawals, support chats, and related activity. Grey Rock Entertainment Center Inc. runs the Edmundston resort on Madawaska Maliseet First Nation territory. We handle personal information under New Brunswick law, including the Right to Information and Protection of Privacy Act (RTIPPA).
If you open an online account, you agree to what follows. Floor visits, Totem Rewards at the desk on Chief Joanna Blvd., and the Grey Rock mobile app have their own privacy notices. We are the same company across channels — data does not automatically flow between them just because the logo matches.
Before you deposit or open a game, we need standard account details: legal name, date of birth, email, phone, and login credentials. Passwords are encrypted. We do not store them in readable form. Each time you log in, we also collect your IP address, browser type, device type, and a general indication of where you are connecting from. That is mainly for age checks and to confirm we can serve players in your location.
Typical fields include name, date of birth, address (where required), email, phone, and an encrypted password. We also keep session logs showing when you logged in, from which IP address, and on which browser.
You can browse public pages without telling us who you are. We may still count anonymous visits, such as page loads and broken links, to keep the site working.
Cash-out requests trigger KYC. Expect to upload government-issued photo ID. We may ask for a utility bill or bank statement to confirm the address, or proof that the card or e-wallet is yours. Those files exist to prove age and identity — not to build a mailing list you did not request.
Transaction records, including amounts, dates, and payment method, are retained for fraud checks and reconciliation. Large wins on the resort floor can fall within FINTRAC reporting requirements. Large online payouts may receive similar compliance review depending on size and context. Even if you close your account and ask us to delete your profile, some verification and transaction records must be kept for the minimum period required by law.
We use your data to run your account, move money in and out, apply bonuses you accept, answer support requests, and meet record-keeping requirements under New Brunswick gaming law.
We also monitor patterns, such as unusual deposit spikes or logins from many locations in a short period, to detect fraud. Play history may sometimes flag a player who may need a responsible gaming check — that does not change how a slot pays out on the next spin.
If you opt in to marketing, we may email or text offers based on how you play online. Browser tiers (Club, Gold, and Platinum) rely on wager and deposit history within the online account. That information stays with us and contracted service providers, not with unrelated ad networks.
Totem mailers, hotel bookings, on-floor contests, and prize announcements follow the resort privacy policy. Online activity does not feed Totem unless you have signed up for Totem separately on the floor.
This section matters because people often mix the channels up:
Browser account: registration details, KYC uploads, payment history, bonus opt-ins, support emails, and wager session logs.
Totem Rewards on the floor: club sign-up at Chief Joanna Blvd., including name, address, email, phone, gender, date of birth, points earned on slots and hybrid tables, and floor promo history.
Mobile app: player ID, phone operating system, app session length, screens viewed, timestamps, and location (including in the background if you leave location services on) for ballots, property information, and location-based offers. The app is not where you place real-money online bets.
Online sign-up does not create a Totem card. A Totem card does not open a browser account. We do not merge those data sets unless we launch a new service that says otherwise and you agree to it.
We use cookies. Session cookies keep you logged in. Preference cookies remember language or display choices. Analytics cookies show us which pages load slowly on mobile. Marketing cookies, if we use them, show whether a landing page is converted.
Your browser can block non-essential cookies. If you block all cookies, you may need to log in on every visit. The main resort site privacy page has more on cookie settings. The same approach applies here.
We do not sell your name and email to unrelated marketers.
Data leaves our control when necessary: payment processors need transaction details; KYC vendors process ID scans under contract; game studios need account IDs to run titles and settle disputes; and police or regulators receive records when the law requires it.
Anyone processing data for us must protect it at least as well as we do and use it only for the work we contracted them to perform. Promo partners with limited access receive contractual privacy terms, not unrestricted use of your information.
We use access controls, encryption on sensitive fields, staff training, and maintained systems. Only staff whose role requires access should open your file. No system is completely secure. If a serious breach of player data occurs, we will notify you and the authorities as required by law.
On your side, use a strong password, do not share it, and log out on shared devices.
While your account is open, we keep the information needed to operate it. After closure, anti-money-laundering and financial record rules often require years of transaction and ID retention, even if you ask for full erasure. If you unsubscribe from marketing, we may keep a suppression flag so we do not contact you again by mistake.
Aggregated anonymous statistics may be kept longer because they no longer identify you.
With a written request, once we verify that you are the account holder, you may ask to see what we hold, correct errors, or raise a complaint about how we used your information. Some records cannot be provided because they mention another person, the law restricts disclosure, or we must keep them for compliance.
You can opt out of promotional email or SMS where we offer that choice. Withdrawal receipts and security alerts may still be sent. Opting out of marketing does not close your wagering account. To stop Totem floor mailers, contact the rewards desk in person, as resort policy requires.
Unresolved privacy complaints may be referred to the Access to Information and Privacy Commissioner of New Brunswick.
You must be 19 or older. We do not knowingly collect data from minors. If we find an underage account, we will close it. Any funds will be handled according to regulatory guidance, not through a standard Withdraw process.
This policy may change from time to time because of new law, a new payment partner, or a new product feature. We post updates here and may flag them in your account. If you keep playing after a change, you have accepted the updated version.
