By Sylvia Kairouz
Wildz Casino is operated by Rootz Limited under Malta Gaming Authority licence MGA/B2C/599/2018, with full AGCO registration and iGaming Ontario licensing for Ontario players. This dual-licensing position — the only framework in this review series that provides genuinely all-Canadian coverage including Ontario — means Wildz’s privacy framework is governed by two sets of mandatory requirements simultaneously: the MGA’s GDPR-influenced data handling standards for non-Ontario players, and the AGCO/iGaming Ontario framework for Ontario residents. The practical result for Canadian players is stronger privacy infrastructure than most offshore platforms provide, precisely because two demanding regulatory bodies shape how Rootz Limited handles data across its operations.
About the author
My name is Sylvia Kairouz. I’m a Full Professor in the Department of Sociology and Anthropology at Concordia University in Montreal, where I hold the Research Chair on Gambling and direct the HERMES partnership team and the Lifestyle and Addiction Research Lab. My research examines multi-level individual and environmental determinants of gambling behaviours from a longitudinal perspective, funded by the Canadian Institutes of Health Research, the Social Sciences and Humanities Research Council of Canada, and the Fonds de recherche du Québec — Société et Culture.
The regulatory stack: MGA, AGCO, and PIPEDA working together
Three privacy frameworks apply to Wildz’s Canadian operation depending on the player’s province. For Ontario players, AGCO and iGaming Ontario licensing imposes mandatory data handling requirements as conditions of the provincial operating agreement, with enforcement by a Canadian provincial regulator. For players outside Ontario, MGA licensing brings GDPR-influenced standards that represent some of the more demanding international data protection requirements available in the offshore casino space. And across all Canadian players regardless of province, Canada’s federal PIPEDA governs how organisations handle the personal information of Canadians regardless of where those organisations are incorporated.
The MGA’s GDPR-aligned requirements go beyond what many Curacao-licensed platforms must satisfy. These include explicit consent requirements, formal data subject rights documentation, retention period disclosures, and the requirement to justify each data processing purpose against a lawful basis. The AGCO layer adds further provincial enforcement for Ontario players. For Canadian players evaluating privacy protection across platforms, this combination is among the strongest available in the Canadian-facing online casino market.
What data Wildz Casino collects from Canadian players
Data provided directly at registration and through account activity:
| Category | Specific data points |
|---|---|
| Identity data | Full legal name, date of birth (19+ Ontario, 18+ other provinces) |
| Contact data | Email address, residential address, phone number |
| Verification data | Government-issued photo ID, proof of address for KYC |
| Financial data | Payment method details, CAD transaction history including Interac, Skrill, Neteller, credit cards |
| Account preferences | Bonus opt-ins, language preferences, responsible gambling settings |
| Support communications | Live chat transcripts, email exchanges |
Data collected automatically through platform interaction:
| Category | Specific data points |
|---|---|
| Technical data | IP address, device type, browser, operating system |
| Behavioural data | Games played across 3,000-plus library from 35-plus providers, session duration, bet sizes |
| XP and loyalty data | Experience points accumulated, level progression across the gamified loyalty system |
| Spinback data | Loss calculations, spin credits generated and used through the Spinback mechanic |
| Bonus tracking data | Welcome package wagering progress, free spin daily credit and usage records |
| Cookie and analytics data | Navigation patterns, lobby engagement, promotional content interaction |
The XP and Spinback data categories are unique to Wildz relative to most platforms in this series. Because Wildz’s loyalty system is built around gamified level progression rather than simple points accumulation, the data generated through normal play is richer than standard behavioural data: it captures not just what you play and how much you bet, but your progression trajectory through the reward system, your rate of level advancement, and the specific moments at which Spinback credits are generated and redeemed. This kind of longitudinal engagement-trajectory data is more informative about individual play patterns than simple session-level data, and it’s worth being aware that Wildz maintains this profile as part of normal platform operation.
How Wildz uses your data
Wildz processes Canadian player data for:
- Account creation, authentication, and management under both MGA and AGCO/iGaming Ontario licensing
- CAD deposit and withdrawal processing, including Interac e-Transfer verification and KYC compliance
- MGA compliance, AGCO compliance, and PIPEDA obligations simultaneously
- SSL-encrypted transaction security across all payment methods
- RNG game fairness verification and audit records across the 3,000-plus library
- XP level progression and Spinback mechanic administration within the loyalty system
- Daily free spin drip-feed calculation and crediting
- Live dealer session records for Evolution-powered tables
- Responsible gambling tool administration, with mandatory tools required under both MGA and AGCO frameworks
- Customer support via 24/7 live chat and email
- Marketing communications with explicit consent, with Ontario-specific handling given AGCO advertising restrictions
The marketing communications point is specific at Wildz because of the Ontario regulatory framework. AGCO restrictions prevent Wildz from publicly advertising specific bonus terms to Ontario players before account creation, meaning any marketing communications to Ontario-registered accounts about available offers are governed differently from non-Ontario marketing. Ontario players’ consent preferences for promotional communications interact with the same AGCO framework that shapes how bonuses are presented within the account dashboard.
Third parties who may receive your data
| Third party | Purpose | Notes |
|---|---|---|
| Rootz Limited group entities | Shared infrastructure with Spinz Casino and other Rootz brands | Operator-level data sharing |
| Payment processors | Interac, Skrill, Neteller, Visa, Mastercard processing | CAD transaction data |
| Identity verification providers | KYC verification for withdrawals | Standard MGA/AGCO requirement |
| Malta Gaming Authority | MGA compliance reporting | Non-Ontario players |
| AGCO / iGaming Ontario | Ontario regulatory reporting and dispute resolution | Ontario players |
| Evolution Gaming | Live dealer session data | Live casino tables |
| Analytics and marketing platforms | With consent | Consented communications only |
The Rootz Limited group entity connection is worth understanding specifically. Rootz operates Wildz alongside Spinz Casino and other brands, meaning some operational infrastructure is shared across the group. This is a more limited network than some competitor loyalty groups, but it means data shared at the operator level may reflect aggregated activity across Rootz’s portfolio rather than being strictly isolated within Wildz.
Your rights under PIPEDA and AGCO for Ontario players
All Canadian players at Wildz retain PIPEDA rights regardless of province: right of access to personal information held, right to correction of inaccurate data, right to withdraw marketing consent, and right to complain to the Office of the Privacy Commissioner of Canada.
Ontario players additionally benefit from iGaming Ontario’s formal dispute arbitration framework for complaints involving data handling or privacy-related account issues, providing a provincial-level pathway beyond PIPEDA’s federal process.
