What happens to my personal and financial data if I close my account at a regulated Ontario online casino?

Closing your account does not mean your data disappears — and understanding why is more useful than a vague reassurance that "your privacy is protected." Two distinct legal regimes determine what happens to your records, and they operate independently of each other.

The anti-money-laundering floor: five years, minimum

Online casinos operating in Ontario's regulated market are reporting entities under Canada's federal anti-money-laundering framework. That means they face hard legal obligations around record-keeping that survive account closure entirely. Casinos must keep certain records, including records related to accounts, transactions, and client identification. The retention clock doesn't start when you close your account — in many cases it starts after you close it. Account records, signature information, and related documentation must be retained for at least five years from the date the account is closed. That covers your name, address, date of birth, and the transaction history tied to your account. These records must be available to FINTRAC within 30 days of a request and can also be accessed through a judicial order by law enforcement. Closing your account does not shorten this window, and no operator can legally agree to delete these records earlier.

Your privacy rights under PIPEDA

The Personal Information Protection and Electronic Documents Act (PIPEDA) sets out the ground rules for how businesses must handle personal information in the course of their commercial activity. Under PIPEDA, operators are only permitted to keep personal information for as long as necessary to fulfill the purpose for which it was collected — but that principle has to be read alongside the mandatory retention rules above. Where FINTRAC requires five years of records, PIPEDA doesn't override that; there may be situations where you are required to keep records for purposes beyond what any single rule describes, and where multiple requirements overlap, the longer retention period applies — it cannot be shorter.

What PIPEDA does give you is the right to access your own personal information and to request corrections. The Office of the Privacy Commissioner of Canada (OPC) oversees compliance for private-sector operators. If you believe a regulated Ontario casino has handled your data improperly after account closure — kept it longer than any legal basis justifies, shared it without authorization, or failed to secure it adequately — you can file a complaint with the OPC directly at priv.gc.ca.

What this means practically for Toronto players

A few things worth knowing before you close an account:

• Marketing communications should stop once you withdraw consent, but financial and identity records will remain on file for the mandatory period regardless. Check the operator's privacy policy for how they handle each category separately.
• KYC documents — the government ID and proof of address you submitted during verification — are part of the client identification records subject to that five-year minimum. They are not deleted on request.
• Payment method details (e.g., the last four digits of a card on file) may be retained under the operator's own terms in addition to the regulatory floor. Check the privacy policy before closing if this matters to you.
• Self-exclusion records are a separate category entirely. If you've registered with BetGuard — Ontario's centralized self-exclusion service available at betguard.ca — that record is maintained by iGaming Ontario and is not deleted when you close an individual operator account. That's by design: it's what makes the exclusion enforceable across all registered operators.

One practical check before you play anywhere: every fully registered Ontario iGaming site displays both the iGaming Ontario logo and the BetGuard logo. If those aren't visible, the site isn't operating under the regulated framework described here — and the protections above wouldn't apply. The full list of registered operators is maintained live at igamingontario.ca.

Ontario's regulated market is open to players 19 and older. If you ever want support around your gambling, ConnexOntario is reachable at 1-866-531-2600, any time.