What personal information does an Ontario online casino collect when I create an account?

Signing up at a regulated Ontario online casino involves more data collection than most people expect — and that's by design. The AGCO's Registrar's Standards for Internet Gaming set a mandatory floor for what operators must gather, and there are three distinct drivers behind it: confirming you're who you say you are, confirming you're 19+ and physically in Ontario, and meeting federal anti-money laundering law.

What the AGCO requires at minimum

Relevant player information must be collected and validated before an account is created. The AGCO's standards specify that operators must gather, at a minimum: date of birth; a method of identification for subsequent log-on (such as a username); player contact information; and information required by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act.

In plain terms, that translates to your full legal name, date of birth, residential address, email address, and phone number at registration. The AML/FINTRAC leg of that requirement is why you'll also be asked to verify your identity with government-issued ID — a driver's licence, passport, or similar document — typically before your first withdrawal, and sometimes at sign-up depending on the operator.

Location and eligibility checks

Operators must put in place mechanisms to detect and dynamically monitor the location of a player attempting to play a game and to block unverified attempts. This is why every regulated Ontario site requests location access when you open the app or browser — you must be physically located in Ontario to play. Your device's IP address and geolocation data are collected each session, not just at registration.

Initial registration and login requirements are an important means of verifying a player's identity, age, and location to ensure they are eligible to access a site.

One account per site, and ongoing re-verification

Players may have only one player account per gaming site. That rule is enforced through the data you provide — duplicate accounts get flagged against existing records. The list of prohibited and excluded individuals may change from time to time, and player information must be re-verified at the time of any such change and at regular intervals thereafter. So the data you gave at sign-up doesn't just sit in a file; it's periodically checked against eligibility lists.

Payment and transaction data

Once you deposit, additional financial data is linked to your account. At minimum, the gaming system must give you access to your deposit/withdrawal history and current balance, log-in times, gaming event and transaction history, and the method and source of funds used for transactions. The operator holds all of this in an auditable log — accessible to you, and to the AGCO on demand.

What you're affirming when you submit

Before a player account is created, players must affirm that all information provided upon registration is complete and accurate. That affirmation is legally meaningful: providing false details isn't just a terms-of-service breach, it can affect your ability to withdraw funds or have disputes resolved in your favour.

Each operator's privacy policy will describe exactly how long your data is retained and with whom it may be shared (payment processors, identity-verification providers, FINTRAC). Read it before you register — it's a required disclosure under the same regulatory framework. You can confirm any site you're considering is legitimately registered by checking the iGaming Ontario operator directory at igamingontario.ca; regulated sites display both the iGaming Ontario and BetGuard logos.

If you ever want support around your gambling habits, ConnexOntario is reachable at 1-866-531-2600, any time.