By Fiona Nicoll
BetMGM Casino Ontario is a partnership between MGM Resorts International and Entain — two of the world’s largest gambling companies. When you create an account at BetMGM Ontario, you’re entering a data relationship with a corporate structure that includes one of the most recognised hospitality and casino brands in North America alongside a publicly listed multinational gambling group that also operates PartyCasino, Ladbrokes, and over a dozen other brands globally. The AGCO’s Ontario licensing requirements and Canada’s federal PIPEDA provide the primary consumer data rights framework. This guide explains what that means in practice for Ontario players in 2026.
The regulatory framework governing BetMGM’s privacy practices
BetMGM Casino Ontario’s data handling obligations come from multiple directions. The AGCO’s iGaming Ontario licence requirements incorporate Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA) and Canada’s federal PIPEDA as conditions of the operating agreement. PIPEDA applies to all Canadian players as federal law. The Entain Group parent company additionally holds UK and EU licences that require GDPR-aligned data practices — while these apply directly to UK-facing operations rather than Ontario specifically, the group’s shared compliance culture is shaped by the most demanding standards across its multi-jurisdiction portfolio.
What data BetMGM Ontario collects from players
Data provided directly:
| Category | Specific data points |
|---|---|
| Identity data | Full legal name, date of birth, gender |
| Contact data | Ontario home address, email, phone number |
| Verification data | Government-issued photo ID, proof of address, SIN where required for tax purposes |
| Financial data | Card details, bank account information, PayPal credentials, CA$ transaction history |
| Account preferences | Responsible gambling settings, marketing consent, sportsbook preferences |
Data collected automatically:
| Category | Specific data points |
|---|---|
| Technical data | IP address, device, browser, operating system |
| Behavioural data | Casino games played, session duration, bet sizes, win/loss records |
| Location data | Geolocation confirming Ontario physical presence at each session |
| Communication data | Live chat records, email and telephone support interactions |
| Sportsbook data | Sports markets browsed, bet types and odds selected, in-play betting activity |
| Cookie data | Session authentication, analytics, marketing tracking |
The sportsbook behavioural data category is specific to BetMGM’s combined platform. Your betting activity across NHL, NBA, NFL, and other markets generates a sports gambling behaviour profile that exists alongside your casino session data under the same account — creating a more detailed picture of gambling behaviour than either product alone would produce. The geolocation data is collected at every login as an AGCO licensing compliance requirement and cannot be disabled.
Third parties and corporate group data sharing
| Third party category | Purpose | Notes |
|---|---|---|
| MGM Resorts International | Corporate partnership and loyalty programme | Parent partner — MGM Grand Millions jackpot network |
| Entain Group entities | Group compliance, shared player protection infrastructure | Parent company — shared responsible gambling systems |
| Payment processors | CA$ transaction processing | Interac, Visa, Mastercard, PayPal |
| Identity verification providers | KYC and Ontario age verification | Third-party document authentication |
| AGCO and iGaming Ontario | Regulatory compliance and reporting | Provincial regulatory oversight |
| IT and infrastructure providers | Platform hosting and security | Cloud and cybersecurity services |
| Marketing platforms | Consented promotional communications | Email and content delivery |
BetMGM states that personal data is not sold to third-party advertisers. Marketing is delivered only to players who have explicitly consented, and consent can be withdrawn at any time.
Data retention
| Data type | Retention period | Basis |
|---|---|---|
| Identity and KYC documents | 5 years post-closure | AGCO and AML requirements |
| Financial transaction records | 5 years post-transaction | Financial compliance |
| Game and sportsbook session history | 3 years | Dispute resolution |
| Support records | 3 years | Complaint documentation |
| Marketing consent records | Consent duration plus 1 year | PIPEDA compliance |
Your rights as an Ontario player
- Right of access — request a complete copy of all personal data BetMGM holds about you
- Right to correction — request updates to inaccurate personal information
- Right to withdraw consent — for marketing communications, opt out at any time
- Right to complain — file with the Office of the Privacy Commissioner of Canada or iGaming Ontario
- Right to account closure — BetMGM must close your account on request, subject to retention obligations
