What HighFlyer’s dual-licence structure means for how your data is handled

Last updated: June 2026

By Robert J. Williams

HighFlyer Casino operates exclusively in Ontario under a licence from the Alcohol and Gaming Commission of Ontario and iGaming Ontario registration, alongside a second licence from the Alderney Gambling Control Commission — one of the oldest and most respected gaming authorities internationally. For Canadian players, this dual-licensing position is more relevant to privacy than it might initially appear: AGCO licensing imposes mandatory data handling requirements as conditions of the provincial operating agreement, while the AGCC’s framework adds a layer of international oversight that shapes how HighFlyer’s underlying infrastructure is governed. For Ontario players specifically, this means personal data handling sits within one of the more accountable regulatory combinations available in the Canadian online casino market.

About the author

My name is Robert J. Williams. I’m a Full Professor in the Faculty of Health Sciences at the University of Lethbridge in Alberta, and a Research Coordinator with the Alberta Gambling Research Institute, where I’ve worked since 2001. A clinical psychologist by training, I spent 15 years as a regional psychologist for northern Manitoba before transitioning to academic research focused on gambling. For over two decades, my research has examined internet gambling specifically, the prevention of problem gambling, the socioeconomic impacts of gambling, and the prevalence of gambling disorders across Canadian populations. I’ve received over $7 million in research funding, consult regularly with government and industry, and in March 2026 gave a public lecture in Lethbridge on modern gambling’s structure and societal dimensions. I write independently, without commercial arrangements with any operator I cover.

Regulatory context: AGCO, AGCC, and PIPEDA working together

HighFlyer Casino’s privacy framework for Ontario players rests on three concurrent obligations: the AGCO’s mandatory data handling conditions as part of the iGaming Ontario operating agreement, the Alderney Gambling Control Commission’s international oversight standards, and Canada’s federal PIPEDA governing how any organisation handles Canadian personal data regardless of corporate structure.

The AGCC addition to the standard AGCO-only licensing structure is worth understanding specifically. The Alderney Gambling Control Commission is a regulatory body with decades of operation predating Ontario’s regulated iGaming market by many years, and its requirements around platform governance, financial controls, and player data handling reflect accumulated international regulatory experience rather than a recently established framework. The combination of AGCO and AGCC oversight means HighFlyer’s operational standards are simultaneously governed by a Canadian provincial authority and an internationally recognised gaming commission, with both frameworks influencing how the platform handles player data.

What HighFlyer Casino collects from Ontario players

Data provided directly at registration and through account activity:

Data collected automatically during platform interaction:

The VIP program data category is worth specific attention given HighFlyer’s six-tier structure. Reaching Platinum and Diamond tier status — both invite-only — involves sufficient sustained play to generate a substantial longitudinal data profile. The combination of an extensive play history and the personalised nature of Platinum and Diamond tier benefits (tailored bonuses, cashback, and flexible terms communicated directly with these players) means higher-tier players have a more individualised data relationship with the platform than entry-level players. The VIP data HighFlyer accumulates for Diamond-level players isn’t just a record of games played — it’s a profile detailed enough to support genuinely personalised promotional offers, which means it’s also detailed enough to provide meaningful insight into individual gambling patterns over time.

How HighFlyer uses your data

HighFlyer processes Ontario player data for:

• Account creation, authentication, and AGCO/iGaming Ontario KYC compliance
• Payment processing across nine documented methods, with 128-bit SSL protecting all transaction data
• Geolocation confirmation at every login to verify Ontario physical presence as an AGCO-mandated requirement
• AGCO-required responsible gambling tool provision: deposit limits, loss limits, session controls, cooling-off periods, and self-exclusion connected to iGaming Ontario’s province-wide program
• AGCC operational compliance requirements alongside AGCO obligations
• Welcome bonus administration including wagering progress tracking toward the 35x requirement on combined deposit plus bonus
• Six-tier VIP program management, including invite-only Platinum and Diamond tier personalised benefit delivery
• Weekly reload promotion administration and inbox-delivered promotional communications
• 24/7 live chat customer support
• iGaming Ontario regulatory reporting and dispute resolution support

The welcome bonus wagering tracking is a specific data function worth naming explicitly. The 35x wagering requirement applied to the combined deposit plus bonus means HighFlyer maintains detailed records of every qualifying wager made against this target — what was wagered, on which games, at what bet sizes, and over what time window. This tracking is necessary for legitimate bonus management, but it also means the platform has a granular record of betting behaviour during the period when most new players are most actively engaging with the library.

Third parties who may receive your data

The game provider list is more extensive at HighFlyer than at single-studio competitors: with Pragmatic Play, Relax Gaming, Games Global, Ready Play Gaming, and 13 additional studios contributing to the 1,000-plus game library, session data during gameplay flows through each provider’s own infrastructure as well as HighFlyer’s platform. Each studio relationship involves some data exchange around game session parameters, though the specific data shared with each provider is governed by HighFlyer’s agreements with those studios and their own privacy practices.

Security infrastructure and what 128-bit SSL covers

HighFlyer Casino uses 128-bit SSL encryption across all session and transaction data, confirmed by an independent reviewer who tested multiple transactions and found clean checkout flows without redirects or payment errors. The checkout described as “tight and smooth” with firewall-layered protections reflects the underlying security infrastructure that both AGCO and AGCC licensing require operators to maintain.

The Apple Pay integration adds Apple’s own biometric authentication layer (Face ID or Touch ID) for deposits made through that method on compatible devices, providing a second authentication mechanism for that specific payment pathway beyond the standard SSL session security.

Your rights as an Ontario player under PIPEDA and iGaming Ontario

PIPEDA rights for all Canadian players at HighFlyer: right of access to personal information held about them, right to correction of inaccurate data, right to withdraw marketing consent, right to complain to the Office of the Privacy Commissioner of Canada, and right to know what third parties have received their data.

Ontario players additionally benefit from iGaming Ontario’s independent dispute arbitration for gambling-specific data complaints, with the AGCO’s provincial enforcement adding a regulatory accountability layer that operates faster than the federal privacy complaint process for issues related to HighFlyer’s Ontario operating agreement specifically.