What information does an Ontario online casino collect when I register an account?

Signing up for an account at a regulated Ontario online casino involves handing over more personal information than most people expect — and that's entirely by design. The collection isn't arbitrary; it flows directly from obligations set by two separate regulatory layers: the AGCO's Registrar's Standards for Internet Gaming, and federal anti-money-laundering law.

What the AGCO's Standards require at registration

The AGCO's standards set a floor for what every registered operator must collect at minimum: date of birth, a method of identification for subsequent login, and player contact information. That's the regulatory baseline — in practice, operators typically ask for your full legal name, residential address, email address, and phone number at this stage, since all of those fall under "contact information" and are needed to authenticate you on return visits.

Age verification sits at the heart of this process. Initial registration and login requirements are an important means of verifying a player's identity, age, and location, to ensure they are eligible to access a site. Ontario's legal gambling age is 19+, so confirming you meet that threshold is non-negotiable before an account can be activated. Location verification is also required to ensure that players accessing the site are located within Ontario. This is why you'll often see geo-location checks or a declaration of province during sign-up.

Beyond the registration form itself, iGaming Ontario retains full and unrestricted access and control of all gaming data, player registration, and transaction data as it relates to players in Ontario. In other words, your registration data isn't held solely by the operator — it flows to the provincial body that conducts and manages the market.

The anti-money-laundering layer. Operators are also required to collect information required by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act — Canada's federal AML legislation administered by FINTRAC. This guidance on client identification describes when casinos must verify the identity of persons and entities as required by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act and associated Regulations. In practical terms, this means operators must be able to verify that you are who you say you are. The identifying information obtained on clients includes name, address, telephone number, occupation or nature of principal business, and date of birth for an individual. For online accounts, identity verification is typically carried out by cross-referencing your details against a credit bureau or government-ID database, or by asking you to upload a government-issued photo ID — though the exact method varies by operator. Casinos are also required to take reasonable measures to make politically exposed person (PEP) and head of international organization (HIO) determinations for certain activities or transactions, and if a casino determines that a person is a PEP or HIO, they have additional related requirements.

Once you're playing, the data collection continues in a more transactional form. The gaming system must give you access to your own deposit and withdrawal history, current balance, login timestamps, gaming event and transaction history, method and source of funds used for transactions, total amounts wagered and won or lost per session or period, and your account balance at the start and end of each session. This means the operator is recording all of that data continuously — it's yours to view, but it's also retained for regulatory and AML audit purposes.

The practical upshot: expect to provide your full name, date of birth, residential address, contact details, and government-issued ID. You may also be asked about your occupation as part of AML due diligence. None of this is unique to Ontario, but the province's framework is unusually explicit about the floor — the AGCO's Registrar's Standards for Internet Gaming are meant to ensure that player protections, game integrity, responsible gambling safeguards, and anti-money-laundering protections are in place. The data collected at registration is the foundation for all of those protections working as intended.

Each operator's privacy policy will describe exactly what it collects, how long it retains it, and with whom it shares it. Always read that document before you register — and if you ever have concerns about how your data is handled, the AGCO is the right place to start. If gambling is causing you stress, ConnexOntario is available 24/7 at 1-866-531-2600.