Trophy Bingo Relaunched!

Privacy Policy

How Greenstone Games looks after your personal information across Trophy Bingo.

Last updated 1 November 2026

This privacy notice explains how Greenstone Business Services Inc., doing business as Greenstone Games, collects, uses, shares and protects your personal information when you join the Trophy Bingo Members Club, shop at the Trophy Bingo Shop, contact our support team, take part in our campaigns and promotions, or otherwise interact with Trophy Bingo. It also explains your rights and how to contact us.

About this notice. This notice has three parts, which apply together: this Core Privacy Notice, which applies to everyone; Schedule A (Regional Terms), which contains additional terms for the place where you live; and Schedule B (Connected Accounts), which sets out what each platform may share with us when you connect an account. Please read the Core Privacy Notice together with the section of Schedule A that applies to you. Where a term in Schedule A differs from the Core Privacy Notice, the Schedule A term applies for residents of that territory.

Core Privacy Notice

Who is responsible for your data

Greenstone Business Services Inc., doing business as Greenstone Games (“Greenstone Games”, “we”, “us”), is the controller of your personal information.

Greenstone Business Services Inc.
4516 Woodgreen Drive
West Vancouver, BC V7S 2V1
Canada
privacy@trophybingo.com

Where this notice applies

This notice covers trophybingo.com, the Trophy Bingo Members Club, the Trophy Bingo Shop at shop.trophybingo.com, our Trophy Bingo social media pages, our support email, and our campaigns, promotions and prize draws.

Trophy Bingo itself is played on iWin. iWin runs your iWin account and processes your iCoin purchases under iWin’s own privacy policy. When you give your permission, iWin also shares your Trophy Bingo in-game data with us, and we handle that data under this notice. If you contact us for help with the game, we may share your iWin username and the details you give us with iWin so that we can resolve your request.

What we collect

Depending on how you interact with us, we may collect:

We do not intend to collect special categories of data (such as health, religion, or political opinions).

Why we use it

We use your personal information to run the Members Club and send you Trophy Bingo news, member rewards and offers you have agreed to receive; to process, ship and support your Shop orders; to understand how you play Trophy Bingo and to tailor rewards, offers and content to you; to answer your support requests; to run campaigns, promotions and prize draws and deliver prizes; to understand and analyse our audience; to measure and improve our advertising; and to personalise and improve what we offer. We use it only for these purposes and purposes compatible with them, as described in this notice.

Our data processor

We use Appreciation Engine Inc., which provides the FairShare platform, as our data processor to capture, organise and analyse this information on our behalf and under our instructions. It stores the information on infrastructure in the United States and may access it from Canada and other locations where its authorised personnel and subprocessors operate. When you connect an account, that platform shows you what it will share before you agree, and you can stop sharing at any time from your FairShare privacy settings or on the platform itself.

FairShare membership

Signing up through FairShare may also make you a FairShare member. As a member you can earn rewards for data you choose to share, and you decide whether to share it with other businesses on FairShare. FairShare’s own privacy policy, which FairShare shows you when you sign up, covers your FairShare membership.

Who we share it with

We share your personal information with service providers who help us operate Trophy Bingo, only as needed for the services they provide to us:

We may also share your personal information with members of our corporate group. We do not sell your personal information for money. Where we share your information, we do so in accordance with this notice and applicable law.

International transfers

Your personal information is stored and processed on infrastructure located in the United States by our data processor, Appreciation Engine Inc. It may be accessed by Appreciation Engine Inc. from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. Our other service providers may also process it in the United States, Canada and other countries where they operate. Where your information is transferred across borders, we rely on the safeguards described in the regional section that applies to you in Schedule A.

How long we keep it

In each case we may keep information for a longer or shorter period where the law requires or permits it.

Your choices and rights

You can withdraw consent, unsubscribe from communications, and ask us to access, correct or delete your information. Every Members Club email includes a link to unsubscribe, and you can stop sharing a connected account at any time from your FairShare privacy settings or on that platform. The specific rights available to you, and how to exercise them, depend on where you live; see your regional section in Schedule A. To make a request, or exercise any right, contact us at privacy@trophybingo.com.

Children

Our services are not directed to children under the age at which consent for the processing of personal information is required in your territory (see Schedule A for the age that applies where you live). We do not knowingly collect personal information from children below that age without the consent of a parent or guardian where that is required. If we learn that we have collected such information without the required consent, we will delete it promptly.

Changes and contact

We may update this notice from time to time, and we will change the date at the top when we do. For any question, or to exercise a right, contact privacy@trophybingo.com.

Schedule A (Regional Terms)

This Schedule A forms part of the Greenstone Games Privacy Notice and must be read together with it. It sets out additional terms that apply to residents of specific territories, supplementing the Core Privacy Notice. Where a term in this Schedule differs from the Core Privacy Notice, the term in this Schedule applies for residents of that territory.

Find the section below for the place where you live; if more than one applies, each applies to the extent relevant. If your territory is not listed, the terms of the Core Privacy Notice apply.

Section A.1: Canada

This section applies if you are in Canada and supplements the Core Privacy Notice, under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including British Columbia’s Personal Information Protection Act and Quebec’s Law 25.

Consent and rights

We collect, use and disclose your personal information with your consent, which you may withdraw at any time. We send Members Club emails only with your express consent, as Canada’s Anti-Spam Legislation (CASL) requires. You may request access to and correction of your information. If you are a resident of Quebec, you also have the right to data portability, the right to be informed of and to object to automated decision-making or profiling, and the right to know how your information is used and disclosed. You may exercise these rights, or withdraw your consent, by contacting us at privacy@trophybingo.com. You may complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia or, if you are in Quebec, the Commission d’accès à l’information du Québec.

Section A.2: United States

This section applies if you are a resident of a U.S. state with a comprehensive privacy law (including California, Virginia, Colorado, Connecticut and others) and supplements the Core Privacy Notice.

Your rights

Depending on your state, you have the right to know what personal information we collect, to access and delete it, to correct it, to obtain a portable copy, and to opt out of the sale or sharing of your personal information and of targeted advertising. We do not discriminate against you for exercising these rights.

Do Not Sell or Share

We do not sell your personal information for money. Where we use the Meta Pixel to measure and target our advertising, that may count as “sharing” for cross-context behavioural advertising under California and certain other state laws. To opt out, email privacy@trophybingo.com with the subject “Do Not Sell or Share”. We also recognise opt-out preference signals, including the Global Privacy Control (GPC): if your browser sends one, our websites do not load the Meta Pixel.

How to exercise

To exercise your right to access, delete, correct, or obtain a portable copy of your information, contact us at privacy@trophybingo.com. California residents may designate an authorised agent to make a request on their behalf. If we deny a request, you may appeal where your state provides an appeal right.

Section A.3: European Economic Area

This section applies if you are in the EEA and supplements the Core Privacy Notice. For EEA residents, Greenstone Games is the controller under the EU General Data Protection Regulation (GDPR).

Legal basis

We rely on the following legal bases:

International transfers

Where your information is transferred outside the EEA, it is stored and processed on infrastructure located in the United States and is accessed by our data processor, Appreciation Engine Inc., from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. Canada benefits from an adequacy decision of the European Commission for commercial organisations. For transfers to the United States, we rely on the European Commission’s Standard Contractual Clauses (Module Two, controller-to-processor), as incorporated in our agreement with Appreciation Engine Inc., together with a transfer impact assessment. You can read the Standard Contractual Clauses at commission.europa.eu.

Your rights

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. You have the right to lodge a complaint with your local supervisory authority. To exercise a right, contact privacy@trophybingo.com.

Section A.4: United Kingdom

This section applies if you are in the UK and supplements the Core Privacy Notice. For UK residents, Greenstone Games is the controller under the UK GDPR and the Data Protection Act 2018.

Legal basis

The legal bases described in Section A.3 apply equally under the UK GDPR.

International transfers

Where your information is transferred outside the UK, it is stored and processed on infrastructure located in the United States and is accessed by our data processor, Appreciation Engine Inc., from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. We rely on the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, as incorporated in our agreement with Appreciation Engine Inc., together with a transfer risk assessment. You can read the Addendum at ico.org.uk.

Your rights

You have the right to access your personal information; to have it corrected if inaccurate; to have it erased in certain circumstances; to restrict or object to its processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise a right, contact privacy@trophybingo.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO).

Section A.5: Japan

This section applies if you are in Japan and supplements the Core Privacy Notice.

Purpose of use

We handle your personal information for the purposes of use described in the Core Privacy Notice. We will not use it beyond those purposes without your consent, except as permitted by the Act on the Protection of Personal Information (APPI).

Cross-border transfer

Your information is transferred to, and stored and processed by, our data processor, Appreciation Engine Inc., on infrastructure located in the United States, and is accessed by Appreciation Engine Inc.’s operations team in Canada. We transfer your information with your consent. To help you understand what this means: the United States does not have a single comprehensive data-protection law equivalent to Japan’s APPI; instead, it has federal sector-specific and state laws (such as the California Consumer Privacy Act). Canada has a general federal data-protection law (PIPEDA) broadly comparable to the APPI. In both countries, we apply the security measures described in our agreement with Appreciation Engine Inc., including encryption in transit and at rest and access controls.

Your rights

You may request disclosure, correction, cessation of use, or deletion of your retained personal data, and disclosure of records of third-party transfers, and you may request disclosure in electronic format. You may exercise these rights by contacting us at privacy@trophybingo.com. You may also contact the Personal Information Protection Commission (PPC).

Section A.6: Republic of Korea

This section applies if you are in Korea and supplements the Core Privacy Notice, under the Personal Information Protection Act (PIPA). Korea requires separate, specific consent for each purpose; omnibus consent is not permitted.

Separate consent

When you register with us, we ask for your consent separately, as Korean law requires:

You may withdraw any consent by contacting us at privacy@trophybingo.com.

Overseas transfer

We transfer your personal information overseas for storage and processing on infrastructure located in the United States, operated by our data processor, Appreciation Engine Inc., and accessed from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. The information that may be transferred comprises the categories listed in “What we collect” in the Core Privacy Notice. It is transferred over the network at the time of the service, for the purposes described in this notice, and is retained in accordance with “How long we keep it”. We make this transfer with your consent or on another basis permitted under the PIPA. You may refuse the overseas transfer by contacting us at privacy@trophybingo.com; if you refuse, because our service operates on infrastructure in the United States, we may be unable to provide the service, or parts of it, to you.

Automated decisions and rights

Where we use automated profiling for decisions that significantly affect you, you may request an explanation and refuse or object. You may access, correct, delete, suspend processing, and port your information. You may complain to the Personal Information Protection Commission (PIPC).

Section A.7: Singapore

This section applies if you are in Singapore and supplements the Core Privacy Notice, under the Personal Data Protection Act 2012 (PDPA).

Legal basis and rights

We notify you of the purposes for which we collect, use and disclose your personal data, and we do so with your consent, or on another basis the PDPA permits, including our legitimate interests where appropriate. We use your data for marketing only with your consent. You may withdraw your consent at any time, and you may request access to, and correction of, your personal data. You may exercise any of these rights by contacting us at privacy@trophybingo.com.

International transfer

Your personal data is transferred outside Singapore for storage and processing on infrastructure located in the United States, and is accessed by our data processor, Appreciation Engine Inc., in Canada. As the PDPA’s Transfer Limitation Obligation requires, we ensure that the recipient is bound to provide a standard of protection comparable to the PDPA, through contractual safeguards or the recipient’s certification, or we transfer your data with your consent.

Section A.8: Taiwan

This section applies if you are in Taiwan and supplements the Core Privacy Notice, under the Personal Data Protection Act (PDPA).

Notice and rights

The purpose, categories, use and recipients of your personal data are described in the Core Privacy Notice, as the PDPA requires. You may inquire about, review, and obtain copies of your data; request correction; and request that we cease collecting, processing or using it, or delete it. You may exercise any of these rights by contacting us at privacy@trophybingo.com.

Section A.9: Thailand

This section applies if you are in Thailand and supplements the Core Privacy Notice, under the Personal Data Protection Act (PDPA).

Legal basis and rights

We process your personal data on the lawful bases the PDPA provides: to provide and operate the service, on the basis of performance of our contract with you; to send marketing communications, on the basis of your consent; and to understand our audience and improve our services, on the basis of our legitimate interests, balanced against your rights. You may access, correct, and obtain a copy of your data; request its erasure or the restriction of its processing; object to processing; and withdraw your consent at any time. You may exercise any of these rights by contacting us at privacy@trophybingo.com.

International transfer

Your personal data is transferred outside Thailand for storage and processing on infrastructure located in the United States, and is accessed by our data processor, Appreciation Engine Inc., from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. We make this transfer on the basis of your consent, or under appropriate safeguards that ensure your data continues to be protected in accordance with the PDPA.

Section A.10: Indonesia

This section applies if you are in Indonesia and supplements the Core Privacy Notice, under the Personal Data Protection Law (PDP Law, Law No. 27 of 2022).

Legal basis and rights

We process your personal data on the lawful bases the PDP Law provides: to provide and operate the service, on the basis of performance of our contract with you; to send marketing communications, on the basis of your consent; and to understand our audience and improve our services, on the basis of our legitimate interests, balanced against your rights. You have the right to obtain information about how your data is processed; to access, correct, and obtain a copy of your data; to erase your data and to end its processing; to object to processing; and to withdraw your consent at any time. You may exercise any of these rights by contacting us at privacy@trophybingo.com.

International transfer

Your personal data is transferred outside Indonesia for storage and processing on infrastructure located in the United States, and is accessed by our data processor, Appreciation Engine Inc., from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. As the PDP Law requires, we make this transfer where the receiving country provides an adequate level of protection, or otherwise under binding safeguards that ensure your data continues to be protected to the standard of the PDP Law, or on the basis of your consent.

Section A.11: Brazil

This section applies if you are in Brazil and supplements the Core Privacy Notice, under the Lei Geral de Proteção de Dados (LGPD).

Legal basis

We process your personal data on the following LGPD legal bases: to provide and operate the service, on the basis of performance of a contract with you; to send marketing communications, on the basis of your consent; and to understand our audience and improve our services, on the basis of our legitimate interests, balanced against your rights. We do not use legitimate interests as a basis for processing sensitive data.

International transfer

Your personal data is transferred outside Brazil to our data processor, Appreciation Engine Inc., for storage and processing on infrastructure located in the United States, and is accessed from Canada and other locations where its authorised personnel and subprocessors operate in the course of providing the service. We make this transfer under the Standard Contractual Clauses approved by the ANPD in Resolution CD/ANPD No. 19/2024, adopted in full, or on the basis of your consent. You can read these Standard Contractual Clauses at gov.br/anpd, and you may also request a copy from us within 15 days.

Data Protection Officer (Encarregado)

Our Data Protection Officer can be contacted at privacy@trophybingo.com.

Your rights

Under the LGPD, you may: confirm that we process your personal data; access your data; correct incomplete, inaccurate or outdated data; anonymise, block or delete data processed unlawfully or beyond what is necessary; port your data to another provider on request; obtain information about the public and private entities with which we have shared your data; be informed about the possibility of refusing consent and the consequences of doing so; and revoke consent. You may exercise any of these rights by contacting us at privacy@trophybingo.com. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

Section A.12: Mexico

This section applies if you are in Mexico and supplements the Core Privacy Notice, under the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Together with the Core Privacy Notice, this section constitutes our privacy notice (aviso de privacidad) for the purposes of Mexican law.

ARCO rights and consent

You have ARCO rights, the rights of Access, Rectification, Cancellation and Opposition in relation to your personal data, and you may withdraw your consent to processing at any time. You may exercise any of these rights by contacting us at privacy@trophybingo.com. You may also bring a complaint before the Secretariat of Anti-Corruption and Good Governance, the authority responsible for personal data protection in Mexico.

Section A.13: Hong Kong SAR

This section applies if you are in Hong Kong and supplements the Core Privacy Notice, under the Personal Data (Privacy) Ordinance (PDPO).

Use and rights

We use your personal data only for the purposes described in the Core Privacy Notice, or a directly related purpose. We use your data for direct marketing only with your consent. You have the right to access and correct your personal data. You may exercise these rights by contacting us at privacy@trophybingo.com.

Section A.14: Mainland China

This section applies only if you access our services incidentally from mainland China. We do not target mainland China and do not offer our services to individuals there as a matter of course. If mainland China becomes a market we target, we will provide a China-specific privacy notice and adopt the mechanisms the Personal Information Protection Law (PIPL) requires.

Schedule B (Connected Accounts)

This Schedule B forms part of the Greenstone Games Privacy Notice and must be read together with it. When you choose to connect a third-party account (for example a social media, gaming or music-streaming account), that platform shows you the permissions you are granting before you agree, and then shares certain information from your account with us. What is shared depends on the platform and on your own settings, and may include your profile details and your activity on that platform, such as the games, artists, tracks or content you follow, play, save or listen to.

The information each platform may share with us is set out below. For every platform except Apple Music, we may also receive a platform identifier for your account and, where the platform and your settings permit, your activity on that platform. Each platform controls what it shares and may change it; the permission screen the platform shows you when you connect is the current, authoritative description. You can stop this sharing at any time from your FairShare privacy settings or in your account settings on the relevant platform.