By Fiona Nicoll
Yabby Casino launched in 2020 and operates under a licence from Anjouan Gaming in the Autonomous Island of Anjouan, Union of Comoros. When you create an account at Yabby, you provide your full legal name, date of birth, email address, and — at the point of withdrawal — identity documents and proof of address. The platform also generates a detailed behavioural record of your gaming activity. Understanding what happens to that data at an offshore-licensed platform is a different exercise from evaluating a casino regulated by the AGCO or MGA, because the frameworks governing data protection differ materially.
Ontario players: this guide does not apply to you
Yabby Casino explicitly does not accept players from Ontario. Ontario residents should be using AGCO-licensed platforms where provincial data protection standards apply alongside federal PIPEDA protections. If you are an Ontario player who has arrived at this page, you are not eligible to use Yabby Casino.
The regulatory framework governing Yabby’s privacy practices
Yabby Casino’s data handling obligations come from two sources for Canadian players. The Anjouan Gaming licence imposes data protection requirements as conditions of the gaming licence, but Anjouan is not a jurisdiction that aligns with GDPR or the detailed data governance standards of the MGA or UKGC. Canada’s federal PIPEDA provides the second and more substantive layer — applying to any organisation collecting personal information from Canadians, regardless of where that organisation is based. The practical implications — consent requirements, access rights, and complaint pathways through the Office of the Privacy Commissioner of Canada — apply to Canadian Yabby players as legal rights that exist independently of what Anjouan Gaming requires.
What data Yabby Casino collects from Canadian players
Data provided directly:
| Category | Specific data points |
|---|---|
| Identity data | Full legal name, date of birth |
| Contact data | Email address, residential address (for KYC) |
| Verification data | Government-issued photo ID, proof of address, source of funds documentation |
| Financial data | Cryptocurrency wallet addresses, transaction history, fiat payment method details for deposits |
| Account preferences | Responsible gambling settings, marketing consent, communication preferences |
Data collected automatically:
| Category | Specific data points |
|---|---|
| Technical data | IP address, device type, browser version, operating system |
| Behavioural data | Games played, session duration, bet sizes, bonus code usage, win and loss records |
| Blockchain transaction data | On-chain transaction details associated with crypto deposits and withdrawals |
| Location data | IP-based geolocation for Ontario exclusion enforcement and jurisdictional compliance |
| Communication data | Live chat transcripts, email support records |
| Cookie data | Session authentication, analytics, marketing tracking |
The blockchain transaction data category is unique to crypto-primary platforms like Yabby and has specific privacy implications. When you deposit Bitcoin or withdraw via the Lightning Network, those transactions are recorded permanently on public blockchain ledgers — accessible to anyone. Yabby’s privacy policy governs what the platform does with your personal data internally, but it cannot govern the transparency of public blockchain records. Players who value transaction privacy should understand that crypto transactions linked to their Yabby account create on-chain records that exist independently of Yabby’s own data practices.
Third parties who may receive your data
| Third party category | Purpose | Notes |
|---|---|---|
| Payment processors | Processing fiat deposits | Card networks, Apple Pay, Google Pay, Skrill |
| Blockchain networks | Processing crypto transactions | On-chain records are public by nature |
| Identity verification providers | KYC document authentication | Third-party verification services |
| Regulatory authorities | Anjouan Gaming compliance reporting | Offshore regulator |
| Analytics providers | Platform performance analysis | Usage tracking |
| Marketing platforms | Delivering consented promotional communications | Email and social content delivery |
Yabby is not part of a multi-brand casino network, so the third-party data sharing is more limited in scope than at group-operated casinos — data is not being shared with sister properties. Yabby does not sell personal data to third-party advertisers. Marketing is delivered to players who have consented to receive it, and consent can be withdrawn through account settings.
Data security
Yabby Casino protects player data through SSL encryption on all transmitted data, secure server storage with access controls, and real-time transaction monitoring for fraud indicators. The platform’s Casino.guru High Safety Index of 8.1 reflects positive player experience data on payment processing and operational reliability. The platform does not prominently offer two-factor authentication as a standard security feature — a security gap worth noting given that Yabby accounts contain cryptocurrency wallet connections and near-instant Lightning Network withdrawal capability. Players should use strong unique passwords and avoid reusing credentials from other platforms.
Your rights as a Canadian player under PIPEDA
- Right of access — request a complete copy of all personal data Yabby holds about you
- Right to correction — request updates to inaccurate personal information
- Right to withdraw consent — for marketing and non-essential processing, opt out at any time
- Right to complain — file with the Office of the Privacy Commissioner of Canada if Yabby does not resolve your concern
- Right to account closure — Yabby must close your account on request, subject to retention obligations
PIPEDA access requests must be addressed within 30 days. Contact Yabby’s live chat support team to initiate any data rights request.
