Cookie Policy — RivalBet.ca

Byline: Compiled by the RivalBet.ca editorial and compliance desk. Last reviewed against PIPEDA, Quebec Law 25, and CASL guidance current for 2026.

Meta: <meta name="robots" content="index, follow"> — canonical /cookies/

What this page actually is

Cookies are small text files a website drops into your browser so it can remember something between page loads or between visits. That is the whole mechanism. Everything else — analytics dashboards, attribution reports, retargeting audiences — is built on top of that one primitive.

This page lists which cookies rivalbet.ca sets, which third parties get to set cookies through us, why each one exists, how long it lives, and what you can do to switch any of them off. Canadian users are covered by PIPEDA at the federal level; if you’re in Quebec, Law 25 (in force since September 2023) applies on top of that and requires explicit, granular consent for any non-essential cookie before it fires. If you’re getting email from us because you signed up, CASL governs that channel — we mention it briefly below because cookies feed the lists CASL then regulates.

We wrote this from how the site is actually wired, not from a template. If something on this page doesn’t line up with what you observe in your browser’s storage inspector, contact us and we’ll fix it.

1. What cookies are, in plain terms

A cookie is a key-value pair the browser stores against a domain. When you make a request back to that domain, the browser sends the cookie header along. That’s it.

Two distinctions matter for this policy:

• First-party vs third-party. First-party cookies are set by rivalbet.ca itself — for sessions, preferences, and internal state. Third-party cookies are set by other domains loaded on our pages (analytics providers, an affiliate network, our CDN). Third parties see only what their own scripts see, and each is bound by its own privacy policy.
• Session vs persistent. Session cookies disappear when you close the tab or the browser. Persistent cookies carry an explicit expiry date and stay until then, or until you delete them manually.

Local storage, session storage, and IndexedDB are related browser mechanisms — technically not cookies, but we treat them under the same consent rules on this site.

2. Categories of cookies used on this site

A. Strictly necessary (no consent required)

These have to fire for the site to work at all. Federal and provincial privacy law recognizes that a website can’t ask consent for the mechanism that would deliver the consent form.

• Session and authentication cookies — keep you signed in across pages
• Load-balancing tokens — route your requests to a consistent backend
• Security tokens (CSRF, bot-mitigation challenges) — prevent request forgery and abuse

B. Functional (opt-in preferred, low-risk)

Not required for the site to render, but they make it behave the way you set it up.

• Language selector (en-CA default; French-Canadian available on request)
• Currency memory (CAD by default; we do not offer alternative currencies on this informational site)
• Display and layout preferences

Under Quebec Law 25 we treat these as opt-in, because “functional” is not the same as “necessary.”

C. Analytics (opt-in, Law 25 explicit consent)

Aggregated, de-identified traffic measurement. We do not use analytics to build individual profiles.

• Session duration and pages per session
• Referral source and landing page
• Broad device/browser class (not fingerprinting)
• Aggregated traffic patterns for editorial planning

Providers in this bucket for a site of this profile are the standard set — Google Analytics is the peer benchmark on Canadian offshore-facing casino affiliate pages, with Plausible-class alternatives used by a minority. If we swap providers we update this page and re-prompt for consent.

D. Marketing and affiliate attribution (opt-in, CASL applies to email derived from this data)

We are an affiliate site. If you click through to the operator we cover, that click is tracked so the operator can attribute the traffic. Nothing on this list is used to serve you ads on other websites unless you have consented in the banner.

• Affiliate click tracking through the adminclick.org network
• Conversion attribution back to specific pages
• Retargeting pixels — typical for Canadian offshore-market brands but we run these only when consent is on

3. Cookie list

If you inspect your browser storage and find a cookie set by our domain that isn’t on this list, that’s a bug on our end — report it via the contact page and we’ll investigate.

4. Consent and opt-out

Consent banner. On your first visit you see a banner with three choices: accept all, reject non-essential, or manage preferences per category. Reject-all is styled as prominently as accept-all — Quebec Law 25 requires that, and we apply the same standard nationwide because splitting the UI by province is worse for everyone.

Quebec Law 25. If your IP resolves to Quebec, or you tell us you are in Quebec, non-essential cookies stay off until you opt in explicitly and per category. Bundled “accept everything” is not the default state for Quebec traffic.

PIPEDA. Federal standard is meaningful consent — the banner text is written in plain language, not lawyer-speak, so the consent is informed.

CASL. If you subscribe to email, CASL governs that: express consent at signup, sender identification in every message, and one-click unsubscribe. Cookie data can feed segmentation of those lists, but the emails themselves are regulated as CEM (commercial electronic messages), not as cookies.

Browser-level controls. Every modern browser lets you block or clear cookies wholesale. Instructions live on the browser vendors’ own support sites — Chrome, Firefox, Safari, and Edge each publish a settings guide, and their pages are more authoritative than anything we could copy here.

Global Privacy Control. If your browser sends the GPC signal, we honour it automatically as an opt-out for analytics and marketing categories. You don’t need to also interact with the banner.

5. Third-party cookies

Anything set by a domain other than rivalbet.ca is a third-party cookie. On this site, third parties are limited to:

• The analytics provider — subject to that provider’s own privacy policy, which we link from inside the consent-preferences modal
• The affiliate network we use for attribution — subject to their privacy policy
• The CDN and hosting layer — technically necessary and covered under strictly-necessary

We do not embed social-media widgets that silently set tracking cookies before you interact with them. If we add one in future, this page and the consent banner update first.

6. Territorial note

• Quebec residents: Law 25 applies. Explicit per-category consent is required before any non-essential cookie fires.
• All other provinces except Ontario: PIPEDA applies. Meaningful consent standard via the banner.
• Ontario residents: RivalBet Casino services are not available to Ontario residents. AGCO regulates the Ontario iGaming market, and this brand operates outside that framework. If you’re in Ontario visiting rivalbet.ca for information, cookie usage is limited to strictly necessary plus any functional cookies you actively enable — no marketing or affiliate attribution is triggered.
• Age gate: 19+ across most provinces; 18+ in Alberta, Manitoba, and Quebec.

7. Retention

When a retention window ends, the cookie expires client-side and the next request looks like a first visit — the banner re-appears if applicable.

8. Your rights

Under PIPEDA and, for Quebec residents, Law 25, you can:

• Withdraw consent at any time — reopen the preferences modal via the footer link, or clear cookies at browser level
• Request access to what personal data we hold about you — send the request via the contact page
• Correct inaccurate data or ask for erasure where the legal basis has ended
• Data portability — receive your data in a structured, commonly used format (Law 25, from September 2024)

Full details on how we handle personal data — not just cookies — are in the Privacy Policy. Disputes over how we apply these rights are governed by the Terms of Use. Brand context sits on the home page.

If we don’t resolve a complaint to your satisfaction, you can escalate:

• Federal: Office of the Privacy Commissioner of Canada — 1-800-282-1376, priv.gc.ca
• Quebec: Commission d’accès à l’information du Québec — cai.gouv.qc.ca

9. Changes to this policy

Cookies change when the tech stack changes. When we add, remove, or repurpose a cookie in a way that affects what data leaves your browser, we do two things: update this page (the “Last updated” line moves), and re-surface the consent banner so your prior choice is either re-confirmed or re-collected for the new item. If you’re on our email list, material changes go out in a notice email as well.

Last updated: [DATE TO BE SET AT DEPLOY]

The honest note

Cookie policies are one of those documents where the legal text and the actual site behaviour rarely match on most affiliate sites — templates get pasted in, tags get added later, and nobody reconciles the two. We wrote this against the real cookie inventory of this site, not against a boilerplate. If a category is off, if a row in the table doesn’t match what your browser’s storage inspector shows, or if you find a tag firing before you’ve consented in Quebec — tell us via the contact page linked above and we’ll investigate and fix. That’s the point of having a policy that reflects the build.

RivalBet.ca is an independent affiliate resource. Casino services described elsewhere on this site are not available to Ontario residents. 19+ (18+ AB/MB/QC). Play within your means. If gambling is causing harm, ConnexOntario 1-866-531-2600 and provincial helplines can help.