Cookie Policy
What cookies and similar technologies are used on mhighflyercasino.com, what each category is for, how long they last, and how to change your choices at any time.
Last updated: 08 September 2026
What cookies are
A cookie is a small text file stored on your device by your browser when you visit a site. Similar technologies — local storage, session storage and small tracking pixels — do the same job in different ways, and everything in this policy applies to them too.
First-party cookies are set by mhighflyercasino.com. Third-party cookies are set by another provider whose service is used on the site. A session cookie is deleted when you close the browser; a persistent cookie stays until it expires or you delete it.
Essential Cookies
Essential cookies make the service work and keep it secure. They are always active, because the site cannot function without them, and no consent is required for them.
| Cookie | Purpose | Type | Retention |
|---|---|---|---|
hfc_sid | Keeps you signed in and links your browser to your session on our server. | First-party | Session |
hfc_age | Remembers your answer to the 19+ and Ontario age gate so it is not shown again. | First-party | 30 days |
hfc_consent | Stores your cookie choices so they can be applied and evidenced. | First-party | 180 days |
| CSRF token | Protects forms and account actions against cross-site request forgery. Held in the session. | First-party | Session |
| Rate-limit records | Limits repeated sign-in attempts from the same address. Held on our server, not on your device. | First-party | 15 minutes |
Functional Cookies
Functional cookies remember choices you make so the site behaves the way you left it. They are used only with your consent, and refusing them does not stop you using the service.
| Purpose | Examples | Type | Retention |
|---|---|---|---|
| Remembering the category filter you last used in the game lobby. | Local storage entry per page | First-party | Until cleared |
| Remembering interface preferences such as a dismissed notice. | Local storage entry | First-party | Until cleared |
| Supporting embedded game and live-stream players supplied by our game providers. | Provider player settings | Third-party | Up to 12 months |
Analytics Cookies
Analytics cookies produce aggregated statistics about how the site is used, so we can find problems and improve it. They are used only with your consent and are not used to make decisions about individual accounts.
| Purpose | Data | Type | Retention |
|---|---|---|---|
| Counting visits and page views, and measuring journeys through the site. | Pseudonymous identifier, pages viewed, timestamps | First-party / third-party | Up to 13 months |
| Measuring performance, load times and error rates. | Device category, browser, approximate region, timings | First-party / third-party | Up to 13 months |
If you do not consent, no analytics collection takes place.
Advertising Cookies
Advertising cookies measure the effectiveness of campaigns and limit how often the same message is shown. They are used only with your consent.
| Purpose | Data | Type | Retention |
|---|---|---|---|
| Attributing a registration to the campaign that led to it. | Campaign reference, timestamp | First-party | Up to 90 days |
| Limiting repeat display of the same advertisement. | Pseudonymous identifier, counter | Third-party | Up to 12 months |
Advertising technologies are never used to target people who are under 19 or who are self-excluded, and geolocation data collected for eligibility checks is never used for advertising.
Third-Party Technologies
Some parts of the service are supplied by providers who may set their own cookies or storage when their component is loaded:
- Game and live dealer suppliers — to run a game session, keep a stream stable and store player-side game settings.
- Payment providers — during a deposit or withdrawal, for security, fraud prevention and completing the transaction.
- Identity verification providers — during a verification check.
- Analytics providers — where you have consented to analytics.
- Web font hosting — to deliver the site's typeface.
These providers act under contract with us and are permitted to use the data only for the purpose we specify. Their own policies apply to their processing.
What cookies are used for, in short
- Keeping you signed in and protecting your account and our forms.
- Remembering your age-gate answer and your cookie choices.
- Making eligibility checks work, including the Ontario location check.
- Detecting fraud, automated abuse and attempts to bypass controls.
- Remembering interface preferences (with consent).
- Understanding how the site is used and where it fails (with consent).
- Measuring campaigns (with consent).
Retention periods
Retention for each cookie is given in the tables above. In summary: session cookies last until you close the browser; the age-gate cookie lasts 30 days; the consent cookie lasts 180 days; functional storage lasts until you clear it; analytics identifiers last up to 13 months; advertising identifiers last up to 12 months. Server-side records connected to consent are kept as described in the Privacy Policy.
Managing your consent
On your first visit a banner offers three choices:
- Accept All — allows functional, analytics and advertising cookies as well as essential ones.
- Reject Non-Essential — keeps only essential cookies. Nothing optional is set.
- Manage Preferences — lets you allow each category individually.
Optional cookies are not activated until you have given consent for that category. Consent is not implied by continuing to browse, and refusing has no effect on your access to the service or on your account.
Changing your settings
You can change your choices at any time:
You can also manage cookies in your browser: most browsers let you view and delete cookies, block cookies from specific sites, or block all cookies. Blocking essential cookies will stop you signing in and using an account. Instructions are in your browser's help pages, under Privacy or Site settings. Deleting cookies removes your stored consent, so the banner will appear again on your next visit.
Marketing consent and CASL
Advertising cookies are separate from marketing e-mail. Commercial electronic messages are sent only with your express consent under Canada's Anti-Spam Legislation (CASL), and every one of them carries an unsubscribe link that we act on promptly. You can also withdraw marketing consent in your account settings, or by writing to the Privacy Officer at the address given in the Privacy Policy.
Unsubscribing from marketing does not stop service messages about your account — verification outcomes, withdrawal notifications, security alerts and responsible-gambling confirmations — which we are required to send.
Supervisory authority
Complaints about how your personal information is handled can be raised with our Privacy Officer at the address given in the Privacy Policy. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (OPC), which oversees compliance with PIPEDA and, together with the CRTC and the Competition Bureau, enforcement of CASL.
More information
How we handle personal information more generally, including geolocation data and your rights, is set out in the Privacy Policy. Privacy questions go to the Privacy Officer at the address given there.