Privacy Policy

As a data controller, we have a legal obligation under gambling regulations to process personal data from players in order to allow them to participate in games and provide them with ancillary services. This Privacy Policy explains what personal data we collect from players, why we collect it and how we utilise it.

The website lucky.fun ("Casino", "Website", "Company", "We", "Us", "Our") is operated by Good Luck Ltd, registration number: 16147, registered address: Hamchako, Mutsamudu, the Autonomous Island of Anjouan, Union of Comoros and is licensed and regulated by the Government of the Autonomous Island of Anjouan, Union of Comoros, under the Betting and Gaming Act 2005, operating under License number ALSI-202510021-FI1

If you have any other questions regarding this Privacy Policy or protection of your data, please feel free to contact our Data Protection Officer at [email protected].

By registering a Player Account or using our Website, you acknowledge and agree to the terms outlined in this Privacy Policy. If you do not agree with these terms or choose not to provide the personal data we require, you should refrain from using our Website and related services.

This Privacy Policy forms a binding agreement between you and the Company. We may update or modify this Policy from time to time, and while we will make reasonable efforts to inform you of any significant changes, we encourage you to review this page periodically. Your continued use of the Website after updates take effect will constitute acceptance of the revised Policy.

We collect and process your personal data when you register for an account or interact with our services. This may include:

Identity and Contact Information: such as your full name, date of birth, home address, email address, and telephone number.

Account and Transaction Data: including your account credentials, game history, deposits, withdrawals, and any communications related to your account activity.

Verification Documents: copies of identification documents (e.g., passport, national ID, utility bills, or bank statements) that we may request to verify your identity, process transactions, or comply with anti-fraud and legal obligations.

Technical and Usage Data: such as your IP address, browser type, device identifiers, GeoIP information, login data, activity logs, and other traffic data generated through our Website or services.

Customer Support and Communications: records of communications with our customer service team, including emails, chat transcripts, or call recordings which may be used for security, support, or training purposes.

Surveys and Feedback: responses or opinions provided to us through surveys, feedback forms, or market research initiatives.

We may collect this information directly from you, automatically through your use of our services, or from third-party service providers that assist with identity verification, payment processing, or regulatory compliance.

We process your personal information to operate, improve, and safeguard our services, as well as to meet our legal and contractual obligations. Specifically, we use your data to:

Manage your account and gameplay: including processing your bets, deposits, and withdrawals through secure payment methods.

Provide and enhance our services: enabling access to gaming features, supporting gameplay, and delivering requested site functionality.

Offer customer support: such as helping you set up or recover your account, and addressing service-related inquiries.

Verify your identity and eligibility: by conducting necessary checks as required by law and internal policies.

Send promotional communications: including updates on bonuses, offers, or services, but only if you have opted in to receive marketing communications.

Comply with legal obligations: such as anti-money laundering (AML) and counter-terrorist financing (CTF) regulations.

Detect and prevent fraud and abuse: by monitoring account activity and transactions to identify irregular or unauthorized behavior.

Conduct research and analytics: utilizing aggregated and anonymized data to understand customer trends, improve services, and support business decisions.

Carry out optional surveys: where feedback is voluntarily provided to help us enhance the overall player experience.

We ensure all data processing activities are aligned with applicable privacy laws and based on lawful grounds, including contract performance, legal compliance, and legitimate business interests.

With your permission, we may use your personal information—such as your email address or phone number—to send you marketing communications about our latest games, promotions, and exclusive offers. These communications may also include updates from our trusted partners, such as game providers or service affiliates.

You are always in control of your marketing preferences. You may opt out of receiving promotional messages at any time via your Player Account settings or by contacting our support team at [email protected]

We collect personal information transparently and only with your knowledge. Most data is provided directly by you, such as when you create an account, make a transaction, communicate with us, or interact with the Website.

Some data may be collected automatically, such as technical and usage information generated during your sessions.

We may also obtain information lawfully from third-party providers, including identity verification services, payment processors, and fraud prevention partners. This helps us support transactions and maintain platform integrity.

We may engage trusted third-party vendors to provide technical support, gaming content, or customer services. In such cases, these vendors may have access to data you have shared with them.

All personal information collected - whether directly from you or via third parties - is handled in accordance with this Privacy Policy. Third-party partners are bound by strict confidentiality and data protection obligations. Information will only be shared outside our organization when necessary and always under terms designed to maintain your privacy and security.

To deliver our services, we may share your personal information with entities within our corporate group and with trusted business partners. This includes parent companies, subsidiaries, affiliates, and service providers engaged under approved agreements for payment processing, fraud prevention, customer support, or gaming content provision.

Access to your personal data is strictly limited to designated personnel, such as our Data Protection Officer, Compliance and Anti-Fraud teams, Payments staff, Customer Support agents, and VIP managers, all of whom are bound by confidentiality agreements and trained to handle your data in compliance with privacy, gaming, and data protection laws.

In some cases, personal data may be transferred outside the European Union (EU), European Free Trade Association (EFTA), or European Economic Area (EEA). Such transfers are conducted in accordance with the General Data Protection Regulation (GDPR) and safeguarded using recognized measures, such as the European Commission's Standard Contractual Clauses.

By using our platform, you acknowledge and agree to these transfers and the safeguards implemented to protect your data. We remain committed to treating your information securely, transparently, and in accordance with applicable data protection laws.

We do not sell or rent your personal data to third parties.

However, we may disclose information when required by law, regulation, legal process, or a valid governmental or regulatory request. Disclosure may also occur to protect the lawful interests of the Company, its customers, or others, such as in cases of fraud investigation or safety concerns.

We may share your data under specific circumstances, including:

Compliance with legal obligations, regulatory requirements, or court orders. Facilitating secure payment transactions through trusted processors, subject to their privacy policies. Meeting obligations with licensing and regulatory authorities. Responding to legitimate law enforcement or government requests. Supporting essential business operations through approved third-party providers, such as marketing agencies, hosting services, analytics partners, or customer support vendors. All are bound by confidentiality and data protection agreements. With your prior consent, where applicable.

Our websites may also feature third-party services, such as social media plugins or external content links. Data collected via these features is subject to the privacy policies of the respective providers.

In the event of a merger, acquisition, restructuring, or similar transaction, personal data may be part of transferred assets. We will provide timely notice prior to any such transfer.

We take all reasonable steps to ensure any third party handling your data complies with applicable regulations and maintains the same level of security and confidentiality.

You may close your Player Account at any time, as outlined in our Terms and Conditions. Once your account is closed, we will retain your personal data only for as long as legally required. This retention period is necessary to comply with obligations related to anti-money laundering (AML), fraud prevention, taxation, and other regulatory requirements. In accordance with applicable AML regulations in many licensed gaming jurisdictions, including those within the European Union, we are required to securely store personal and transactional data for a minimum of five (5) years from the date of your last transaction or account closure. During this period, your information may be accessed solely for lawful purposes, such as compliance inquiries or investigations by competent authorities. Please note that any request to erase personal data before the end of this legally mandated retention period cannot be fulfilled. We may, however, anonymize certain data for analytical and service improvement purposes, provided it does not involve automated decision-making or personally identify you.

We are fully committed to safeguarding your Personal Information in strict accordance with applicable data protection laws and industry best practices. To ensure the security of your data, we employ advanced technical and organizational measures designed to prevent unauthorized access, loss, or misuse. Access to Player Accounts is secured through a unique user ID and password combination, with optional two-factor authentication (2FA) available for enhanced protection. While we take all reasonable precautions to secure your data, it is your responsibility to maintain the confidentiality of your login credentials and ensure they are not shared or accessed by unauthorized individuals.

As a data subject, you have certain rights regarding the personal data we hold about you, in accordance with applicable data protection laws. These rights include the ability to:

Access your data – request a free copy of the personal information we process about you;

Correct your data – have inaccurate or incomplete information updated, provided verification documentation is supplied where necessary;

Request erasure – ask for deletion of your data where we no longer have a legal basis to retain it, noting that this right may be limited by legal obligations or ongoing disputes;

Object to processing – challenge processing based on our legitimate interests, subject to overriding lawful grounds we may demonstrate;

Restrict processing – temporarily suspend the use of your data in specific scenarios, such as when accuracy is being verified, processing is unlawful but deletion is not desired, or objections are under review;

Data portability – request a copy of your data in a structured, machine-readable format to transfer it to another controller, where the data was obtained via automated processing or used to fulfill a contract;

Withdraw consent – revoke consent previously given for processing, including marketing communications, without affecting the lawfulness of processing up to the point of withdrawal; and

Lodge a complaint – raise concerns with the relevant supervisory authority regarding our handling of your data.

To exercise these rights, we may need to verify your identity to protect your privacy and security. We will respond to all legitimate requests promptly, typically within one month. In complex cases or multiple concurrent requests, this period may be extended, in which case we will notify you of the expected timeframe.

You may contact us at any time regarding this Privacy Policy for purposes including, but not limited to: verifying the accuracy of the personal information we hold about you; inquiring about how your data is used; objecting to the use of your information for direct marketing; or requesting updates or corrections to the information you have provided (supporting documentation may be required to process such requests). It is your responsibility to provide accurate information and keep your data up to date, as knowingly providing false information is prohibited by law.

We have appointed a Data Protection Officer ("DPO") who oversees all matters related to this Privacy Policy. You may contact the DPO at [email protected]

When you visit our Website, we automatically collect certain information, such as your browser type, IP address, and referring website. This may be done with the help of platform providers and partners, who may provide aggregated visitor statistics. We do not use this information to personally identify you without your consent.

We use cookies and similar tools to improve your experience and site functionality:

Required cookies: essential for navigation and accessing member areas.

Functional cookies: store preferences and enhance your browsing experience.

Advertising cookies: track marketing effectiveness and may be linked to other data collected by providers under their privacy policies.

Third-party service providers may also set cookies to help deliver services, analyze Website usage, or measure marketing performance. Most browsers accept cookies automatically, but you may block or delete them through your browser settings. Please note that doing so may limit access to certain features or functionality of the Website.