Set out below is an overview of the personal data processed by Lüks Casino, including the categories collected, the purposes of processing, applicable retention periods, and the recipients with whom such data may be shared. Registration of an account constitutes acceptance of the practices described in this document, which should be read in conjunction with the Terms and Conditions.
Categories of Data Collected
Data is obtained through three distinct channels: information provided directly by the player at registration, information generated automatically by the platform during gameplay, and information transmitted by payment providers upon completion of a transaction. No personal data is purchased from third parties for advertising purposes.
| Type of data | Why we collect it | Retention period |
|---|---|---|
| Phone number and email address | Account opening, login verification, and communication with the player | Retained for the duration the account remains open |
| Name and date of birth | Verification of the minimum age of 18 and confirmation of account ownership | Retained for the period required by applicable law |
| Payment details | Processing of deposit and withdrawal transactions | Retained for the period required by applicable law |
| Betting and gaming history | Settlement, verification of bonus wagering, and review of complaints | Retained for the period required by applicable law |
| IP address and device data | Security purposes, including detection of duplicate accounts and fraud | Retained for a limited period following creation of the record |
| Support correspondence | Monitoring and resolution of an open complaint | Retained for a limited period after the case file is closed |
| Cookie data | Maintenance of the active session and retention of language and preference settings | Retained for the duration of the cookie's lifespan |
Grounds for Processing
- Performance of contract: opening the account, accepting wagers, and processing payment.
- Compliance with legal obligation: age verification, identity checks, and record retention.
- Legitimate interest: prevention of fraud, automated (bot) activity, and duplicate accounts.
- Explicit consent: transmission of bonus notices and promotional communications.
Consent to receive notifications may be withdrawn at any time. Such withdrawal does not result in account closure; it terminates only the receipt of marketing communications.
Use of Cookies
Cookies are small data files stored within the player's browser. Essential cookies are required to maintain an active session and to enable the site to function; absent these, the platform cannot operate. Preference cookies retain language and display settings. Measurement cookies provide aggregated usage data and are not employed to identify individual players.
Cookies may be deleted or blocked via browser settings; however, blocking essential cookies will prevent the player from logging in.
Recipients of Data
- Payment providers, limited to the extent necessary to complete the transaction.
- Game studios, for the purpose of verifying round outcomes and betting records.
- Identity verification providers, to confirm age and account ownership.
- Competent authorities, where required by law and to the extent requested.
Data is not sold for advertising purposes, nor are customer lists made available to third parties for rental. Service providers process data solely on behalf of, and in accordance with the instructions of, Lüks Casino.
Data Security
The connection between the site and the player's browser is encrypted. Passwords are stored using an irreversible method, such that no party, including support personnel, is able to view a player's actual password. Access to records is governed by role: payment data is accessible only to the payments team, and complaint files are accessible only to the team assigned to the matter.
Account security is, in part, the responsibility of the player: passwords should not be reused on other sites, verification codes should not be disclosed to any third party, and sessions should not be left active on unfamiliar devices.
Player Rights
- The right to request a copy of the data held in respect of the player.
- The right to request correction of inaccurate or incomplete data.
- The right to request deletion of data no longer subject to a legal retention obligation.
- The right to object to marketing communications and to withdraw consent.
Requests should be submitted via support. Account closure does not result in the immediate deletion of all data; payment and betting records are retained until the applicable statutory period expires, following which they are deleted. A self-exclusion record is retained until the exclusion term concludes, so as to preserve the effectiveness of the exclusion; further information is provided on the Responsible Gaming page. The applicable procedure for disputes concerning data processing is set out on the Player Complaint Policy page.
Amendments to This Policy
This policy is subject to amendment. The version published on this page constitutes the current version and takes effect upon publication. Where an amendment expands the categories of data collected or the scope of disclosure, notice will be provided to the contact address registered to the player's account.