At Lucky Ones Casino, we believe that protecting your personal data is just as important as delivering a world-class gaming experience. This Lucky Ones Casino privacy policy explains in plain language exactly what personal information we collect, why we collect it, how we use it, who we may share it with, and what privacy rights you hold as an Australian player. Our practices are designed to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the EU General Data Protection Regulation (GDPR) where applicable. We encourage you to read this document carefully so that you can make informed decisions about your relationship with us. If you have any questions or concerns after reading this policy, please contact our Data Protection Officer at [email protected].
1. Identity of the Data Controller
Lucky Ones Casino is operated by a company registered in Curaçao, licensed by the Government of Curaçao. This entity acts as the data controller for all personal data processed in connection with your use of our website at luckyoness-casino.com and any associated mobile applications. As the controller, we determine the purposes and means of data processing and are responsible for ensuring that user data is handled lawfully, fairly, and transparently. Our registered address and full corporate details are available upon written request by emailing [email protected].
2. Personal Data We Collect
When you create an account or use our services, Lucky Ones Casino collects a range of personal information across several categories. Understanding exactly what data collection takes place helps you exercise your rights with confidence.
2.1 Identification and Contact Data
- Full legal name, date of birth, and nationality
- Residential address, state, and postcode
- Email address and phone number
- Government-issued identification documents (passport, driver's licence, Medicare card) — collected as part of mandatory KYC (Know Your Customer) verification
2.2 Financial Data
- Payment method details (card numbers are tokenised and never stored in full), PayID references, e-wallet account identifiers
- Transaction history including deposit amounts, withdrawal requests, processing times, and currencies used
- Bank account information where a direct transfer is requested
2.3 Gaming Activity Data
- Game sessions, wagers placed, wins, losses, and bonus usage
- VIP level progression (Bronze, Silver, Gold, Platinum, Diamond) and cashback earned
- Responsible gambling settings such as deposit limits, loss limits, session limits, and self-exclusion periods
2.4 Technical and Device Data
- IP address, browser type and version, operating system
- Device identifiers (for Android APK and iOS PWA users)
- Log files, access timestamps, and referring URLs
- Cookies and similar tracking technologies (see our cookie policy below)
2.5 Communication Data
- Live chat transcripts and email correspondence with our support team
- Promotional preferences and marketing opt-in or opt-out records
2.6 Sensitive Data
In limited circumstances and only with your explicit consent or where required by law, Lucky Ones Casino may process sensitive information (as defined under the Australian Privacy Act) such as health-related data when evaluating responsible gambling concerns. We treat this category of data with the highest level of confidentiality.
2.7 Data Received from Third Parties
We may receive personal data about you from payment processors, identity verification providers, fraud prevention agencies, and licensed data brokers to supplement the information you supply directly. In all cases, third-party data is integrated into our systems under strict contractual obligations that mirror our own data protection standards.
3. Methods of Data Collection
The Lucky Ones Casino website and apps collect user data through several mechanisms:
- Direct submission — information you provide when registering, depositing funds, verifying your identity, or contacting support
- Automated collection — technical data gathered automatically as you browse or play, including through cookies, web beacons, and server logs
- Third-party sources — information passed to us by payment gateways (Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, PayID), identity verification partners, and credit-reference agencies
4. Purposes of Data Processing
Every piece of personal information held by Lucky Ones Casino serves a specific, documented purpose. We do not engage in speculative data collection or retain information beyond what is necessary. The primary purposes are:
| Purpose | Examples |
|---|---|
| Account Management | Creating and maintaining your player profile, enabling logins, managing VIP status |
| Service Provision | Processing deposits and withdrawals, providing access to 4,000+ games from 50+ providers |
| KYC / AML Compliance | Verifying identity before the first withdrawal, meeting anti-money-laundering obligations under Curaçao licensing requirements |
| Fraud Prevention & Security | Detecting suspicious transactions, preventing account takeover, maintaining data security |
| Responsible Gambling | Administering self-exclusion periods (6 months to permanent), enforcing limits, conducting player welfare checks |
| Marketing & Communications | Sending promotional emails about bonuses, free spins, and VIP offers — only with your consent |
| Product Improvement | Analysing user data to optimise the platform, improve game loading speeds, and personalise recommendations |
| Legal Obligations | Responding to requests from regulators, law enforcement, or tax authorities |
5. Legal Basis for Data Processing
Our data processing activities are anchored to one or more of the following lawful grounds:
- Contractual necessity — processing required to perform the services you have signed up for, such as handling deposits and withdrawals
- Legal obligation — processing mandated by KYC, AML, and gambling regulations
- Legitimate interests — data security monitoring, fraud detection, and internal analytics, provided your interests and rights do not override ours
- Consent — marketing communications, optional personalisation features, and certain cookie categories. You may withdraw consent at any time without affecting prior processing
6. Cookie Policy
The Lucky Ones Casino cookie policy describes how we use cookies and similar technologies on luckyoness-casino.com. Cookies are small text files stored on your device when you visit our site. They help us deliver a smooth, personalised experience and allow us to measure performance. Our cookie policy categorises all cookies into four types:
6.1 Essential Cookies
These cookies are strictly necessary for the website to function. They enable secure login sessions, maintain your game state, and facilitate payment processes. You cannot opt out of essential cookies without losing core functionality.
6.2 Analytical Cookies
We use analytics tools (such as aggregated, anonymised traffic data) to understand how players interact with our platform. This data processing helps us identify pages with high exit rates, slow load times, or confusing navigation so we can improve your experience. Analytical cookies can be declined via our cookie consent banner.
6.3 Functional Cookies
Functional cookies remember your preferences — such as language settings, currency display, and responsible gambling limit choices — so you do not need to re-enter them each time you visit. Declining these cookies means certain personalisation features will be unavailable.
6.4 Marketing Cookies
With your consent, we and selected advertising partners may set marketing cookies to show you relevant promotions across the web. These cookies track your browsing behaviour and interests. You can withdraw consent at any time via the cookie preference centre accessible from the footer of every page on our site.
For a complete list of individual cookies, their duration, and the third parties involved, please visit our dedicated cookie policy page or contact us at [email protected].
7. Sharing Your Personal Data with Third Parties
Lucky Ones Casino does not sell your personal data to third parties. However, to deliver our services and meet legal requirements, we share personal information in a controlled manner with the following categories of recipients:
7.1 Payment Service Providers
To process your deposits and withdrawals via PayID, Visa, Mastercard, Skrill, Neteller, Paysafecard, Neosurf, Bitcoin, Ethereum, Litecoin, and bank transfer, we share necessary financial and identity data with our payment partners. All such providers operate under strict contractual obligations and their own data protection frameworks.
7.2 Identity Verification and AML Providers
KYC is mandatory before your first withdrawal. We work with accredited identity verification services to confirm your documents are genuine and to screen against global watchlists. This is a legal requirement of our Curaçao licence.
7.3 Game Providers
Your gaming activity data may be shared with our software providers — including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming, Yggdrasil, Hacksaw Gaming, Push Gaming, Spribe, Red Tiger, Nolimit City, and Relax Gaming — to the extent necessary for game delivery, fairness certification, and technical support.
7.4 Regulatory and Law Enforcement Authorities
We are obliged to disclose personal data to competent authorities, including the Australian Federal Police, AUSTRAC, and gambling regulators, when required by law, court order, or to prevent serious harm.
7.5 Technology and Infrastructure Partners
Cloud hosting providers, cybersecurity firms, and software vendors may access user data in the course of supplying their services to us. All are bound by data processing agreements that enforce the same confidentiality and information security standards we apply internally.
8. International Data Transfers
As a globally operated platform, Lucky Ones Casino may transfer your personal data outside Australia and the EEA. When such transfers occur, we ensure an equivalent level of data protection is maintained through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where the destination country has been recognised as providing adequate data protection
- Binding Corporate Rules where applicable within our group
- Your explicit consent, obtained prior to the transfer
If you would like details about any specific international transfer or a copy of the relevant safeguards, email our Data Protection Officer at [email protected].
9. Data Security
Lucky Ones Casino data security is underpinned by a multi-layered technical and organisational framework. We recognise that information security is not a one-time project but a continuous commitment. Our measures include:
- 256-bit SSL/TLS encryption — all data transmitted between your browser or app and our servers is encrypted using industry-leading technology, preventing interception by third parties
- Firewalls and intrusion detection — our network perimeter is protected by enterprise-grade firewalls and real-time intrusion detection systems that flag unusual activity instantly
- Data-at-rest encryption — personal data stored in our databases is encrypted so that even in the unlikely event of unauthorised physical access, individual records remain unreadable
- Access controls — staff access to user data is restricted on a need-to-know basis, enforced through role-based permissions and multi-factor authentication
- Regular security audits — our systems undergo penetration testing and third-party security reviews at least annually
- RNG certification — our Random Number Generators are certified by independent laboratories, ensuring game fairness and protecting players from algorithmic manipulation
- Incident response plan — in the event of a personal data breach that is likely to result in a risk to your rights, we will notify the OAIC within 30 days and inform affected individuals without undue delay
Despite our robust data security measures, no system is entirely immune to risk. We strongly encourage you to use a strong, unique password for your Lucky Ones Casino account and to enable any available two-step verification features.
10. Data Storage and Retention Periods
We operate a strict data storage policy aligned with legal requirements and business necessity. Lucky Ones Casino data storage periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | 7 years after account closure | AML obligations, Curaçao licence requirements |
| Financial transaction records | 7 years | Tax and AML legislation |
| Gaming activity logs | 5 years | Dispute resolution and regulatory reporting |
| Communication records (chat/email) | 3 years | Quality assurance and dispute resolution |
| Marketing consent records | Until consent is withdrawn + 3 years | Demonstrating compliance with consent obligations |
| Analytical cookie data | Up to 13 months | Performance analysis |
| Self-exclusion records | Duration of exclusion + 7 years | Responsible gambling obligations |
Once a data storage period expires and no legal basis exists for continued retention, personal information is securely deleted or irreversibly anonymised. Anonymised datasets may be retained indefinitely for statistical analysis as they no longer constitute personal data.
11. Your Privacy Rights
Under Australian and international law, you enjoy meaningful privacy rights with respect to your personal data. Lucky Ones Casino is committed to honouring these rights promptly and transparently. Below is a summary of the privacy rights available to you:
11.1 Right of Access
You have the right to request a copy of the personal information we hold about you. We will respond within 30 days of a valid request. Requests can be submitted to [email protected].
11.2 Right to Correction
If any personal data we hold is inaccurate, incomplete, or out of date, you may ask us to correct it. We will make the correction as soon as reasonably practicable, or explain why we believe the data is accurate if we disagree.
11.3 Right to Deletion (Right to be Forgotten)
You may request erasure of your personal information where: it is no longer necessary for the purpose for which it was collected; you withdraw consent and no other legal basis applies; or you object to processing and there are no overriding legitimate grounds. Note that we may be unable to delete data we are legally required to retain (such as AML records).
11.4 Right to Restriction of Processing
You may ask us to restrict data processing in certain circumstances — for example, while we investigate a complaint about data accuracy. Restriction means we may store your data but not actively use it.
11.5 Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.
11.6 Right to Object
You may object at any time to data processing based on our legitimate interests, including profiling for direct marketing. Upon receipt of such an objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
11.7 Right to Withdraw Consent
Where processing is based solely on your consent — such as receiving marketing emails or certain cookies — you may withdraw that consent at any time via your account settings, the cookie preference centre, or by contacting us. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
11.8 Rights Related to Automated Decision-Making
If any decision significantly affecting you is made solely through automated means (including profiling), you have the right to request human review, express your point of view, and challenge the outcome. Lucky Ones Casino does not rely exclusively on automated decision-making for consequential decisions such as account suspension without a human review stage.
To exercise any of your privacy rights, please email [email protected] with proof of identity. We aim to respond to all requests within 30 days, extendable to 60 days for complex cases with prior notice.
12. Supervisory Authority — OAIC
If you believe that Lucky Ones Casino has handled your personal information in a manner inconsistent with the Australian Privacy Principles, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
We encourage you to contact us first so we can resolve your concern quickly and directly. However, your right to approach the OAIC is unconditional and unaffected by any internal complaint process.
If you are based in the EU or EEA, you additionally have the right to lodge a complaint with your local data protection supervisory authority.
13. Data Protection Officer
Lucky Ones Casino has appointed a dedicated Data Protection Officer (DPO) to oversee compliance with this privacy policy and applicable data protection legislation. The DPO is the primary point of contact for all matters relating to Lucky Ones Casino data protection, data security, and the exercise of your privacy rights.
- Email: [email protected]
- General Privacy Enquiries: [email protected]
- Response time: within 5 business days for initial acknowledgement; full response within 30 days
14. Changes to This Privacy Policy
We review this Lucky Ones Casino privacy policy at least annually and whenever our practices materially change. When we make significant updates, we will notify you via email (to the address on your account) and display a prominent notice on the site for at least 30 days before the changes take effect. We recommend checking this page periodically to remain informed about how we protect your personal data. The "last updated" date at the top of the page will always reflect the most recent revision. Continued use of Lucky Ones Casino services after the effective date constitutes acceptance of the updated privacy policy.
15. Frequently Asked Questions
What personal data does Lucky Ones Casino collect when I register?
When you register, Lucky Ones Casino collects your full name, date of birth, email address, phone number, and residential address. This personal information is required to create your account and forms the foundation of all further data processing. Additional documents may be requested during KYC verification before your first withdrawal.
Does Lucky Ones Casino sell my personal data?
No. Lucky Ones Casino does not sell, rent, or trade your personal data or user data to any third parties for their own marketing purposes. We share personal information only where necessary to deliver our services, meet legal obligations, or protect player safety — always under strict confidentiality agreements.
How does the Lucky Ones Casino cookie policy affect my browsing experience?
The Lucky Ones Casino cookie policy means that when you first visit the site, you will see a cookie consent banner. Essential cookies are always active. You may accept or decline analytical, functional, and marketing cookies individually through the preference centre. Declining non-essential cookies may reduce some personalisation features but will not prevent you from playing games.
How long does Lucky Ones Casino keep my data?
Lucky Ones Casino data storage periods vary by data category but are always limited to what is legally required and operationally necessary. For example, financial records are kept for 7 years to comply with AML law, while analytical cookie data is retained for no more than 13 months. After the applicable period, data is securely deleted or anonymised in line with our data protection obligations.
Is my financial data safe when I deposit or withdraw?
Yes. Lucky Ones Casino data security measures include 256-bit SSL/TLS encryption for all transactions, tokenisation of card numbers, and PCI-compliant payment processing. Our firewalls and intrusion detection systems monitor the platform around the clock. Your financial personal data is stored in encrypted databases with strictly controlled access, ensuring the highest level of information security.
Can I request deletion of my account and personal data?
Yes. You may exercise your right to deletion by emailing [email protected]. However, please be aware that certain personal information must be retained for regulatory periods (typically 7 years) even after account closure. We will inform you of any exceptions at the time of your request and delete all data that is not subject to mandatory retention.
What are my privacy rights under Australian law?
Under the Australian Privacy Act 1988, you have the right to access the personal data we hold about you, request corrections to inaccurate information, and complain to the OAIC if you believe your privacy rights have been violated. Lucky Ones Casino fully supports these rights and has dedicated processes to fulfil them promptly. EU residents additionally benefit from GDPR privacy rights such as portability, restriction, and objection.
How do I opt out of marketing communications?
You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any promotional message from Lucky Ones Casino, adjusting your communication preferences in the My Account section, or emailing [email protected]. Opting out of marketing does not affect transactional messages such as deposit confirmations or account security alerts, which are necessary for service delivery.
This Lucky Ones Casino privacy policy represents our ongoing commitment to data protection, confidentiality, and information security. We understand that trust is the cornerstone of any online relationship, and we work tirelessly to ensure that your personal data is treated with the care and respect it deserves. Whether you are enjoying our 4,000+ games, claiming your welcome bonus, or withdrawing your winnings, you can rest assured that Lucky Ones Casino handles your personal information responsibly, transparently, and in full compliance with applicable law. For any privacy enquiry, do not hesitate to reach our team at [email protected] — we are here to help.