Our Privacy Policy, Spelled Out

This policy explains what personal information we collect when you play at Luckyones Casino, why we collect it, who we share it with, and the controls you hold over it. It applies to every visitor to luckyones-aud.com and every registered account holder.

The Data We Collect From You

We collect several categories of personal information, and we only collect what the purpose requires. When you register, we ask for your full name, date of birth, email address, phone number and residential address. Before your first withdrawal, we additionally request verification documents: a government-issued ID, a proof of address dated within the last three months, and proof of your payment method.

Beyond the basics, our systems record transaction data (deposits, withdrawals, bonuses, wagering), technical data (device type, operating system, IP address, browser fingerprint), gameplay behaviour (games played, session length, bet patterns), and your marketing preferences.

• Identity data: name, date of birth, address, email, phone
• Verification documents: passport or driver licence, utility bill, card or wallet statement
• Transaction data: deposits, withdrawals, bonus history, wagering records
• Technical data: IP address, device and browser details, session logs
• Gameplay behaviour: game history, bet sizes, session duration
• Marketing preferences: opt-ins, channel choices, consent records

How We Use Your Information

Every use of your data maps to a specific purpose. We create and maintain your account, verify your identity under KYC rules, process deposits and withdrawals, prevent fraud and money laundering, monitor play for signs of gambling harm, meet our legal and regulatory obligations, and, where you have consented, send you promotional offers.

We also use aggregated and pseudonymised gameplay data to improve game selection, site performance and customer support. This analysis never drives individual marketing decisions unless you have opted in.

• Account creation, login and account management
• Identity verification (KYC) before your first withdrawal
• Payment processing across PayID, cards, e-wallets and crypto
• Fraud prevention and anti-money-laundering checks
• Responsible-gambling monitoring and reality checks
• Marketing communications, only with your consent

Why the Law Lets Us

Contract. We process your data to set up and run your player account and to pay out winnings. Without identity and transaction data, we cannot deliver the service you signed up for.

Legal obligation. Gaming regulation and anti-money-laundering law require us to verify your identity, keep transaction records for at least five years, and report suspicious activity to the relevant authorities.

Legitimate interest. We use technical and gameplay data to detect fraud, secure our platform, and monitor for gambling harm. We weigh this interest against your privacy rights and keep the data involved to a minimum.

Consent. Marketing emails, SMS and personalised bonus offers go out only where you have opted in. You can withdraw that consent at any time, and we stop immediately.

How Long We Keep Records

We do not keep your data forever. Retention depends on the category and the legal minimum that applies to it, and once a period expires the data is deleted or irreversibly anonymised.

Who We Share Data With

We never sell your personal data. We share it only with processors and partners who need it to deliver a function you rely on, under written data-processing agreements that restrict further use.

Recipients include payment processors handling your deposits and withdrawals, KYC and AML verification providers, our hosting and security vendors, analytics services that help us understand site usage in aggregate, and regulators or law-enforcement bodies where disclosure is legally required.

• Payment processors and banking partners
• KYC and anti-money-laundering verification providers
• Hosting, security and IT-support vendors
• Analytics and site-performance tools
• Regulators and authorities, on lawful request only

Your Rights Over Your Data

You control your personal information, and exercising these rights costs you nothing. Email [email protected] or contact our Data Protection Officer and we respond within 30 days, usually much sooner.

You can request a copy of everything we hold about you, ask us to correct anything inaccurate, request erasure where no legal retention duty applies, receive your data in a portable format, object to processing based on legitimate interest, and withdraw marketing consent at any time. If you believe we have handled your data poorly, you may complain to the Office of the Australian Information Commissioner or your local data protection authority.

• Access: get a copy of the personal data we hold
• Rectification: fix incorrect or incomplete details
• Erasure: deletion where the law permits
• Portability: receive your data in a machine-readable format
• Objection: stop processing based on legitimate interest
• Withdraw consent: opt out of marketing at any time
• Complain: raise concerns with the OAIC or your local DPA

Cookies and Tracking Tech

We use essential cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies set only after you accept them in the consent banner. You can change or withdraw your cookie choices at any time from the cookie settings link in our footer.

For the full breakdown of every cookie, its purpose and its lifespan, read our dedicated Cookies Policy page.

How We Protect Your Data

All traffic between your device and Luckyones Casino runs over TLS encryption, and sensitive records such as KYC documents are encrypted at rest. Access to personal data is limited to staff who need it for their role, logged, and reviewed regularly.

If a data breach occurs that is likely to cause you serious harm, we notify the relevant regulator and affected players without undue delay, tell you what happened, and explain the steps we are taking to fix it.

• TLS encryption for all data in transit
• Encryption of verification documents at rest
• Role-based, logged access controls
• Regular security reviews and penetration testing
• Documented breach-notification procedure

Contact Our Data Protection Officer

Questions about this policy, a data request, or a privacy concern go straight to our Data Protection Officer at [email protected]. Alternatively, our support team is available on live chat 24/7 or by email at [email protected], and they will route your query the same day.

This policy was last updated in 2026. When we change it materially, we announce the update on this page and, where the change affects your rights, by email to your registered address.

Frequently Asked Questions

How do I request a copy of my data?

Email [email protected] or [email protected] with the subject line 'Data Access Request'. We verify your identity and send your data within 30 days.

How long do you keep my transaction history?

Gaming regulation requires us to retain transaction and wagering records for at least 5 years after your account closes. After that, we delete or anonymise them.

Can I stop marketing emails from you?

Yes. Use the unsubscribe link in any email, adjust preferences in your account settings, or ask support to remove you. We stop marketing immediately once consent is withdrawn.

Do you share my data with anyone else?

Only with processors needed to run the service: payment providers, KYC verification services, hosting vendors and analytics tools, plus regulators where the law requires disclosure. We never sell your data.

Why do you need my ID before withdrawal?

KYC and anti-money-laundering law require us to verify every player before the first withdrawal. We check your ID, proof of address and payment-method proof, then store them encrypted for 5 years.