Privacy Policy
When you visit or engage with LuckyWins Casino, you consent to this privacy policy. Combined with our General Terms and Conditions, this document details our methods for gathering, handling, storing, and safeguarding your personal information. Updated most recently on February 06, 2026 (Version 2.0.2), it adheres to the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and relevant legislation. We might revise it occasionally; we'll try to notify you of major alterations, but please review this page periodically. Ongoing use of the site indicates agreement with the latest edition. Should you disagree or wish to withhold necessary details, avoid signing up or utilizing our offerings. Our platform is exclusively for those 18 years or older; we avoid intentionally gathering information from underage individuals.
About Us
The site www.luckywinscasino.nz, known as “LuckyWins Casino,” “we,” “us,” or “our,” belongs to and is managed by Dama N.V., registered in Curaçao (number 152125, located at Scharlooweg 39, Willemstad, Curaçao). We possess an E-gaming permit (No. OGL/2023/174/0082) from the Curaçao Gaming Control Board. Serving as data controller, we're obligated by law to manage specific personal details to facilitate gaming involvement, transaction management, and associated support.
Privacy is a key focus for us, so we've designated a Data Protection Officer (DPO) to monitor adherence and act as your main point for privacy issues. Contact them at [email protected] for inquiries, rights exercises, or worries. Everyday assistance can be obtained via [email protected], live chat, or your account preferences.
Information We Collect
We obtain data straight from you and automatically via site usage. Categories include:
- Personal identifiers and contacts shared in registration, checks, funding, cashouts, promotions, issues, or interactions: complete name, handle, birth date, sex, email, telephone, home address, citizenship, and ID proofs.
- Monetary and deal logs: payment specifics, funding/cashout records, wealth origin papers, and supporting evidence.
- Tech and activity metrics: IP, browser specs, OS, session times, viewed sections, duration, gaming actions, gadget data, and info from cookies.
- Gambling responsibility and stats: quiz answers, behavior trends, incentives taken, restrictions applied, and grouped usage figures.
- Third-party inputs: outcomes from age/verification services, AML checkers, credit bureaus, affiliate Group platforms, and promo collaborators.
If you have profiles on various Group venues, we could merge related data.
How We Use Your Information
Data handling serves defined, legal objectives, such as:
- Fulfilling agreements: establishing and overseeing accounts, offering games, managing funds, aiding users, and processing deals.
- Meeting regulatory demands: performing KYC/AML verifications, curbing scams/laundering/terror funding, following betting laws, and upholding safe play norms.
- Running and refining the platform: fixing issues, studying patterns, researching, tailoring user interfaces, and boosting features.
- Promo messages: dispatching news, deals, and proposals on our or allied items, solely with approval.
- Threat control: analyzing for deceit spotting, incentive misuse stoppage, safe gaming evaluations, and risk allocations (human-checked for key choices).
Aggregated or de-identified sets might be formed for stats, without pinpointing people.
Lawful Basis for Processing
We base processing on:
- Contract execution (e.g., profile creation, play, transfers).
- Statutory duties (e.g., AML/KYC, license stipulations, play safety).
- Valid interests (e.g., anti-fraud, security, enhancements), unless they clash with your freedoms.
- Permission (e.g., ads, some customization analyses).
Sharing Your Data
Personal info isn't sold or leased. Disclosure happens only as needed, with tight oversight:
- Inside Dama N.V. Group for provision, anti-fraud/AML/safe play, and consented inter-brand marketing.
- Staff and approved agents (under secrecy pacts) like oversight personnel, scam experts, help crews, and premium handlers.
- Vendors: software creators, fund handlers (e.g., Trustly, Paysafe), ad allies, server/metric entities, check/AML instruments, and comms apps.
- Officials: per legal mandates, judgments, oversight asks, or for defense of interests/security.
- During corporate shifts: fusions, buys, etc. (alerted beforehand if feasible).
Third parties follow data deals guaranteeing GDPR-equivalent safety.
International Transfers
Certain handlers or receivers could reside beyond the EEA. Protections like EU-approved contract terms ensure proper security levels.
Data Retention
Personal details are held just as required for aims, laws, or operations. AML guidelines often demand keeping signup and deal info for minimum five years post final action or closure. Nameless versions may persist for studies and upgrades.
Your Rights
Data laws grant you options like:
- Viewing your info (no-cost duplicate).
- Fixing errors/gaps.
- Deleting (barring retention rules).
- Limiting handling in scenarios.
- Contesting interest-based processing.
- Porting data (if fitting).
- Revoking approval for permitted activities.
- Filing grievances with overseers.
Invoke these by reaching the DPO. Responses target one month, with ID confirmation. Involved cases might extend, with updates.
Automated Decision-Making
Fully auto choices with major impacts are mostly eschewed. Profiling (e.g., threat grading) includes human input for conclusions.
Data Security
Strong tech and admin steps shield your details from illicit entry, disappearance, or abuse. Profiles need distinct logins, plus voluntary 2FA. Maintain secrecy of access info.
This guideline underscores our dedication to clear, legal info management. Seek more help from aid or DPO.