Privacy Policy

What personal data we collect

We collect only the personal data we need to run your account, keep play on the site safe and fair, and meet the duties that apply to us as the holder of a gaming licence. The categories below cover what we hold about you.

Account and contact details

Your name, date of birth and residential address.
Your e-mail address and mobile number.
Your username, password and the answers to any security questions you set.
Your marketing preferences and the channels you agreed to hear from us on.
Messages you send us through live chat or e-mail, and our replies.

Identity, age and source of funds documents

Before you play, and again at the points set out in our terms, we must confirm that you are 18 or over and that you are the person you say you are.

Photo identification such as a passport or driving licence.
Proof of address such as a recent utility bill or bank statement.
Proof of ownership of the payment method you use.
Information about your occupation and the source of the funds you gamble with, where we are required to ask.
A record of each check we carry out and its outcome.

Payment and gambling activity

Deposits, withdrawals, amounts, times and the payment methods shown in the cashier, with card or wallet details held in masked form.
Your stakes, wins, game sessions, bonus history and account balance.
The safer gambling settings on your account, including deposit limits, time-outs and self-exclusion.
Any restriction we place on your account and the reason for it.

Device and usage data

Your IP address and the approximate location taken from it.
Your device type, operating system, browser and app version.
Login times, the pages and games you visit, and how long you spend on them.
Cookie identifiers and similar identifiers, as described in our Cookie Policy.
Security signals such as repeated failed logins or several accounts using one device.

Why we use your personal data

We use your personal data for the following purposes, and for nothing that is incompatible with them:

To open, run and secure your account with us, and to let you deposit, play and withdraw.
To confirm your age and identity, and to complete the verification checks our licence requires.
To process payments and settle your bets and withdrawals.
To prevent and detect fraud, account takeover, collusion, bonus abuse and payment disputes.
To meet our anti-money laundering duties and to keep the records the law requires.
To apply the safer gambling tools on your account and to act where we see signs of gambling harm.
To answer your questions through e-mail or live chat, and to look into complaints.
To send you offers, bonuses and news where you have opted in, and to see which of those messages are useful.
To keep the site working properly, to fix faults and to improve the games and features we offer.
To respond to lawful requests from regulators, courts and other public authorities.

The legal bases we rely on under UK GDPR

UK data protection law requires us to have a legal basis for each use of your personal data. In plain words, these are the bases we rely on:

What we do with your data	Legal basis	What this means
Opening and running your account, taking your bets and paying withdrawals	Performance of a contract	We cannot give you an account or settle your play without this data.
Age and identity checks, anti-money laundering records, answering regulators	Legal obligation	The law and the conditions of our gaming licence require us to do this.
Fraud prevention, site security, service improvement and business records	Legitimate interests	We need this to run the site safely, and we weigh it against your privacy.
Marketing e-mails, text messages and push notifications	Consent	We send these only if you opted in, and you can opt out at any time.
Health or wellbeing information you choose to tell us about your gambling	Consent, or substantial public interest	We use this only to protect you and to apply the right safeguards.

You can withdraw consent for marketing at any time in your account settings or by writing to us, and you can object to any use we base on our legitimate interests. Withdrawing consent does not affect messages already sent, and it does not remove the records we must keep by law.

Who we share your data with, and how long we keep it

Who we share it with

Payment providers and banks, so that deposits and withdrawals can be processed.
Identity-verification, age-verification and fraud-prevention partners who carry out checks for us.
The game suppliers and platform providers whose games appear in our lobby.
Service providers that host our systems, send our messages or staff our live chat on our behalf.
Professional advisers such as auditors and lawyers, where they need the data to advise us.
Regulators, law enforcement, courts and other public authorities, where the law requires it.
Multi-operator self-exclusion schemes, including GamStop, so that a self-exclusion is applied across operators.
A buyer or successor, if all or part of the business transfers.

Every provider that handles data for us works under a written contract, acts only on our instructions and must keep your data secure. Where data is transferred outside the United Kingdom, we allow it only with the safeguards approved under UK data protection law. We do not sell your personal data.

How long we keep it

We keep your personal data for as long as your account with us is open. After it closes, we keep the records we are required to hold, including verification documents, transaction history and gambling activity, for the period set by law and by the conditions of our licence, and then delete or anonymise them. Self-exclusion and marketing-suppression records are kept for as long as needed to honour your choice. We keep complaint records for the period that applies to disputes, and we may hold anonymised statistics that can no longer identify you.

Your rights and how to use them

Under UK data protection law you have the right to:

Ask for a copy of the personal data we hold about you.
Have inaccurate details corrected or incomplete details completed.
Ask us to erase data we no longer have a reason to keep.
Ask us to restrict how we use your data while a question about it is open.
Object to uses we base on our legitimate interests, and to all direct marketing.
Receive certain data in a portable format, or have it sent to another provider.
Withdraw consent you gave us, for marketing or for anything else based on consent.
Ask for human involvement where an automated check has a significant effect on you.

To use any of these rights, write to support@casinolucky247.co.uk or privacy@casinolucky247.co.uk, or start a live chat on the site. We may ask you to confirm your identity first so that we do not release your data to anyone else. We reply within the time limit set by data protection law and tell you if we need longer.

Some rights have limits. We cannot erase records we must keep for anti-money laundering, verification or self-exclusion purposes, and we may keep enough data to make sure a closed or self-excluded account is not reopened.

Cookies, security and changes to this policy

We use cookies and similar technologies to keep you logged in, remember your settings, measure how the site is used and, where you allow it, to tailor the offers you see; you can set your preferences when you first visit and change them at any time, and our Cookie Policy explains each category in full.

We protect your data with encryption in transit, access controls that limit staff access to those who need it, and checks on the providers who handle data for us. No system can be guaranteed, so please keep your password private and tell us straight away if you think someone else has used your account.

We may update this policy when our services, our providers or the law change. The current version is always shown on this page with the date it took effect, and we tell you directly about changes that affect your rights in a material way.