Your Privacy at Luckystart Casino
This policy sets out what personal data we collect when you play at Luckystart Casino, why we hold it, who sees it and how long we keep it. It applies to every account registered on luckystart-pokies.com.
What Data We Collect
We collect only the data we need to run your account, meet our licence obligations under Curaçao licence OGL/2023/174/0090 and keep gambling safe. Every category below is tied to a specific purpose in the next section.
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: government ID, proof of address and payment method confirmation, collected before your first withdrawal.
- Transaction data: deposits and withdrawals, amounts in AUD or crypto, payment method details and wallet addresses.
- Technical data: IP address, device type, browser, operating system and approximate location.
- Gameplay data: bets placed, games opened, session times, results and bonus usage.
- Marketing preferences: which channels you opted into and how you respond to our offers.
How We Use Your Data
Your data works for you in concrete ways. We create and run your account, verify who you are, process every deposit and withdrawal, and monitor play for signs of harmful gambling so we can step in with deposit limits, session reminders or self-exclusion when you ask.
- Account creation, login and customer support via 24/7 live chat and [email protected].
- KYC checks before your first withdrawal, as required by our licence conditions.
- Payment processing across PayID, cards, e-wallets and crypto.
- Fraud prevention, bonus abuse detection and anti-money-laundering screening.
- Responsible-gambling monitoring, including loss limits and cooling-off periods.
- Marketing by email or SMS, only where you have given consent.
- Compliance with legal and regulatory obligations toward the Curaçao authority.
Our Legal Bases
Contract: we process identity, transaction and account data because they are necessary to open your account, honour your bets and pay your winnings. Without them we cannot offer you the service at all.
Legal obligation: KYC verification, transaction records and anti-money-laundering screening happen because our licence and applicable gambling law demand them. We cannot switch these off.
Legitimate interest: fraud prevention, security logging and aggregated statistics on how our 7,000 games perform rely on our legitimate interest in running a safe, honest casino. This never overrides your fundamental rights.
Consent: marketing messages, promotional emails about our weekly 15% cashback or weekend reload bonus, and non-essential cookies run only on your consent. You withdraw it any time via your account settings or the unsubscribe link.
How Long We Keep It
Retention is category by category, not one blanket period. Gambling regulation requires us to keep financial records for at least five years after the transaction, so account closures do not mean instant deletion.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years for records |
| KYC verification documents | 5 years after the last transaction |
| Transaction and payment records | Minimum 5 years, as required by regulation |
| Gameplay and betting history | 5 years after account closure |
| Technical logs and IP records | Up to 12 months for security purposes |
| Marketing preferences | Until you withdraw consent or ask for deletion |
Who We Share Data With
We share data only with processors that need it to deliver a service you use, and with authorities where the law compels us. We never sell your personal data to advertisers or data brokers.
- Payment processors handling your deposits and withdrawals in AUD or crypto.
- KYC and AML verification providers checking your documents and screening transactions.
- The Curaçao regulator and law-enforcement bodies, on lawful request.
- Analytics and hosting providers working under data-processing agreements.
- Game studios whose titles you play, receiving anonymised or pseudonymised gameplay data only.
Your Rights Over Data
You control your data. Send any request to [email protected] and we answer within 30 days. Where verification is needed, we ask for the minimum required to confirm your identity before acting.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: request deletion, subject to the regulatory retention periods above.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing or optional cookies at any time.
- Complain: raise a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
Cookies and Tracking
Our site uses session cookies to keep you logged in, analytics cookies to measure performance and marketing cookies only after you accept them in the cookie banner. You change your choices any time in your browser settings or through the cookie banner itself. Full detail on every cookie category and its lifetime sits on our dedicated Cookies Policy page.
How We Protect Data
All traffic between your device and our servers travels over TLS encryption. Stored verification documents sit in encrypted storage with access limited to trained compliance staff on a need-to-know basis, and every access is logged and auditable.
If a data breach affects your personal data, we notify the relevant regulator within 72 hours of becoming aware and inform affected players directly where the risk to you is high. Questions about any of this go to our Data Protection Officer at [email protected], or to [email protected] through 24/7 live chat.
Frequently Asked Questions
Can I play at Luckystart Casino without giving you my documents?
You can register, deposit and play with your basic identity data, but we must verify your government ID, proof of address and payment method before your first withdrawal. This is a licence requirement we cannot waive.
How do I stop marketing emails about bonuses?
Use the unsubscribe link in any email or switch off marketing in your account settings. We stop promotional messages immediately, though account and transaction emails still reach you where necessary.
Why do you keep my data after I close my account?
Gambling regulation requires us to retain transaction and KYC records for at least 5 years after your last transaction. Marketing data is deleted as soon as you withdraw consent.
Who do I contact about a privacy concern?
Email [email protected] for our Data Protection Officer, or reach [email protected] through 24/7 live chat. You also have the right to complain to the OAIC.