Last Updated: 24 May 2024
Welcome to Lucky Crew Casino (operating via luckycrewcasino.uk). We are fundamentally committed to protecting your privacy and ensuring that your personal data is handled securely, transparently, and in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy outlines how we collect, process, and safeguard your personal information when you visit our website, register for an account, and utilise our gaming services. By accessing Lucky Crew Casino, you acknowledge and consent to the practices described in this document.
1. The Information We Collect
To provide a highly secure and compliant gaming environment, we collect and process the following categories of personal data:
- Identity Data: First name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
- Contact Data: Billing address, residential address, email address, and telephone numbers.
- Financial Data: Bank account and payment card details (note that we use secure, PCI-compliant third-party payment processors and do not store full card numbers on our servers).
- Transaction Data: Details about payments to and from you, including details of bets, wagers, deposits, and withdrawals you have made via our platform.
- Compliance Data: Copies of identification documents (e.g., passport, driving licence), utility bills, and source of funds documentation required for our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
2. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we process your information for the following purposes:
- To Register You as a New Player: Creating your account and verifying your identity to prevent underage gambling.
- To Process Transactions: Managing your deposits, wagers, and withdrawals, and collecting money owed to us.
- To Fulfil Legal & Regulatory Obligations: Complying with the stringent requirements set forth by the UK Gambling Commission, including AML regulations and responsible gambling interventions.
- To Improve Our Services: Utilising data analytics to improve our website, gaming portfolio, marketing, customer relationships, and overall player experience.
- To Communicate With You: Notifying you about changes to our terms or privacy policy, providing customer support, and, where you have opted in, sending you promotional offers.
3. Data Sharing and Disclosure
We do not sell your personal data to third parties. However, to operate our casino efficiently and legally, we may share your information with the following trusted entities:
- Service Providers: IT and system administration providers, payment processors, and game developers who require access to provide their services.
- Regulatory and Law Enforcement Bodies: The UK Gambling Commission, the National Crime Agency (NCA), and other authorities where we are legally obligated to report suspicious activities or comply with lawful requests.
- Identity Verification Agencies: Third-party agencies used strictly for age verification, identity checks, and AML compliance.
All third parties are contractually bound to respect the security of your personal data and to treat it in accordance with the law.
4. Data Security
Your security is our paramount concern. We have implemented robust technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. All data transmitted between your device and our servers is protected using state-of-the-art TLS/SSL encryption.
Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a strict business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
5. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
By law, and in compliance with UK AML regulations, we are required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for a minimum of five (5) years after they cease being customers. Once this period has expired, your data will be securely and permanently deleted or anonymised.
6. Your Legal Rights
Under the UK GDPR, you possess significant rights regarding your personal data. You have the right to:
- Request Access: Receive a copy of the personal data we hold about you.
- Request Correction: Have any incomplete or inaccurate data we hold about you corrected.
- Request Erasure: Ask us to delete or remove personal data where there is no legally mandated reason for us continuing to process it.
- Object to Processing: Object to the processing of your data where we are relying on a legitimate interest (or those of a third party).
- Request Restriction: Ask us to suspend the processing of your personal data in certain scenarios.
- Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your personal data (e.g., for marketing communications).
If you wish to exercise any of the rights set out above, please contact our Data Protection Officer.
7. Contacting Us
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions, including any requests to exercise your legal rights, please contact the DPO using the details set out below:
- Email address: [email protected]
- Postal address: Compliance Department, Lucky Crew Casino, [Fictional UK Address], London, UK
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.