Lucky7 Casino Privacy Policy

At Lucky7 Casino, protecting your personal data is a responsibility we take extremely seriously. This Lucky7 Casino privacy policy has been prepared in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), and incorporates relevant provisions of the EU General Data Protection Regulation (GDPR) where applicable. It covers everything from the types of personal information we collect to how we process, store and share your data — and, importantly, the privacy rights you hold as a Lucky7 Casino member. We encourage all Australian players to read this document carefully so you understand exactly how your user data is handled and what steps we take to ensure information security at every stage of your journey with us.

1. Identity of the Data Controller

Lucky7 Casino is operated by a company incorporated and registered in Curaçao, operating under a licence issued by the Government of Curaçao. As the entity that determines the purposes and means of processing your personal data, this company acts as the data controller for all information collected via lucky7au.com. Any questions regarding this Lucky7 Casino privacy policy or your data protection rights can be directed to our dedicated Data Protection Officer (DPO) using the contact details provided in Section 14 of this document.

2. Personal Data We Collect

Lucky7 Casino collects a variety of personal information in order to provide you with a safe, compliant and enjoyable gaming experience. The categories of user data we gather are outlined below.

2.1 Identification Data

• Full legal name
• Date of birth
• Gender
• Government-issued identification documents (passport, driver's licence, national ID)
• Proof of address documentation

2.2 Contact Data

• Email address
• Phone number
• Residential address
• Country of residence

2.3 Financial Data

• Payment method details (card numbers, e-wallet identifiers, cryptocurrency wallet addresses)
• Transaction history (deposits, withdrawals, bonuses)
• Source of funds documentation (where required by AML obligations)

2.4 Gaming Activity Data

• Games played, session durations and betting patterns
• Win/loss history
• Bonus utilisation and wagering progress
• Responsible gambling tool usage (limits set, cooling-off periods, self-exclusion requests)

2.5 Technical Data

• IP address and geolocation data
• Device type, operating system and browser version
• Log files and access records
• Session identifiers and authentication tokens

2.6 Communication Data

• Records of live chat interactions with customer support
• Email correspondence
• Survey responses and feedback submissions

2.7 Sensitive Data

In limited circumstances, Lucky7 Casino may process sensitive categories of personal data — for example, information relating to a player's health status where relevant to responsible gambling assessments. Such data is only processed with your explicit consent or where required by law, and is handled with the highest degree of confidentiality.

2.8 Data Received from Third Parties

We may also receive personal information from third-party sources, including identity verification providers, fraud prevention agencies, payment processors and our marketing partners. All third-party data collection arrangements are subject to appropriate data-sharing agreements that comply with applicable data protection legislation.

3. How We Collect Your Data

Lucky7 Casino collects user data through a number of methods:

• Account registration — information you provide when creating your Lucky7 Casino account.
• KYC verification — documents and details submitted during the mandatory identity verification process.
• Deposits and withdrawals — financial data captured at the point of transaction.
• Gameplay — automatically recorded data about the games you play and the bets you place.
• Cookies and tracking technologies — technical data gathered via cookies, web beacons and similar tools when you browse lucky7au.com (see Section 7 for full details of our cookie policy).
• Customer support interactions — data exchanged during live chat sessions and email communications.
• Promotions and surveys — information you voluntarily supply when entering promotions or completing feedback surveys.

4. Purposes of Data Processing

The data processing activities carried out by Lucky7 Casino serve a number of clearly defined purposes:

5. Legal Basis for Processing

Depending on the purpose, Lucky7 Casino relies on the following legal bases for the data processing activities described in this privacy policy:

• Contract performance — processing is necessary to fulfil the terms of our User Agreement with you.
• Legal obligation — processing is required to comply with applicable laws and regulations, including KYC/AML requirements.
• Legitimate interests — processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement), provided those interests do not override your fundamental rights.
• Consent — for marketing communications and certain non-essential cookies, processing is based on your freely given, specific and informed consent. You may withdraw this consent at any time.

6. Data Retention Periods

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with our legal, regulatory and contractual obligations. The following general retention periods apply to Lucky7 Casino data storage:

Once retention periods have expired, personal information is securely deleted or anonymised so that it can no longer be attributed to any individual player.

7. Cookie Policy

The Lucky7 Casino cookie policy governs the use of cookies and similar tracking technologies on lucky7au.com. Cookies are small text files stored on your device that help us deliver a functional, personalised and secure experience. We use the following categories of cookies:

7.1 Essential Cookies

Essential cookies are strictly necessary for the operation of lucky7au.com. They enable core functions such as session management, login authentication and account security. These cookies cannot be disabled without significantly impairing site functionality, and no consent is required to set them.

7.2 Analytical Cookies

Analytical cookies help us understand how visitors interact with our site. Data collected includes page views, session duration, traffic sources and navigation paths. This information is used in aggregate form to improve site performance and user data experiences. We use services such as Google Analytics for this purpose, subject to appropriate data protection agreements.

7.3 Functional Cookies

Functional cookies remember your preferences — such as language settings, display options and responsible gambling configurations — so that you do not need to re-enter them each visit.

7.4 Marketing Cookies

Marketing cookies track your browsing activity across websites to deliver targeted advertisements relevant to your interests. Lucky7 Casino only sets marketing cookies with your explicit consent. You may withdraw consent and manage your cookie preferences at any time via our Cookie Preference Centre, accessible in the footer of lucky7au.com.

For a complete list of all cookies used by Lucky7 Casino, including their names, providers and expiry periods, please refer to our full cookie policy document available within your account settings.

8. Sharing Personal Data with Third Parties

Lucky7 Casino does not sell your personal data to third parties. However, we do share personal information with carefully selected third parties where necessary to operate our business lawfully and effectively. These recipients include:

8.1 Payment Providers

To process deposits and withdrawals, we share necessary financial data with payment service providers such as credit/debit card processors, e-wallet operators (Skrill, Neteller), cryptocurrency platforms and bank transfer services. All payment partners are contractually required to maintain data security standards consistent with this privacy policy.

8.2 Regulatory Authorities

We may be required by law to disclose personal data to competent authorities, including our licensing authority in Curaçao, Australian law enforcement agencies, tax authorities and courts. Such disclosures are made strictly on a need-to-know basis and only to the extent legally required.

8.3 Identity and Fraud Prevention Partners

To fulfil our KYC/AML obligations and prevent fraud, Lucky7 Casino shares identity documentation and verification data with licensed third-party identity verification providers and fraud screening services.

8.4 Technology and Service Partners

We engage third-party providers for cloud hosting, customer support software, analytics platforms and marketing tools. Each partner is subject to a data processing agreement that restricts how they may use your personal information and requires them to maintain appropriate information security measures.

8.5 Game Providers

When you play games from our catalogue — powered by providers including Pragmatic Play, Evolution Gaming, Play'n GO, NetEnt, Microgaming and others — certain technical and gameplay data is necessarily shared with those providers to deliver the gaming experience. This data processing is conducted under the terms of our agreements with each provider.

9. International Data Transfers

As Lucky7 Casino operates globally and partners with international service providers, your personal data may be transferred to and processed in countries outside Australia. Where such transfers occur, we ensure they are protected by appropriate safeguards, which may include:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules
• Adequacy decisions made by relevant data protection authorities
• Other legally recognised transfer mechanisms consistent with the Australian Privacy Act 1988

You may request further information about international data transfer safeguards by contacting our Data Protection Officer.

10. Data Security

Lucky7 Casino data security is underpinned by industry-leading technical and organisational measures designed to protect your personal information from unauthorised access, disclosure, alteration or destruction. Key security controls include:

• 256-bit SSL/TLS encryption — all data transmitted between your device and lucky7au.com is encrypted using 256-bit SSL/TLS protocols, ensuring that your personal data cannot be intercepted in transit.
• Firewall protection — advanced firewalls safeguard our servers from unauthorised external access attempts.
• Encryption at rest — sensitive personal data stored in our systems is encrypted to protect against unauthorised access in the event of a physical or logical security breach.
• Access controls — strict role-based access controls ensure that only authorised personnel can access user data, and only to the extent required for their job function.
• RNG certification — our Random Number Generator (RNG) systems are independently certified, ensuring game fairness alongside robust data security.
• Regular security audits — we conduct periodic security assessments, penetration testing and vulnerability scans to identify and remediate potential weaknesses in our systems.
• Incident response — in the event of a personal data breach, Lucky7 Casino has formal incident response procedures in place, including notification to relevant authorities and affected individuals in accordance with applicable law.

While we implement robust information security measures, no system is entirely immune to risk. We therefore encourage players to protect their accounts by using strong, unique passwords and enabling any available two-factor authentication options.

11. Your Privacy Rights

As an Australian player, you are entitled to a range of privacy rights under the Australian Privacy Act 1988 and the Australian Privacy Principles. Where the GDPR applies, additional rights may be available to you. Lucky7 Casino is committed to honouring these rights promptly and transparently.

11.1 Right of Access

You have the right to request access to the personal information that Lucky7 Casino holds about you, including information about how it is used and with whom it has been shared. We will respond to access requests within 30 days.

11.2 Right to Correction

If any personal data we hold about you is inaccurate, incomplete or out of date, you have the right to request that we correct it. Many details can be updated directly within your Lucky7 Casino account dashboard.

11.3 Right to Deletion ("Right to Be Forgotten")

In certain circumstances, you may request the deletion of your personal information. We will comply unless we are required to retain the data by law (e.g., for AML compliance purposes) or where retention is necessary for the establishment, exercise or defence of legal claims.

11.4 Right to Restriction of Processing

You may request that we restrict the data processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data or object to our processing activities while we investigate your objection.

11.5 Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.

11.6 Right to Object

You have the right to object to the processing of your personal information where that processing is based on our legitimate interests. Upon receipt of an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

11.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing (e.g., for marketing communications or certain cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You can manage consent preferences via your account settings or by contacting us directly.

To exercise any of your privacy rights, please contact our Data Protection Officer (see Section 14). We will aim to respond to all requests within 30 days; in complex cases this may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.

12. Responsible Gambling and Data Processing

Lucky7 Casino is committed to promoting responsible gambling, and our data processing activities actively support this commitment. We analyse gaming behaviour, betting patterns and account activity to identify players who may be at risk of gambling-related harm. Where risk indicators are detected, we may take proactive steps including direct outreach, enhanced monitoring or restriction of account features.

Responsible gambling tools available at Lucky7 Casino include:

• Deposit, bet and loss limits (daily, weekly, monthly)
• Session time limits
• Cooling-off periods (24 hours, 48 hours, 7 days, 30 days)
• Self-exclusion (6 months, 1 year, 5 years, or permanent)

Data relating to responsible gambling settings is treated with the utmost confidentiality and is retained as part of our regulatory obligations.

13. Supervisory Authority — OAIC

If you are an Australian resident and you believe that Lucky7 Casino has not adequately addressed your privacy concern, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC), the body responsible for overseeing compliance with the Australian Privacy Act 1988.

You can contact the OAIC via:

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

We encourage you to contact us directly in the first instance so that we have the opportunity to resolve your concern before escalating to the OAIC.

14. Data Protection Officer Contact Details

For all matters relating to this Lucky7 Casino privacy policy, your personal data or the exercise of your privacy rights, please contact our Data Protection Officer:

• Email: [email protected]
• General support: [email protected]
• Response time: We aim to respond to all data protection enquiries within 5 business days.

15. Updates to This Privacy Policy

Lucky7 Casino reserves the right to update or amend this privacy policy at any time to reflect changes in applicable law, regulatory requirements or our business practices. When material changes are made, we will notify registered players by email or via a prominent notice on lucky7au.com. The date of the most recent revision will always be displayed at the top of this page. We encourage you to review this Lucky7 Casino privacy policy periodically to stay informed about how we protect your personal information.

Frequently Asked Questions (FAQ)

What personal data does Lucky7 Casino collect?

Lucky7 Casino collects identification data, contact details, financial information, gaming activity records, technical data, communication history and, in limited cases, sensitive personal information. Full details are provided in Section 2 of this privacy policy. Our data collection practices are designed to gather only what is necessary for the purposes described.

How does Lucky7 Casino protect my personal data?

Lucky7 Casino data security is maintained through 256-bit SSL encryption, advanced firewalls, strict access controls, encryption of data at rest and regular independent security audits. We take information security extremely seriously and continuously review our technical safeguards. Your personal data is never sold to third parties.

What is the Lucky7 Casino cookie policy?

The Lucky7 Casino cookie policy describes the types of cookies used on lucky7au.com, including essential, analytical, functional and marketing cookies. Essential cookies are always active; for analytical, functional and marketing cookies, you can manage your preferences via our Cookie Preference Centre.

How long does Lucky7 Casino keep my data?

Lucky7 Casino data storage periods vary by data type. Account and identity data is retained for the duration of your account plus 5 years, while financial records are kept for 7 years to meet regulatory requirements. Once retention periods expire, personal data is securely deleted or anonymised. See Section 6 for a full retention schedule.

Can I request deletion of my personal information?

Yes. Under your privacy rights as outlined in this Lucky7 Casino privacy policy, you may request deletion of your personal information in certain circumstances. To submit a deletion request, contact [email protected]. Note that some user data must be retained to comply with legal obligations, such as AML regulations.

Who can I contact about Lucky7 Casino data protection?

For all Lucky7 Casino data protection queries, contact our Data Protection Officer at [email protected]. If your concern is not resolved to your satisfaction, you may escalate to the OAIC (www.oaic.gov.au), the supervisory authority responsible for privacy compliance in Australia.

Does Lucky7 Casino use my data for marketing?

Lucky7 Casino only sends marketing communications where you have given your explicit consent. Your personal data is never shared with third-party marketers without your knowledge. You can withdraw your consent at any time via your account settings, and we will cease all marketing data processing promptly upon receipt of your request.

What are my rights under the Australian Privacy Act?

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, your privacy rights include the right to access your personal information, request corrections, seek deletion, restrict data processing, request data portability, object to processing and withdraw consent. Lucky7 Casino is committed to facilitating the exercise of all these privacy rights efficiently and transparently.