LuckyBoom Privacy Policy – Data Protection & Player Rights

What personal data we collect and why

When you play at LuckyBoom, we process certain data to operate the platform, process transactions, comply with legal obligations, and — with your permission — send you relevant offers. Here is exactly what we collect, organised by category, with examples and a clear indication of what is mandatory.

Account data

This is the data you provide during registration and verification. Without it, we cannot create or maintain your account.

Field	Mandatory
Email address	Yes
Password (hashed)	Yes
Country and currency	Yes
Full name (from ID)	Yes, for KYC
Date of birth	Yes, for age verification
Proof of identity (passport / ID / driving licence)	Yes, for KYC
Proof of address (bank statement / utility bill)	Yes, for KYC

Payment data

We process the minimum needed to handle deposits and withdrawals. We do not store full card numbers or crypto wallet private keys.

Field	Mandatory
Payment method selected (e.g. iDEAL, Visa, Skrill, BTC)	Yes
Deposit and withdrawal amounts	Yes
Transaction IDs and timestamps	Yes
Card type and last four digits (for card payments)	Yes
E-wallet email or account ID (for Skrill, Neteller)	Yes
Crypto wallet address (for crypto deposits)	Yes

Technical data

This data is collected automatically when you use the site. It helps us maintain performance, detect fraud, and improve your experience.

Field	Mandatory
IP address	Yes
Browser type and version	Yes
Device type (mobile / desktop / tablet)	Yes
Operating system	Yes
Session duration and pages visited	Yes
Referring URL	No

Marketing preferences

We only send promotional emails, SMS, or push notifications if you have given explicit consent. You can withdraw consent at any time via your account settings or by contacting support.

Field	Mandatory
Consent status (opt-in / opt-out)	Yes, if you opt in
Preferred communication channel (email, SMS, in-site notifications)	No
Bonus and promo history	No
Language preference for marketing	No

All data is processed in accordance with our privacy policy, which will be available on the website at launch. For questions about your data, contact support@luckyboom.com.

What happens to your data at LuckyBoom: purposes, legal bases and retention

When you play here, we process personal data for three practical reasons: to run your account, to meet legal obligations, and — only if you agree — to send you marketing. The table below maps the main data categories to those purposes and shows how long we typically keep them. Exact periods will be confirmed in our privacy policy when the casino goes live; the figures here are the standard benchmarks we work to.

Data categories and retention periods

Data category	Main purposes	Typical retention period
Account data (email, password, country, currency)	Account management, customer support	5 years after account closure
Transaction and payment data (deposits, withdrawals, bets)	Account management, AML/KYC compliance	5 years after last transaction
Identity and KYC documents (ID, proof of address, proof of payment)	AML/KYC verification, account security	5 years after account closure or last transaction
Marketing data (preferences, opt-ins, communication history)	Marketing — only with consent	Until consent is withdrawn, otherwise 2 years after last interaction
Gaming and activity data (game history, wagering patterns, session data)	Account management, responsible gambling, fraud prevention	5 years after last activity
Technical log data (IP address, device, browser)	Security, fraud prevention	1 year after collection

We measure these periods from the end of the relevant relationship or the last activity, whichever comes later. If a dispute, investigation, or legal hold applies, we may keep relevant data until that matter is closed. The same categories may be kept longer if a regulator or court asks us to.

Legal bases, simply explained

Every type of processing under data protection law needs a legal basis. We rely on three. They are not interchangeable: each one is tied to a specific purpose, so you know why we ask for the data we ask for.

Contract — processing needed to provide the service you asked for: – Account data so you can log in and play – Transaction data so we can process deposits, withdrawals and bets – Support data so we can answer your questions
Legal obligation — processing required by law: – KYC documents to verify identity and age – Transaction records to comply with anti-money laundering rules – Responsible gambling data to honour self-exclusion and deposit limits
Consent — processing you actively agree to: – Marketing emails and promotional offers – Optional cookies and analytics – You can withdraw consent at any time

Your data rights at LuckyBoom

We take your privacy seriously. Under applicable data protection law, you have the following rights regarding the personal data we hold about you. These rights are not theoretical — you can exercise them at any time by contacting us.

Right of access — you can request a copy of the personal data we process about you, along with details about how and why we use it.
Right to rectification — if any of your data is inaccurate or incomplete, you can ask us to correct it.
Right to erasure (right to be forgotten) — you can request that we delete your personal data, subject to legal or contractual retention obligations.
Right to restriction of processing — you can ask us to temporarily limit how we use your data, for example while a dispute about its accuracy is resolved.
Right to data portability — you can request a machine-readable copy of your data (e.g., transaction history) to transfer to another service.
Right to object — you can object to processing based on legitimate interests, including direct marketing.

To submit a request, email us at support@luckyboom.com or use our 24/7 live chat. We will acknowledge receipt within a few days and start processing your request.

Response times and identity verification

We aim to respond to all data rights requests within one month. If your request is complex or we receive a high volume of requests, we may extend this period by up to two additional months and will inform you of the delay. Before fulfilling any request, we are required to verify your identity to prevent unauthorised access to your data.

Right	Expected response time (days)	Identity verification required?
Access	Up to 30 (extendable to 90)	Yes – proof of identity and address
Rectification	Up to 30 (extendable to 90)	Yes – proof of identity
Erasure	Up to 30 (extendable to 90)	Yes – proof of identity
Restriction of processing	Up to 30 (extendable to 90)	Yes – proof of identity
Data portability	Up to 30 (extendable to 90)	Yes – proof of identity
Objection	Up to 30 (extendable to 90)	Yes – proof of identity

Identity verification typically requires a copy of your passport or ID card and a recent utility bill or bank statement. This is a standard security measure and will not delay your request beyond the stated timeline. We will never use your documents for any purpose other than verifying your identity.