Privacy Policy

This Privacy Policy describes how letslucky.games processes and protects your personal information when you use our website and services. The policy applies to all players and website visitors accessing letslucky.games in Australia. Effective as of 1 January 2025.

Who We Are

OBSERVE: letslucky.games is operated by Hollycorn N.V., a company registered under the laws of Curaçao.
EXPAND: Company details, legal address, and responsible data contact for privacy protection have been provided and are integrated below. These are vital for transparency and legal compliance under the Australian Privacy Act 1988 (Cth) and iGaming industry standards.
REFLECT: By providing comprehensive company and contact details in this section, letslucky.games ensures rights of identification, contact, and accountability are fully supported.

Operator Legal Name: Hollycorn N.V., registered in Curaçao, registration number 144359.
Legal & Operating Address: Scharlooweg 39, Willemstad, Curaçao.
Casino Brand & Domain: letslucky.games
Game Licence: OGL/2023/176/0095 (Curaçao Gaming Control Board, valid until 2025)
Designated Privacy Contact: Jacob Turner (Data Protection Officer).
Email: (mailto:)
Official Website: https://letslucky.games

What Personal Data We Collect

OBSERVE: letslucky.games collects a range of personal and technical data necessary for lawful operation.
EXPAND: Collection categories are detailed below, including explicit PII, technical and behavioral data, payment information, and cookies, complying with AU legal requirements and iGaming best practices.
REFLECT: Providing this transparency enables users to understand what is collected and why, satisfying both legal obligations and trust requirements.

Personal data: Full name, date of birth, email address, postal address, phone number, nationality, identification documents.
Technical data: IP address, browser type, device identifiers, access logs, operating system, geolocation data (for legal/regulatory compliance).
Payment data: Credit/debit card details, bank account information, withdrawal, and deposit records, transaction identifiers.
Behavioral data: Betting and gaming history, website interactions (clicks, visits, in-session activity), responsible gambling interactions.
Cookies & similar technologies: Session/persistent cookies, analytics tags, advertising trackers, device/browser fingerprinting tools as detailed in the Cookies section below.

Legal Basis for Processing

OBSERVE: All personal data processing is grounded in clearly defined legal bases as per Australian Privacy Act, AML/CTF, and Curaçao gaming law.
EXPAND: letslucky.games processes user data under consent, contract, legitimate interests, and legal/AML requirements.
REFLECT: Identifying legal bases for every processing activity is fundamental for user protection and systemic compliance.

Consent: Data processed with your explicit permission, including for marketing communications, cookies, and other optional features in compliance with AU Spam Act and APPs.
Contract Fulfillment: Processing is necessary to open and operate your account, manage wagers, process deposits/withdrawals, and provide support.
Legitimate Interests: Certain processing supports security (e.g., fraud detection), analytics, and improvement of services, provided these do not override your rights.
Legal Obligations: Compliance with applicable laws, regulations, KYC/AML reporting obligations, taxation, and regulatory disclosure as required in Australia and under Curaçao licence.

Purpose of Processing

OBSERVE: Purposes for data use mapped to business, operational, legal, and risk management requirements.
EXPAND: letslucky.games utilizes collected data solely for clearly defined objectives as below.
REFLECT: This ensures data minimization, informs users, and supports legal defenses if required.

Providing casino and gaming services, including account setup, identity verification, and management of your gaming activity.
Processing financial transactions such as deposits, withdrawals, and bonus redemptions with internal and external payment systems.
Customer support, including assistance, troubleshooting, and resolution of issues.
Compliance with legal and regulatory frameworks, including prevention and detection of fraud, money laundering, and illegal activity.
Improving service quality through analytics, security monitoring, and performance measurement.
Marketing communications (only with your consent), such as promotional offers, updates, and events relevant to letslucky.games.
Responsible gambling initiatives, including monitoring and facilitating player protection measures.

Disclosure & Sharing

OBSERVE: letslucky.games discloses personal data only where necessary and under protective legal agreements.
EXPAND: Potential recipients and circumstances for disclosure are set out to maximize transparency and minimize risks.
REFLECT: Full disclosure enables users to understand the flow of their personal information and reinforces trust.

Payment processors and banking partners: For the processing and authentication of financial transactions in a secure, PCI-compliant manner.
Service providers: Technology, analytics, hosting, anti-fraud, customer support, and responsible gambling service suppliers acting under contract.
Legal and regulatory authorities: When required by law (e.g., AU AML/CTF reporting), regulators (Curaçao Gaming Control Board), courts, or government agencies.
Affiliates and marketing partners: Subject to your consent, for the purpose of targeted advertising, promotions, or bonus allocations.
Corporate transactions: In case of merger, acquisition, restructuring, or asset transfer, personal data may be transferred, with appropriate notice.

Legal Obligation: All third parties are contractually bound to use data strictly for agreed purposes and in compliance with applicable privacy regulations.

International Transfers

OBSERVE: Personal data may be processed in jurisdictions outside Australia.
EXPAND: letslucky.games is registered in Curaçao, and uses service providers within and outside the EEA.
REFLECT: All international transfers are safeguarded in accordance with legal and industry standards, including the application of standard contractual clauses when required.

Countries of data transfer: Personal data may be transferred to Curaçao (company headquarters), the EEA, or other approved regions necessary for operation, including cloud services and payment processors.
Protection guarantees: Standard contractual clauses, strict confidentiality, encryption, and only using providers with proven privacy safeguards.

Regional Compliance Note: letslucky.games ensures all international data transfers comply with the Australian Privacy Principles and, where applicable, external certifications or regulatory frameworks.

Data Retention

OBSERVE: Retention periods are strictly defined for each data category.
EXPAND: Retention is determined by contractual, legal, and regulatory limits, including AU laws on record-keeping and AML/CTF compliance.
REFLECT: Users are assured data will only be retained as long as necessary, and subject to secure deletion or anonymization after expiration.

Personal account data: Retained for active account period plus a maximum of five (5) years after account closure, to comply with regulatory and anti-fraud obligations.
Financial records: Retained as required by law, up to seven (7) years, for AML/CTF, taxation, and auditing purposes.
Behavioral & technical logs: Retained for up to three (3) years after collection or last use, unless earlier deletion is requested and permitted by law.
Marketing data: Retained until withdrawal of consent or up to two (2) years from last contact.
Deletion criteria: Account closure, user deletion request (where permitted), fulfillment/expiration of the purpose, or legal obligation.

Legal Clause: Deletion may be delayed in cases where additional retention is required for dispute resolution, fraud prevention, or regulatory investigations.

Your Rights

OBSERVE: letslucky.games supports full exercise of user data rights as required by the Australian Privacy Principles.
EXPAND: User rights are detailed and actionable, with clear information on how to exercise each right.
REFLECT: This empowers users and demonstrates the casino's commitment to data protection and transparency.

Access: Request a copy of your personal data held by letslucky.games.
Correction: Request corrections to inaccurate or incomplete data.
Deletion: Request deletion ('right to be forgotten') of your data, subject to legal and regulatory requirements.
Restriction: Request temporary restriction of processing under certain circumstances (e.g., data accuracy challenged).
Objection: Object to processing on grounds relating to your particular situation, including for direct marketing.
Portability: Request receipt or direct transfer of your data to another service provider, where technically feasible.
Marketing withdrawal: Withdraw consent at any time to stop receiving promotional messages.

Procedural Note: To exercise these rights, contact the Data Protection Officer as set out in the Complaints & Contacts section. Verification of identity will be required for your protection.

Cookies & Tracking Technologies

OBSERVE: letslucky.games uses cookies and related tracking mechanisms on all digital platforms.
EXPAND: The following types of cookies and tracking technologies are deployed, with lawful justifications and user options for management.
REFLECT: Transparency and user control are essential for compliance with AU Spam Act and best practices.

Session cookies: Temporary files, deleted when you close your browser, used for secure login, navigation, and website functionality.
Persistent cookies: Retained on your device for a defined period or until deleted by you, enable preferences, language selection, and automatic login.
Third-party cookies: Used by analytics partners (e.g., Google Analytics), payment processors, and advertising networks, only with your explicit consent.
Purpose: Functional (website operation), analytics (usage metrics), advertising (targeted offers), and security (session integrity).
Management: You can manage or disable cookies via your browser settings or the internal cookie management panel on letslucky.games. Please note, disabling essential cookies may impair site functionality.

Data Security

OBSERVE: letslucky.games implements industry-leading information security controls.
EXPAND: Technical and organizational measures below aim to safeguard personal data against loss, unauthorized access, or misuse.
REFLECT: Ongoing risk assessments, staff training, and regular audits underwrite systemic protection and legal compliance.

Encryption: All data transmitted between your device and letslucky.games is encrypted using SSL/TLS protocols; sensitive data stored in encrypted form.
Access controls: Personal data is accessible only to authorized personnel on a strict need-to-know basis, supported by robust authentication and logging systems.
Security audits: Regular external and internal audits test and verify security controls, vulnerability management, and incident response readiness.
Organizational measures: Security policies, privacy training for staff, and enforceable codes of conduct.
Incident response: In case of any suspected breach, users and relevant authorities will be notified in compliance with legal obligations, including AU Notifiable Data Breaches scheme.

Complaints & Contacts

OBSERVE: letslucky.games provides dedicated channels for privacy-related inquiries and complaints.
EXPAND: Processes for addressing data concerns are set out, ensuring user protection and regulatory oversight.
REFLECT: Transparent handling of complaints reinforces legal accountability and user trust.

Data Protection Contact (DPO): Jacob Turner
Email:
Complaints procedure: Submit your inquiry or complaint by email or via the official website contact page. All complaints are acknowledged within seven (7) days and, where possible, resolved within thirty (30) days.
Escalation: If you are unsatisfied, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or equivalent authority, after first contacting us.

Updates

OBSERVE: letslucky.games remains vigilant in updating privacy practices to reflect legal and operational changes.
EXPAND: Users are proactively informed about substantive changes to this policy.
REFLECT: Commitment to transparency and compliance is maintained through clear communication.

Notification: All changes to this Privacy Policy will be posted on letslucky.games, and, when required, notified directly by email or site notifications.
Review date: Users are encouraged to review the policy periodically to remain informed. The current version is effective as of 1 January 2025.

Legal Disclaimer: Continued use of letslucky.games services after notification of changes will constitute acceptance of the revised Privacy Policy. If you disagree with any part of the update, contact us immediately or discontinue use of the services.