This page explains what personal data Lüks Casino collects and how it is handled. Opening an account counts as accepting the practices below. The notice applies together with the Terms and Conditions.
Data collected
Data comes from three sources. You enter some at registration, the system records some during play, and a provider passes some along during payment. Personal data is never bought from third parties for advertising.
| Data type | Purpose | Retention |
|---|---|---|
| Phone and email. | Account opening and contact. | While the account stays open. |
| Name and date of birth. | Age and ownership verification. | For the legal retention period. |
| Payment details. | Deposits and withdrawals. | For the legal retention period. |
| Betting and round history. | Settlement and complaint review. | For the legal retention period. |
| IP and device data. | Security and multiple account detection. | A limited period after the record. |
| Support correspondence. | Complaint tracking. | Until the file is closed. |
| Cookie record. | Session and preference memory. | The lifetime of the cookie. |
Why data is processed
- To perform the contract, such as opening the account and settling a payment.
- Under legal obligation, for age and identity verification.
- For security, to prevent fraud and multiple accounts.
- With consent, to send bonus and campaign notices.
Consent to notifications can be withdrawn at any time. This does not close the account; it only stops marketing messages.
Cookie use
Cookies are small records stored in the browser. Without essential cookies the session does not stay open. Preference cookies remember language and screen settings. Measurement cookies show usage in aggregate and do not identify an individual player.
Cookies can be removed through browser settings. Blocking essential cookies prevents logging in.
Data sharing
- Payment providers, only as much as a transaction requires.
- Game studios, to verify a round's outcome.
- Identity verification services such as KYCAID, to confirm age.
- Competent authorities, when the law requires it.
Data is never sold for advertising and lists are never rented to third parties. Service providers process data only under instruction.
Data security
The connection between the site and the browser is encrypted. Passwords are stored in an irreversible form, so no one can read them. Access follows the job; only the payments team views payment records.
Half of account security rests with you. Do not reuse the password elsewhere and do not share the confirmation code.
User rights
- A copy of the data held can be requested.
- Correction of wrong details can be requested.
- Deletion of data outside the legal period can be requested.
- Marketing messages can be objected to.
Requests are sent through support. Closing the account does not delete all data at once; payment records are removed once the legal period ends. A self-exclusion record is held until its term ends, explained on the Responsible Gaming page. A dispute about data handling follows the Player Complaint Policy.
Changes to this policy
This text is updated from time to time. The published version applies from that moment. A change that widens the scope of data collected is announced to your registered contact address.