Privacy Policy

Privacy Policy for Lucky Block Casino
Introduction

Scope and Applicability
Who this policy applies to

Legal framework

What Personal Information We May Collect
Account registration information

We require accurate registration information to create and manage accounts, and we may request proof of identity and address to verify account details.

Identity verification and supporting documents

Device and browser information

• device type and model;
• operating system and version;
• browser type and version;
• IP address (used for geolocation and security checks);
• screen resolution and language settings;
• device identifiers and mobile carrier (where available).

  This information helps us deliver a smoother, secure experience and troubleshoot technical issues.

  Usage analytics and behavioural data

  We collect information about how you use the platform: pages visited, time and duration of sessions, features used, search queries, and general navigation patterns. We use anonymised and aggregated analytics to understand service performance and to improve our features and content.

  Technical logs and operational diagnostics

  System logs record events such as login attempts, session start and end times, errors, and server responses. These logs help us monitor operational health, investigate incidents, and respond to security events.

  Cookies and Tracking Technologies
  Types of cookies we use

  We use cookies and similar technologies to provide core functionality and to understand how our services are used:
• Essential cookies: required for core platform functions (session management, account access).
• Preference cookies: remember language, layout, and other display choices.
• Analytics cookies: collect aggregated usage data to help improve the site.
• Marketing/measurement cookies: help measure the effectiveness of communications and tailor content where you have consented.

  Managing cookies

  Most browsers allow you to block or delete cookies. Blocking certain cookies may limit functionality; for example, session cookies are needed for account login. Where cookies are not strictly necessary, we will ask for your consent before setting them.

  How We Use Personal Data
  Primary uses

  We use the information we collect to:
• create and manage your account;
• verify identity and enforce age restrictions;
• provide, operate and improve platform features and performance;
• respond to your enquiries and provide customer support;
• monitor and enhance security and detect, investigate or prevent misuse, abuse or other harmful activity;
• communicate service updates, administrative notices and policy changes;
• analyse aggregated usage trends to tailor and improve our offerings.

  Communications and preferences

  We may contact you by email, in-app messages, SMS or other channels you provide for account-related messages, security alerts, and support responses. For marketing communications (promotional offers, newsletters), we will rely on your consent or your marketing preferences and will always provide an easy way to opt out.

  Marketing Opt-ins and Notification Preferences
  Consent and opt-out

  Where required by law, we will obtain your consent before sending marketing messages. You can withdraw consent or change your preferences at any time via your account settings or by contacting us via email. Promotional communications include email, push notifications and in-app messages. Once you opt out, we will stop non-essential marketing communications, though you may still receive essential administrative messages.

  Data Sharing and Third-Party Services
  Service providers and integrations

  We work with trusted third parties to deliver and improve our services. These may include hosting and infrastructure providers, security and DDoS mitigation partners, identity verification providers, analytics platforms, customer support platforms and third-party tools for performance monitoring. Examples of such services include content delivery networks and security services used to protect and accelerate our platform.

  We only share the minimum data necessary for these providers to perform their services and require contractual protections to keep the data secure.

  Self-exclusion and responsible play services

  Where you choose to use self-exclusion or other responsible-use options, we may interact with recognised public or third-party self-exclusion schemes to record and honour your choice. We share only the information necessary to apply the self-exclusion and to prevent further access in accordance with your request.

  Regulators, legal requests and safety

  We may disclose personal information where required by law or regulatory authorities, or to respond to lawful requests from public agencies. We will limit the data disclosed to what is necessary and, where appropriate, seek to protect your interests when responding to such requests.

  Aggregated and anonymised data

  We may create aggregated, de‑identified datasets that do not directly identify individuals. These are used for analytics, research and service improvement and may be shared externally.

  International Transfers

  Some of our service providers, data storage or processing facilities may be located outside the UK. When personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place, such as using standard contractual clauses or relying on an adequacy decision, where applicable, to protect your information.

  Data Storage and Retention
  How long we keep personal data

  We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal or regulatory obligations, resolve disputes and enforce agreements. Typical retention periods:
• Registration and account data: retained while the account is active and for a limited period after account closure;
• Identity verification documents: retained for a period necessary to verify identity and meet regulatory or safety obligations;
• Technical logs and analytics: retained for operational and security purposes for a defined period (for example, months to a few years) depending on their use;
• Marketing consents and preferences: retained until revoked or until account closure.

  If you request deletion, we will take reasonable steps to remove your data, subject to any legal or regulatory requirements that require continued retention.

  Security and Account Protection
  Technical and organisational measures

  We implement a combination of technical and organisational measures to protect personal data. These measures include:
• encrypted communications using modern protocols (for example, TLS 1.3);
• industry-standard encryption for data in transit and where appropriate for stored information;
• secure certificates issued by recognised authorities;
• network and application security measures such as web application firewalls and DDoS protection;
• routine security monitoring, vulnerability scanning and patching;
• restricted access controls and role-based permissions for our personnel.

  While we strive to protect data using strong safeguards, no transmission or storage system can be absolutely secure. We therefore apply layered protections and monitoring to reduce risk and respond quickly to incidents.

  Account security features

  You are responsible for keeping your account credentials confidential. We encourage strong, unique passwords and offer optional two-factor authentication (2FA) for additional protection using authenticator apps or SMS for specific sensitive actions. Password complexity requirements (such as a minimum length and a mix of letters, numbers and symbols) help reduce the risk of unauthorised access.

  Session management and login protection

  We implement session timeouts and device recognition to reduce the risk of unauthorised access. If suspicious activity is detected (unusual login locations, repeated failed attempts, or other anomalies), we may temporarily restrict access and contact you to verify activity. Multiple simultaneous accounts or the use of tools to obfuscate location may result in account restrictions.

  User Rights and How to Exercise Them
  Your rights

  Depending on applicable law, you may have the right to:
• access personal data we hold about you;
• correct inaccurate or incomplete information;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• request portability of data you provided;
• withdraw consent where processing is based on consent.

  We will respond to valid requests within applicable statutory deadlines and may need to verify your identity before complying.

  How to make a request

  Send data access, correction or deletion requests us via email or to our Data Protection Officer at the postal address listed in your account settings. Please include enough information to locate your account and describe the action you are requesting. We may ask for proof of identity for security reasons.

  Complaints

  If you are unhappy with our handling of your personal data, please contact us via email. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or another relevant supervisory authority.

  Protected Children and Age Restrictions

  Lucky Block Casino services are intended for users who are at least 18 years old. We take steps to prevent underage use, including collecting age and identity information and requiring verification where necessary. If we become aware that an account is operated by a person under 18, we will suspend the account and remove the personal information in accordance with applicable law.

  Third-Party Links and Services

  Our platform may link to third-party websites, applications or services. This Privacy Policy does not cover those third parties. We recommend reviewing the privacy policies of any external services you access through our platform.

  Responsible Handling and Minimisation

  We apply a data minimisation approach: we only collect and store information necessary for legitimate purposes, limit access internally, and ensure handling complies with our security and retention practices. Where possible, we use aggregated or anonymised data in place of personal data for analytics and reporting.

  Changes to this Privacy Policy

  We may update this policy to reflect changes in our practices, services or legal requirements. Material changes will be notified via the platform or by email where required. Please check this page periodically for updates.

  Contact Us

  For privacy inquiries, requests or concerns, contact us via email.

  If you prefer to write, please use the postal contact shown in your account profile. We strive to respond promptly and to be helpful in resolving privacy-related issues.

  Effective Date

  This policy is effective from the date shown at the top of the Lucky Block Casino platform or within the policy document