LuckyBoom

How We Handle Your Data: A Structured Privacy Summary

Privacy is not an afterthought at LuckyBoom. Below we break down exactly what personal data we collect, why we collect it, and the legal grounds that justify each use. Every field listed is something you will encounter during registration, gameplay, or withdrawal.

Categories of Personal Data We Collect

CategoryExamples of Fields CollectedPurpose of ProcessingLegal Basis
IdentityFull name, date of birth, nationality, photo of passport or ID cardVerify your age and identity; comply with anti-money laundering (AML) and know-your-customer (KYC) regulationsLegal obligation (Gambling Act, AML directives)
ContactEmail address, home address, phone numberSend account notifications, process withdrawals, provide customer supportContract performance (to deliver your account services); legal obligation (record-keeping)
FinancialDebit/credit card number, bank account details, e-wallet email, cryptocurrency wallet addressProcess deposits and withdrawals, prevent fraud, facilitate payoutsContract performance (to execute transactions); legitimate interest (fraud prevention)
GameplayBet history, game types played, session start/end times, win/loss amounts, bonus usageManage your account balance, calculate loyalty Stardust, detect problem gambling patterns, ensure fair playContract performance (to operate the platform); legal obligation (responsible gambling monitoring)
TechnicalIP address, browser type and version, operating system, device model, cookie identifiersMaintain website security, optimise mobile responsiveness, analyse site performanceLegitimate interest (security, analytics); consent (for non-essential cookies)

Your Rights and How to Exercise Them

Under applicable data protection law, you have the following rights regarding your personal data. We will respond to any request within the legally required timeframe.

  • Right to access: request a copy of the data we hold about you.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure: ask us to delete your data, subject to legal retention periods (e.g., for AML records).
  • Right to restriction: limit how we process your data in certain circumstances.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interest, including direct marketing.

To exercise any of these rights, email us at support@luckyboom.com. We may ask for proof of identity before fulfilling your request.

Data Retention and Security

We retain personal data only as long as necessary for the purposes described above or as required by law — typically five years after account closure for regulatory compliance. All data is transmitted over SSL-encrypted connections and stored on secured servers. We never sell your data to third parties.

If you have concerns about problem gambling, we offer self-exclusion via email and deposit limits. You can also contact independent support organisations listed in our Responsible Gambling section.

Your Privacy Rights and Our Data Retention Practices

We process your personal data only as necessary to operate our platform and comply with legal obligations. Under applicable data protection law, you hold specific rights over the information we hold about you. Here is what those rights mean in practice.

Your Rights Under Data Protection Law

You can exercise the following rights at any time by contacting us at support@luckyboom.com. We will respond within the legally required timeframe.

  • Right of access — request a copy of all personal data we hold about you.
  • Right to rectification — ask us to correct inaccurate or incomplete data.
  • Right to erasure — request deletion of your data where we no longer have a legal basis to keep it.
  • Right to restriction — ask us to temporarily stop processing your data while a dispute is resolved.
  • Right to data portability — receive your data in a structured, machine-readable format (e.g., CSV) and transfer it to another service.
  • Right to object — challenge processing based on legitimate interests, including direct marketing.

How Long We Keep Your Data

Retention periods depend on the type of record and the legal or operational reason for keeping it. We delete or anonymise data once the purpose expires. The table below shows our standard retention schedule.

Record TypeRetention PeriodReason
KYC documents (ID, address, payment proof)5 years after account closureAnti-money laundering and regulatory compliance
Transaction history (deposits, withdrawals, bonuses)5 years after last transactionTax, audit, and dispute resolution obligations
Gameplay logs (rounds, bets, wins)2 years after the gaming sessionGame fairness verification and responsible gambling analysis
Account registration data (email, name, date of birth)Until account closure, then 1 yearAccount management and legal identity retention
Communication records (support tickets, live chat logs)3 years after last interactionQuality assurance and dispute handling

If you request erasure of your data before the retention period ends, we will assess whether we can comply based on legal obligations. We never sell your data or share it with third parties for their own marketing purposes.