This page answers the common questions about how Lüks Casino handles personal data: which data, for what purpose, for how long. Opening an account on the site means accepting this practice. The policy applies together with the Terms and Conditions.
Which data is collected?
- Entered at registration.
- Phone number, email, name and date of birth.
- Recorded by the system while playing.
- Betting history, game round records, IP address and device data.
- Returned by the provider during payment.
- Payment method and transaction amount details.
- Held in the browser.
- Session, language and preference cookies.
Personal data is not purchased from third parties for advertising.
Why is the data processed?
| Basis. | Example use. |
|---|---|
| Performing the contract. | Opening the account, accepting a bet, making a payment. |
| Legal obligation. | Age verification, identity checks, record keeping. |
| Legitimate interest. | Detecting fraud, bots and multiple accounts. |
| Explicit consent. | Bonus announcements and campaign notifications. |
Consent to notifications can be withdrawn at any time; this does not close the account, it only stops marketing messages.
What do cookies do?
Without essential cookies the session does not stay open and the site does not work. Preference cookies remember language and screen settings. Measurement cookies show in aggregate which sections are used and do not identify an individual player. Cookies can be deleted through browser settings, though blocking the essential ones prevents logging in.
Who is the data shared with?
- Payment providers — only as much as completing the transaction requires.
- Game studios — to verify a round outcome and the bet record.
- Identity verification services — to confirm age and account ownership.
- Competent authorities — when the law requires it.
Data is not sold for advertising and lists are not rented to third parties; service providers process data only under instruction.
How is security handled?
The connection between the site and the browser is encrypted, and passwords are stored in a form that cannot be reversed, so nobody, support included, can see them. Access rights follow the job: only the payments team looks at payment records. Half of account security rests with the user — not reusing a password elsewhere, not sharing a confirmation code.
What rights are available?
- Requesting a copy of the data held.
- Requesting correction of wrong or incomplete details.
- Requesting deletion of data outside the legal retention duty.
- Objecting to marketing messages and withdrawing consent.
A request is sent through support. Closing the account does not delete all data at once: payment and betting records are kept until the legal period expires, and a self exclusion record is held until its term ends — explained on the Responsible Gaming page. The route for a data-processing dispute is on the Player Complaint Policy page.
Does the policy change?
Yes — the version published here is always the current one and applies from the moment of publication. A change that widens the type of data collected or shared is announced through the registered contact address. A user who does not accept the change keeps the right to close the account.