Our Privacy Policy in Plain English
This policy explains what personal data we collect when you play at Luckymate Casino, why we collect it, who we share it with and the rights you hold over it.
Data We Collect
We collect personal data directly from you and automatically as you use lucky-mate.uk.com. The categories below cover everything we hold.
Whenever you register, deposit, play or contact support, specific data enters our systems. We keep each category only as long as the purpose requires.
- Identity data: name, date of birth, email address, phone number, residential address.
- Verification documents: passport, driving licence or utility bills submitted during KYC checks.
- Transaction data: deposits, withdrawals, bets, winnings, payment method details.
- Technical data: IP address, device type, browser, operating system, approximate location.
- Gameplay data: sessions, game history, bonus usage, betting patterns.
- Marketing preferences: your opt-ins, communication channels and consent records.
How We Use Your Data
We use your data to open and run your account, verify your identity, process payments and prevent fraud. Each use has a defined purpose, and we never sell your personal data.
Responsible-gambling monitoring also relies on this data. We track behaviour signals so our support team can step in early if your play patterns look concerning.
- Creating and managing your account.
- KYC and anti-money-laundering verification.
- Processing deposits and withdrawals.
- Fraud prevention and dispute resolution.
- Responsible-gambling monitoring.
- Sending marketing offers, only with your consent.
- Meeting legal and regulatory obligations.
Our Legal Bases
Under GDPR, every processing activity needs a legal basis. Here are the four we rely on, each explained in one paragraph.
Contract: we process your data to set up and operate your account, process your bets and pay out winnings, because these steps are necessary to deliver the service you signed up for.
Legal obligation: gambling law obliges us to verify your identity, monitor transactions and retain records, so we process data for AML and KYC compliance regardless of consent.
Legitimate interest: we use limited data to prevent fraud, secure our platform and improve our services, balancing our interest against your rights at every step.
Consent: marketing emails, SMS and personalised offers run only on your explicit opt-in. You may withdraw consent at any time from your account settings or any message we send.
How Long We Keep It
If you self-exclude via GamStop, we retain the minimum data needed to enforce your exclusion for its full duration.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| KYC verification documents | 5 years after account closure |
| Transaction and betting records | 5 years minimum, per regulatory requirements |
| Technical and device data | Up to 13 months |
| Marketing preferences | Until you withdraw consent or 24 months after last activity |
| Support communications | 2 years |
Who We Share Data With
We share data only with providers who help us operate the casino, and only for the stated purposes. We never sell your data to advertisers or data brokers.
Every provider works under a data processing agreement that binds them to GDPR-level safeguards.
Where we hold crypto funds, blockchain transactions are visible on public ledgers by nature. We advise you on that when you choose a crypto deposit.
- Payment processors and banking partners.
- KYC and AML verification providers.
- Analytics and platform hosting services.
- Regulators and licensing authorities, on lawful request.
- IT security and customer support contractors.
Your Rights Under GDPR
GDPR gives you direct control over your data, and we honour every right without unnecessary friction. Contact our support team at [email protected] to exercise any of them.
We respond within one month of a valid request. Where a request is complex, we may extend this by two further months and will tell you why within the first month.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection authority, at any time.
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion where no legal retention applies.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time.
- Complaint: escalate to the ICO.
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences and measure how the site performs. Marketing cookies fire only after you accept them in the consent banner.
A dedicated Cookies Policy on lucky-mate.uk.com lists every cookie, its purpose and its lifetime. You can change your choices at any time from the cookie settings link in the footer.
How We Protect Your Data
All traffic on lucky-mate.uk.com runs over TLS encryption. Verification documents sit in access-controlled storage, and our payment flows never expose full card details to customer-facing staff.
Access to personal data follows the principle of least privilege: only trained staff with a work-related need can view it, and every access is logged.
If a personal data breach occurs, we notify the ICO within 72 hours where required and inform affected players directly when the risk to you is high.
Contact Our Data Officer
Our Data Protection Officer handles all privacy questions, requests and complaints. Write to [email protected] and we will acknowledge your message within two business days.
For anything related to your account, [email protected] reaches our 24/7 support team, who can route privacy requests to the right place immediately.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] or our DPO at [email protected]. We verify your identity and send the data within one month.
Can I delete my account and all my data?
You can close your account at any time. Identity and transaction records are kept for five years after closure because gambling law requires it; everything else is deleted.
How do I stop marketing messages?
Withdraw consent from your account settings or click the unsubscribe link in any message. Marketing stops immediately.
Do you share my data with advertisers?
No. We share data only with payment, verification and platform providers needed to run the casino, and never sell it.