Lucky Lounge

Privacy Notice (GDPR)

Last updated: 2026-05-14

1. Controller

Lucky Lounge ("we") is the controller of your personal data within the meaning of Regulation (EU) 2016/679 ("GDPR"). Contact our Data Protection Officer at dpo@luckylounge.example.

2. Data we process

  • Account data: email, username, password hash, date of birth, country.
  • Gameplay data: bets, outcomes, balances, achievements, session times.
  • Technical data: IP address, device, browser, log data, cookies.
  • Communications: support tickets, in-app chat (moderated).

3. Purposes and legal bases (Art. 6 GDPR)

  • Providing the Service and your account — contract performance (Art. 6(1)(b)).
  • Age verification, fraud prevention, security — legal obligation and legitimate interests (Art. 6(1)(c)/(f)).
  • Analytics and product improvement — legitimate interests, with the right to object.
  • Marketing emails and personalised offers — consent (Art. 6(1)(a)), withdrawable at any time.

4. Retention

Account data is kept for as long as your account is active and 30 days after closure (cooling-off period). Aggregated, anonymised gameplay statistics may be kept indefinitely. Records required for accounting or legal-defence purposes may be kept up to 10 years.

5. Your rights

Under Articles 15–22 GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing. You can exercise most of these rights directly in Profile → Responsible play (data export and account deletion). You may also lodge a complaint with your national supervisory authority.

6. International transfers

Where personal data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses and additional safeguards as required by Schrems II.

7. Security

We use TLS in transit, encryption at rest, hashed passwords, role-based database access and row-level security. Incidents notifiable under Art. 33 GDPR are reported within 72 hours.

8. Children

The Service is strictly 18+. We do not knowingly process data of minors. If you believe a minor has registered, contact dpo@luckylounge.example and we will delete the account.