Logo

Privacy Policy

At Lucki, protecting your personal data is something we take seriously every single day. This policy explains what information we collect, why we collect it, and what rights you hold under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We've written it to be read, not just filed away, so if anything feels unclear, you're welcome to reach out to us.

1. Nature and scope of personal data collected

When you register an account with us, we ask for certain details to verify who you are and to keep your account secure. This isn't optional padding — it's what allows us to meet our legal obligations and protect you from fraud. We collect information directly from you, automatically through your use of our platform, and occasionally from third parties such as identity verification providers.

The categories of data we process include:

  • Identity details such as full name, date of birth and nationality
  • Contact information including address, phone number and postal details
  • Financial data such as payment card details, banking information and transaction history
  • Account activity including login history, game preferences and wagering patterns
  • Technical data such as IP address, device type and browser information
  • Identity verification documents, including proof of ID and proof of address

2. Purposes and objectives of data processing

We don't collect data for the sake of it. Every piece of information we hold serves a defined purpose, and we process personal data in accordance with Article 6 of the UK GDPR, relying on legal bases including contract performance, legal obligation and legitimate interest.

Our processing purposes include:

  • Creating and managing your player account
  • Verifying your identity and age in line with licensing requirements
  • Processing deposits, withdrawals and other financial transactions
  • Preventing fraud, money laundering and underage gambling
  • Providing customer support and responding to enquiries
  • Sending account notifications and, where consented to, marketing communications
  • Meeting regulatory and audit obligations

3. Security measures and technical integrity

Your data is yours, and keeping it safe is our responsibility. We apply industry-standard encryption to data in transit and at rest, and our systems are protected by firewalls, access controls and regular security monitoring. Staff access to personal data is restricted to those who genuinely need it to perform their role.

We also conduct periodic reviews of our technical and organisational measures to make sure they remain fit for purpose as threats evolve. In the unlikely event of a data breach affecting your rights and freedoms, we will notify the relevant supervisory authority and, where required, inform you directly without undue delay.

4. Sharing information with third parties

We don't sell your personal data, and we never will. There are situations, though, where sharing information is necessary for our platform to function properly or to meet legal requirements.

We may share data with:

  • Payment processors and banking partners to complete transactions
  • Identity verification and anti-fraud service providers
  • Regulatory bodies and law enforcement agencies where legally required
  • IT infrastructure and cloud hosting providers
  • Professional advisers such as auditors and legal counsel

Every third party we work with is bound by contractual obligations to protect your data to a standard consistent with UK GDPR requirements.

Cookies are small bits of text that help our platform remember who you are and how you like to use it. When you first visit our site, you'll see a cookie banner that lets you choose which categories you're comfortable with, beyond the strictly necessary ones that keep the platform functioning.

We use several types of cookies. Essential cookies keep your session active and your account secure, and these can't be switched off without affecting basic functionality. Performance cookies help us understand how players interact with our games and pages, allowing us to fix issues and improve layout. Functionality cookies remember your preferences, such as language settings. Where we use cookies for marketing or analytics purposes that aren't strictly necessary, we rely on your consent, which you can withdraw at any time through your browser settings or our cookie preference centre.

You remain in control throughout. Disabling non-essential cookies won't prevent you from playing, though some personalisation features may stop working as intended. We review our cookie usage regularly and update our cookie list whenever new technologies are introduced to our platform.

6. Data retention period

We keep personal data only for as long as it's needed to fulfil the purposes it was collected for, or to meet legal and regulatory obligations. Account and transaction records are typically retained for a minimum of five years after account closure, in line with anti-money laundering requirements. Once retention periods expire, data is securely deleted or anonymised.

7. User rights over their data

Under UK GDPR, you hold a set of rights over your personal data, and we want you to feel confident exercising them. These rights aren't theoretical — they're practical tools you can use whenever you have concerns about how we handle your information.

Your rights include:

  • The right of access to the personal data we hold about you
  • The right to rectification of inaccurate or incomplete data
  • The right to erasure, sometimes called the right to be forgotten
  • The right to object to certain types of processing, including direct marketing
  • The right to data portability, allowing you to receive your data in a usable format
  • The right to restrict processing in certain circumstances
  • The right to withdraw consent at any time where processing relies on consent

To exercise any of these rights, contact our support team through the channels listed on our platform. We aim to respond within one month, as required under the regulation, and we won't charge a fee unless a request is manifestly unfounded or excessive. If you're ever unsatisfied with how we've handled a request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. International data transfers

Some of our service providers operate outside the United Kingdom, which means your data may occasionally be transferred internationally. Where this happens, we put safeguards in place such as Standard Contractual Clauses or we rely on adequacy decisions recognised under UK data protection law. We assess each transfer to confirm that protections equivalent to UK GDPR standards remain in place before any data leaves the country.

9. Privacy policy updates

We review this policy periodically to reflect changes in our practices, technology or legal obligations. When we make material changes, we'll notify you through your account or via a notice on our platform before the update takes effect. The date of the most recent revision will always be reflected at the top of this page, so checking back occasionally is a good habit.

10. Contact information

Questions about this policy or how we handle your data are always welcome. You can reach our data protection team through the support channels available on our platform, and we'll do our best to give you a clear, straightforward answer. Lucki operates under a licence issued by the Anjouan Offshore Finance Authority (AOFA) in the Union of the Comoros, licence number ALSI-202412035-FI2, alongside an additional licence from the Anjouan Gaming Authority, and we handle personal data belonging to UK residents in accordance with UK GDPR obligations regardless of our operating jurisdiction.

Gambling should always stay enjoyable and within your control. If you're worried about your gambling habits or those of someone close to you, free confidential support is available through the National Gambling Helpline on 0808 8020 133. Our services are strictly intended for individuals aged 18 and over.