Lucky Elf Casino Privacy Policy

Effective from: 2022-01-21

Last updated: 2023-09-22

At LuckyElf Casino, we are committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner. This Privacy Policy, along with our Terms & Conditions and Cookie Policy, outlines how we collect, store, and use your personal information when you visit our website and engage with our services. By registering an account with Lucky Elf Casino, you confirm your acceptance of this Privacy Policy.

Data We Gather

We gather a range of personal information, such as:

Details provided during account registration, including your name, date of birth, email address, and phone number.
Records of communications between you and Lucky Elf Casino via the website, email, chat, or other methods.
Transaction history linked to your player account.
Data on website usage, such as login details, IP address, browser information, and cookie data (see our Cookie Policy for more details).
Documents and proofs required for account verification, anti-fraud measures, and processing deposits and withdrawals.
Responses from participation in surveys or other customer feedback initiatives.

Utilization of Your Data

We handle your deposits, withdrawals, and other transactions, offer gaming services and support, and respond to customer inquiries or complaints. We also conduct necessary verification checks to comply with legal regulations, send marketing and promotional communications with your consent, and monitor transactions to detect and prevent fraud, money laundering, and other illicit activities. Additionally, we analyze customer behavior, perform research, and carry out statistical analyses to improve our services.

Legal Basis for Processing Personal Data

We process your personal data based on various legal grounds, including:

To fulfill our contractual obligations and provide the services you request.
To comply with anti-money laundering laws and other applicable regulations.
To prevent fraud, conduct research, and improve our services.
When you consent to receive marketing communications or permit us to process your data for specific purposes.

Sharing of Data

We may share your personal data with trusted third parties, including:

Members of the Hollycorn N.V. group for fraud prevention, AML, and responsible gaming purposes
Employees of Lucky Elf Casino who require access to your data to perform their duties and provide assistance
Game providers, payment providers, and related service providers to facilitate our services
Marketing partners, with your consent, to send promotional materials and offers
Governmental or regulatory authorities, as required by law or to protect our legal rights
Third-party service providers who assist us in managing risks, obtaining professional advice, or establishing and defending legal claims

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, satisfy legal and regulatory requirements, and defend against potential legal claims. Due to anti-money laundering regulations, we are required to retain player data for a minimum of five years from the last transaction or account closure.

Your Rights

As a data subject, you have the right to:

Request access to, correction, or erasure of your personal data
Object to or restrict the processing of your data
Request data portability
Withdraw your consent for processing, where applicable
Lodge a complaint with a supervisory authority

To exercise these rights, please contact our DPO. We may request additional information to verify your identity and will respond to legitimate requests within one month, barring exceptional circumstances.

Security of Your Data

At Lucky Elf, we take the security of your personal data very seriously. We have implemented a comprehensive set of technical and organizational measures designed to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security framework is based on industry best practices and complies with applicable data protection regulations.

All sensitive data, including personal information and financial transactions, is encrypted using advanced encryption standards. This ensures that your data remains secure during transmission and storage. We use SSL/TLS protocols to establish secure connections between your device and our servers, preventing unauthorized interception of your data.
Your personal data is stored on secure servers located in protected data centers. These facilities are equipped with state-of-the-art physical and electronic security measures, including access controls, surveillance systems, and redundant power and data backup systems. Only authorized personnel with specific roles and permissions can access these servers.
We enforce strict access controls to ensure that only authorized employees and service providers can access your personal data. Access is granted on a need-to-know basis and is regularly reviewed and updated. All employees and third parties with access to your data are bound by confidentiality agreements and are required to follow our data protection policies and procedures.
We conduct regular security audits and vulnerability assessments to identify and address any potential weaknesses in our systems. These audits cover our infrastructure, applications, and processes, ensuring that we maintain a high level of security at all times. We also work with reputable third-party security experts to validate our security measures and provide recommendations for continuous improvement.
All Lucky Elf Casino employees undergo mandatory data protection and security training. This training covers best practices for handling personal data, identifying and reporting security incidents, and maintaining the confidentiality of your information. We foster a culture of security awareness and continuously update our training programs to address evolving threats and regulatory requirements.
In the event of a security incident or data breach, we have a comprehensive incident response plan in place. This plan outlines the steps we will take to contain the incident, assess the impact, and notify affected individuals and relevant authorities as required by law. We also maintain robust business continuity and disaster recovery plans to ensure that our services remain available and your data remains protected even in the face of disruptions.

While we strive to maintain the highest levels of security, it is important to remember that no method of transmission or storage is 100% secure. We cannot guarantee absolute security, as there are always inherent risks associated with the use of the internet and digital technologies. However, we are committed to continuously monitoring and improving our security measures to mitigate these risks and protect your personal data to the best of our abilities.

Changes to the Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our practices or legal requirements. While we will make reasonable efforts to notify you of significant changes, we recommend reviewing this policy regularly to stay informed about how we protect your personal information.

By using the Lucky Elf Casino website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.