Privacy Policy

Version 1.0  |  Last Updated: 19 August 2026

This Privacy Policy explains how ChainLuck Casino, operating through chainluckcasino.uk (referred to as “we”, “us”, or “the Casino”), collects, uses, stores, shares, and protects the personal data of our Players and Website visitors. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By registering an Account or using our Services, you acknowledge that you have read and understood this Privacy Policy. For the definition of terms used herein, please refer to our Terms & Conditions.

1. Introduction

We take your privacy seriously and are committed to protecting your personal information. As a data controller, we determine the purposes and means by which your personal data is processed. We only collect data that is necessary, process it lawfully, and retain it for no longer than required.

If you have any questions about how your data is used, or wish to exercise any of your data subject rights, please contact our Data Protection Officer at [email protected].

2. Data We Collect

2.1. Information You Provide to Us

We collect personal data that you provide directly to us, including:

  • Identity Data: Full name, date of birth, gender, nationality, copy of government-issued ID;
  • Contact Data: Email address, telephone number, postal address;
  • Financial Data: Payment method details, transaction history, source of funds documentation;
  • Account Data: Username, encrypted password, security questions and answers;
  • Verification Data: KYC documents such as proof of identity and proof of address;
  • Communications Data: Records of your correspondence with our support team, including chat transcripts and emails.

2.2. Information Collected Automatically

When you visit or use our Website, we automatically collect certain technical and behavioural data, including:

  • Technical Data: IP address, device type, browser type and version, operating system, screen resolution;
  • Usage Data: Pages visited, features used, games played, bet amounts, session duration, click patterns;
  • Location Data: General geographic location derived from your IP address;
  • Cookie Data: Data collected via cookies and similar tracking technologies (see Section 6).

2.3. Information from Third Parties

We may receive personal data about you from trusted third parties, including:

  • Identity verification and KYC service providers;
  • Credit reference and fraud prevention agencies;
  • Payment processors and financial institutions;
  • Responsible gambling databases such as GAMSTOP;
  • Marketing partners and analytics providers (where you have consented).

3. How We Use Your Data

We use the personal data we collect for the following purposes:

  • Account Creation & Management: To register your Account, verify your identity, and manage your relationship with us;
  • Service Delivery: To provide access to Games, process deposits and withdrawals, and operate the platform;
  • Legal & Regulatory Compliance: To comply with anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gambling obligations;
  • Fraud & Security: To detect, prevent, and investigate fraudulent activity, security breaches, and prohibited behaviour;
  • Customer Support: To respond to your enquiries, handle complaints, and improve our support services;
  • Marketing Communications: To send you promotional offers, newsletters, and updates where you have provided consent or where we have a legitimate interest;
  • Analytics & Improvement: To analyse usage patterns and player behaviour in order to improve the Website and Services;
  • Responsible Gambling: To monitor gambling activity, implement player protection measures, and comply with our Responsible Gaming Policy.

4. Legal Bases for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

Purpose Legal Basis
Account registration and managementPerformance of a contract (Article 6(1)(b))
Processing deposits and withdrawalsPerformance of a contract (Article 6(1)(b))
KYC and identity verificationLegal obligation (Article 6(1)(c))
AML and fraud preventionLegal obligation (Article 6(1)(c))
Responsible gambling monitoringLegal obligation / Legitimate interests (Article 6(1)(c)/(f))
Direct marketing communicationsConsent (Article 6(1)(a)) or Legitimate interests (Article 6(1)(f))
Website analytics and improvementLegitimate interests (Article 6(1)(f))
Security and fraud detectionLegitimate interests (Article 6(1)(f))

Where we rely on legitimate interests, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties:

  • Payment Processors: To facilitate deposits and withdrawals;
  • KYC & Identity Verification Providers: To verify your identity and comply with regulatory requirements;
  • Game Software Providers: Who may receive limited technical data to enable game functionality;
  • Fraud Prevention & Credit Reference Agencies: To detect and prevent fraud and money laundering;
  • Analytics Providers: To help us understand how the Website is used and improve our Services;
  • Responsible Gambling Organisations: Such as GAMSTOP, where required for player protection;
  • Regulatory & Law Enforcement Authorities: Where we are legally required or permitted to do so;
  • Professional Advisors: Including lawyers, auditors, and insurers, under confidentiality obligations.

5.2. No Selling of Data

We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes.

5.3. Third-Party Processors

All third-party processors are required to process your data in accordance with our instructions and applicable data protection legislation. We enter into appropriate data processing agreements with all processors to ensure the security and confidentiality of your information.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit the Website. They allow us to recognise your browser, remember your preferences, and collect information about how you use our services.

6.2. Types of Cookies We Use

  • Strictly Necessary Cookies: Essential for the Website to function. These cannot be disabled as they are required for core functionality such as maintaining your login session and enabling secure transactions.
  • Performance & Analytics Cookies: Collect anonymised data about how visitors use the Website (e.g., pages visited, errors encountered), helping us improve performance.
  • Functionality Cookies: Remember your preferences (e.g., language, currency, game settings) to provide a personalised experience.
  • Marketing & Targeting Cookies: Track your browsing behaviour across the Website to deliver relevant advertisements and promotional content. These are only placed with your consent.

6.3. Managing Cookies

You can manage your cookie preferences at any time via our Cookie Consent Manager accessible from the Website footer. You may also configure your browser to block or delete cookies; however, please note that disabling certain cookies may affect the functionality of the Website. For more information, visit www.aboutcookies.org.

7. Data Security

We implement robust technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

  • SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS);
  • Data Encryption at Rest: Sensitive data, including financial information, is encrypted when stored;
  • Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis;
  • Regular Security Audits: We conduct periodic security assessments and penetration tests;
  • Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade security systems.

Despite these measures, no system is entirely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected Players without undue delay, in accordance with UK GDPR requirements.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category Retention Period
Account and identity data5 years from Account closure
Financial and transaction records7 years (for AML compliance)
KYC verification documents5 years from Account closure
Marketing preferences and communicationsUntil consent is withdrawn
Customer support communications3 years from the date of interaction
Cookie and analytics dataUp to 24 months

Upon expiry of the relevant retention period, data is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the following rights in respect of your personal data:

  • Right of Access: You may request a copy of the personal data we hold about you (Subject Access Request);
  • Right to Rectification: You may request that we correct inaccurate or incomplete data;
  • Right to Erasure: You may request deletion of your personal data (“right to be forgotten”), subject to legal retention obligations;
  • Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances;
  • Right to Data Portability: You may request your data in a structured, machine-readable format;
  • Right to Object: You may object to processing based on legitimate interests or direct marketing;
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond within one calendar month of receipt. If your request is complex or numerous, we may extend this period by a further two months, and we will notify you accordingly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by telephone on 0303 123 1113.

10. International Data Transfers

In some circumstances, your personal data may be transferred to, or processed in, countries outside the United Kingdom. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with UK GDPR, including:

  • Transfers to countries that have received an adequacy decision from the UK government;
  • Use of UK International Data Transfer Agreements (IDTAs) or equivalent contractual protections;
  • Transfers subject to binding corporate rules where applicable.

You may request further information about the safeguards in place for international transfers by contacting [email protected].

11. Minors

Our Services are strictly intended for individuals aged 18 years or older. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has provided us with personal data, we will delete that data as soon as practicable and close any associated Account. If you believe that we may have collected data from a person under 18, please contact us immediately at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal requirements. Where we make material changes, we will notify you via email or a prominent notice on the Website prior to the changes taking effect. We encourage you to review this page periodically. The date of the most recent revision is displayed at the top of this document.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

You also have the right to escalate any unresolved privacy concerns to the Information Commissioner’s Office (ICO), the UK’s independent data protection authority, at www.ico.org.uk.