LuckyWave Privacy Policy for United Kingdom Players

LuckyWave, licensed under Curaçao eGaming, is committed to protecting the personal data of players accessing its platform from the United Kingdom. This Privacy Policy explains how personal information is collected, processed, stored, and safeguarded when using LuckyWave’s online casino services. Players should review this document to understand their rights under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Personal Data Collected

LuckyWave collects personal data necessary to provide gaming services, verify player identity, and comply with legal obligations. The categories of information gathered depend on how players interact with the platform and which services they use.

Identity Information: Full name, date of birth, gender, and nationality are collected during account registration to verify eligibility and comply with age restrictions.

Contact Details: Email address, telephone number, and residential address enable account communications and service notifications.

Financial Data: Payment card details, bank account information, and transaction histories are processed when players deposit or withdraw funds via methods such as Visa, Mastercard, PayPal, Skrill, or Neteller.

Verification Documents: Copies of identification documents, proof of address, and payment method verification are required for Know Your Customer (KYC) compliance.

Technical Data: IP addresses, device identifiers, browser types, and operating systems are automatically collected when accessing the platform.

Gaming Activity: Bet histories, game preferences, session durations, and bonus usage are recorded to deliver services and support responsible gambling measures.

Communication Records: Correspondence with customer support, including chat logs and emails, is retained to improve service quality and resolve disputes.

Purposes of Data Processing

Personal data is processed only where LuckyWave has a lawful basis under UK data protection law. Each processing purpose corresponds to one or more legal grounds.

Contract Performance: Processing identity, contact, and financial data is necessary to create accounts, process transactions, and deliver gaming services. Without this information, players cannot access the platform or withdraw winnings.

Legal Compliance: LuckyWave processes data to satisfy anti-money laundering regulations, gambling licensing requirements, and tax reporting obligations. This includes verifying player identity and maintaining transaction records.

Legitimate Interests: Technical and gaming data are analysed to detect fraud, prevent bonus abuse, improve platform security, and enhance user experience. These interests are balanced against player privacy rights.

Consent: Marketing communications are sent only where players have provided explicit opt-in consent. Players may withdraw consent at any time without affecting service access.

Responsible Gambling: Behavioural data is monitored to identify signs of problem gambling and enable protective interventions such as deposit limits or self-exclusion options.

Cookies and Tracking Technologies

Cookies are small text files stored on player devices that enable the platform to function correctly and improve user experience. LuckyWave uses several categories of cookies.

Essential Cookies: These are strictly necessary for site operation, including session management, authentication, and security features. They cannot be disabled without impairing core functionality.

Performance Cookies: Anonymous data on site usage, page load times, and navigation patterns help identify technical issues and optimise platform performance.

Functionality Cookies: Player preferences such as language settings, display options, and game favourites are remembered to personalise the experience across sessions.

Analytical Cookies: Third-party analytics tools measure traffic patterns and user behaviour to inform service improvements. Data is aggregated and does not identify individuals.

Players may manage cookie preferences through browser settings or the platform’s cookie consent tool. Blocking certain cookies may limit functionality or prevent access to some features. For detailed guidance, players should consult their browser documentation.

Player Rights Under UK Data Protection Law

The UK GDPR and Data Protection Act 2018 grant players specific rights over their personal data. LuckyWave respects and facilitates the exercise of these rights.

Right of Access: Players may request confirmation of whether their data is being processed and obtain a copy of all personal information held about them.

Right to Rectification: Inaccurate or incomplete data can be corrected upon request. Players should notify LuckyWave promptly of any changes to their information.

Right to Erasure: Also known as the “right to be forgotten,” this allows players to request deletion of their data where it is no longer necessary for the purposes collected, or where consent has been withdrawn. Legal retention requirements may limit this right.

Right to Restriction: Processing can be limited in certain circumstances, such as when accuracy is contested or processing is unlawful but the player opposes erasure.

Right to Data Portability: Players may receive their data in a structured, commonly used format and transmit it to another controller where processing is based on consent or contract.

Right to Object: Players can object to processing based on legitimate interests, including profiling. Direct marketing objections must be honoured without exception.

Rights Related to Automated Decisions: Players have the right not to be subject to decisions based solely on automated processing that significantly affect them, and may request human intervention.

Exercising Your Data Rights

Players wishing to exercise any data protection right should contact LuckyWave’s support team through the platform’s designated communication channels. Requests must include sufficient information to verify identity and specify which right is being invoked.

LuckyWave will respond to valid requests within one calendar month, as required by UK law. Complex requests or high volumes of enquiries may extend this period by up to two additional months, with notification provided to the player.

No fee is charged for most requests. However, manifestly unfounded or excessive requests may incur a reasonable administrative charge, or LuckyWave may decline to act.

If players are dissatisfied with how their request is handled, they have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection matters. The ICO can be contacted through its official website or helpline.

Data Security Measures

LuckyWave implements technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction.

Encryption: Secure Socket Layer (SSL) technology encrypts data transmitted between player devices and LuckyWave servers, protecting sensitive information during transfer.

Access Controls: Personal data access is restricted to authorised personnel who require it for their job functions. Role-based permissions limit exposure to sensitive information.

Secure Storage: Data is stored on protected servers with firewalls, intrusion detection systems, and regular security updates to guard against external threats.

Staff Training: Employees handling personal data receive training on data protection obligations, security protocols, and incident response procedures.

Incident Response: Procedures are in place to detect, investigate, and report data breaches. Where a breach poses a high risk to player rights, affected individuals and the ICO will be notified as required by law.

While robust measures are employed, no system is completely secure. Players are encouraged to protect their own accounts by using strong passwords, enabling available security features, and avoiding shared or public devices for gaming activities.

Data Retention and Sharing

Personal data is retained only as long as necessary for the purposes for which it was collected or as required by law. Different categories of data may have different retention periods based on legal, regulatory, or operational requirements.

Active Accounts: Data is retained throughout the period an account remains active and is used for gaming services.

Closed Accounts: Following account closure, certain data is retained to comply with anti-money laundering regulations, tax obligations, and potential legal claims. Retention periods vary by jurisdiction but typically range from five to ten years.

Marketing Data: Information used for marketing purposes is deleted promptly upon consent withdrawal, unless other retention grounds apply.

LuckyWave shares personal data with third parties only where necessary and lawful. Recipients may include payment processors for transaction handling, identity verification providers for KYC compliance, regulatory authorities upon lawful request, and professional advisers for legal or accounting purposes. All third-party processors are contractually bound to protect data and use it only for specified purposes.

Data may be transferred to countries outside the United Kingdom where service providers are located. Such transfers are protected by appropriate safeguards, including standard contractual clauses approved by the UK authorities, to ensure equivalent protection.

For queries about this Privacy Policy or to exercise data protection rights, players should contact LuckyWave support. The policy may be updated periodically to reflect changes in legal requirements or business practices, with material changes communicated through the platform.