PRIVACY POLICY

General

As a data controller, we have a legal obligation under gambling regulations to process personal data from players in order to allow them to participate in games and provide them with ancillary services. This Privacy Policy explains what personal data we collect from players, why we collect it and how we utilise it.

The website www.letslucky.com ("casino", "website", “company”, "we", "us", "our") is owned and operated by Hollycorn N.V., a company registered and established under the laws of Curaçao, with registration number 144359 and registered address at Scharlooweg 39, Willemstad, Curaçao. Hollycorn N.V. is licensed and regulated by the Curaçao Gaming Control Board (license no. OGL/2023/176/0095).

If you have any other questions regarding this Privacy Policy or protection of your data, please feel free to contact our Data Protection Officer at dpo@hollycorngaming.com

By registering a Player Account with the Website you confirm your consent with this Privacy Policy. If you do not agree with the terms of this Privacy Policy and do not wish to provide us with the personal information we require, please do not use this website.

Please note that this Privacy Policy constitutes an agreement between you and the Company. We may periodically make modifications to this Policy. While we will do our best to notify you of such changes, we recommend that you revisit this Privacy Policy regularly. Your continued use of the Website and/or its services will constitute your consent to the Privacy Policy.  

Information we collect

The Personal Information which we may request to use and process shall include, without limitation:

a) Any of the information that you provide to us when filling in the forms on our account registration pages, as well as any other data that you further submit via the Website or email (e.g. first and last name, date of birth, email address, phone number);

b) Correspondence made with us via the Website, email, web chat or through other means of communication;

c) All Player Account transaction history, whether this takes place via the Website(s) or via other means of communication;  

d) Website logins and their details, including traffic data, GeoIP location data, browser/device data, weblogs, activity logs and other traffic information recorded in our system;

e) Documents and proofs reasonably requested by us to verify your account, to process deposits or withdrawals and to conduct anti-fraud checks (on our own initiative or as required by applicable legislation). Such proofs may include passport scans, payment slips, bank statements, etc.

f) Survey participations or any other customer assessments that we may carry out from time to time.

How we can use your information

We process the Personal Information we collect from you in order to deliver our services. In particular, we will use your data for the following purposes:

a) Processing your bets and transactions. This includes your use of credit card and online payment systems;

b) Providing you with gaming and other ancillary services that you seek from our Website; 

c) Rendering customer support, such as assistance with setting up and managing your account; 

d) Identifying and performing the necessary verification checks;

e) Providing registered players with information about our promotional offers, or providing promotional information from our selected business partners, associates and affiliates (only if players specifically consented to receiving such marketing material);  

f) Complying with legal responsibilities, including complying with anti-money laundering (AML) and combating the financing of terrorism (CFT) laws;

g) Monitoring and investigating transactions for the purposes of preventing fraud, terms abuse, money laundering and other illegal or irregular gaming activities;

h) Analysing customer trends through market study assessments (participation in surveys is not obligatory and you can always choose not to take part);

i) Conducting research and statistical analysis of aggregated data.

Marketing Communication

Unless you have elected not to receive promotional materials, we may use your Personal Information, including your email address and phone number, to send you marketing communications regarding products, services and promotions. This may include information about products and services from our business partners, such as casino game providers. 

Whenever you decide to stop receiving such marketing and advertising material, you may opt out of this in your Player Account settings or by contacting our customer support at support@letslucky.com

Additionally, note that by accepting any contest prize or winnings from us, you consent to the use of your name and/or nickname for advertising and promotional purposes without additional compensation, except where prohibited by law.

Obtaining Personal Information

We shall not collect any Personal Information about you without your knowledge. We may, however, automatically collect certain data about you where you would have provided such information through the use of our services and through your interactions with us.

We may also lawfully receive certain Personal Information from online vendors and service providers, such as fraud prevention companies. In addition, we retain the right to engage the services of third-party providers to render technical support, so as to process your online transactions and source gaming content. 

Please understand that we may be granted access to any information you may provide to such vendors, service providers and third-party e-commerce services. Rest assured that we will use and safeguard any Personal Information so obtained, as set out in this Policy. Any information that you provide will only be disclosed to third parties outside the Company in accordance with this Privacy Policy, and we shall take any necessary steps to ensure that our agreements with third-party service providers always protect your private information.

Data Recipients

We may pass information that you have given us to other entities within our group of companies and to our business partners. These companies include our parent companies, their parent companies and all of the subsidiaries of these respective companies, as well as other companies with whom we carry out business and hold necessary agreements. Data processing of your information may be undertaken by the Company or by another entity in our group of companies, which may use a third party to fulfill such data processing needs.

Employees of the Company, more specifically Data Protection Officer, Money Laundering Officer, Payments & Anti-Fraud analysts, Customer Support agents, Customer Retention team members, VIP player managers as well as other selected employees, shall also have access to your Personal Information for the purpose of executing their duties and providing you with assistance. 

Our employees who have access to, or are associated with the processing of the player’s personal information, have signed confidentiality agreements to respect the confidential nature of the player’s information pursuant to applicable gaming, data protection and privacy laws.

It may be necessary for us or our service providers to transfer your personal data to countries outside of the European Union (EU), the European Free Trade Association (EFTA) regions, and the European Economic Area (EEA) in order to provide you with our services or engage with service providers and data processors. However, In accordance with the General Data Protection Regulation (GDPR), we are obliged to ensuring the protection of your personal data during these transfers.

This transfer may be necessary in order to provide you with our services such as:

• Processing your bets and payment transactions;
• Providing you with gaming and other ancillary services that you seek from our Website;
• Identifying and performing the necessary verification checks;

To guarantee an appropriate level of protection for your personal data during transfers to third countries, we implement appropriate safeguards such as European Commission’s standard contractual clauses for data protection. We also take all necessary measures to ensure that your information and data is treated securely and in accordance with this Privacy Policy and all applicable data protection laws.

By using our services and accessing our website, you accept the possible transfer of your personal data to third countries and the implementation of these safeguards. If you have any questions or concerns regarding these transfers, please do not hesitate to reach out to us.

Releasing Data to Third Parties

We do not sell or rent your personal data to third parties. 

We may disclose your personal information if required by law, regulation, or other legal subpoena or warrant. We may also disclose your personal information to a regulatory or law enforcement agency if we believe it to be necessary to protect the legitimate interests of the Company, its customers or any third party.

Personal data will only be disclosed to third parties in the following cases:

a) Where we are required to do so by law;

b) If the Website needs to share data with its payment processors to facilitate payment transactions in accordance with their privacy policies. (In particular, most banking card transactions are processed by Paysafe whoseprivacy policy applies to such transactions;

c) To comply with our legal and regulatory duties and responsibilities to the relevant licensing and regulatory authorities as well as all duties and responsibilities owed under any other applicable legislation and to any other applicable regulators in other jurisdictions;

d) When the Company believes that disclosure is necessary to protect the Company’s or the player’s safety, or the safety of others, investigate fraud, or respond to a government request;

e) If our marketing service providers require the data to carry out their tasks;

f) To any other third part with the player’s prior consent to do so.

We use third-party data processors to process limited personal data on our behalf. Such service providers support the Website, especially relating to hosting and operating the websites, marketing, analytics, improving the websites, and sending email newsletters. We shall ensure that the transfer of the Personal Data to the recipient is compliant with applicable Data Protection Legislation and that the same obligations are imposed on the processor as is imposed on us under the respective Services Agreement.

Our websites may also include social media features (e.g. “share” or “like” buttons). Such features are provided by third-party social media platforms such as Facebook. Where data is collected this way, its processing is governed by the privacy policy of the respective social media platforms.

In addition to the above, we may also release personal data if we acquire any new businesses. Should the Company undergo any changes to its structure such as a merger, acquisition by another company or a partial acquisition, it is most likely that our customers’ personal data will be included within the sale or transfer. We will, as part of our Policy, inform our players by email prior to affecting such transfer of personal data.

Please note our content may link to third party websites to provide relevant references. We are not responsible for such external content, which may contain separate privacy policies and data processing disclosures.

Data Retention

As stated under our Terms and Conditions both, you and the Casino can decide to have your Player Account closed at any time. Following closure of your account, we will retain your personal data on record for as long as required by law. This data shall only be used should it be required by competent authorities in cases of enquiries regarding financial and fiscal records, fraud, money laundering or investigations into any other illegal activity.

We may also keep anonymized derivatives of your data to improve our content and marketing communications where no automated decision making is involved.

You are to note that due to anti-money laundering regulations in licensed gaming jurisdictions in the European Union, we are obliged to retain personal data of players submitted during registration and any data passed on during the operative period of a Player Account for a minimum of five years from last player transaction or account closure. Therefore, requests for erasure prior to the lapse of this period cannot be entertained.

Security of your Data

We hereby acknowledge that in collecting and processing your Personal Information for the purposes of managing your Player Account, we are bound by strict legal provisions on the protection of personal data.

Consequently, we endeavour to protect your personal information and respect your privacy in accordance with best business practices and applicable regulations. Being committed to providing secure services to players, and we will take all reasonable precautions to ensure that all the data that you have submitted to us remains safe.

Right to withdraw consent. In cases where we rely on your consent for the processing of personal data, you have a right to withdraw your consent at any time.

Player Accounts can only be accessed with the player’s unique ID and password. You may also set up two-factor authentication (2FA) as additional protection from unauthorised use of your account. You are responsible for keeping your login information confidential and making sure it cannot be accessed by another person. 

Your Rights

Data protection law gives you, as a data subject, certain rights in certain circumstances. In accordance with law, you have a right to:

• Request access to your personal data - This means that you have a right to request, free of charge, a copy of the personal data we hold about you;
• Request the correction of your personal data – This means that if any personal data we hold about you is incomplete or incorrect, you have a right to have this corrected. Keep in mind, however, that we may need you to provide evidence and documentation (such as your ID documentation or proof of address) to support your request. It can be declined due to our legal obligations
• Request the erasure of your personal data - This means that you may request the erasure of your personal data where we no longer have a legal basis to continue processing it or retaining it. Please be aware that this right is not absolute – meaning that we are not able to satisfy your request where we are obliged under a legal obligation to retain the data, or where we have reason that the retention of data is necessary for us to defend ourselves in a legal dispute;
• Object to the processing of your personal data where we rely on our legitimate interests (or those of a third party) to process your data and you feel that our processing of your data in such a manner impacts your fundamental rights and freedoms. However, in some cases, we may be able to demonstrate that we have a compelling legitimate ground to process your data which may override your rights and freedoms. You may submit your objections to processing of your personal data on the grounds of the above-mentioned legitimate company interests by contacting our DPO;
• Request the restriction of the processing of your personal data – You may ask us to temporarily suspend the processing of your personal data in one of the following scenarios: (a) where you want us to establish the accuracy of the data, (b) where our use of the data is unlawful but you do not wish for us to delete it, (c) where you need us to retain your data even when we no longer need it in order for you to establish, exercise, or defend legal claims, or (d) where you have objected the use of your data but we need to verify whether we have overriding legitimate grounds to use it;
• Request the transfer of your personal data (i.e. data portability) – This means you may request us to provide you with certain data we process about you so you may transfer it to another controller. This right only applies to data acquired through automated means which you initially provided consent for us to use, or where we used the data to perform our obligations under a contract with you;
• Withdraw your consent at any time where we rely on your consent to process the data - ‘Opting out’ or withdrawing your consent will not affect the lawfulness of the processing carried out by us up until the time you withdraw your consent. Withdrawing your consent means that, going forward, you no longer wish for us to process your data in such a manner. This means that you may no longer consent for us to provide you with certain services (such as marketing. You may withdraw your consent at any time through the account profile settings on the website;
• Lodge a complaint with a supervisory authority;

In order to exercise your rights as explained above, we may need to request specific information about you to help us verify your identity. This is a security measure to ensure that we are certain that the person to whom we disclose your personal data is really you.

We will do our utmost to respond to all legitimate requests within a one-month timeframe from the submission of a request. If your request is particularly complex, or if you have made multiple requests in a certain time period, it may take us a little longer. In such a case, we will notify you of this extension.

Contacting Us

You may always contact us in regards to this Policy should you wish to:

a) Confirm the accuracy of the personal information we have collected about you; 

b) Enquire about our use of your personal information;

c) Prohibit future use of your data for direct marketing purposes;

d) Update or rectify any information that you have provided us (in such cases you shall provide any evidence we may reasonably require to effect such changes). Note it is illegal to provide us with false information about you and it is your responsibility to ensure that we are always updated with your correct data.

We have appointed a data protection officer (“DPO”) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, please contact the DPO at dpo@hollycorngaming.com

In addition, as per Article 77 of the GDPR, you have the right to lodge a complaint related to your data processing to a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of an alleged infringement.

Cookie Policy

When you visit the Website, our system automatically collects information about your visit, such as your browser, IP address, and the referring website. This collection may be done in conjunction with our platform providers and partners. We may receive from them general demographic or usage data of our Website visitors. We do not use automatically collected information to identify you personally without receiving additional consent.

To collect the information in question we use cookies and similar tracking tools. Cookies are small text files that are stored on your computer or equipment when you visit our web pages. Some of the cookies are essential for the Website to operate; others improve your Website experience and help us deliver a better service. Below are the types of cookies we use and their purposes.

Required cookies: enable the navigation and basic functionality of the websites, e.g., access to member areas of the Website.

Functional cookies: allow us to analyse your website usage and your selections on the website (e.g. your session key, language, or region), so we can save these settings and offer you a more personalised experience.

Advertising cookies: allow us to gauge how effective our content marketing is. These cookies are provided by our partners to track website visits and new player registrations from advertising. We do not share your personal information (such as name or email) to affiliated partners except for site visit data collected directly by such Advertising Cookies. However your site visit data may be linked with other personal information collected through other sources by the providers. The latter external data processing is governed by the privacy notices and policies of these third-party providers.

In addition to the above, we use a number of third party service providers who also set cookies on this Website, in order to deliver the services that they are providing to us. Such services include, but are not limited to, helping us to improve your experience by tracking your activity on the Website, measuring the effectiveness of the Website and the effectiveness of our marketing campaigns.

Most online browsers automatically accept cookies. If you prefer, it is possible to block some or all cookies, or to delete cookies that have already been set by modifying your browser settings. However, we recommend that you do not block or delete your cookies as this may restrict your use of our Website. 

Netent Games

When you play casino games developed by NetEnt, NetEnt’s Privacy Policy also applies. This policy can be found at NetEnt T&C page.