Privacy Policy

1. Who We Are

Lady Luckmore Casino ("we", "us", "our") is the data controller for personal data collected through this website. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For data protection queries, contact us at: [email protected]

2. Data We Collect

We collect the following categories of personal data:

• Identity Data: Name, date of birth, username
• Contact Data: Email address, phone number, postal address
• Financial Data: Payment method details (processed securely through payment providers)
• Transaction Data: Deposits, withdrawals, wagers, game outcomes
• Technical Data: IP address, browser type, device information, cookies
• Verification Data: Identity documents for KYC compliance
• Behavioural Data: Games played, session duration, wagering patterns (for responsible gaming monitoring)

3. How We Use Your Data

We process your personal data for the following purposes:

• Processing your account registration and managing your account
• Processing deposits and withdrawals
• Identity verification and fraud prevention (KYC obligations under UKGC licence)
• Responsible gaming monitoring — detecting problematic gambling patterns
• Providing customer support
• Legal and regulatory compliance (UKGC reporting, anti-money laundering obligations)
• Sending service communications (account updates, security notifications)
• Marketing communications (with your explicit consent only)

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: To provide our gaming services to you
• Legal obligation: UKGC licence conditions, AML, responsible gaming regulations
• Legitimate interests: Fraud prevention, security, improving our services
• Consent: Marketing communications (you can withdraw consent at any time)

5. Data Sharing

We share your data with third parties only where necessary:

• Payment processors (to process deposits and withdrawals)
• Identity verification providers (KYC compliance)
• Game software providers (to deliver the games)
• GAMSTOP (to check self-exclusion status at registration)
• UK Gambling Commission (regulatory reporting)
• Law enforcement (when legally required)

We do not sell your personal data to third parties for their marketing purposes.

6. Data Security

We use industry-standard 256-bit SSL encryption to protect data in transit. Our servers are hosted in ISO 27001-certified data centres with multi-layer physical and logical security controls. Access to player data is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are trained in data protection obligations.

7. Data Retention

We retain your personal data for a minimum of 5 years after account closure to comply with UKGC licence conditions and anti-money laundering laws. Transaction records are retained for 7 years. If you request account closure, we will anonymise your data where legally permissible while retaining the minimum required for regulatory compliance.

8. Cookies

We use essential cookies to operate the site (session management, login state). We use analytics cookies (Google Analytics) to understand site usage — these require your consent. We use marketing cookies where you've opted into marketing. You can manage cookie preferences through our cookie consent banner. For more information about cookies, visit the Information Commissioner's Office (ICO).

9. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion (subject to legal retention requirements)
• Right to restrict processing: In certain circumstances
• Right to data portability: Receive your data in a machine-readable format
• Right to object: To processing based on legitimate interests or for direct marketing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we've mishandled your data.