burger icon

Lucky Ones Casino: Secure, Trusted, and Fully Compliant for Canadian Players

Introduction

This Privacy Policy explains how Lucky Ones collects, uses, and protects personal information provided by players and visitors of our website lucky-ones-ca.com. It applies to all users who access or register with Lucky Ones and governs the processing of their personal data. This policy has been in effect since June 1, 2025.

Who We Are

Operator: Lucky Ones

Parent Company: DAMA N.V., a company registered under the laws of Curaçao.

Regional presence: Lucky Ones operates through its regional offices, including a support office located in Malta (MT) and is licensed by the Curaçao Gaming Control Board.

Licensing information:

  • License Number: OGL/2023/174/0082
  • Issuing Authority: Curaçao Gaming Control Board
  • License Type: Online gaming license

Contact for Data Protection:

Data Protection Officer (DPO) or responsible department can be contacted via email at [email protected].

What Personal Data We Collect

Lucky Ones collects various categories of personal data necessary for operating the online casino and providing services:

  • Personal Identification Data: including full name, email address, telephone number, date of birth, and address, collected during registration and account verification.
  • Technical Data: including IP address, device information (such as type and operating system), browser type, and server logs recording access times and actions on the site.
  • Payment Data: including bank or card details, transaction information, and payment history required for processing deposits, withdrawals, and compliance with financial regulations.
  • Behavioral Data: including betting history, game play logs, clickstream data, and navigation behavior for service personalization, fraud detection, and compliance purposes.
  • Cookies and Similar Technologies: data collected via cookies, web beacons, and other tracking technologies to enhance site functionality, analyse user behavior, and deliver tailored marketing communications.

Legal Basis for Processing

Lucky Ones processes personal data on the following legal grounds compliant with Canadian privacy laws and industry standards:

  • User Consent: When users explicitly agree to the collection and use of their personal data, for example during registration or by accepting terms and marketing communications.
  • Performance of a Contract: Processing necessary to provide casino services, manage user accounts, execute transactions, and fulfil contractual obligations arising from user agreements.
  • Legitimate Interests: Activities such as fraud prevention, ensuring platform security, data analytics, improving the casino's services, and marketing efforts carried out in balanced consideration of user rights.
  • Compliance with Legal Obligations: Processing mandated by law, including Know Your Customer (KYC), Anti-Money Laundering (AML) requirements, record keeping, and reporting to regulatory authorities.

Purpose of Processing

Lucky Ones uses collected data for the following purposes:

  • Provision of Casino Services: To create and manage user accounts, allow betting and gameplay, process financial transactions, and handle payouts.
  • Customer Service and Support: To provide assistance through support channels including email and live chat for registered users.
  • Service Improvement and Analytics: To analyze user behavior and gameplay data to enhance the platform's functionality, security, and user experience.
  • Marketing Communications: To send promotional offers, updates, and newsletters subject to user consent.
  • Fraud Prevention and Security: To detect, investigate, and prevent fraudulent, unlawful, or abusive activities.
  • Regulatory Compliance: To comply with applicable gambling laws, regulatory reporting, and auditing requirements.

Disclosure & Sharing

Lucky Ones may disclose personal data to third parties under the following circumstances:

  • Payment Processors and Financial Institutions: To process deposits, withdrawals, and refunds.
  • Service Providers and Partners: Including IT providers, data analytics companies, fraud prevention services, and hosting providers who assist in operating the website and user account management under strict confidentiality agreements.
  • Regulatory Authorities and Law Enforcement: When required by law, license conditions, or in response to lawful requests for investigation or compliance.
  • Affiliates and Marketing Networks: Subject to explicit user consent, personal data may be shared for promotional, advertising, or affiliate marketing purposes.

International Transfers

Given the international nature of Lucky Ones operations and parent company DAMA N.V. based in Curaçao, user data may be transferred to and stored in servers located outside Canada, including European countries and other jurisdictions.

Where data is transferred internationally, Lucky Ones ensures appropriate safeguards are in place to protect personal data, including but not limited to:

  • Standard Contractual Clauses (SCC) approved by relevant data protection authorities.
  • Compliance with international privacy frameworks and regulations to maintain an adequate level of data protection.

Transfers are carried out in full compliance with Canadian privacy laws and applicable data protection regulations.

Data Retention

Lucky Ones retains personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Retention periods vary by data category:

  • Personal Identification and Contact Data: Retained for the duration of the user's account activity and up to 5 years after account closure to comply with legal and regulatory requirements.
  • Payment and Transaction Data: Retained for a minimum period required under AML and tax laws, typically no less than 5 years.
  • Behavioral and Usage Data: Retained for analytics and fraud prevention purposes as long as the user account is active, and for a limited time thereafter, generally not exceeding 3 years.
  • Cookies and Tracking Data: Stored according to the respective expiration of cookies and tracking technologies as governed by user settings and browser controls.

Users may request deletion of their personal data where retention is no longer legally required or justified, subject to verification processes and legitimate business interests.

Your Rights

Under applicable Canadian privacy laws, users of Lucky Ones have the following rights concerning their personal data:

  • Access: To request confirmation of processing and obtain a copy of the personal data held.
  • Correction: To request rectification of inaccurate or incomplete data.
  • Deletion: To request erasure of personal data when it is no longer necessary for the purposes collected, subject to legal and contractual limitations.
  • Restriction of Processing: To limit the processing of data under certain conditions, e.g., pending verification of data accuracy.
  • Objection: To object to processing, particularly for marketing purposes or where processing is based on legitimate interests.
  • Data Portability: To receive personal data in a structured, commonly used format and transmit it to another service provider where technically feasible.
  • Withdraw Consent: Users can withdraw consent to marketing communications at any time without affecting the lawfulness of prior processing.

Requests to exercise these rights can be directed to Lucky Ones via the contact information provided below.

Cookies & Tracking Technologies

Lucky Ones uses cookies and similar tracking technologies for various purposes:

  • Session Cookies: Temporary cookies that expire at the end of a browsing session to enable core website functions.
  • Persistent Cookies: Cookies that remain on the device to remember preferences and settings for subsequent visits.
  • Third-Party Cookies: Cookies placed by external service providers such as analytics or advertising networks.

Purposes of using cookies include:

  • Functional Cookies: To maintain user sessions, preferences, and security.
  • Analytical Cookies: To collect aggregated statistical information on user behavior for service improvements.
  • Advertising Cookies: To deliver targeted promotions and measure the performance of marketing campaigns.

Users may manage cookie preferences and disable cookies through their web browser settings or via Lucky Ones' internal cookie management panel available on the website. Disabling certain cookies may affect functionality or user experience.

Data Security

Lucky Ones implements robust technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. These measures include:

  • Encryption: Use of SSL/TLS protocols to secure data transmission between users and our servers.
  • Access Controls: Restricting access to personal data to authorized personnel only, based on role and necessity.
  • Regular Security Audits: Conducting periodic reviews and penetration testing to identify and mitigate vulnerabilities.
  • Employee Training: Providing mandatory data protection and security training to staff handling personal data.
  • Incident Response: Established procedures for timely detection, investigation, and response to data breaches.

Complaints & Contacts

If you have any questions or concerns regarding your personal data or the processing thereof by Lucky Ones, you may contact our Data Protection Officer or support team:

To file a complaint about our data processing practices, please contact us through the above channels first. We pledge to investigate any concerns promptly and take corrective action where appropriate.

If unresolved, users retain the right to escalate complaints to the Office of the Privacy Commissioner of Canada or other relevant supervisory authorities.

Updates

Lucky Ones may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or technological developments. Users will be notified of significant changes via:

  • Prominent notices on the lucky-ones-ca.com website.
  • Direct communication through email or account notifications to registered users.

The date of the latest revision is indicated at the top of this policy. We encourage users to review this document periodically to remain informed of how their personal data is protected and managed.