Privacy Policy — Lucky Star

Lucky Star values the privacy of every member and visitor who uses the platform. This policy explains what personal data the platform collects and how it processes that information. Moreover, it describes with whom data may be shared and what rights you hold over your personal information. By registering an account or using the website, you accept the practices described in this document.

Data Controller

The company that operates Lucky Star under Curacao eGaming licence number 8048/JAZ 2018-040 is responsible for the processing of all personal data. The operator is 1win N.V. (MFI Investments Limited), which manages all data activities in accordance with applicable regulations. Furthermore, all processing activities comply with the conditions of the gaming licence under which the platform operates.

For any questions regarding data processing, you can contact the data protection team through the customer support channels. The team responds to privacy-related enquiries within twenty-four hours of receipt. Additionally, the contact email address [email protected] is available for formal data protection requests.

Information We Collect

Lucky Star collects personal data through several channels during your interaction with the platform and its services. The categories of data depend on the nature of the interaction and the specific services you use. The following subsections describe each category of data collection in detail.

Information You Provide Directly

When you register your account, you provide personal details including your full name, date of birth, email address and phone number. Moreover, you indicate your residential address and preferred currency during the registration process. During identity verification, you submit official identification documents and proof of address to confirm your details.

When you contact customer support, the system records the information shared through live chat, email and phone conversations. Additionally, satisfaction surveys and subscription forms generate data linked to your account profile. All directly provided information is stored securely in encrypted databases on the platform servers.

Information Collected Automatically

The platform collects technical data during each session automatically without requiring any action from you. In particular, the system records your IP address, device type, operating system and browser version for security purposes. It also stores your screen resolution, pages visited and session duration for analytical purposes. Cookies facilitate this collection as described in the dedicated Cookie Policy page.

Geolocation data may be collected to verify that you access the platform from a permitted jurisdiction. Furthermore, the system logs login timestamps, failed authentication attempts and device fingerprints for fraud prevention. This automated collection helps maintain platform security and regulatory compliance simultaneously.

Transaction Data

Every deposit, withdrawal, wager and bonus activation generates financial records linked to your account on the platform. Payment service providers process card details and bank information through encrypted channels that meet industry standards. Therefore, full card numbers are never stored directly on the Lucky Star servers at any point during the transaction process.

Transaction records include the amount, currency, payment method, timestamp and processing status for each financial activity. Moreover, the system retains these records for the minimum period required by anti-money laundering regulations. This data supports both account management and mandatory regulatory reporting obligations.

Gaming Data

The platform records your gaming activity including games played, amounts wagered, outcomes and session durations across all verticals. Additionally, the system tracks bonus utilisation, tournament participation and loyalty programme activity linked to your account. This data supports responsible gambling monitoring, fraud detection and the regulatory reporting obligations that the licence requires.

Gaming data is processed in aggregated and anonymised form for platform improvement purposes where possible. However, individual gaming records remain linked to your account for the duration required by the data retention policy. Furthermore, game providers may receive anonymised activity data to ensure the integrity of their titles and manage progressive jackpot systems.

How We Use Your Information

Personal data is processed for specific and defined purposes only. Each processing purpose has a legal basis that includes contractual necessity, legal obligation, legitimate interest or explicit consent from you as the data subject.

Data Sharing and Disclosure

Lucky Star does not sell personal data to any third parties under any circumstances. However, certain categories of data may be shared with specific recipients under the circumstances described below. All data sharing arrangements include contractual obligations that protect your personal information.

Payment Service Providers

Card networks, electronic wallets and cryptocurrency processors receive the data necessary to complete your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations. Moreover, they are contractually bound to process your data solely for the purpose of executing the requested financial transactions.

UPI providers, PhonePe and other Indian payment services process INR transactions through secure encrypted connections. Furthermore, cryptocurrency payment processors handle wallet addresses and transaction amounts without accessing your full account profile on the platform.

Identity Verification Partners

External verification services may receive your documents and personal data to confirm your identity, age and residential address. These partners operate under strict data processing agreements that limit their use of your information. Therefore, they cannot use your data for any purpose beyond the verification tasks assigned by the platform.

Verification results are communicated back to Lucky Star through secure channels with appropriate encryption. Moreover, the verification partners delete your documents after completing the checks unless regulatory requirements demand longer retention periods.

Game Providers

Software studios may receive anonymised gaming data to ensure the integrity of their titles and audit game outcomes. Additionally, this data supports the management of progressive jackpots and tournament leaderboards across the provider network. However, the platform does not share personally identifiable information with game providers under standard operating procedures.

Regulatory and Legal Authorities

Lucky Star may disclose personal data to regulatory bodies, law enforcement agencies or courts when the law requires such disclosure. In particular, this includes anti-money laundering obligations, tax reporting requirements and requests from the Curacao licensing authority. The platform only shares the minimum data necessary to fulfil each specific legal obligation.

Affiliated Companies

Data may be shared within the corporate group for administration, fraud prevention and compliance coordination purposes. All affiliated entities maintain equivalent standards of data protection as Lucky Star. Moreover, intra-group data sharing follows the same contractual safeguards that apply to external third-party recipients.

Cookies and Tracking Technologies

The platform uses cookies, local storage and similar tracking technologies during your visits to the website. These tools maintain your session state, remember your preferences and analyse usage patterns across the platform. Moreover, they deliver relevant content and support the technical functionality of various platform features.

You can manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect basic platform functionality and prevent login. However, disabling analytics or marketing cookies does not affect your access to games or account features on the platform.

Data Retention

Lucky Star retains personal data while your account remains active on the platform. Moreover, the platform keeps data for a minimum of five years after account closure to comply with anti-money laundering regulations. This retention period ensures the platform meets all legal obligations related to financial record-keeping.

Verification documents are retained for the period required by the licensing authority under the gaming licence terms. Transaction records are maintained for at least five years from the date of each transaction. Furthermore, customer support communication records are kept for three years after the last interaction. Aggregated and anonymised data may be retained indefinitely for analytical and reporting purposes.

When personal data is no longer necessary for any specified purpose, Lucky Star deletes it securely from all systems. Alternatively, the platform may anonymise the data irreversibly using industry-standard methods that prevent re-identification.

Data Security

Lucky Star employs comprehensive technical and organisational measures to protect all personal data stored on the platform. SSL 256-bit encryption secures all communications between your device and the platform servers during every session. Moreover, access controls limit data visibility to authorised personnel who require it for their specific job functions only.

The security team conducts regular audits and monitors for suspicious activity using intrusion detection systems around the clock. Despite these measures, no system can guarantee absolute security against all possible threats. Therefore, you should use strong and unique passwords for your account. Additionally, enabling two-factor authentication and keeping your login credentials confidential provides further protection.

Your Rights

Depending on your jurisdiction, you may exercise certain rights over your personal data held by the platform. The following table describes each right and what it allows you to request from the data controller.

To exercise any of these rights, contact the customer support team with a clear description of your request. The team may request identity verification before processing your request to protect your data from unauthorised access. Moreover, all valid requests are resolved within thirty days of receipt in accordance with applicable data protection regulations.

International Data Transfers

Your personal data may be transferred to countries other than your country of residence during the course of platform operations. These transfers occur when the platform shares information with payment processors, verification partners or infrastructure providers located in other jurisdictions. Lucky Star implements contractual safeguards for all international data transfers to ensure appropriate protection levels.

The safeguards include standard contractual clauses and data processing agreements that bind recipients to equivalent protection standards. Moreover, the platform evaluates the data protection laws of recipient countries before authorising any transfer. As a result, your personal data receives consistent protection regardless of its geographic location.

Marketing Communications

Lucky Star sends marketing emails, push notifications and SMS messages only to members who have opted in to receive them. You can withdraw your consent at any time from the account settings panel without any restrictions or penalties. However, this withdrawal does not affect transactional communications such as withdrawal confirmations, security alerts and account verification messages.

Marketing preferences are granular, which means you can choose to receive certain types of promotions while opting out of others. Furthermore, the system respects your marketing preferences across all communication channels simultaneously. Members with active cool-off periods or self-exclusion are automatically removed from all marketing distribution lists.

Children’s Privacy

Lucky Star does not intentionally collect personal data from anyone under the age of eighteen years. If the team detects that a minor has registered an account on the platform, they close it immediately without exception. Moreover, the system deletes all associated personal data and returns any deposited funds to the original payment method used for the transactions.

Parents or guardians who suspect that a minor has provided personal information to the platform should contact customer support urgently. The team prioritises these reports and takes immediate action to remove the account and all associated data. Furthermore, the platform cooperates with parents to ensure that no residual data remains in any system after the account closure process completes.

Changes to This Policy

Lucky Star may update this Privacy Policy at any time to reflect changes in data processing practices or regulatory requirements. Substantial changes are communicated by email or through a prominent notice displayed on the platform before they take effect. Continued use of the website after an update constitutes acceptance of the revised terms and conditions. Therefore, we recommend reviewing this page periodically to stay informed about how your personal data is protected.