Privacy Policy

What personal data we collect

We collect only the data we need to run your account, keep play fair and meet the duties that apply to us as a licensed gambling operator. Most of it comes from you when you register, deposit or contact us. Some is created automatically while you use the site.

Account and contact details

Your full name, date of birth, residential address and nationality.
Your e-mail address and the mobile number held against your account.
Your username, password and security answers.
Your marketing preferences and the channels you agreed to.
Records of your messages to us by e-mail, live chat or in-account forms.

Identity and age verification documents

We hold a gaming licence and must satisfy ourselves that every player is 18 or over and is who they say they are. To do that we collect photo identification, proof of address, proof that a payment method belongs to you and, where our anti-money-laundering duties require it, information about your source of funds. We also keep the outcome of the checks our verification partners carry out for us.

Transactions and play

Deposits, withdrawals, times, amounts and the payment methods shown in the cashier.
Balance movements, bonus credits and wagering progress.
Game and bet records, including stakes, outcomes and session lengths.
The safer gambling settings you apply, such as deposit limits, time-outs and self-exclusion.

Device and usage data

IP address and the approximate location taken from it.
Device type, operating system, browser and language settings.
Log-in times, pages visited and actions taken on the site.
Cookie and similar identifiers set in your browser or app.

Why we use your personal data

Each use below has a purpose we can explain. We do not collect data for undefined future uses.

To open, run and secure your account, and to process deposits, withdrawals and bonuses.
To confirm your age and identity before you play and before we release funds.
To detect and prevent fraud, collusion, bonus abuse, account takeover and money laundering.
To keep the records our licence and UK law require, and to answer lawful requests from authorities.
To handle your support messages and look into any complaint you raise.
To operate safer gambling tools and act on signs that your play may be causing you harm.
To send offers and promotional messages through the channels you opted into.
To understand how the site is used so we can fix faults and improve it.

Marketing is always your choice

You can withdraw your consent to marketing at any time in your account settings or by writing to support@casinoluckycarnival.co.uk. This does not stop service messages about payments, verification, safer gambling or changes to your account, which we must send you.

The legal bases we rely on under UK GDPR

UK data protection law requires a lawful basis for every use of your data. In plain words, these are ours.

What we use your data for	Our legal basis	What that means in practice
Opening and running your account, taking payments and paying withdrawals	Performance of our contract with you	We cannot offer you the games or handle your money without this data.
Age and identity checks, anti-money-laundering records and our safer gambling duties	Legal obligation	These checks are not optional and cannot be waived at your request.
Fraud prevention, site security and understanding how the site is used	Our legitimate interests	We weigh these against your rights and use the least data that does the job.
Marketing e-mails, texts and in-app messages	Your consent	You choose to receive them and can stop at any time.
Information about gambling harm that you or our checks identify	Legal obligation and substantial public interest	We use it only to apply protections to your account and support you.

Who we share your personal data with

We do not sell your personal data. We share it only where it is needed for the purposes above, and only with the following kinds of recipient.

Payment and banking providers, so deposits and withdrawals can be processed through the methods shown in the cashier.
Identity-verification, age-verification and fraud-prevention partners who run checks on our behalf.
Technology and game suppliers that provide parts of the site, the account platform and our support tools.
Professional advisers such as auditors and lawyers, where they need the data to advise us.
Regulators, courts, law enforcement and tax authorities, where the law or our licence requires disclosure.
The operator of the national self-exclusion scheme, where you register for GamStop or ask us to act on it.
A buyer or successor, if all or part of the business transfers, on the same terms as this policy.

Our partners act on written instructions and may use your data only for the task we set them. Where data is handled outside the United Kingdom, we do so only with the safeguards UK law recognises. If we talk to you about your play we may point you to GambleAware, GamCare or the National Gambling Helpline, but we do not pass your details to them unless you ask us to or the law requires it.

How long we keep your personal data

We keep your data for as long as your account is open, and afterwards for the period our licence conditions and UK law require. We do not set out exact periods here because they are fixed by rules that apply to us and can change.

Account, transaction and play records are retained for the period required by gambling and anti-money-laundering record-keeping rules.
Verification documents are held for the required period, then deleted.
Self-exclusion and time-out records are kept for the length of the measure and any period required after it ends.
Marketing preferences are kept for as long as we need them to honour your choices.
Support and complaint records are kept so we can show how a matter was handled.

Closing an account does not erase everything

When data is no longer needed we delete it or make it anonymous. Records we are obliged to keep, including verification and self-exclusion records, remain with us for the required period even after your account is closed.

Your rights, cookies and how to reach us

The rights you hold

Access: ask for a copy of the personal data we hold about you.
Correction: ask us to put right anything inaccurate or incomplete.
Erasure: ask us to delete data we no longer have a reason or duty to keep.
Restriction: ask us to pause certain uses while a question is settled.
Objection: object to uses based on our legitimate interests, and to marketing at any time.
Portability: ask us to send data you gave us to you or another provider in a usable format.
Withdraw consent: stop marketing or any other use that rests on your consent.
Automated decisions: ask for a person to look at a decision made only by automated means.

How to use your rights

Write to support@casinoluckycarnival.co.uk with "Data request" in the subject line, or raise it on the live chat on the site. We may ask you to confirm your identity first so that we do not release data to the wrong person. We reply within the time UK data protection law allows, and we tell you if we need longer or cannot act on part of a request and why.

Complaints

If you are unhappy with how we handle your data, tell us first and we will look into it. You can also complain to the Information Commissioner's Office at any time, whether or not you have raised the matter with us.

Cookies

We use cookies and similar technologies to keep you logged in, remember your settings, protect the site against fraud and measure how pages are used. You can accept or refuse non-essential cookies in the banner shown on your first visit and change that choice later in the cookie settings on the site; our Cookie Policy lists the categories we use and what each one does.

Changes to this policy

We update this policy when our practices or the law change. The version published on the site is the one that applies, and we tell you by e-mail or an in-account notice when a change materially affects you.