Our Privacy Policy at Lucky7even Casino
This policy explains what personal data we collect when you play at Lucky7even Casino, why we collect it, how long we keep it and what you can do about it. It applies to every account on lucky7even-pokies.com.
Data We Collect From You
We only collect data we need to run your account, meet our licence obligations and keep the site safe. Every category below is tied to a purpose listed in the next section.
- Identity data: full name, date of birth, residential address, email, phone number.
- Verification documents: government-issued ID, proof of address no older than 3 months, proof of payment method.
- Transaction data: deposits, withdrawals, wagering records, bonus history, payment instrument details.
- Technical data: IP address, device and browser type, operating system, app version, session logs.
- Gameplay behaviour: games played, bet sizes, win and loss history, session duration.
- Marketing preferences: bonus opt-ins, communication channels, promo code usage such as LUCKY7.
How We Use Your Data
We process your data for seven purposes, each matched to a legal basis. If a purpose disappears, we stop the processing rather than repurpose the data.
- Creating and managing your account, including login and password recovery.
- Verifying your identity under KYC rules before your first withdrawal.
- Processing deposits and withdrawals in AUD, BTC, ETH or USDT.
- Preventing fraud, bonus abuse, money laundering and multiple-account abuse.
- Monitoring play for responsible-gambling signals such as chasing losses or sharp spend increases.
- Sending you promotions and bonuses, only where you have consented.
- Meeting legal and regulatory obligations set by the Malta Gaming Authority and applicable Australian law.
The Legal Bases We Rely On
Contract: we process identity, account and transaction data because they are necessary to provide the gambling service you signed up for. Without them we cannot open or maintain your account.
Legal obligation: KYC verification, AML record-keeping and reporting to regulators rest on laws that bind us as an MGA licensee (MGA/B2C/823/2023). You cannot opt out of these.
Legitimate interest: fraud prevention, security logging and service improvement rely on our legitimate interest in operating a safe platform. We weigh this interest against your rights and keep the data minimal.
Consent: marketing emails, SMS and promotional notifications run only on your consent. You can withdraw it at any time and we will stop the processing without affecting your account.
How Long We Keep It
Retention depends on the category. Gambling regulations require transaction and KYC records to survive account closure, so some data outlives your membership with us.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| KYC verification documents | 5 years after account closure |
| Transaction and wagering data | 5 years after account closure, per regulatory rules |
| Device, IP and security logs | 12 months |
| Marketing preferences | Until you withdraw consent or delete your account |
| Support communications | 2 years after the last contact |
Who We Share Data With
We never sell your data. We share it only with processors and authorities that need it for a defined job, under written data-processing agreements.
- Payment processors handling deposits and withdrawals (card schemes, e-wallets, crypto gateways).
- KYC and AML screening providers that verify your documents and flag sanctioned individuals.
- The Malta Gaming Authority and other regulators, where reporting is legally required.
- Analytics and hosting providers that help us run and improve the site, on aggregated or pseudonymised bases where possible.
- Independent auditors and dispute-resolution bodies reviewing a complaint you filed.
Your Rights Over Your Data
You control your data. Send any request to [email protected] and we will respond within 30 days. Proof of identity may be requested before we act, solely to protect your account.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or out of date.
- Erasure: ask us to delete data we no longer need for legal purposes.
- Portability: receive your account and transaction history in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing at any time via account settings or the unsubscribe link.
- Complain: escalate to the Office of the Australian Information Commissioner (OAIC) or, if you are in the EU, your national data protection authority.
Cookies and Tracking Tools
We use essential cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that load only after you accept them in the consent banner. Session cookies expire when you close your browser; persistent cookies last up to 12 months. Full detail, including how to change your choices, sits on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS. Personal data at rest is encrypted and stored on servers with strict physical access controls. Staff access follows least-privilege rules, is role-based, and every access is logged and auditable. Card and wallet details are handled exclusively by certified payment processors, never stored raw on our systems. If a breach affects your personal data, we will notify the relevant regulator and, where the risk to you is material, contact affected players directly within statutory timeframes.
Contact Our Data Officer
Questions about this policy or your data? Write to our Data Protection Officer at [email protected] and we will reply within 30 days. Postal enquiries go to Lucky7even Gaming Ltd., Attn: Data Protection Officer. We review this policy annually; material changes are announced on this page and, where they affect your rights, by email. This policy was last reviewed in 2026.
Frequently Asked Questions
Do you sell my personal data to advertisers?
No. We never sell your data. Marketing partners only receive data needed to deliver campaigns you consented to, under strict processing agreements.
Why do you need my ID before my first withdrawal?
Our MGA licence (MGA/B2C/823/2023) and anti-money-laundering rules require us to verify your identity, address and payment method before funds leave your account.
Can I close my account and erase everything?
Account closure is immediate on request, but we retain identity, KYC and transaction records for 5 years after closure because gambling regulations require it. Marketing data is deleted straight away.
How do I stop promotional emails?
Use the unsubscribe link in any email, change your preferences in account settings, or withdraw consent by contacting [email protected].