Below are the questions players ask most often about how Lüks Casino handles personal data. Opening an account means the practices on this page apply to you. Read this notice together with the Terms and Conditions.
What data does the site hold about me?
- Phone number and email address.
- Used to open the account and to reach you when needed.
- Full name and date of birth.
- Used to confirm the 18 age limit and that the account belongs to you.
- Identity document image.
- Used only during identity verification, described below.
- Payment details.
- Used to process a deposit or a withdrawal.
- Betting and game round history.
- Used for settlement, bonus wagering checks and complaint reviews.
- IP address and device information.
- Used to spot multiple accounts and fraud attempts.
- Cookie identifiers.
- Used to keep a session open and remember your settings.
None of the above is bought from outside sources for advertising purposes.
How is my identity checked?
Identity verification is carried out by KYCAID, a provider separate from the casino. An image of an ID card, passport or driving licence is uploaded for this step, and the process can also be completed from a phone. KYCAID stores the document on its own secure system; the image is used only to confirm your age and account ownership, not for any other purpose, and repeat requests are rare once verification is complete.
On what basis is my data processed?
| Basis | What it covers |
|---|---|
| Contract performance. | Opening the account, accepting a bet, handling a payment. |
| Legal obligation. | Age verification, identity checks, keeping required records. |
| Legitimate interest. | Blocking fraud, bots and duplicate accounts. |
| Consent. | Sending bonus or campaign announcements, which you can decline at any time. |
Withdrawing consent to announcements does not close the account; it only stops marketing messages.
What about cookies?
Three cookie categories run on the site. Essential cookies keep the session open; blocking them means the site stops working and you cannot log in. Preference cookies remember language and screen settings. Measurement cookies report which sections are used in aggregate and do not identify one player. Cookies can be deleted or blocked from your browser settings at any time.
Who receives my data?
Four categories of recipient exist, each limited to what its task requires.
- Payment providers receive only what completing a transaction needs.
- Game studios receive what confirms the outcome of a round.
- KYCAID receives the identity document for the verification step above.
- Authorities receive data only when the law requires it, to the extent requested.
No recipient buys the data for its own use, and nothing is rented out to third parties beyond what is listed here.
How is my data secured?
The connection between your browser and the site is encrypted end to end. Passwords are stored in an irreversible form, so no one, including support staff, can view the original password. Internal access is restricted by role: payment records are visible only to the payments team, and a complaint file is visible only to the staff handling that file.
The remaining half of account security rests with you: reuse no password from another site, share no confirmation code, and never leave a session open on a device that is not yours.
How long is data kept, and can I ask for a copy or deletion?
Account details are kept while the account stays open. Payment and betting records, once created, remain for the period the law sets before deletion. A self-exclusion record is kept for its own term so the exclusion actually holds; this is covered on the Responsible Gaming page. You may request a copy of your data, ask for a correction, ask for deletion of anything outside the legal retention period, or object to marketing contact, by messaging support. A disagreement over how a request was handled follows the route on the Player Complaint Policy page.
Does this notice change?
The version published here is the one in force, effective from its publication date. A change that widens what is collected or who it is shared with is announced to the contact address on file for the account.