Privacy Policy

1. Information we collect

When you use Onluck Casino, we may collect information that identifies you, relates to your account or helps us operate the website. The information collected depends on the services you use, the actions you take and the information required to meet security and legal obligations. We seek to collect information that is relevant to these purposes and avoid collecting information that is not reasonably needed.

Account and contact information

This may include your name, date of birth, residential details, country of residence, username, password details, telephone details and email address. It may also include information you provide when registering, updating your profile, contacting support or communicating with us about your account. We may retain records of your requests, complaints, preferences and other communications so that we can respond consistently and keep an appropriate business record.

Identity and verification information

To help confirm that an account belongs to the person using it, we may request identity or address verification documents and related information. This can include information shown on an identity document, proof of address, a photograph or other material needed for verification. We may also collect information used for age checks, account security, anti-fraud controls and the prevention of misuse of our services.

Payment and transaction information

We may handle information about deposits, withdrawals, wagers, winnings, account balances and other transactions. Depending on the payment method, this may include limited payment details, transaction references and information supplied by a payment provider. Payment information may be processed by specialist payment services, and we may receive information needed to confirm, reconcile, investigate or support a transaction. We do not need to hold every detail in the same form as the original payment provider.

Technical, device and usage information

When you visit or use the website, we may receive technical information such as your IP address, browser type, operating system, device identifiers, language settings, approximate location, time zone, pages viewed, referring website, login activity and information about how you interact with website features. We may also record security events, connection details and error reports. This information helps us keep the website working, identify unusual activity and improve the user experience.

Information from other sources

We may receive relevant information from service providers, payment partners, identity verification services, fraud prevention services or other sources where this is permitted and reasonably necessary. We may combine that information with information held in your account to verify details, protect the website, support transactions and meet our responsibilities.

2. How we use personal information

Personal information is used to provide and administer the services you request. We may use it for the following purposes, depending on the circumstances and the information involved:

• Creating, maintaining and securing your player account.
• Processing account activity, deposits, withdrawals and other transactions.
• Confirming your identity, age and account details where checks are required.
• Detecting, preventing and investigating fraud, money laundering, account takeover, collusion, payment abuse and other suspicious or prohibited activity.
• Monitoring the website for security threats, technical faults and unauthorised access.
• Providing customer support, responding to questions and resolving complaints or account issues.
• Maintaining accurate account, payment, security and communication records.
• Understanding how the website is used and improving its performance, features, accessibility and content.
• Sending service messages about your account, transactions, security, changes to the website or this policy.
• Sending marketing communications where permitted and where you have provided the necessary permission or otherwise have a valid basis for receiving them.
• Meeting legal, regulatory, tax, accounting, court, law enforcement and other official requirements that apply to the services.
• Protecting the rights, property, safety and legitimate interests of players, the website and relevant service providers.

We may use automated checks or risk indicators to help identify unusual activity, verify information and protect accounts. These checks may be supported by information about your account, transactions, device and usage patterns. Where an issue is identified, we may request further information, delay an action while checks are completed, restrict access or take another proportionate step allowed by our processes and applicable requirements.

We do not use personal information for purposes that are unrelated to the operation, security, support or lawful administration of the services unless we explain the purpose or obtain permission where this is required. If a new use is materially different from the purposes described here, we may provide additional information or seek consent when appropriate.

3. Cookies, sharing and information security

Cookies and similar technologies

The website may use cookies and similar technologies. Cookies are small data files placed on your device that can help remember preferences, keep you signed in, support essential website functions, measure performance and understand how visitors use the website. Some cookies may be provided by service providers that help with analytics, security, payment processing or other website functions.

Some cookies are necessary for the website to operate, while others support optional functions such as preferences, measurement or marketing. You can manage or remove cookies through your browser settings. If you block or delete certain cookies, parts of the website may not work as intended, and some preferences may need to be set again. Your browser may also provide controls for notifications, storage and other similar technologies.

When information may be shared

We may share personal information with trusted providers that perform services on our behalf or help us operate the website. These providers may support hosting, technology, customer support, payments, identity verification, fraud prevention, communications, analytics, security, accounting or record management. They are expected to handle information appropriately and only for relevant business or service purposes.

Information may also be shared where necessary to process a transaction, protect the website and its users, investigate suspected wrongdoing, enforce applicable terms, respond to a valid legal request, meet an official obligation or protect someone from harm. If the business or its assets are reorganised, transferred or combined with another business, relevant information may be transferred as part of that process, subject to appropriate privacy protections.

Some service providers may handle information in countries outside Australia. Where this occurs, reasonable steps should be taken to support the security and appropriate handling of the information, taking account of the circumstances and any requirements that apply. You should avoid sending unnecessary sensitive information through ordinary messages or support requests.

Security measures

We use reasonable administrative, technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, account security features, monitoring, encryption or secure transmission methods, staff and provider procedures, and systems designed to identify suspicious activity. No online service can guarantee absolute security, so you should choose a strong password, keep your login information private and contact support promptly if you suspect that your account has been compromised.

4. Retention, account closure and your privacy rights

How long information is kept

We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, including account administration, customer support, security, dispute handling, financial records and business reporting. Some records must be kept for a period required by law even after an account is closed. Other information may be deleted, anonymised or securely disposed of when it is no longer needed, subject to technical, operational and legal requirements.

Closing an account does not necessarily result in the immediate deletion of every record connected with it. Information may need to be retained to complete pending matters, prevent repeat fraud, resolve disputes, meet legal or official requirements, maintain transaction records or protect the rights of the website and other users. When retained information is no longer required, appropriate steps should be taken to remove it or make it no longer identifiable where practical.

Requests you can make

Subject to applicable requirements and reasonable identity checks, you may contact us to exercise privacy rights relating to your personal information. In particular, you may ask to access the data held about you, request correction of information that is inaccurate or incomplete, request deletion of your data where deletion is available, or withdraw consent to marketing communications. A request to withdraw marketing consent will not affect the lawfulness of marketing sent before the withdrawal.

• To request access to your personal information, ask for the information held about you and any relevant explanation of how it is used.
• To request correction, identify the information you believe is inaccurate or incomplete and provide the updated details where possible.
• To request deletion, tell us which information you want removed. Deletion may be limited where records must be retained for legal, security, transaction or dispute purposes.
• To withdraw consent to marketing, ask us to stop promotional messages. You may also use an unsubscribe option included in a marketing communication where available.

To exercise these rights or ask a privacy question, contact support@onluckcasino.click. Please include enough information for us to understand your request, but do not send payment passwords, full card details or other unnecessary sensitive information. We may need to verify your identity before releasing, changing or deleting information. We aim to review requests within a reasonable time and may explain if a request cannot be completed in full.

Updates to this policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, security practices or applicable requirements. The updated version will be made available on this page with a revised date or other notice where appropriate. You should review the policy periodically, particularly before continuing to use the website after a material change.