Privacy Policy for Lucky7even Casino in Australia

Last Updated: 16.09.2026

This Privacy Policy may be changed or adjusted over time, so we recommend checking it occasionally to remain aware of how your data is handled.

This Lucky 7 Seven Casino Privacy Policy (the “Policy”) explains how we collect, use, disclose, and protect your personal data in accordance with applicable data protection laws, including but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA) and the General Data Protection Regulation (GDPR).

1. General

We operate as the Data Controller, given that we decide how and why your data is processed in accordance with this Policy and in the context of our relationship with you.

Our Data Protection Officer (DPO) is ready to assist with any issues concerning your personal data and answer questions about this Privacy Policy.

2. Data Processing

We only collect and process personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

The categories of personal data we may collect and process include:

• Identity data: Full name, username, date of birth, gender, nationality, and official identification numbers, such as passport or ID numbers.
• Contact data: Residential address, proof of address documentation, email address, telephone number, and other contact details.
• Financial and transaction data: Bank account information, payment card details, documents verifying your source of funds or source of wealth, such as income declarations or bank statements, and information relating to deposits, withdrawals, and other financial transactions carried out on our platform.
• Gaming activity data: Details of games played, login and logout timestamps, wagering activity, bonus usage, and any responsible gaming interventions.
• Technical data: IP address, location data, login credentials, browser type and version, operating system, time zone settings, and other technical data relating to the devices used to access our services.
• Marketing and communication data: Your marketing preferences and communications exchanged with our support team or through other channels.
• Other voluntary data: Any other personal data you provide voluntarily when using our services or contacting customer support.

We collect personal data from the following sources to ensure data accuracy, regulatory compliance, and secure service delivery:

• Directly from you when you register for our services, communicate with us, or provide information through your account.
• From third parties, including, where applicable, verification service providers, financial institutions, payment providers, AML and PEP databases, regulatory authorities, responsible gaming databases, and marketing and affiliate partners.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

This includes compliance with anti-money laundering regulations for a minimum of five years from the date your account is closed, as well as tax obligations and dispute resolution requirements. Once the data is no longer needed, we will securely delete, anonymise, or de-identify it in accordance with established data protection standards.

We process your personal data only where there is a valid legal basis. Each processing activity is limited to specific, explicit, and legitimate purposes:

• To provide our services on the basis of the performance of a contract.
• To meet regulatory requirements on the basis of our legal obligations under applicable laws, including Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) checks, responsible gaming requirements, reporting obligations, and other duties.
• To prevent fraud and conduct risk management on the basis of our legitimate interest in protecting our platform, users, and business integrity.
• For marketing and personalisation on the basis of your consent or our legitimate interests in delivering relevant marketing communications, promotional content, and tailored advertising based on your preferences.
• For analytical and service improvement purposes on the basis of our legitimate interests in monitoring platform performance, analysing usage trends, resolving technical issues, and improving the overall user experience.
• To ensure security and system integrity on the basis of our legal obligations and legitimate interest in monitoring and maintaining system security, detecting threats, and protecting the confidentiality, integrity, and availability of data.
• To optimise our workflows and enhance customer service through Artificial Intelligence (AI). We integrate third-party conversational AI tools into our customer messaging platform. On the basis of this legitimate interest, we use these tools to manage conversations, access support tickets and profiles, analyse interaction patterns, and deliver support responses.

To provide our services, we may need to share your personal data with trusted third parties. All data sharing is conducted in accordance with applicable data protection laws. We ensure that third parties are contractually bound to use the data only for specified, lawful purposes and under strict security obligations.

The categories of third parties may include:

• Companies within our corporate group.
• Game providers.
• Payment providers.
• Marketing partners.
• Regulatory authorities.
• Third-party service providers.
• Conversational AI service providers, including Anthropic, OpenAI, and Gemini. Acting as data processors, these third-party vendors are granted limited access to our customer messaging workspace to help us facilitate, automate, and optimise customer support and marketing operations.
• AML and KYC verification providers.
• Business consultants, such as lawyers, accountants, and notaries.
• Other trusted third parties. For example, in the event of a merger, acquisition, or sale, your personal data may be transferred. We will inform you before such a change occurs.

3. Data Transfers

If we transfer your personal data internationally, including for purposes such as IT hosting, customer service, or verification services, we ensure appropriate safeguards are in place. These may include the European Commission’s Standard Contractual Clauses (SCCs) or transfers to countries covered by adequacy decisions.

We ensure comparable protection is applied to personal information processed by our service providers in other jurisdictions and maintain accountability for their handling of your data.

4. Data Subject Rights

You are entitled to certain rights regarding your personal data. These rights help you understand, access, control, and, where applicable, limit how your information is used.

You may have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request the deletion of your data, subject to legal retention requirements.
• Restrict processing in certain situations.
• Transfer your data to another provider through data portability.
• Object to processing based on legitimate interests or for marketing purposes.
• Withdraw your consent at any time, where applicable.
• File a complaint with your local data protection authority.

We do not typically use fully automated decision-making in our operations. If such automated processes are applied in certain situations, we will notify you separately as required by applicable law.

5. Data Protection of Minors

Access to lucky7even-casino.net and its services is restricted to individuals who have reached the minimum legal gambling age in their respective jurisdiction and are at least 18 years old.

We do not knowingly collect or process personal data from anyone below the applicable legal age. If we become aware that such information has been submitted, particularly through misuse of our platform, we will take appropriate steps to delete the data and act in accordance with relevant legal requirements.

6. Data Security

To prevent unauthorised and unnecessary disclosure of your personal data, we implement the following controls:

• Access Controls: Unauthorised physical access to facilities, buildings, or rooms hosting personal data processing systems is strictly prevented. Our systems are hosted in secure data centres that meet high industry standards for physical and digital security. Access to personal data is limited to authorised personnel.
• System Access Controls: All systems processing personal data are secured through passwords and authentication measures. Unique user IDs are assigned for authentication.
• Data Access Controls: Access to files and programs is restricted according to the “need-to-know” principle. Controls are in place to prevent unauthorised hardware or software installation and use. This also includes practices designed to ensure the secure and permanent deletion of data that is no longer required for processing purposes.
• Organisational Requirements: We have implemented technical and organisational measures to prevent the accidental mixing of personal data. These measures include appointing a Data Protection Officer (DPO) and training staff on data privacy and data security.