Privacy & Management of Personal Data

Introduction

Crazy Luck acts as the data controller for Personal Data processed in connection with the operation of the gaming platform. This policy explains the categories of Personal Data we collect, the purposes for processing, the grounds on which processing is based, data sharing, international transfers, retention, security measures, user rights, and how to exercise those rights.

Data controller and contact

Crazy Luck is the data controller for Personal Data processed under this policy. For questions about this policy or to exercise rights, contact our Data Protection Officer at [email protected].

What Personal Data we collect

• Account data, including name, date of birth, email, physical address, phone number, and username.
• Identity and verification data, including copies of identification documents and payment instruments used for transactions.
• Transaction data, including bets, deposits, withdrawals, timestamps, amounts, and transaction identifiers.
• Login and device data, including IP address, browser type, device identifiers, geolocation (approximate), and logs.
• Communications with Crazy Luck via the Website, email or web chat, including support transcripts.
• Payment data, including payment method identifiers and limited payment details retained in accordance with applicable laws and payment processor policies.
• Marketing and consent data, including preferences and opt-in status for promotional communications.
• Automatically collected data, including usage statistics, page views, and cookies or similar technologies.
• Biometric authentication data, where provided by the user’s device for login purposes; Crazy Luck receives only the authentication result and does not access or store biometric data themselves.

Purposes and legal bases for processing

We process Personal Data for the following purposes and on the corresponding legal bases: to operate and administer the gaming platform and services; to process bets and payments; to verify identity and comply with regulatory requirements; to maintain security and detect fraud; to provide customer support; to communicate account information and updates; and to deliver marketing, where consent has been provided. Legal bases include performance of a contract, legitimate interests, and, where required by law, consent.

Automated processing and profiling

Crazy Luck does not engage in automated decision-making that produces legal effects or similarly significant outcomes about individuals. Where automated processing is used to analyze activity for security or service improvements, no binding or adverse decisions are made without human review.

Data sharing and recipients

Personal Data may be shared with service providers contracted to operate the platform, including hosting, analytics, payment processing, anti-fraud services, customer support, and marketing services, under data processing agreements. Data may also be shared within Crazy Luck and with partners as necessary to provide services. We may disclose data to regulators or law enforcement if required by law, or in connection with corporate transactions such as mergers or acquisitions, subject to confidentiality obligations.

International transfers

Where necessary, Crazy Luck may transfer Personal Data to recipients located outside the European Economic Area or other jurisdictions. We implement appropriate safeguards, including standard contractual clauses or adequacy decisions, to protect data in such transfers.

Data retention

We retain Personal Data for as long as necessary to fulfill the purposes described in this policy and to comply with legal and regulatory obligations. In general, Personal Data related to active accounts is retained for at least five years from the last transaction or account closure, or longer if required by law.

Security of your data

Your rights

You have rights regarding your Personal Data, including access, rectification, erasure, objection, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority. To exercise a right, contact Crazy Luck’s Data Protection Officer at [email protected]. We may require verification of identity before fulfilling certain requests and will respond within one month, extendable in certain circumstances. You are not required to pay a fee for standard requests, unless the request is manifestly unfounded or excessive.

Cookies and tracking technologies

We use cookies and similar technologies to operate the site, analyze usage, and tailor experiences. Essential cookies enable core functionalities; functional and analytics cookies improve usability and context. You may manage cookie preferences in your account settings or via browser controls; some features may be unavailable if cookies are disabled. See our Cookie Policy for more details.

Changes to this policy

We may update this policy. We will publish the effective date of any material changes and, where required by law, notify you by appropriate means. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact us

If you have questions or wish to exercise rights, contact the Data Protection Officer at [email protected]. For regulatory inquiries, you may also contact the appropriate data protection authority in your jurisdiction.