The Lucky Ones Privacy Policy explains in plain English what personal data we collect when you use the platform, why we collect it, how long we keep it, and the rights you have over your data. It applies to every visitor and every registered player aged 20 or over.
We treat your personal information with the same care we would expect for our own. Where the law gives us discretion we take the privacy preserving option, where it requires a specific retention period we comply, and where you have a right to access, correct or delete your data we make that as straightforward as possible. Questions about anything in this policy can be sent to the support team at any time.
What we collect
We collect account details such as your name, date of birth, address, email and phone number when you register. We also collect transaction details from the cashier, gameplay history, device and browser information, and IP address each time you use the site. Verification documents - typically a government issued ID and a recent proof of address - are collected before your first withdrawal and again if there is an anti money laundering or fraud trigger on your account.
How we use it
We use your data to operate your account, process deposits and withdrawals, comply with anti money laundering and responsible gambling rules, prevent fraud, personalise the experience and send you marketing where you have opted in. Marketing consent can be withdrawn at any time from your account settings. We do not use automated profiling to make decisions that have a significant legal or financial effect on you without human review.
Cookies and similar technologies
We use cookies and similar technologies to keep you logged in, remember your preferences, measure how the site is used and, where you have given consent, to support marketing campaigns. The full list of cookie categories is in the cookie policy, including the controls you have over each category and how to clear or block cookies in your browser.
How long we keep it
Account and transaction data is retained for the period required by gambling and financial regulations, which is typically several years after account closure. Marketing data is kept until you withdraw consent. Verification documents are retained for the period required by anti money laundering rules. Once retention periods expire, the data is deleted from production systems and from backups in line with our retention schedule.
Your rights
You have the right to access the personal data we hold about you, correct it if it is inaccurate, request deletion subject to legal retention requirements, restrict processing in certain circumstances, port your data to another provider where technically feasible and lodge a complaint with the relevant data protection authority. Contact the support team to exercise any of these rights - most can be actioned within one working day.
Sharing your data
We share data with payment providers, identity verification partners, game and platform suppliers, regulators and law enforcement where legally required. We do not sell your data and we do not share it with marketing partners outside the limited scope of cookies you have consented to. A full list of categories of recipients is available on request through the support team.
International transfers and security
Some of our suppliers are based outside New Zealand. Where personal data is transferred internationally, we rely on standard contractual clauses or equivalent safeguards to protect it. All transmission is encrypted with 256 bit SSL, data at rest is encrypted on the database, and access to your data is restricted to staff who need it to do their job. Access logs are monitored and audited.
Children, contact and updates
Lucky Ones is strictly for players aged 20 and over and we do not knowingly collect data from anyone under that age. If you believe a minor has registered an account, please contact the support team immediately. This policy may be updated from time to time; the latest version is always published on this page and material changes are flagged to registered players by email.
Lawful basis and consent
We rely on contractual necessity for the data we need to operate your account, on legal obligation for the data we keep to comply with anti money laundering and gambling rules, on legitimate interests for fraud prevention and product improvement, and on consent for marketing and non essential cookies. Where we rely on consent you can withdraw it at any time from your account settings or through the cookie banner without affecting any prior lawful processing of your information.
Data breach response
In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within seventy two hours and inform affected players directly without undue delay. The notification will explain what happened, what data was involved, what we have done in response and what you can do to protect yourself, including practical steps such as resetting your password and reviewing recent account activity.