Lussurio Casino Privacy and Data Protection Policy

Last updated: 15 May 2025

This policy explains how Lussurio collects, uses, stores and protects personal information when visitors browse the Website, register an account, make payments or use casino services.

It also describes when information may be shared, how long it may be retained and what rights are available to individuals whose data is processed.

Important changes to this policy may be announced through the Website or other account communication channels.

Our approach to personal information

Lussurio processes personal information only where there is a valid operational, contractual or legal reason to do so. We aim to explain what information is collected, why it is needed and how it is handled.

Employees who work with personal data are required to follow internal confidentiality and information security procedures. Relevant staff also receive regular training on the secure handling of customer information.

Account verification and payment checks

Identity verification may be required when a Player makes a deposit, requests a withdrawal or when additional account checks are necessary.

Verification may involve:

an identity document;
proof of residential address;
information connected with a payment method;
confirmation of the source of funds;
a photograph of the Player holding an identity document;
a video verification call where documents cannot be reviewed in an accepted format;
confirmation through the telephone number registered on the account.

Withdrawals may remain unavailable until the requested checks have been completed. Active deposited funds may also need to be wagered at least once before a withdrawal, in accordance with applicable anti-money laundering controls.

Information collected during registration

When an account is created, Lussurio may collect information needed to identify the Player, provide the requested services and meet legal obligations.

This may include:

full name;
postal address;
telephone or mobile number;
date of birth;
gender, where requested;
account username and password;
identity and address verification documents;
banking or payment information;
information used to establish the source of funds.

Required registration information must be accurate and complete. Without it, Lussurio may be unable to open an account, process transactions or comply with gambling and financial regulations.

Information collected when services are used

Additional information may be generated when a visitor or registered Player uses the Website.

This can include:

games, products and services accessed through the account;
deposit, withdrawal and betting activity;
Website navigation and browsing information;
device model and operating system;
browser type;
IP address;
mobile device identifiers;
account activity and security records;
information voluntarily supplied through support requests or public profiles.

Telephone conversations may be monitored or recorded where permitted. Recordings may be used to confirm instructions, resolve disputes, improve service quality, train staff, meet regulatory requirements or identify fraud and other unlawful activity.

Sensitive information

In limited circumstances, Lussurio may process information that receives additional protection under data protection law. This may include health-related information connected with responsible gambling measures.

Such information is handled with additional confidentiality and security controls.

Why personal data is used

Personal information is processed for specific purposes and under an appropriate legal basis. The basis used depends on the type of information and the reason for processing it.

Providing contracted services

Information may be used where it is necessary to perform the agreement accepted during registration.

This includes:

opening and maintaining an account;
providing casino and betting services;
processing deposits and withdrawals;
responding to account and service requests;
sending password recovery and maintenance notices;
informing Players about policy or account changes;
managing dormant accounts.

Operating and improving the Website

Where permitted, information may be processed for legitimate business purposes. Before relying on this basis, Lussurio considers the nature of the data, the Player’s reasonable expectations and the possible effect of the processing.

These purposes may include:

improving Website navigation and usability;
testing new systems and technical updates;
analysing service performance;
carrying out statistical and trend analysis;
evaluating products and customer support processes;
measuring the effectiveness of promotions;
conducting market research and staff training.

Personalising account services

Account and gameplay information may be used to adapt available services and recommendations. For example, previous activity may help determine which products or account features are shown.

Where personalisation or marketing choices are available, Players may change their preferences through the relevant account or support options.

Communicating with Players

Lussurio may use registered contact details to:

answer questions and complaints;
provide information about account services;
manage promotions or competitions entered by the Player;
invite Players to optional surveys or research activities;
send legally required or operational notices.

Participation in surveys and market research is voluntary. Refusing to participate does not prevent normal use of the services.

Security and safer gambling

Personal information may also be used to protect the Website, its Players and the integrity of casino services.

This includes:

detecting prohibited third-party software;
identifying breaches of account rules;
preventing fraud and money laundering;
reviewing unusual transactions or account behaviour;
carrying out affordability checks where required;
supporting responsible gambling controls.

Legal grounds for sensitive data

Information that belongs to a protected or sensitive category is processed only where an appropriate legal condition applies.

This may be where:

the individual has provided explicit consent;
the information was clearly made public by the individual;
processing is required to establish, exercise or defend a legal claim;
processing is necessary for reasons of substantial public interest under applicable law.

When personal information may be shared

Lussurio does not generally provide personal information to unrelated third parties for their own marketing purposes.

Information may, however, be shared where this is necessary to operate the services, comply with legal requirements or protect legitimate rights.

Recipients may include:

regulators and other competent authorities;
financial institutions and payment processors;
identity verification and fraud prevention providers;
technology and data storage providers;
companies assisting with account affordability checks;
external auditors;
online advertising and analytics providers where permitted;
professional advisers and legal representatives;
relevant regulators handling self-exclusion matters.

Information may also be transferred as part of a merger, sale, restructuring or transfer of the business. Where appropriate, affected individuals will be informed before such a transfer takes effect.

Any recipient must process the information only for the permitted purpose and in accordance with applicable confidentiality and data protection requirements.

How long information is retained

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected.

Some records may remain stored after an account is closed or the Player stops using the services. Retention may be necessary to:

comply with anti-money laundering and licensing obligations;
meet local or international legal requirements;
respond to regulatory enquiries;
establish or defend legal claims;
enforce contractual rights and obligations;
follow guidance issued by data protection authorities;
support documented legitimate business interests.

The length of the retention period depends on the type of information, the purpose for which it is held and the legal requirements that apply.

Data protection rights

Subject to applicable law and certain exceptions, individuals may have rights concerning the personal information held about them.

These rights may include:

requesting access to personal data;
correcting inaccurate or outdated information;
requesting deletion in qualifying circumstances;
restricting how information is processed;
objecting to certain processing activities;
withdrawing consent;
receiving eligible data in a portable format;
challenging certain automated decisions;
submitting a complaint to a data protection authority.

Requests can be submitted through the privacy or customer support options available on the Website.

Accessing and correcting information

An individual may request a copy of their personal information and ask for incorrect, incomplete or outdated details to be corrected.

These requests are generally handled without charge, although a reasonable administrative fee may apply where a request does not meet applicable legal requirements or is excessive.

Requesting deletion

Deletion may be requested where:

the information is no longer needed for its original purpose;
consent has been withdrawn and no other lawful basis applies;
there are no overriding grounds for processing based on legitimate interests;
the information was processed unlawfully;
deletion is required by law.

This right is not absolute. Some information must be retained to meet legal, regulatory, fraud prevention or licensing obligations.

Restricting the use of information

A request may be made to limit the active use of personal information while allowing it to remain stored.

Restriction may be available where:

the accuracy of the information is disputed;
processing is unlawful but deletion is not requested;
Lussurio no longer needs the information, but it is required for a legal claim;
an objection to legitimate-interest processing is being reviewed.

Data portability

Where processing is based on consent or a contract and is carried out by automated means, an individual may request eligible information in a commonly used, machine-readable format.

This allows the information to be reused or transferred to another service where technically possible.

Objecting to processing

An individual may object to processing based on legitimate interests, profiling, research or statistical purposes where the law provides this right.

Personal information can also be excluded from direct marketing upon request.

Withdrawing consent

Where consent is the legal basis for processing, it may be withdrawn at any time. Withdrawal does not affect processing that was lawfully completed before the request was made.

Automated decisions and profiling

Lussurio may use automated systems to support decisions concerning accounts, products, security and regulatory checks.

Automated processing may be used for:

grouping Players with similar service preferences;
providing more relevant account features;
detecting possible fraud or money laundering;
checking age, residence, nationality or financial eligibility;
assessing risks connected with betting activity;
deciding whether an account should be restricted or reviewed.

Where an automated decision has a legal or similarly significant effect, the individual may have the right to request human review or challenge the decision.

This right may not apply where automated processing is necessary for a contract, authorised by law or based on explicit consent.

Time allowed for privacy requests

Valid privacy requests are normally answered without undue delay and within one month of receipt.

Where a request is complex or several requests are pending, the response period may be extended by a further month. The individual will be informed when an extension is required.

If a request is refused, Lussurio will provide an explanation. A reasonable fee may be charged, or the request may be rejected, where permitted by data protection law.

Protecting account and personal data

Lussurio uses organisational and technical controls intended to protect personal information against unauthorised access, disclosure, misuse, alteration and loss.

Security measures may include:

SSL encryption during data transmission;
secure payment gateways;
continuous network monitoring;
intrusion detection systems;
regular security testing by external specialists;
dedicated fraud prevention systems;
restricted access to confidential information.

Payment card transactions are handled through secure payment provider systems. Lussurio does not directly collect, store or transfer full card details where the payment is completed through the provider’s protected gateway.

An account connected with suspicious activity may be restricted while an investigation is carried out. Players should report unrecognised transactions or unexpected balance changes through the official support options without delay.

Privacy concerns and complaints

Questions or complaints about the handling of personal information can be submitted through the privacy or customer support channels provided on the Website.

If the response does not resolve the matter, the individual may submit a complaint to the competent data protection authority in their country.

Changes to this policy

This policy may be updated to reflect changes in the Website, internal procedures, legal obligations or regulatory requirements.

The date of the latest revision will be displayed on this page. Material changes may be presented through a more prominent Website notice and may require renewed acceptance before continued use of certain services.

A Player who does not agree with an updated policy should stop submitting personal information and discontinue use of the affected services.

Player responsibilities

Players must provide genuine, complete and accurate personal information. Account details should be updated when relevant circumstances change.

Lussurio may refuse registration, suspend an account or close an account where information appears to be false, incomplete or inconsistent with this policy or applicable data protection law.

No compensation is payable solely because an application was refused or an account was restricted due to inaccurate or misleading information.