OnLuck Privacy Policy
This Privacy Policy explains what personal information OnLuck may collect, why it is processed, who may receive it, how it is protected and what rights may be available to users.
Last updated: 11 October 2026
Account Data
Registration and verification
Payments
Deposits and withdrawals
Security
Fraud and account protection
User Rights
Access, correction and more
1. General
OnLuck processes personal information in order to operate player accounts, provide gaming-related services, manage transactions, carry out verification and meet applicable legal and regulatory obligations.
This Privacy Policy explains the categories of information that may be collected through onluckonline.com, how that information may be used and protected, and when it may be shared with authorised service providers or other recipients.
By creating and using a player account, you acknowledge the processing described in this Policy. Where processing depends on consent, that consent can be withdrawn where applicable.
This Policy may be updated from time to time. The current version published on onluckonline.com applies when you use the Website and its services.
Privacy and Data Protection Questions
2. Information We Collect
The information collected depends on how you use the Website, which account features you access and whether verification or payment checks are required.
- registration details such as first and last name, date of birth, email address and phone number;
- information submitted through account forms or later provided through the Website;
- communications with customer support through the Website, email, chat or other available channels;
- deposit, withdrawal, gaming and other player-account transaction records;
- login records, IP and GeoIP information, browser details, device information, traffic records, activity logs and technical data;
- identity and verification documents requested for account, payment, AML or anti-fraud checks;
- documents such as identification, payment evidence, bank statements or other supporting records where reasonably required;
- information voluntarily provided through surveys, questionnaires or customer assessments.
Some technical information can be collected automatically when you access or interact with the Website.
3. How We Use Your Information
Personal information is processed where necessary to operate the Website and player accounts, provide requested services and protect the platform from misuse.
- creating, maintaining and administering player accounts;
- processing bets, deposits, withdrawals and other payment transactions;
- providing games and related account services;
- responding to customer-support requests;
- performing identity, age and payment-method verification;
- conducting anti-fraud, security and account-abuse checks;
- meeting anti-money laundering and other applicable compliance requirements;
- monitoring transactions and activity for irregular or prohibited behaviour;
- providing marketing information where the required consent or other lawful basis exists;
- conducting statistical, service and market analysis;
- improving the Website, its features and the user experience.
4. Marketing Communications
Where marketing communications are permitted, OnLuck may use contact information such as an email address or phone number to provide information about promotions, games, services or other account-related offers.
Marketing communications can also contain information connected with selected business partners or game providers where such communication is permitted.
You may change marketing preferences through the available player-account settings or request that marketing communications stop by contacting [email protected].
Withdrawing marketing consent does not prevent OnLuck from sending operational, security, account, payment or legally required communications.
5. How Personal Information Is Obtained
Information is normally obtained directly from you when you register, communicate with OnLuck, complete account checks or use the Website and its services.
Certain information may also be generated automatically through your use of the Website or received lawfully from service providers involved in payments, fraud prevention, identity verification, technical support, hosting or game delivery.
Information received from third-party providers is handled in accordance with this Privacy Policy and the applicable contractual and legal requirements.
6. Who May Receive Your Data
Access to personal information is limited to people and organisations that need it for legitimate operational, contractual or legal purposes.
- authorised employees and contractors responsible for customer support;
- data protection and compliance personnel;
- payments and anti-fraud teams;
- AML and financial-crime specialists;
- technical, hosting and infrastructure providers;
- payment processors and financial-service providers;
- identity-verification and fraud-prevention providers;
- marketing and analytics providers where permitted;
- other companies or processors engaged to provide necessary services.
People who are authorised to work with player information are expected to handle it confidentially and only for the purpose required to perform their duties.
7. International Data Transfers
Providing the Website and its services may require personal information to be processed in countries outside the European Union, European Economic Area or European Free Trade Association.
International processing may be necessary for payment services, account verification, technical infrastructure, customer support, fraud prevention or other operational functions.
Where data protection law requires additional safeguards for such transfers, appropriate contractual or other recognised transfer mechanisms may be used, including standard contractual clauses where applicable.
Questions about international data transfers can be sent to [email protected].
8. Disclosure to Third Parties
OnLuck does not sell or rent personal information to third parties.
Personal information may, however, be disclosed when disclosure is necessary for a legitimate operational purpose or required by applicable law.
- when disclosure is required by law, regulation, court order, subpoena or other valid legal process;
- to payment providers where necessary to process deposits or withdrawals;
- to licensing, regulatory or supervisory authorities where required;
- to law-enforcement authorities where a valid legal basis exists;
- to prevent, investigate or respond to fraud, abuse or other unlawful activity;
- to service providers processing limited information on behalf of OnLuck;
- to marketing providers where their services are lawfully used;
- to another recipient where the user has given the required consent.
Third-party processors may support areas such as hosting, analytics, marketing, payment processing, account verification, security and Website operation. Appropriate contractual requirements are used where necessary to govern their processing of personal information.
If the business or relevant assets are transferred, reorganised, merged or acquired, personal information may form part of the transaction where permitted by law and subject to appropriate safeguards.
The Website may also link to external websites. Those services can have their own privacy policies, and OnLuck is not responsible for independent third-party processing carried out on external websites.
9. Data Retention
Closing a player account does not necessarily mean that all associated information can be deleted immediately. Certain records may need to be retained after account closure to meet financial, regulatory, anti-fraud, anti-money laundering or other legal obligations.
Where applicable, registration information and records generated while an account is active may be retained for at least five years after the player’s last transaction or account closure where such retention is required by applicable rules.
Anonymised or aggregated information that no longer identifies an individual may also be retained for statistical, analytical or service-improvement purposes.
10. Security of Personal Information
Reasonable organisational and technical precautions are used to protect personal information from unauthorised access, alteration, disclosure, loss or misuse.
Player accounts are protected by individual login credentials. Users are responsible for keeping passwords and other account-access information confidential and for preventing another person from using their account.
Where two-factor authentication or other additional account-security options are available, they can provide another layer of protection against unauthorised access.
If processing is based on consent, you may withdraw that consent where the law gives you that right. Withdrawal does not affect processing that was lawful before the withdrawal took effect.
11. Your Data Protection Rights
Depending on the applicable data protection law and the circumstances of the request, you may have a number of rights relating to your personal information.
| Right | What it may allow you to request |
|---|---|
| Access | A copy of personal information held about you, subject to applicable legal conditions. |
| Correction | Correction of information that is inaccurate or incomplete. Supporting evidence may be required. |
| Erasure | Deletion of information where there is no continuing legal basis or obligation requiring its retention. |
| Objection | An objection to certain processing based on legitimate interests, subject to overriding lawful grounds. |
| Restriction | Temporary restriction of processing in circumstances recognised by applicable law. |
| Data portability | Transfer of certain information processed by automated means where the legal requirements for portability are met. |
| Withdrawal of consent | Withdrawal of consent for future processing where consent is the legal basis being relied upon. |
| Complaint | The ability to complain to an appropriate supervisory authority where that right applies. |
Before fulfilling a data-rights request, OnLuck may request information or documentation needed to confirm your identity. This helps prevent personal information from being disclosed or changed at the request of an unauthorised person.
Some requests cannot be completed where continued processing or retention is required by law, regulation, financial recordkeeping requirements, fraud prevention, dispute handling or other overriding legal grounds.
12. Contacting Us About Your Data
You can contact OnLuck regarding this Privacy Policy or the handling of your personal information.
- ask what personal information is held about you;
- request correction of inaccurate account information;
- ask how your information is being used;
- change or withdraw eligible marketing preferences;
- raise a privacy or data-protection concern;
- submit a request relating to an applicable data-protection right.
You are responsible for keeping the information provided to OnLuck accurate and up to date. Supporting documentation may be requested where necessary to confirm a correction or verify the identity of the person making a request.
Data Protection and Privacy
Privacy Questions
If anything in this Privacy Policy is unclear or you want to ask about the personal information associated with your OnLuck account, contact the privacy team using the address below.
OnLuck Privacy Contact