18+License: Government of the Autonomous Island of Anjouan, Union of Comoros (ALSI-202509069-FI2)Responsible Gambling
Lukkly logo

Lukkly and How We Handle Your Data

Updated 2026-09-15

Who controls your data

Your privacy matters to us. Lukkly is operated by Island Lukkly B.V., licensed by the Government of the Autonomous Island of Anjouan, Union of Comoros, under licence number ALSI-202509069-FI2. As the operator of this website, Island Lukkly B.V. is the data controller responsible for the personal information described on this page.

This policy explains what we gather, why we need it, and what you can do about it. Read it alongside our Terms and Conditions and our cookie information. Questions? Reach us through the contact page and we'll respond.

What we collect and why

We only ask for what running a licensed casino genuinely requires. The categories fall into a few groups.

  • Account details — your name, date of birth, email, username and password. We use these to open and secure your account and to confirm you are 18 or over.
  • Identity and verification records — ID documents, proof of address and, where relevant, source-of-funds evidence. These support our legal anti-money-laundering and age checks (KYC).
  • Financial data — deposits, withdrawals, payment method details and transaction history, including crypto wallet references where you use them.
  • Gameplay data — bets placed, sessions, bonuses claimed and responsible-gambling settings.
  • Technical data — IP address, device type, browser and cookie identifiers.

We collect this when you register, deposit, play, contact support, or simply browse the site.

How long we keep it

Retention is tied to purpose. We hold account and transaction records for the period our licence and anti-money-laundering rules demand — typically several years after your account closes. Verification documents are kept for as long as the law requires and then securely deleted. Marketing preferences last until you change them. When data is no longer needed for any lawful reason, we remove or anonymise it.

Who we share it with

We never sell your personal data. We do share it, carefully, with trusted parties who help us operate.

  • Payment providers — to process the deposit and withdrawal methods we support, from Visa and Mastercard to bank transfer, Skrill, Neteller and crypto rails such as Bitcoin and USDT.
  • Identity and KYC partners — to verify documents and screen against sanctions and fraud lists.
  • Game providers — studios such as Pragmatic Play, Playson, Yggdrasil and Hacksaw Gaming, to deliver the games you launch.
  • Analytics and hosting services — to keep the site stable and understand how it is used.
  • Regulators and authorities — where we are legally compelled to disclose.

Where data leaves the UK, we apply appropriate safeguards.

Your rights and cookies

Under UK data-protection law you have real, enforceable rights. You can request access to your data, ask us to correct mistakes, request erasure, ask us to restrict or object to certain processing, and request portability of data you gave us. Where we rely on consent, you can withdraw it.

To exercise any right, contact us via the contact page; we may verify your identity first and normally reply within one month. If you are unhappy with our response, you may complain to the relevant data-protection authority in your jurisdiction.

We also use cookies. The table below summarises the categories.

CategoryPurpose
Strictly necessaryLogin, security and core site functions.
FunctionalRemembering your currency, language and preferences.
AnalyticsUnderstanding traffic and improving performance.
MarketingMeasuring and tailoring promotions (consent-based).

Gambling should stay fun. If it stops feeling that way, our responsible gambling tools can help, and GamCare offers free, confidential support on 0808 8020 133 or at gamcare.org.uk.

Our legal grounds for using it

Every use of your data rests on a lawful basis. We rely on performance of a contract to run your account and process bets and payments. We rely on legal obligation to meet licensing, anti-money-laundering, age-verification and tax duties. We rely on legitimate interests to secure our platform, prevent fraud and improve our service — balanced against your rights. Where the law requires it, such as certain marketing, we rely on your consent, which you may withdraw at any time.

Frequently Asked Questions

How do I request a copy of my data?

Message us through the contact page and ask for a subject access request. We may confirm your identity first, then respond within one month. There is normally no charge.

Why do you need my ID documents?

Verification is a legal requirement. We must confirm you are 18 or over and meet anti-money-laundering rules before processing certain transactions. Documents are stored securely and kept only as long as the law requires.

Can I ask you to delete my account and data?

Yes, you can request erasure. Note that some records must be retained under our licensing and anti-money-laundering obligations, so we may keep specific data for a set period before deleting the rest.

Do you share my details with the game studios?

Only the minimum needed to run the games you launch. Studios such as Pragmatic Play, Evoplay and BGaming receive limited technical and gameplay data, never your payment credentials.

How do I manage cookies?

Adjust cookie choices through your browser settings or our on-site cookie controls. Strictly necessary cookies cannot be switched off, as the site cannot function without them.