Privacy Policy

Lucky Nugget Casino

Lucky Nugget Casino (“Lucky Nugget”, “we”, “us”, “our”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and the choices and rights you may have.

This policy is written to support transparency expectations commonly associated with GDPR-style privacy notices (for example, the kinds of information people have a right to be told).
If you are unsure how this policy applies to you, please contact us using the details in the Contact section.

1) Who we are

Controller: Lucky Nugget Casino
Registered address: 195 Lambton Quay, Private Bag 18 901, Wellington 6160, New Zealand
Contact email: [email protected]

If you contact us, we may request information needed to verify your identity before responding.

2) What this Privacy Policy covers

This policy applies to information collected when you:

• Visit our website (including pages, forms, and account areas)
• Create or use an account
• Deposit, withdraw, or use payment features
• Contact customer support
• Opt in/out of marketing
• Use responsible gambling tools (where offered)

It does not cover third-party websites or services you may access via links from our site. If you follow a link to a third party (for example, a payments provider), their privacy terms apply.

3) The information we collect

We may collect information you provide directly, information we collect automatically from your device, and information we receive from third parties (where permitted by law and necessary for services like payments, verification, or fraud prevention).

A) Information you provide

• Account details: name, date of birth, username, password, email, phone
• Verification information (KYC): identity documents, proof of address, age verification results
• Payment details: transaction IDs, deposit/withdrawal records, limited payment identifiers (depending on provider)
• Support communications: messages, emails, chat transcripts, complaint details
• Preferences: marketing choices, communication preferences, language

B) Information collected automatically

• Device and usage data: IP address, browser type, device identifiers, approximate location (e.g., city), session logs
• Cookie and tracking data: cookie IDs, analytics signals, ad measurement (only where enabled/consented—see Cookies section)

C) Information from third parties

Depending on your use of services, we may receive data from:

• Identity/age verification providers
• Payment processors
• Fraud prevention and security vendors
• Regulatory or dispute bodies (where relevant)

4) Why we use your data (purposes) and legal bases

We use personal data for purposes such as:

1. Providing the service (creating accounts, gameplay access, payments, customer support)
2. Verification and compliance (age/identity checks, preventing underage access, risk screening where required)
3. Security and fraud prevention (account security, abuse monitoring, suspicious activity detection)
4. Customer support and dispute resolution
5. Product improvement (analytics and performance, aggregated reporting)
6. Marketing (where permitted) (news, bonuses, updates—based on your choices)

Privacy notice guidance commonly expects organisations to be clear about what they collect, why, how long they keep it, and users’ rights.

Important note for gambling websites: Some data processing may be needed to meet regulatory expectations and safer-gambling obligations. The UK Gambling Commission has published gambling-sector GDPR context and notes that it cannot provide definitive GDPR interpretations (that’s the ICO’s role).

5) Who we share personal data with

We may share personal data with:

• Service providers (hosting, support systems, analytics, security)
• Payment partners (to process deposits/withdrawals and prevent fraud)
• Verification providers (age/identity checks where required)
• Professional advisers (legal, auditing, compliance support)
• Regulators / law enforcement (when required by law or to protect users and our service)

We do not sell your personal data.

6) International transfers

If we transfer personal data outside your country/region, we take steps designed to protect it (for example, contractual measures and security controls). Where required, we provide additional information on request.

7) Data retention

We keep personal data only as long as necessary for the purposes described above, including compliance, dispute resolution, and security. Privacy notices should explain retention periods (or the criteria used).

Typical retention ranges may include:

• Account data (while account is active + a defined period afterwards)
• Verification/KYC (longer retention where required for compliance)
• Transaction records (for finance, disputes, and regulatory needs)
• Security logs (for fraud detection and investigation)

Below is an interactive chart you can embed to display retention periods in a user-friendly way.

Interactive Chart — Typical Retention Periods (months)

Typical data retention periods (months)

These timeframes may vary depending on legal obligations, dispute resolution, and security needs.

UK privacy transparency references (authoritative)

UK gambling help and safer gambling references (authoritative)

8) Cookies, tracking technologies, and similar tools

Lucky Nugget Casino uses cookies and similar technologies to operate the website, improve performance, understand how users interact with our services, and, where permitted, support marketing and promotional activities.

Cookies are small text files stored on your device when you visit a website. They may be session cookies (deleted when you close your browser) or persistent cookies (stored for a defined period).

We may use the following categories of cookies:

• Strictly necessary cookies
  Required for core website functionality, such as account access, security, and fraud prevention. These cookies cannot be disabled through cookie settings.
• Performance and analytics cookies
  Help us understand how visitors use our website (for example, which pages are visited most often), allowing us to improve site performance and user experience.
• Functional cookies
  Remember user preferences such as language, region, or display settings.
• Marketing cookies (where enabled)
  Used to measure the effectiveness of promotions and, where permitted by law, to display relevant offers.

Where required, we request your consent before placing non-essential cookies. You can manage or withdraw your consent at any time through your browser settings or our cookie management tools.

9) Your rights and choices

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal data. These rights may include:

• The right to access personal data we hold about you
• The right to correct inaccurate or incomplete information
• The right to request deletion of your data (subject to legal and regulatory obligations)
• The right to restrict or object to certain types of processing
• The right to data portability, where applicable
• The right to withdraw consent for processing based on consent

To exercise your rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before processing your request. Some requests may be limited where data retention is required for legal, regulatory, or security reasons.

10) Marketing communications

If you choose to receive marketing communications from Lucky Nugget Casino, we may send you information about promotions, bonuses, and service updates.

You can opt out at any time by:

• Using the unsubscribe link in our emails
• Adjusting your account communication preferences
• Contacting customer support

We respect your marketing choices and will not send promotional messages where you have opted out.

11) Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These measures may include:

• Secure servers and encrypted connections
• Access controls and internal data handling policies
• Monitoring for suspicious or fraudulent activity

While no system can guarantee absolute security, we continuously review and improve our safeguards to reduce risk.

12) Children and underage users

Lucky Nugget Casino is intended for adults only. We do not knowingly collect personal data from individuals under the legal gambling age.

Age and identity verification processes are used to help prevent underage access. If we become aware that personal data has been collected from a minor, we will take steps to delete it and restrict access.

13) Third-party links and services

Our website may contain links to third-party websites or services, including payment providers or external support organisations. We are not responsible for the privacy practices or content of these third parties.

We encourage you to review their privacy policies before providing any personal information.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our services.

When we make changes, we will update the “Last updated” date at the top of the policy. Significant changes may also be communicated through the website or your account.

Your continued use of the website after an update means you acknowledge the revised Privacy Policy.

15) How to contact us or make a complaint

If you have questions about this Privacy Policy, your personal data, or how we handle information, you can contact us at:

• Email: [email protected]
• Address: 195 Lambton Quay, Private Bag 18 901, Wellington 6160, New Zealand

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

16) Compliance with New Zealand privacy law

Lucky Nugget Casino processes personal information in accordance with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles (IPPs) established under that Act.

These principles govern how personal information is collected, used, stored, disclosed, and protected. We aim to ensure that personal data is handled fairly, lawfully, and transparently, and that it is only used for legitimate purposes connected to our services.

Where applicable, we also consider international data protection standards when handling personal information, particularly when data is processed or stored outside New Zealand.

17) Collection and use of information for regulatory and harm-prevention purposes

As a gambling-related service, Lucky Nugget Casino may be required to collect and process certain personal information to support:

• Age and identity verification
• Fraud prevention and security monitoring
• Compliance with applicable gambling laws and licence conditions
• Responsible gambling and harm-minimisation measures

This may include analysing gameplay patterns, transaction history, or account activity to identify potential risks or irregular behaviour. Such processing is carried out to protect players, maintain the integrity of our services, and meet legal or regulatory expectations.

18) Disclosure of personal information in New Zealand

We may disclose personal information where reasonably necessary for the operation of our services or where required by law. This may include disclosure to:

• New Zealand government agencies or regulators, where legally required
• Law enforcement authorities, in response to lawful requests
• Service providers operating on our behalf (such as hosting, payment, or verification partners), subject to confidentiality and security obligations

We take reasonable steps to ensure that third parties receiving personal information handle it in a manner consistent with New Zealand privacy requirements.

19) Storage and protection of personal data

Personal information may be stored on secure servers located in New Zealand or overseas, depending on operational requirements. Where information is stored outside New Zealand, we take reasonable steps to ensure that it is protected by safeguards comparable to those required under New Zealand law.

Security measures may include encryption, access controls, internal policies, and monitoring systems designed to reduce the risk of unauthorised access, misuse, or disclosure.

20) Access, correction, and complaints (New Zealand users)

Under the Privacy Act 2020, individuals in New Zealand have the right to:

• Request access to personal information we hold about them
• Request correction of personal information if it is inaccurate, outdated, or incomplete

Requests can be made by contacting us using the details provided in this Privacy Policy. We may require reasonable verification of identity before responding.

If you believe that Lucky Nugget Casino has interfered with your privacy and we are unable to resolve your concern directly, you may contact the Office of the Privacy Commissioner (New Zealand).

21) Responsible gambling and data use

Personal information may be used to support responsible gambling initiatives, including tools or measures designed to reduce harm. This may involve analysing behavioural indicators or responding to player-initiated limits or exclusions.

Our use of data for these purposes is intended to promote player wellbeing and aligns with harm-minimisation objectives commonly associated with gambling regulation and public health in New Zealand.

22) Retention and disposal of information

We retain personal information only for as long as it is reasonably required for:

• The purposes outlined in this Privacy Policy
• Legal, regulatory, or compliance obligations
• Resolving disputes or enforcing agreements

When personal information is no longer required, we take reasonable steps to securely delete or anonymise it.

23) Final note

Lucky Nugget Casino recognises that trust is essential when handling personal information. We aim to be transparent about how data is used, to respect individual rights, and to balance operational requirements with privacy protection.

This Privacy Policy is intended to provide clear and accessible information about our data practices. If you have questions or concerns, we encourage you to contact us directly.