Privacy Policy

This Privacy Policy explains how Lucky Hunter Casino ("Lucky Hunter Casino", "we", "us", "our") collects, uses, discloses and protects personal information when you visit or use luckyhunter-au.com, any associated Australian mirror domains (including luckyhunter2.com and luckyhunter3.com) and any related services operated under the brand Lucky Hunter Casino.

This Policy applies to:

• Players who open and use a real-money or demo account; and
• Visitors who browse our websites, apps or landing pages without registering.

We provide this Privacy Policy to comply, to the extent applicable, with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as with international standards such as the EU General Data Protection Regulation (GDPR) and the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

By using our services you acknowledge that you have read and understood this Privacy Policy. Effective date: 1 January 2026.

Who We Are

The online gambling services offered to Australian players under the brand Lucky Hunter Casino on luckyhunter-au.com are operated by:

• Hollycorn N.V., a public limited company (N.V.) incorporated under the laws of Curaçao, company registration number 144359, holder of online gambling sublicense 8048/JAZ2019-015 issued by Antillephone N.V.
• Libergos Limited, a limited company incorporated in Cyprus, company registration number HE 371971, which acts as a payment processing agent on our behalf.

Both entities (together, "Group Companies") are responsible for the processing of personal information described in this Policy. The registered offices of Hollycorn N.V. (Curaçao) and Libergos Limited (Cyprus) are located within their respective jurisdictions; further corporate details are available in the relevant commercial registers and upon written request.

Data Protection Contact (DPO / Privacy Team)

• Email: [email protected]
• General support: [email protected]
• Postal: Data Protection Officer, Hollycorn N.V., Curaçao (exact mailing details available on request)

What Personal Data We Collect

Identity and Contact Data

• Full name, date of birth and gender.
• Residential address, country of residence and nationality.
• Email address, phone number, preferred language and time zone.
• Documents and images for KYC/AML checks (e.g. passport, ID card, driving licence, proof of address, payment method screenshots).

Account, Gameplay and Behavioural Data

• Username, account ID, account status and verification status.
• Betting and game history, session details, wins and losses, bonuses used and wagering progress.
• Deposit and withdrawal history, payment methods used and applicable limits.
• Clickstream data, visited pages, navigation paths, in-site search queries, interaction with promotions and messages.

Payment and Financial Data

• Partial payment card details (card type, masked card number, expiry date) where applicable.
• Bank details or PayID information for bank transfers, including account holder name and bank country.
• Crypto wallet addresses used for deposits and withdrawals.
• Transaction identifiers, timestamps, amounts, currencies and related risk/fraud flags.

Technical and Log Data

• IP address, approximate location derived from IP, device identifiers, browser type and version, operating system, screen resolution.
• Log data including login and logout times, failed login attempts, session tokens, language settings, referrer URLs.
• Information about mirror domains and redirections used (e.g. luckyhunter2.com, luckyhunter3.com) to access your account.

Marketing and Communication Data

• Preferences for receiving marketing by email, SMS, push notifications or on-site messages.
• Records of communications with our support team (chat logs, emails, call summaries).
• Participation in surveys, feedback forms, loyalty programs and VIP management notes.

Cookies and Similar Technologies

• Cookies, web beacons, pixels, SDKs and similar technologies that store or access information on your device.
• Cookie identifiers linked to your account or browser, used for authentication, security, analytics and advertising.

We do not intentionally collect data relating to persons under 18 years of age. If we become aware that a minor has provided us with personal data, we will close the account and delete or anonymise the data as soon as reasonably practicable, subject to legal retention obligations.

Legal Basis for Processing

Depending on your location and the nature of your interaction with Lucky Hunter Casino, we process personal information on the following legal bases, reflecting principles under the Australian Privacy Act 1988 (Cth), the GDPR and the Mexican LFPDPPP:

• Performance of a contract
  We process data that is necessary to:
  • Create and manage your player account.
  • Provide access to games and betting services.
  • Process deposits, withdrawals and bonus credits.
  • Provide customer support and handle complaints or disputes.
• Compliance with legal obligations
  This includes obligations under anti-money laundering and counter-terrorism financing laws, fraud prevention, responsible gambling rules and financial reporting requirements. We may be required to collect and retain KYC documentation, transaction records and risk assessments to comply with:
  • Applicable Curaçao regulatory requirements and licence conditions.
  • Relevant financial and AML laws in Cyprus for payment processing.
  • Any mandatory data retention or reporting duties in jurisdictions from which we legitimately operate.
• Legitimate interests
  We rely on our legitimate interests where they are not overridden by your rights, for example to:
  • Maintain and improve the security and integrity of our platform.
  • Prevent fraud and abuse, detect multiple or self-excluded accounts and fight bonus misuse.
  • Analyse performance, traffic and user behaviour (in an aggregated or pseudonymised form where possible).
  • Defend and exercise legal claims and manage business operations.
• Consent
  In specific cases we rely on your consent, for example:
  • Sending marketing communications by email, SMS or push notification.
  • Using certain non-essential cookies and similar technologies for analytics or advertising.
  • Sharing data with certain affiliates or advertising partners for personalised offers.
  You can withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

Purpose of Processing

We use your personal information for the following purposes:

• Provision of services
  To register and authenticate you, verify your eligibility (age and jurisdiction), operate your player account, enable gameplay, process payments, award bonuses and administer loyalty/VIP programs.
• Customer support and communication
  To respond to your requests, complaints and feedback; to provide service announcements (e.g. maintenance, security alerts) and transactional messages (e.g. deposit confirmations, KYC reminders).
• Risk management, KYC and AML
  To verify your identity, conduct due diligence, monitor transactions, detect suspicious behaviour, enforce betting limits and comply with responsible gambling measures.
• Platform operation and improvement
  To operate, secure, optimise and customise our website, apps and back-end systems, including conducting troubleshooting, testing, statistical and analytical research.
• Marketing and personalisation
  To provide you (where permitted) with tailored bonuses, promotions, tournaments and recommendations based on your profile, behaviour and preferences, including via affiliates and advertising networks with your consent where required.
• Compliance and legal protection
  To comply with legal, regulatory and tax obligations, cooperate with regulators (for example Curaçao authorities and other law enforcement agencies) and establish, exercise or defend legal claims.

Disclosure & Sharing

We do not sell your personal information. We may, however, share it with carefully selected third parties for the purposes described above, subject to appropriate contractual and security safeguards:

• Group Companies and internal recipients
  Hollycorn N.V., Libergos Limited and other entities within the same corporate group may access your data for account administration, payments, risk management, compliance and internal reporting.
• Payment service providers
  Banks, card schemes, PayID providers, crypto processors and other financial institutions that process deposits and withdrawals on our behalf, including Libergos Limited and its partners.
• Game providers and platform vendors
  Licensed software suppliers and platform providers (including the underlying SoftSwiss platform and integrated game studios) that deliver games, jackpots and related services, typically acting as data processors under our instructions.
• IT, analytics and marketing service providers
  Hosting providers, technical support, cloud and data storage providers, customer support tools, email/SMS gateways, anti-fraud tools and analytics or marketing platforms that help us operate and improve our services.
• Affiliates and advertising networks
  Where permitted by law and your consent where required, we may share limited data (such as country, device, campaign identifiers and conversion events) with affiliates and advertising networks for attribution and optimisation of marketing campaigns.
• Regulators, authorities and dispute bodies
  We may disclose data to regulators, law enforcement, courts or alternative dispute resolution bodies where required by law or licence conditions, or where necessary to protect our legitimate interests or the safety of users.
• Business transfers
  In connection with a merger, acquisition, reorganisation or sale of assets, your data may be transferred to a new owner, subject to continued protection in line with this Policy.

Where we share data with third parties acting as our processors, we require them to process the data only on our documented instructions, to keep it confidential and to apply appropriate security measures.

International Transfers

As an offshore online casino serving Australian players, we operate globally. This means your personal information may be transferred to and processed in countries outside your country of residence, including:

• Curaçao (Hollycorn N.V. corporate and operational activities).
• Cyprus (Libergos Limited payment processing and related services).
• Other countries where our hosting, IT, fraud prevention, analytics and marketing providers are located (which may include locations in the European Economic Area (EEA), the United Kingdom, and other jurisdictions).

Some of these countries may not offer the same level of data protection as your home jurisdiction or as required by the GDPR. Where required, we put in place appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent instruments under other laws.
• Contractual commitments requiring recipients to apply appropriate technical and organisational security measures and to respect your rights.
• Data minimisation and, where feasible, pseudonymisation or aggregation before transfer.

By using our services, you understand that your data may be processed in these countries for the purposes described in this Policy, subject to the safeguards above and applicable law.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting requirements. Retention periods may vary by data category and jurisdiction, but generally follow these principles:

• Player account and identification data
  Stored for the duration of your active account and normally for up to 5 years after account closure, to comply with AML, responsible gambling and record-keeping obligations and to handle potential disputes.
• KYC/AML documentation
  Copies of ID documents, proofs of address and risk assessments are typically retained for 5 - 7 years from the date of your last transaction or account closure, depending on regulatory requirements.
• Transaction, betting and game history
  Retained for at least 5 years for auditing, tax, AML and dispute resolution purposes, and may be kept longer in anonymised or aggregated form for statistical analysis.
• Technical logs and security data
  Kept for 12 - 24 months in identifiable form for security and troubleshooting, and longer in aggregated or anonymised form.
• Marketing and preference data
  Retained until you withdraw consent or opt out, and for a limited period (typically up to 2 years) after your last interaction for evidence of consent and suppression (do-not-contact) purposes.
• Customer support communications
  Stored for up to 5 years after closure of the relevant case or your account, unless longer retention is required for legal claims.

When retention periods expire, or data is no longer required for the stated purposes, we will delete or irreversibly anonymise the information, unless we are legally required or permitted to retain it longer. If you request deletion, we will also consider whether we can restrict or anonymise data that must legally be retained.

Your Rights

Subject to applicable law (including the Australian Privacy Act, GDPR and Mexican LFPDPPP), you have the following rights over your personal information:

• Right of access
  To obtain confirmation as to whether we process your data and to receive a copy of your personal information, along with information about how we process it.
• Right to rectification (correction)
  To request correction of inaccurate data and completion of incomplete data. You can update many details directly in your account profile.
• Right to erasure / cancellation
  To request deletion of your data where it is no longer needed, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Under AML and other laws we may need to retain certain records even after your request; in such cases we will restrict use of that data.
• Right to restriction of processing
  To request that we temporarily limit processing of your data, for example while we verify its accuracy or our legal basis.
• Right to object
  To object at any time to processing based on our legitimate interests, including profiling for security or marketing, where your situation justifies it. You always have the right to object to direct marketing and profiling related to such marketing.
• Right to data portability
  To receive certain personal data in a structured, commonly used and machine-readable format and to request that we transmit it to another controller where technically feasible and legally required.
• Rights under Mexican LFPDPPP (ARCO rights)
  If Mexican data protection law applies, you have specific ARCO rights (Acceso, Rectificación, Cancelación y Oposición), which correspond broadly to access, rectification, cancellation (erasure) and objection.
• Right to withdraw consent
  Where processing is based on your consent (e.g. marketing, certain cookies), you may withdraw that consent at any time through your account settings or by contacting us.

Exercising Your Rights

1. Submit your request by email to [email protected] or via the secure account messaging centre, clearly stating which rights you wish to exercise.
2. We may ask you to verify your identity (for example by logging into your account or providing additional information) to protect your data against unauthorised access.
3. We aim to respond to all valid requests within 30 days of receipt. If your request is particularly complex or we have received a large number of requests, we may extend this period in accordance with applicable law and will inform you of any delay.
4. We generally handle requests free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, as permitted by law.

Some rights may be limited, for example where fulfilling