Privacy Policy

This Privacy Policy explains how luckyfox-casino, operating via luckyfox-casino-ca.com, collects, uses, discloses, and safeguards your personal information. It applies to all players and visitors accessing luckyfox-casino-ca.com from Canada (excluding Ontario), and is effective as of November 6, 2025.

Who We Are

OBSERVE: luckyfox-casino is operated by Dama N.V., a company registered under Curaçao law. EXPAND: Legal identification and contact details must be provided for transparency and regulatory compliance. REFLECT: All communications regarding data protection should be directed to the designated contact points listed below.

Legal Entity: Dama N.V., trading as luckyfox-casino
Registration Address: Scharlooweg 39, Willemstad, Curaçao
Company Registration Number: 152125
Gaming License: E-gaming license OGL/2023/174/0082, issued by the Curaçao Gaming Control Board, valid through 2025
Primary Contact Email (Support & Data Protection): [email protected]
General Information Email: [email protected]
Website: https://luckyfox-casino-ca.com
Data Protection Officer (DPO): Contact via the above support email, attention: DPO

Regional Compliance Note: This policy is tailored to Canadian regulatory standards, excluding Ontario.

What Personal Data We Collect

OBSERVE: Collection of personal, technical, financial, and behavioral data is standard for online gambling operations. EXPAND: Data categories must be specified to meet transparency and lawful processing obligations. REFLECT: The following categories of personal data are processed when you use luckyfox-casino-ca.com:

Personal Data: Full name, date of birth, address, email address, telephone number, documents for identity verification (KYC).
Technical Data: IP address, device identifiers, browser type, operating system, access times, website usage logs.
Payment Data: Payment card details, bank account numbers, transaction history, withdrawal and deposit records.
Behavioral Data: Betting history, game participation, clicks, navigation patterns, promotional participation.
Cookies and Tracking Technologies: Session identifiers, persistent cookies, third-party analytics and advertising cookies.

Legal Obligation: Data is only collected to the extent necessary for the purposes described below, in compliance with CA and international data protection standards.

Legal Basis for Processing

OBSERVE: CA privacy law requires explicit legal justification for all personal data processing. EXPAND: The legal grounds include user consent, contract fulfillment, legal obligations, and legitimate interests. REFLECT: luckyfox-casino processes your data on the following bases:

User Consent: For marketing communications, use of cookies, and optional services, as explicitly agreed by the user.
Contract Fulfillment: To provide access to casino services, process payments, verify identity, and manage your account under the Terms and Conditions.
Legal Obligations: Compliance with KYC/AML regulations, regulatory reporting, anti-fraud measures, and obligations imposed by the Curaçao Gaming Control Board and applicable Canadian authorities.
Legitimate Interests: Protection of business interests, improvement of site functionality, analytics, security monitoring, and prevention of fraudulent or illegal activities, provided such interests do not override your fundamental rights.

Protective Clause: Where consent is the legal basis, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Purpose of Processing

OBSERVE: Data is used for core casino operations and ancillary services. EXPAND: Explicitly state all purposes to ensure transparency and compliance. REFLECT: Data is processed for the following purposes:

Service Provision: To operate your luckyfox-casino-ca.com account, enable gameplay, process deposits and withdrawals, and provide customer support.
Service Improvement: To develop, enhance, and personalize the website and gaming experience.
Marketing and Promotions: To send promotional offers and newsletters when you have provided consent.
Analytics: To analyze site usage, improve performance, and better understand user behavior.
Fraud Prevention and Security: To monitor activity, prevent cheating or fraudulent conduct, and ensure the integrity of casino operations.

Legal Statement: Data is not used for purposes incompatible with those set out in this policy.

Disclosure & Sharing

OBSERVE: Disclosure is restricted to necessary business and compliance partners. EXPAND: All data recipients and circumstances must be identified. REFLECT: Your personal information may be disclosed as follows:

Payment Partners: Banks, payment processors, and financial institutions for transaction processing.
Service Providers: IT, hosting, customer service, analytics, and marketing service providers under binding confidentiality agreements.
Regulators and Authorities: Curaçao Gaming Control Board, Canadian regulators, law enforcement, and other authorities as required by law.
Affiliates and Group Companies: Within Dama N.V. and its subsidiaries for internal administrative purposes.
Advertising Networks: Only with your explicit consent for targeted marketing purposes.

Protective Clause: Third parties must process data strictly in accordance with this policy and applicable law. Data is not sold to unrelated third parties.

International Transfers

OBSERVE: Data may be stored or processed outside Canada. EXPAND: International transfers must be safeguarded by appropriate legal protections. REFLECT: Your data may be transferred to Curaçao or other jurisdictions where servers or service providers are located.

Legal Safeguards: Transfers are governed by Standard Contractual Clauses (SCCs) or equivalent legal instruments to ensure adequate protection.
Regulatory Compliance: All cross-border transfers comply with Canadian data protection law and international standards.
Data Subject Protections: You retain all rights outlined in this policy regardless of data location.

Regional Compliance Note: International data transfers are subject to regular risk assessments and contractual protections.

Data Retention

OBSERVE: Retention periods must be defined and limited to legal requirements. EXPAND: Provide clear criteria for deletion. REFLECT: Data is retained as follows:

Personal Data: Retained for no more than 5 years after account closure or last user activity, unless a longer period is required for regulatory or legal purposes.
Payment Data: Retained for 5 years after transaction completion, in line with anti-money laundering obligations.
Technical and Behavioral Data: Retained for up to 2 years for analytics before anonymization or deletion.
Cookies: Stored according to type-session cookies expire after browser closure; persistent cookies are retained for up to 2 years.

Deletion Criteria: Data is deleted or anonymized upon user request (subject to legal exceptions), expiration of retention period, or when no longer required for processing purposes.

Legal Statement: Retention periods are periodically reviewed for ongoing compliance.

Your Rights

OBSERVE: Users are entitled to exercise comprehensive rights over their data. EXPAND: Align with GDPR, PIPEDA, and Mexican data protection standards where applicable. REFLECT: You have the following rights in relation to your personal information:

Access: Request a copy of your personal data held by luckyfox-casino-ca.com.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of your data, except where retention is required by law (e.g., AML).
Restriction: Limit processing of your data in specific circumstances.
Objection: Object to processing based on legitimate interests or for direct marketing purposes.
Data Portability: Receive your data in a structured, commonly used format and transmit it to another controller.
Withdrawal of Consent: Revoke consent for marketing or optional services at any time.

How to Exercise Rights: Email [email protected] (subject: "Data Subject Request").
Procedure: Requests are processed free of charge within 30 days, except where manifestly unfounded or excessive.
Legal Reference: Rights are granted under the EU GDPR, Canadian PIPEDA, and, where applicable, Mexican data protection regulations.

Protective Clause: Verification of identity may be required prior to fulfilling requests.

Cookies & Tracking Technologies

OBSERVE: Cookies are used for service functionality, analytics, and marketing. EXPAND: Specify cookie types and management options. REFLECT: The following cookies and tracking technologies are utilized:

Session Cookies: Essential for site operation; expire upon browser closure.
Persistent Cookies: Remember user preferences and authentication; expire after a defined period (up to 2 years).
Third-Party Cookies: Used by analytics and advertising partners (e.g., Google Analytics) to measure site performance and deliver targeted ads (subject to user consent).

Cookie Management: You may control or disable cookies via your browser settings or, where available, the internal preference panel on luckyfox-casino-ca.com. Disabling cookies may impact site functionality.

Data Security

OBSERVE: Robust security measures are required to protect user data. EXPAND: Enumerate all technical and organizational safeguards. REFLECT: luckyfox-casino implements the following security measures:

Encryption: All data transmitted is protected by TLS 1.2+ encryption; sensitive data is encrypted at rest.
Multi-Factor Authentication: Access to administrative systems requires multi-factor authentication and strong password policies.
Access Controls: Data access is limited to authorized personnel on a need-to-know basis, monitored by role-based access protocols.
Security Audits: Regular internal and external audits are conducted; vulnerabilities are remediated promptly.
Staff Training: Ongoing training ensures employees are aware of security obligations and incident reporting procedures.
Incident Response: A formal incident response plan is in place for timely breach identification, containment, and notification.
Compliance: Security practices are aligned with ISO 27001 and SOC 2 standards where applicable.

Legal Statement: While measures are robust, no system is fully immune to risk; users are advised to maintain their own security vigilance.

Complaints & Contacts

OBSERVE: Users must have accessible channels for complaints and queries. EXPAND: Clear steps and escalation paths must be detailed. REFLECT: If you have concerns about data processing by luckyfox-casino-ca.com, you may:

Contact the Data Protection Officer: Email [email protected] (subject: "Privacy Complaint - DPO").
Online Feedback: Submit queries via the website's support form (when available).
Postal Address: Scharlooweg 39, Willemstad, Curaçao (attention: Privacy Compliance).
Complaint Procedure: All complaints are acknowledged within 5 business days and a substantive response is provided within 30 days.
Escalation: If unsatisfied, you may contact the relevant data protection authority:
- Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca/en/
- Curaçao Gaming Control Board: https://gamingcontrolcuracao.org/
- Mexican Data Protection Authority (INAI): https://home.inai.org.mx/ (if applicable)

Free-of-Charge Guarantee: All data protection complaints may be submitted without charge.

Updates

OBSERVE: Users must be kept informed of material changes. EXPAND: Specify notification and versioning procedures. REFLECT: luckyfox-casino may update this Privacy Policy from time to time, with procedures as follows:

Notification: Notice of significant changes will be provided at least 30 days in advance via email (where possible), account dashboards, and prominent website banners.
Version Control: The "Last updated" date at the start of this document reflects the current version.
Changelog: Material changes and their impact will be summarized clearly for user review.
User Options: If you disagree with material changes, you may object or request closure of your account without penalty.

Last updated: November 6, 2025

Legal Statement: Continued use of luckyfox-casino-ca.com after policy updates constitutes acceptance of the revised terms.